你是想操作“浏览文件夹”对话框吧?请参考: Private Type BROWSEINFO hOwner As Long pidlRoot As Long pszDisplayName As String lpszTitle As String ulFlags As Long lpfn As Long lParam As Long iImage As Long End Type Const BIF_RETURNONLYFSDIRS = &H1 Private pidl As Long Private Declare Function SHGetPathFromIDList Lib "shell32.dll" Alias "SHGetPathFromIDListA" (ByVal pidl As Long, ByVal pszPath As String) As Long Private Declare Function SHBrowseForFolder Lib "shell32.dll" Alias "SHBrowseForFolderA" (lpBrowseInfo As BROWSEINFO) As LongPrivate Sub command1_Click() Dim bi As BROWSEINFO, r As Long, pidl As Long, path As String, pos As Integer bi.hOwner = Me.hWnd bi.pidlRoot = 0& bi.lpszTitle = "对话框的标题" bi.ulFlags = BIF_RETURNONLYFSDIRS '只能选择文件夹 pidl = SHBrowseForFolder(bi) path = Space$(512) r = SHGetPathFromIDList(ByVal pidl&, ByVal path) '取得用户选择的路径 If r Then pos = InStr(path, Chr$(0)) Text1.Text = Left(path, pos - 1) Else Text1.Text = "" End If End Sub
Private Type BROWSEINFO
hOwner As Long
pidlRoot As Long
pszDisplayName As String
lpszTitle As String
ulFlags As Long
lpfn As Long
lParam As Long
iImage As Long
End Type
Const BIF_RETURNONLYFSDIRS = &H1
Private pidl As Long
Private Declare Function SHGetPathFromIDList Lib "shell32.dll" Alias "SHGetPathFromIDListA" (ByVal pidl As Long, ByVal pszPath As String) As Long
Private Declare Function SHBrowseForFolder Lib "shell32.dll" Alias "SHBrowseForFolderA" (lpBrowseInfo As BROWSEINFO) As LongPrivate Sub command1_Click()
Dim bi As BROWSEINFO, r As Long, pidl As Long, path As String, pos As Integer
bi.hOwner = Me.hWnd
bi.pidlRoot = 0&
bi.lpszTitle = "对话框的标题"
bi.ulFlags = BIF_RETURNONLYFSDIRS '只能选择文件夹
pidl = SHBrowseForFolder(bi)
path = Space$(512)
r = SHGetPathFromIDList(ByVal pidl&, ByVal path) '取得用户选择的路径
If r Then
pos = InStr(path, Chr$(0))
Text1.Text = Left(path, pos - 1)
Else
Text1.Text = ""
End If
End Sub
OpenProcess() 获取进程句柄
VirtualAllocEx() 在目标进程中分配一个缓冲区
WriteProcessMemory() 向目标进程缓冲区写入TVITEM结够
SendMessage/PostMessage() 向远程窗口发送操作消息
ReadProcessMemory()把消息结果从远程缓冲区读出
VirtualFreeEx() 销毁目标进程分配缓冲区
CloseHandle() 关闭目标进程句柄