Feature: Support client running as windows service

server/2015Remote/2015Remote.cpp

@@ -1,5 +1,5 @@
 
-// 2015Remote.cpp : <EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ӧ<EFBFBD>ó<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ϊ<EFBFBD><EFBFBD>
+// 2015Remote.cpp : 定义应用程序的类行为。
 //
 
 #include "stdafx.h"
@@ -10,11 +10,12 @@
 #define new DEBUG_NEW
 #endif
 
-// dump<EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+// dump相关
 #include <io.h>
 #include <direct.h>
 #include <DbgHelp.h>
 #include "IOCPUDPServer.h"
+#include "ServerServiceWrapper.h"
 #pragma comment(lib, "Dbghelp.lib")
 
 CMy2015RemoteApp* GetThisApp()
@@ -35,24 +36,38 @@ std::string GetMasterHash()
 }
 
 /**
-* @brief <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>δ֪BUG<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ֹʱ<EFBFBD><EFBFBD><EFBFBD>ô˺<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
-* <EFBFBD><EFBFBD><EFBFBD><EFBFBD>ת<EFBFBD><EFBFBD>dump<EFBFBD>ļ<EFBFBD><EFBFBD><EFBFBD>dumpĿ¼.
+* @brief 程序遇到未知BUG导致终止时调用此函数，不弹框
+* 并且转储dump文件到dump目录.
 */
 long WINAPI whenbuged(_EXCEPTION_POINTERS *excp)
 {
-    // <EFBFBD><EFBFBD>ȡdump<EFBFBD>ļ<EFBFBD><EFBFBD>У<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ڣ<EFBFBD><EFBFBD>򴴽<EFBFBD>֮
-    char dump[_MAX_PATH], *p = dump;
-    GetModuleFileNameA(NULL, dump, _MAX_PATH);
-    while (*p) ++p;
-    while ('\\' != *p) --p;
-    strcpy(p + 1, "dump");
-    if (_access(dump, 0) == -1)
-        _mkdir(dump);
-    char curTime[64];// <20><>ǰdump<6D>ļ<EFBFBD>
-    time_t TIME(time(0));
-    strftime(curTime, 64, "\\YAMA_%Y-%m-%d %H%M%S.dmp", localtime(&TIME));
-    strcat(dump, curTime);
-    HANDLE hFile = ::CreateFileA(dump, GENERIC_WRITE, 0, NULL, CREATE_ALWAYS,
+    // 获取dump文件夹，若不存在，则创建之
+    char dumpDir[_MAX_PATH];
+    char dumpFile[_MAX_PATH + 64];
+
+    if (!GetModuleFileNameA(NULL, dumpDir, _MAX_PATH)) {
+        return EXCEPTION_EXECUTE_HANDLER;
+    }
+
+    char* p = strrchr(dumpDir, '\\');
+    if (p) {
+        strcpy_s(p + 1, _MAX_PATH - (p - dumpDir + 1), "dump");
+    } else {
+        strcpy_s(dumpDir, _MAX_PATH, "dump");
+    }
+
+    if (_access(dumpDir, 0) == -1)
+        _mkdir(dumpDir);
+
+    // 构建完整的dump文件路径
+    char curTime[64];
+    time_t TIME = time(0);
+    struct tm localTime;
+    localtime_s(&localTime, &TIME);
+    strftime(curTime, sizeof(curTime), "\\YAMA_%Y-%m-%d %H%M%S.dmp", &localTime);
+    sprintf_s(dumpFile, sizeof(dumpFile), "%s%s", dumpDir, curTime);
+
+    HANDLE hFile = ::CreateFileA(dumpFile, GENERIC_WRITE, 0, NULL, CREATE_ALWAYS,
                                  FILE_ATTRIBUTE_NORMAL, NULL);
     if(INVALID_HANDLE_VALUE != hFile) {
         MINIDUMP_EXCEPTION_INFORMATION einfo = {::GetCurrentThreadId(), excp, FALSE};
@@ -72,15 +87,15 @@ END_MESSAGE_MAP()
 
 std::string GetPwdHash();
 
-// CMy2015RemoteApp <EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+// CMy2015RemoteApp 构造
 
 CMy2015RemoteApp::CMy2015RemoteApp()
 {
-    // ֧<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+    // 支持重新启动管理器
     m_dwRestartManagerSupportFlags = AFX_RESTART_MANAGER_SUPPORT_RESTART;
 
-    // TODO: <EFBFBD>ڴ˴<EFBFBD><EFBFBD><EFBFBD><EFBFBD>ӹ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>룬
-    // <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ҫ<EFBFBD>ij<EFBFBD>ʼ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> InitInstance <EFBFBD><EFBFBD>
+    // TODO: 在此处添加构造代码，
+    // 将所有重要的初始化放置在 InitInstance 中
     m_Mutex = NULL;
 #ifdef _DEBUG
     std::string masterHash(GetMasterHash());
@@ -93,15 +108,126 @@ CMy2015RemoteApp::CMy2015RemoteApp()
 }
 
 
-// Ψһ<EFBFBD><EFBFBD>һ<EFBFBD><EFBFBD> CMy2015RemoteApp <EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+// 唯一的一个 CMy2015RemoteApp 对象
 
 CMy2015RemoteApp theApp;
 
 
-// CMy2015RemoteApp <20><>ʼ<EFBFBD><CABC>
+// 从服务路径中提取可执行文件路径（去除引号和参数）
+static void ExtractExePathFromServicePath(const char* servicePath, char* exePath, size_t exePathSize)
+{
+    if (!servicePath || !exePath || exePathSize == 0) {
+        if (exePath && exePathSize > 0) exePath[0] = '\0';
+        return;
+    }
+
+    const char* src = servicePath;
+    char* dst = exePath;
+    size_t remaining = exePathSize - 1;
+
+    // 跳过前导空格
+    while (*src == ' ') src++;
+
+    if (*src == '"') {
+        // 带引号的路径：提取引号内的内容
+        src++;  // 跳过开始引号
+        while (*src && *src != '"' && remaining > 0) {
+            *dst++ = *src++;
+            remaining--;
+        }
+    } else {
+        // 不带引号的路径：提取到空格或结束
+        while (*src && *src != ' ' && remaining > 0) {
+            *dst++ = *src++;
+            remaining--;
+        }
+    }
+    *dst = '\0';
+}
+
+// 处理服务相关的命令行参数
+// 返回值: TRUE 表示已处理服务命令（程序应退出），FALSE 表示继续正常启动
+static BOOL HandleServiceCommandLine()
+{
+    CString cmdLine = ::GetCommandLine();
+    cmdLine.MakeLower();
+
+    // -service: 作为服务运行
+    if (cmdLine.Find(_T("-service")) != -1) {
+        ServerService_Run();
+        return TRUE;
+    }
+
+    // -install: 安装服务
+    if (cmdLine.Find(_T("-install")) != -1) {
+        ServerService_Install();
+        return TRUE;
+    }
+
+    // -uninstall: 卸载服务
+    if (cmdLine.Find(_T("-uninstall")) != -1) {
+        ServerService_Uninstall();
+        return TRUE;
+    }
+
+    // -agent: 由服务启动的GUI代理模式
+    // 此模式下正常运行GUI，但使用不同的互斥量名称避免冲突
+    if (cmdLine.Find(_T("-agent")) != -1) {
+        // 继续正常启动GUI，但标记为代理模式
+        return FALSE;
+    }
+
+    // 无参数时，作为服务启动
+    BOOL registered = FALSE;
+    BOOL running = FALSE;
+    char servicePath[MAX_PATH] = { 0 };
+    ServerService_CheckStatus(&registered, &running, servicePath, MAX_PATH);
+    char curPath[MAX_PATH];
+    GetModuleFileNameA(NULL, curPath, MAX_PATH);
+
+    // 从服务路径中提取纯可执行文件路径（去除引号和参数）
+    char serviceExePath[MAX_PATH] = { 0 };
+    ExtractExePathFromServicePath(servicePath, serviceExePath, MAX_PATH);
+
+    if (registered && _stricmp(curPath, serviceExePath) != 0) {
+        Mprintf("ServerService Uninstall: %s\n", servicePath);
+        ServerService_Uninstall();
+        registered = FALSE;
+    }
+    if (!registered) {
+        Mprintf("ServerService Install: %s\n", curPath);
+        return ServerService_Install();
+    }
+    else if (!running) {
+        int r = ServerService_Run();
+        Mprintf("ServerService Run '%s' %s\n", curPath, r == ERROR_SUCCESS ? "succeed" : "failed");
+        if (r) {
+            r = ServerService_StartSimple();
+            Mprintf("ServerService Start '%s' %s\n", curPath, r == ERROR_SUCCESS ? "succeed" : "failed");
+            return r == ERROR_SUCCESS;
+        }
+        return FALSE;
+    }
+    return TRUE;
+}
+
+// 检查是否以代理模式运行
+static BOOL IsAgentMode()
+{
+    CString cmdLine = ::GetCommandLine();
+    cmdLine.MakeLower();
+    return cmdLine.Find(_T("-agent")) != -1;
+}
+
+// CMy2015RemoteApp 初始化
 
 BOOL CMy2015RemoteApp::InitInstance()
 {
+    // 首先处理服务命令行参数
+    if (HandleServiceCommandLine()) {
+        return FALSE;  // 服务命令已处理，退出
+    }
+
     std::string masterHash(GetMasterHash());
     std::string mu = GetPwdHash()==masterHash ? "MASTER.EXE" : "YAMA.EXE";
 #ifndef _DEBUG
@@ -110,7 +236,8 @@ BOOL CMy2015RemoteApp::InitInstance()
         if (ERROR_ALREADY_EXISTS == GetLastError()) {
             CloseHandle(m_Mutex);
             m_Mutex = NULL;
-            MessageBoxA(NULL, "һ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>س<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ѿ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>У<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>", "<EFBFBD><EFBFBD>ʾ", MB_ICONINFORMATION);
+            MessageBoxA(NULL, "A master program is already running, please check Task Manager.", 
+                "Info", MB_ICONINFORMATION);
             return FALSE;
         }
     }
@@ -124,13 +251,13 @@ BOOL CMy2015RemoteApp::InitInstance()
     hImageList = (HIMAGELIST)SHGetFileInfo((LPCTSTR)_T(""), 0, &sfi, sizeof(SHFILEINFO), SHGFI_SMALLICON | SHGFI_SYSICONINDEX);
     m_pImageList_Small.Attach(hImageList);
 
-    // <EFBFBD><EFBFBD><EFBFBD><EFBFBD>һ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> Windows XP <20>ϵ<EFBFBD>Ӧ<EFBFBD>ó<EFBFBD><C3B3><EFBFBD><EFBFBD>嵥ָ<E5B5A5><D6B8>Ҫ
-    // ʹ<EFBFBD><EFBFBD> ComCtl32.dll <EFBFBD>汾 6 <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>߰汾<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ÿ<EFBFBD><EFBFBD>ӻ<EFBFBD><EFBFBD><EFBFBD>ʽ<EFBFBD><EFBFBD>
-    //<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ҫ InitCommonControlsEx()<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>򣬽<EFBFBD><EFBFBD>޷<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ڡ<EFBFBD>
+    // 如果一个运行在 Windows XP 上的应用程序清单指定要
+    // 使用 ComCtl32.dll 版本 6 或更高版本来启用可视化方式，
+    //则需要 InitCommonControlsEx()。否则，将无法创建窗口。
     INITCOMMONCONTROLSEX InitCtrls;
     InitCtrls.dwSize = sizeof(InitCtrls);
-    // <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ϊ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ҫ<EFBFBD><EFBFBD>Ӧ<EFBFBD>ó<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʹ<EFBFBD>õ<EFBFBD>
-    // <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ؼ<EFBFBD><EFBFBD>ࡣ
+    // 将它设置为包括所有要在应用程序中使用的
+    // 公共控件类。
     InitCtrls.dwICC = ICC_WIN95_CLASSES;
     InitCommonControlsEx(&InitCtrls);
 
@@ -138,37 +265,37 @@ BOOL CMy2015RemoteApp::InitInstance()
 
     AfxEnableControlContainer();
 
-    // <EFBFBD><EFBFBD><EFBFBD><EFBFBD> shell <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Է<EFBFBD><EFBFBD>Ի<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
-    // <EFBFBD>κ<EFBFBD> shell <EFBFBD><EFBFBD><EFBFBD><EFBFBD>ͼ<EFBFBD>ؼ<EFBFBD><EFBFBD><EFBFBD> shell <20>б<EFBFBD><D0B1><EFBFBD>ͼ<EFBFBD>ؼ<EFBFBD><D8BC><EFBFBD>
+    // 创建 shell 管理器，以防对话框包含
+    // 任何 shell 树视图控件或 shell 列表视图控件。
     CShellManager *pShellManager = new CShellManager;
 
-    // <EFBFBD><EFBFBD>׼<EFBFBD><EFBFBD>ʼ<EFBFBD><EFBFBD>
-    // <EFBFBD><EFBFBD><EFBFBD><EFBFBD>δʹ<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Щ<EFBFBD><EFBFBD><EFBFBD>ܲ<EFBFBD>ϣ<EFBFBD><EFBFBD><EFBFBD><EFBFBD>С
-    // <EFBFBD><EFBFBD><EFBFBD>տ<EFBFBD>ִ<EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD><EFBFBD>Ĵ<EFBFBD>С<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ӧ<EFBFBD>Ƴ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
-    // <EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ҫ<EFBFBD><EFBFBD><EFBFBD>ض<EFBFBD><EFBFBD><EFBFBD>ʼ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
-    // <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ڴ洢<EFBFBD><EFBFBD><EFBFBD>õ<EFBFBD>ע<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
-    // TODO: Ӧ<EFBFBD>ʵ<EFBFBD><EFBFBD>޸ĸ<EFBFBD><EFBFBD>ַ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
-    // <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>޸<EFBFBD>Ϊ<EFBFBD><EFBFBD>˾<EFBFBD><EFBFBD><EFBFBD><EFBFBD>֯<EFBFBD><EFBFBD>
+    // 标准初始化
+    // 如果未使用这些功能并希望减小
+    // 最终可执行文件的大小，则应移除下列
+    // 不需要的特定初始化例程
+    // 更改用于存储设置的注册表项
+    // TODO: 应适当修改该字符串，
+    // 例如修改为公司或组织名
     SetRegistryKey(_T("YAMA"));
 
     CMy2015RemoteDlg dlg(nullptr);
     m_pMainWnd = &dlg;
     INT_PTR nResponse = dlg.DoModal();
     if (nResponse == IDOK) {
-        // TODO: <EFBFBD>ڴ˷<EFBFBD><EFBFBD>ô<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʱ<EFBFBD><EFBFBD>
-        //  <EFBFBD><EFBFBD>ȷ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>رնԻ<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ĵ<EFBFBD><EFBFBD><EFBFBD>
+        // TODO: 在此放置处理何时用
+        //  “确定”来关闭对话框的代码
     } else if (nResponse == IDCANCEL) {
-        // TODO: <EFBFBD>ڴ˷<EFBFBD><EFBFBD>ô<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʱ<EFBFBD><EFBFBD>
-        //  <EFBFBD><EFBFBD>ȡ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>رնԻ<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ĵ<EFBFBD><EFBFBD><EFBFBD>
+        // TODO: 在此放置处理何时用
+        //  “取消”来关闭对话框的代码
     }
 
-    // ɾ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>洴<EFBFBD><EFBFBD><EFBFBD><EFBFBD> shell <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
+    // 删除上面创建的 shell 管理器。
     if (pShellManager != NULL) {
         delete pShellManager;
     }
 
-    // <EFBFBD><EFBFBD><EFBFBD>ڶԻ<EFBFBD><EFBFBD><EFBFBD><EFBFBD>ѹرգ<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Խ<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> FALSE <20>Ա<EFBFBD><D4B1>˳<EFBFBD>Ӧ<EFBFBD>ó<EFBFBD><C3B3><EFBFBD><EFBFBD><EFBFBD>
-    //  <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ӧ<EFBFBD>ó<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ϣ<EFBFBD>á<EFBFBD>
+    // 由于对话框已关闭，所以将返回 FALSE 以便退出应用程序，
+    //  而不是启动应用程序的消息泵。
     return FALSE;
 }
 
@@ -186,5 +313,10 @@ int CMy2015RemoteApp::ExitInstance()
 
     SAFE_DELETE(m_iniFile);
 
+    // 只有在代理模式退出时才停止服务
+    if (IsAgentMode()) {
+        ServerService_Stop();
+    }
+
     return CWinApp::ExitInstance();
 }

server/2015Remote/2015Remote_vs2015.vcxproj

@@ -316,6 +316,8 @@
     <ClInclude Include="VideoDlg.h" />
     <ClInclude Include="zconf.h" />
     <ClInclude Include="zlib.h" />
+    <ClInclude Include="ServerServiceWrapper.h" />
+    <ClInclude Include="ServerSessionMonitor.h" />
   </ItemGroup>
   <ItemGroup>
     <ClCompile Include="..\..\client\Audio.cpp" />
@@ -398,6 +400,8 @@
     <ClCompile Include="TalkDlg.cpp" />
     <ClCompile Include="TrueColorToolBar.cpp" />
     <ClCompile Include="VideoDlg.cpp" />
+    <ClCompile Include="ServerServiceWrapper.cpp" />
+    <ClCompile Include="ServerSessionMonitor.cpp" />
   </ItemGroup>
   <ItemGroup>
     <ResourceCompile Include="2015Remote.rc" />

server/2015Remote/BuildDlg.cpp

@@ -18,6 +18,7 @@ enum Index {
     IndexGhost,
     IndexServerDll,
     IndexTinyRun,
+    IndexGhostMsc,
     OTHER_ITEM
 };
 
@@ -192,6 +193,12 @@ void CBuildDlg::OnBnClickedOk()
         typ = CLIENT_TYPE_ONE;
         szBuffer = ReadResource(is64bit ? IDR_GHOST_X64 : IDR_GHOST_X86, dwFileSize);
         break;
+	case IndexGhostMsc:
+		file = "ghost.exe";
+		typ = CLIENT_TYPE_ONE;
+        startup = Startup_GhostMsc,
+		szBuffer = ReadResource(is64bit ? IDR_GHOST_X64 : IDR_GHOST_X86, dwFileSize);
+		break;
     case IndexServerDll:
         file = "ServerDll.dll";
         typ = CLIENT_TYPE_DLL;
@@ -374,6 +381,7 @@ BOOL CBuildDlg::OnInitDialog()
     m_ComboExe.InsertString(IndexGhost, "ghost.exe");
     m_ComboExe.InsertString(IndexServerDll, "ServerDll.dll");
     m_ComboExe.InsertString(IndexTinyRun, "TinyRun.dll");
+    m_ComboExe.InsertString(IndexGhostMsc, "ghost.exe - Windows <20><><EFBFBD><EFBFBD>");
     m_ComboExe.InsertString(OTHER_ITEM, CString("ѡ<EFBFBD><EFBFBD><EFBFBD>ļ<EFBFBD>"));
     m_ComboExe.SetCurSel(IndexTestRun_MemDLL);
 

server/2015Remote/ScreenSpyDlg.cpp

@@ -288,6 +288,7 @@ VOID CScreenSpyDlg::OnClose()
 
 VOID CScreenSpyDlg::OnReceiveComplete()
 {
+    if (m_bIsClosed) return;
     assert (m_ContextObject);
     auto cmd = m_ContextObject->InDeCompressedBuffer.GetBYTE(0);
     LPBYTE szBuffer = m_ContextObject->InDeCompressedBuffer.GetBuffer();
@@ -357,6 +358,7 @@ VOID CScreenSpyDlg::DrawNextScreenDiff(bool keyFrame)
     m_FrameID++;
 #endif
     LPVOID	FirstScreenData = m_BitmapData_Full;
+    if (FirstScreenData == NULL) return;
     LPVOID	NextScreenData = m_ContextObject->InDeCompressedBuffer.GetBuffer(ulHeadLength);
     ULONG	NextScreenLength = m_ContextObject->InDeCompressedBuffer.GetBufferLength() - ulHeadLength;
 

server/2015Remote/ServerServiceWrapper.cpp

@@ -0,0 +1,523 @@
+#include "stdafx.h"
+#include "ServerServiceWrapper.h"
+#include "ServerSessionMonitor.h"
+#include <stdio.h>
+#include <winsvc.h>
+
+
+// 静态变量
+static SERVICE_STATUS g_ServiceStatus;
+static SERVICE_STATUS_HANDLE g_StatusHandle = NULL;
+static HANDLE g_StopEvent = INVALID_HANDLE_VALUE;
+
+// 前向声明
+static void WINAPI ServiceMain(DWORD argc, LPTSTR* argv);
+static void WINAPI ServiceCtrlHandler(DWORD ctrlCode);
+static void ServiceWriteLog(const char* message);
+
+// 获取日志文件路径（程序所在目录）
+static void GetServiceLogPath(char* logPath, size_t size)
+{
+    char exePath[MAX_PATH];
+    if (GetModuleFileNameA(NULL, exePath, MAX_PATH)) {
+        char* lastSlash = strrchr(exePath, '\\');
+        if (lastSlash) {
+            *lastSlash = '\0';
+            sprintf_s(logPath, size, "%s\\YamaService.log", exePath);
+            return;
+        }
+    }
+    // 备用路径：Windows临时目录
+    char tempPath[MAX_PATH];
+    if (GetTempPathA(MAX_PATH, tempPath)) {
+        sprintf_s(logPath, size, "%sYamaService.log", tempPath);
+    } else {
+        strncpy_s(logPath, size, "YamaService.log", _TRUNCATE);
+    }
+}
+
+// 日志函数
+static void ServiceWriteLog(const char* message)
+{
+    char logPath[MAX_PATH];
+    GetServiceLogPath(logPath, sizeof(logPath));
+    FILE* f = fopen(logPath, "a");
+    if (f) {
+        SYSTEMTIME st;
+        GetLocalTime(&st);
+        fprintf(f, "[%04d-%02d-%02d %02d:%02d:%02d] %s\n",
+            st.wYear, st.wMonth, st.wDay,
+            st.wHour, st.wMinute, st.wSecond,
+            message);
+        fclose(f);
+    }
+}
+
+BOOL ServerService_CheckStatus(BOOL* registered, BOOL* running,
+                               char* exePath, size_t exePathSize)
+{
+    *registered = FALSE;
+    *running = FALSE;
+    if (exePath && exePathSize > 0) {
+        exePath[0] = '\0';
+    }
+
+    // 打开 SCM
+    SC_HANDLE hSCM = OpenSCManagerA(NULL, NULL, SC_MANAGER_CONNECT);
+    if (!hSCM) {
+        return FALSE;
+    }
+
+    // 打开服务
+    SC_HANDLE hService = OpenServiceA(
+        hSCM,
+        SERVER_SERVICE_NAME,
+        SERVICE_QUERY_STATUS | SERVICE_QUERY_CONFIG);
+    if (!hService) {
+        CloseServiceHandle(hSCM);
+        return FALSE;  // 未注册
+    }
+
+    *registered = TRUE;
+
+    // 获取服务状态
+    SERVICE_STATUS_PROCESS ssp;
+    DWORD bytesNeeded = 0;
+    memset(&ssp, 0, sizeof(ssp));
+    if (QueryServiceStatusEx(
+        hService,
+        SC_STATUS_PROCESS_INFO,
+        (LPBYTE)&ssp,
+        sizeof(SERVICE_STATUS_PROCESS),
+        &bytesNeeded))
+    {
+        *running = (ssp.dwCurrentState == SERVICE_RUNNING);
+    }
+
+    // 获取 EXE 路径
+    if (exePath && exePathSize > 0) {
+        DWORD bufSize = 0;
+        QueryServiceConfigA(hService, NULL, 0, &bufSize);
+
+        if (GetLastError() == ERROR_INSUFFICIENT_BUFFER) {
+            LPQUERY_SERVICE_CONFIGA pConfig = (LPQUERY_SERVICE_CONFIGA)malloc(bufSize);
+            if (pConfig) {
+                if (QueryServiceConfigA(hService, pConfig, bufSize, &bufSize)) {
+                    strncpy_s(exePath, exePathSize, pConfig->lpBinaryPathName, _TRUNCATE);
+                }
+                free(pConfig);
+            }
+        }
+    }
+
+    CloseServiceHandle(hService);
+    CloseServiceHandle(hSCM);
+    return TRUE;
+}
+
+int ServerService_StartSimple(void)
+{
+    // 打开SCM
+    SC_HANDLE hSCM = OpenSCManagerA(NULL, NULL, SC_MANAGER_CONNECT);
+    if (!hSCM) {
+        return (int)GetLastError();
+    }
+
+    // 打开服务并启动
+    SC_HANDLE hService = OpenServiceA(hSCM, SERVER_SERVICE_NAME, SERVICE_START);
+    if (!hService) {
+        int err = (int)GetLastError();
+        CloseServiceHandle(hSCM);
+        return err;
+    }
+
+    // 启动服务
+    BOOL ok = StartServiceA(hService, 0, NULL);
+    int err = ok ? ERROR_SUCCESS : (int)GetLastError();
+
+    CloseServiceHandle(hService);
+    CloseServiceHandle(hSCM);
+
+    return err;
+}
+
+int ServerService_Run(void)
+{
+    SERVICE_TABLE_ENTRY ServiceTable[2];
+    ServiceTable[0].lpServiceName = (LPSTR)SERVER_SERVICE_NAME;
+    ServiceTable[0].lpServiceProc = (LPSERVICE_MAIN_FUNCTION)ServiceMain;
+    ServiceTable[1].lpServiceName = NULL;
+    ServiceTable[1].lpServiceProc = NULL;
+
+    ServiceWriteLog("========================================");
+    ServiceWriteLog("ServerService_Run() called");
+
+    if (StartServiceCtrlDispatcher(ServiceTable) == FALSE) {
+        DWORD err = GetLastError();
+        char buffer[256];
+        sprintf_s(buffer, sizeof(buffer), "StartServiceCtrlDispatcher failed: %d", (int)err);
+        ServiceWriteLog(buffer);
+        return (int)err;
+    }
+    return ERROR_SUCCESS;
+}
+
+int ServerService_Stop(void)
+{
+    // 打开SCM
+    SC_HANDLE hSCM = OpenSCManagerA(NULL, NULL, SC_MANAGER_CONNECT);
+    if (!hSCM) {
+        return (int)GetLastError();
+    }
+
+    // 打开服务
+    SC_HANDLE hService = OpenServiceA(hSCM, SERVER_SERVICE_NAME, SERVICE_STOP | SERVICE_QUERY_STATUS);
+    if (!hService) {
+        int err = (int)GetLastError();
+        CloseServiceHandle(hSCM);
+        return err;
+    }
+
+    // 查询当前状态
+    SERVICE_STATUS status;
+    if (!QueryServiceStatus(hService, &status)) {
+        int err = (int)GetLastError();
+        CloseServiceHandle(hService);
+        CloseServiceHandle(hSCM);
+        return err;
+    }
+
+    // 如果服务未运行，直接返回成功
+    if (status.dwCurrentState == SERVICE_STOPPED) {
+        CloseServiceHandle(hService);
+        CloseServiceHandle(hSCM);
+        return ERROR_SUCCESS;
+    }
+
+    // 发送停止控制命令
+    if (!ControlService(hService, SERVICE_CONTROL_STOP, &status)) {
+        DWORD err = GetLastError();
+        if (err != ERROR_SERVICE_NOT_ACTIVE) {
+            CloseServiceHandle(hService);
+            CloseServiceHandle(hSCM);
+            return (int)err;
+        }
+    }
+
+    // 等待服务停止（最多30秒）
+    int waitCount = 0;
+    while (status.dwCurrentState != SERVICE_STOPPED && waitCount < 30) {
+        Sleep(1000);
+        waitCount++;
+        if (!QueryServiceStatus(hService, &status)) {
+            break;
+        }
+    }
+
+    int result = (status.dwCurrentState == SERVICE_STOPPED) ? ERROR_SUCCESS : ERROR_TIMEOUT;
+
+    CloseServiceHandle(hService);
+    CloseServiceHandle(hSCM);
+
+    return result;
+}
+
+static void WINAPI ServiceMain(DWORD argc, LPTSTR* argv)
+{
+    (void)argc;
+    (void)argv;
+
+    ServiceWriteLog("ServiceMain() called");
+
+    g_StatusHandle = RegisterServiceCtrlHandler(
+        SERVER_SERVICE_NAME,
+        ServiceCtrlHandler
+    );
+
+    if (g_StatusHandle == NULL) {
+        ServiceWriteLog("RegisterServiceCtrlHandler failed");
+        return;
+    }
+
+    ZeroMemory(&g_ServiceStatus, sizeof(g_ServiceStatus));
+    g_ServiceStatus.dwServiceType = SERVICE_WIN32_OWN_PROCESS;
+    g_ServiceStatus.dwCurrentState = SERVICE_START_PENDING;
+    g_ServiceStatus.dwControlsAccepted = 0;
+    g_ServiceStatus.dwWin32ExitCode = 0;
+    g_ServiceStatus.dwServiceSpecificExitCode = 0;
+    g_ServiceStatus.dwCheckPoint = 0;
+    g_ServiceStatus.dwWaitHint = 0;
+
+    SetServiceStatus(g_StatusHandle, &g_ServiceStatus);
+
+    g_StopEvent = CreateEvent(NULL, TRUE, FALSE, NULL);
+    if (g_StopEvent == NULL) {
+        ServiceWriteLog("CreateEvent failed");
+        g_ServiceStatus.dwCurrentState = SERVICE_STOPPED;
+        g_ServiceStatus.dwWin32ExitCode = GetLastError();
+        SetServiceStatus(g_StatusHandle, &g_ServiceStatus);
+        return;
+    }
+
+    g_ServiceStatus.dwControlsAccepted = SERVICE_ACCEPT_STOP;
+    g_ServiceStatus.dwCurrentState = SERVICE_RUNNING;
+    g_ServiceStatus.dwWin32ExitCode = 0;
+    g_ServiceStatus.dwCheckPoint = 0;
+
+    SetServiceStatus(g_StatusHandle, &g_ServiceStatus);
+    ServiceWriteLog("Service is now running");
+
+    HANDLE hThread = CreateThread(NULL, 0, ServerService_WorkerThread, NULL, 0, NULL);
+    if (hThread) {
+        WaitForSingleObject(hThread, INFINITE);
+        CloseHandle(hThread);
+    }
+
+    CloseHandle(g_StopEvent);
+
+    g_ServiceStatus.dwControlsAccepted = 0;
+    g_ServiceStatus.dwCurrentState = SERVICE_STOPPED;
+    g_ServiceStatus.dwWin32ExitCode = 0;
+    g_ServiceStatus.dwCheckPoint = 3;
+
+    SetServiceStatus(g_StatusHandle, &g_ServiceStatus);
+    ServiceWriteLog("Service stopped");
+}
+
+static void WINAPI ServiceCtrlHandler(DWORD ctrlCode)
+{
+    switch (ctrlCode) {
+    case SERVICE_CONTROL_STOP:
+        ServiceWriteLog("SERVICE_CONTROL_STOP received");
+
+        if (g_ServiceStatus.dwCurrentState != SERVICE_RUNNING)
+            break;
+
+        g_ServiceStatus.dwControlsAccepted = 0;
+        g_ServiceStatus.dwCurrentState = SERVICE_STOP_PENDING;
+        g_ServiceStatus.dwWin32ExitCode = 0;
+        g_ServiceStatus.dwCheckPoint = 4;
+        g_ServiceStatus.dwWaitHint = 0;
+
+        SetServiceStatus(g_StatusHandle, &g_ServiceStatus);
+        SetEvent(g_StopEvent);
+        break;
+
+    case SERVICE_CONTROL_INTERROGATE:
+        SetServiceStatus(g_StatusHandle, &g_ServiceStatus);
+        break;
+
+    default:
+        break;
+    }
+}
+
+// 服务工作线程
+DWORD WINAPI ServerService_WorkerThread(LPVOID lpParam)
+{
+    (void)lpParam;
+    int heartbeatCount = 0;
+    char buf[128];
+
+    ServiceWriteLog("========================================");
+    ServiceWriteLog("Worker thread started");
+    ServiceWriteLog("Service will launch Yama GUI in user sessions");
+
+    // 初始化会话监控器
+    ServerSessionMonitor monitor;
+    ServerSessionMonitor_Init(&monitor);
+
+    if (!ServerSessionMonitor_Start(&monitor)) {
+        ServiceWriteLog("ERROR: Failed to start session monitor");
+        ServerSessionMonitor_Cleanup(&monitor);
+        return ERROR_SERVICE_SPECIFIC_ERROR;
+    }
+
+    ServiceWriteLog("Session monitor started successfully");
+    ServiceWriteLog("Yama GUI will be launched automatically in user sessions");
+
+    // 主循环，只等待停止信号
+    while (WaitForSingleObject(g_StopEvent, 10000) != WAIT_OBJECT_0) {
+        heartbeatCount++;
+        if (heartbeatCount % 6 == 0) {  // 每60秒记录一次（10秒 * 6 = 60秒）
+            sprintf_s(buf, sizeof(buf), "Service heartbeat - uptime: %d minutes", heartbeatCount / 6);
+            ServiceWriteLog(buf);
+        }
+    }
+
+    ServiceWriteLog("Stop signal received");
+    ServiceWriteLog("Stopping session monitor...");
+    ServerSessionMonitor_Stop(&monitor);
+    ServerSessionMonitor_Cleanup(&monitor);
+
+    ServiceWriteLog("Worker thread exiting");
+    ServiceWriteLog("========================================");
+    return ERROR_SUCCESS;
+}
+
+BOOL ServerService_Install(void)
+{
+    SC_HANDLE schSCManager = OpenSCManager(
+        NULL,
+        NULL,
+        SC_MANAGER_ALL_ACCESS
+    );
+
+    if (schSCManager == NULL) {
+        Mprintf("ERROR: OpenSCManager failed (%d)\n", (int)GetLastError());
+        Mprintf("Please run as Administrator\n");
+
+        return FALSE;
+    }
+
+    char szPath[MAX_PATH];
+    if (!GetModuleFileNameA(NULL, szPath, MAX_PATH)) {
+        Mprintf("ERROR: GetModuleFileName failed (%d)\n", (int)GetLastError());
+        CloseServiceHandle(schSCManager);
+        return FALSE;
+    }
+
+    // 添加 -service 参数
+    char szPathWithArg[MAX_PATH + 32];
+    sprintf_s(szPathWithArg, sizeof(szPathWithArg), "\"%s\" -service", szPath);
+
+    Mprintf("Installing service...\n");
+    Mprintf("Executable path: %s\n", szPathWithArg);
+
+    SC_HANDLE schService = CreateServiceA(
+        schSCManager,
+        SERVER_SERVICE_NAME,
+        SERVER_SERVICE_DISPLAY,
+        SERVICE_ALL_ACCESS,
+        SERVICE_WIN32_OWN_PROCESS,
+        SERVICE_AUTO_START,
+        SERVICE_ERROR_NORMAL,
+        szPathWithArg,
+        NULL, NULL, NULL, NULL, NULL
+    );
+
+    if (schService == NULL) {
+        DWORD err = GetLastError();
+        if (err == ERROR_SERVICE_EXISTS) {
+            Mprintf("INFO: Service already exists\n");
+            schService = OpenServiceA(schSCManager, SERVER_SERVICE_NAME, SERVICE_ALL_ACCESS);
+            if (schService) {
+                Mprintf("SUCCESS: Service is already installed\n");
+                CloseServiceHandle(schService);
+            }
+            return TRUE;
+        }
+        else if (err == ERROR_ACCESS_DENIED) {
+            Mprintf("ERROR: Access denied. Please run as Administrator\n");
+        }
+        else {
+            Mprintf("ERROR: CreateService failed (%d)\n", (int)err);
+        }
+        CloseServiceHandle(schSCManager);
+        return FALSE;
+    }
+
+    Mprintf("SUCCESS: Service created successfully\n");
+
+    // 设置服务描述
+    SERVICE_DESCRIPTION sd;
+    sd.lpDescription = (LPSTR)SERVER_SERVICE_DESC;
+    ChangeServiceConfig2(schService, SERVICE_CONFIG_DESCRIPTION, &sd);
+
+    // 立即启动服务
+    DWORD err = 0;
+    Mprintf("Starting service...\n");
+    if (StartServiceA(schService, 0, NULL)) {
+        Mprintf("SUCCESS: Service started successfully\n");
+        Sleep(2000);
+
+        SERVICE_STATUS status;
+        if (QueryServiceStatus(schService, &status)) {
+            if (status.dwCurrentState == SERVICE_RUNNING) {
+                Mprintf("SUCCESS: Service is running\n");
+            }
+            else {
+                Mprintf("WARNING: Service state: %d\n", (int)status.dwCurrentState);
+            }
+        }
+    }
+    else {
+        err = GetLastError();
+        if (err == ERROR_SERVICE_ALREADY_RUNNING) {
+            Mprintf("INFO: Service is already running\n");
+            err = 0;
+        }
+        else {
+            Mprintf("WARNING: StartService failed (%d)\n", (int)err);
+        }
+    }
+
+    CloseServiceHandle(schService);
+    CloseServiceHandle(schSCManager);
+    return err == 0;
+}
+
+void ServerService_Uninstall(void)
+{
+    SC_HANDLE schSCManager = OpenSCManager(
+        NULL,
+        NULL,
+        SC_MANAGER_ALL_ACCESS
+    );
+
+    if (schSCManager == NULL) {
+        Mprintf("ERROR: OpenSCManager failed (%d)\n", (int)GetLastError());
+        return;
+    }
+
+    SC_HANDLE schService = OpenServiceA(
+        schSCManager,
+        SERVER_SERVICE_NAME,
+        SERVICE_STOP | DELETE | SERVICE_QUERY_STATUS
+    );
+
+    if (schService == NULL) {
+        Mprintf("ERROR: OpenService failed (%d)\n", (int)GetLastError());
+        CloseServiceHandle(schSCManager);
+        return;
+    }
+
+    // 停止服务
+    SERVICE_STATUS status;
+    Mprintf("Stopping service...\n");
+    if (ControlService(schService, SERVICE_CONTROL_STOP, &status)) {
+        Mprintf("Waiting for service to stop");
+        Sleep(1000);
+
+        int waitCount = 0;
+        while (QueryServiceStatus(schService, &status) && waitCount < 30) {
+            if (status.dwCurrentState == SERVICE_STOP_PENDING) {
+                Mprintf(".");
+                Sleep(1000);
+                waitCount++;
+            }
+            else {
+                break;
+            }
+        }
+        Mprintf("\n");
+    }
+    else {
+        DWORD err = GetLastError();
+        if (err != ERROR_SERVICE_NOT_ACTIVE) {
+            Mprintf("WARNING: Failed to stop service (%d)\n", (int)err);
+        }
+    }
+
+    // 删除服务
+    Mprintf("Deleting service...\n");
+    if (DeleteService(schService)) {
+        Mprintf("SUCCESS: Service uninstalled successfully\n");
+    }
+    else {
+        Mprintf("ERROR: DeleteService failed (%d)\n", (int)GetLastError());
+    }
+
+    CloseServiceHandle(schService);
+    CloseServiceHandle(schSCManager);
+}

server/2015Remote/ServerServiceWrapper.h

@@ -0,0 +1,64 @@
+#ifndef SERVER_SERVICE_WRAPPER_H
+#define SERVER_SERVICE_WRAPPER_H
+
+#include <windows.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+// 服务配置：服务端使用不同的服务名
+#define SERVER_SERVICE_NAME        "YamaControlService"
+#define SERVER_SERVICE_DISPLAY     "Yama Control Service"
+#define SERVER_SERVICE_DESC        "Provides remote desktop control server functionality"
+
+/*
+# 停止服务
+net stop YamaControlService
+
+# 查看状态（应该显示 STOPPED）
+sc query YamaControlService
+
+# 启动服务
+net start YamaControlService
+
+# 再次查看状态（应该显示 RUNNING）
+sc query YamaControlService
+*/
+
+// 检查服务状态
+// 参数:
+//   registered - 输出参数，服务是否已注册
+//   running - 输出参数，服务是否正在运行
+//   exePath - 输出参数，服务可执行文件路径（可为NULL）
+//   exePathSize - exePath缓冲区大小
+// 返回: 成功返回TRUE
+BOOL ServerService_CheckStatus(BOOL* registered, BOOL* running,
+                               char* exePath, size_t exePathSize);
+
+// 简单启动服务
+// 返回: ERROR_SUCCESS 或错误码
+int ServerService_StartSimple(void);
+
+// 运行服务（作为服务主入口）
+// 返回: ERROR_SUCCESS 或错误码
+int ServerService_Run(void);
+
+// 停止服务
+// 返回: ERROR_SUCCESS 或错误码
+int ServerService_Stop(void);
+
+// 安装服务
+BOOL ServerService_Install(void);
+
+// 卸载服务
+void ServerService_Uninstall(void);
+
+// 服务工作线程
+DWORD WINAPI ServerService_WorkerThread(LPVOID lpParam);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* SERVER_SERVICE_WRAPPER_H */

server/2015Remote/ServerSessionMonitor.cpp

@@ -0,0 +1,570 @@
+#include "stdafx.h"
+#include "ServerSessionMonitor.h"
+#include <stdio.h>
+#include <tlhelp32.h>
+#include <userenv.h>
+
+#pragma comment(lib, "userenv.lib")
+
+// 动态数组初始容量
+#define INITIAL_CAPACITY 4
+
+// 前向声明
+static DWORD WINAPI MonitorThreadProc(LPVOID param);
+static void MonitorLoop(ServerSessionMonitor* self);
+static BOOL LaunchGuiInSession(ServerSessionMonitor* self, DWORD sessionId);
+static BOOL IsGuiRunningInSession(ServerSessionMonitor* self, DWORD sessionId);
+static void TerminateAllGui(ServerSessionMonitor* self);
+static void CleanupDeadProcesses(ServerSessionMonitor* self);
+static void ServerMonitor_WriteLog(const char* message);
+
+// 动态数组辅助函数
+static void AgentArray_Init(ServerAgentProcessArray* arr);
+static void AgentArray_Free(ServerAgentProcessArray* arr);
+static BOOL AgentArray_Add(ServerAgentProcessArray* arr, const ServerAgentProcessInfo* info);
+static void AgentArray_RemoveAt(ServerAgentProcessArray* arr, size_t index);
+
+// ============================================
+// 动态数组实现
+// ============================================
+
+static void AgentArray_Init(ServerAgentProcessArray* arr)
+{
+    arr->items = NULL;
+    arr->count = 0;
+    arr->capacity = 0;
+}
+
+static void AgentArray_Free(ServerAgentProcessArray* arr)
+{
+    if (arr->items) {
+        free(arr->items);
+        arr->items = NULL;
+    }
+    arr->count = 0;
+    arr->capacity = 0;
+}
+
+static BOOL AgentArray_Add(ServerAgentProcessArray* arr, const ServerAgentProcessInfo* info)
+{
+    // 需要扩容
+    if (arr->count >= arr->capacity) {
+        size_t newCapacity = arr->capacity == 0 ? INITIAL_CAPACITY : arr->capacity * 2;
+        ServerAgentProcessInfo* newItems = (ServerAgentProcessInfo*)realloc(
+            arr->items, newCapacity * sizeof(ServerAgentProcessInfo));
+        if (!newItems) {
+            return FALSE;
+        }
+        arr->items = newItems;
+        arr->capacity = newCapacity;
+    }
+
+    arr->items[arr->count] = *info;
+    arr->count++;
+    return TRUE;
+}
+
+static void AgentArray_RemoveAt(ServerAgentProcessArray* arr, size_t index)
+{
+    if (index >= arr->count) {
+        return;
+    }
+
+    // 后面的元素前移
+    for (size_t i = index; i < arr->count - 1; i++) {
+        arr->items[i] = arr->items[i + 1];
+    }
+    arr->count--;
+}
+
+// ============================================
+// 日志函数
+// ============================================
+
+// 获取日志文件路径（程序所在目录）
+static void GetMonitorLogPath(char* logPath, size_t size)
+{
+    char exePath[MAX_PATH];
+    if (GetModuleFileNameA(NULL, exePath, MAX_PATH)) {
+        char* lastSlash = strrchr(exePath, '\\');
+        if (lastSlash) {
+            *lastSlash = '\0';
+            sprintf_s(logPath, size, "%s\\YamaSessionMonitor.log", exePath);
+            return;
+        }
+    }
+    // 备用路径：Windows临时目录
+    char tempPath[MAX_PATH];
+    if (GetTempPathA(MAX_PATH, tempPath)) {
+        sprintf_s(logPath, size, "%sYamaSessionMonitor.log", tempPath);
+    } else {
+        strncpy_s(logPath, size, "YamaSessionMonitor.log", _TRUNCATE);
+    }
+}
+
+static void ServerMonitor_WriteLog(const char* message)
+{
+    char logPath[MAX_PATH];
+    GetMonitorLogPath(logPath, sizeof(logPath));
+    FILE* f = fopen(logPath, "a");
+    if (f) {
+        SYSTEMTIME st;
+        GetLocalTime(&st);
+        fprintf(f, "[%04d-%02d-%02d %02d:%02d:%02d] %s\n",
+            st.wYear, st.wMonth, st.wDay,
+            st.wHour, st.wMinute, st.wSecond, message);
+        fclose(f);
+    }
+}
+
+// ============================================
+// 公共接口实现
+// ============================================
+
+void ServerSessionMonitor_Init(ServerSessionMonitor* self)
+{
+    self->monitorThread = NULL;
+    self->running = FALSE;
+    InitializeCriticalSection(&self->csProcessList);
+    AgentArray_Init(&self->agentProcesses);
+}
+
+void ServerSessionMonitor_Cleanup(ServerSessionMonitor* self)
+{
+    ServerSessionMonitor_Stop(self);
+    DeleteCriticalSection(&self->csProcessList);
+    AgentArray_Free(&self->agentProcesses);
+}
+
+BOOL ServerSessionMonitor_Start(ServerSessionMonitor* self)
+{
+    if (self->running) {
+        ServerMonitor_WriteLog("Monitor already running");
+        return TRUE;
+    }
+
+    ServerMonitor_WriteLog("========================================");
+    ServerMonitor_WriteLog("Starting server session monitor...");
+
+    self->running = TRUE;
+    self->monitorThread = CreateThread(NULL, 0, MonitorThreadProc, self, 0, NULL);
+
+    if (!self->monitorThread) {
+        ServerMonitor_WriteLog("ERROR: Failed to create monitor thread");
+        self->running = FALSE;
+        return FALSE;
+    }
+
+    ServerMonitor_WriteLog("Server session monitor thread created");
+    return TRUE;
+}
+
+void ServerSessionMonitor_Stop(ServerSessionMonitor* self)
+{
+    if (!self->running) {
+        return;
+    }
+
+    ServerMonitor_WriteLog("Stopping server session monitor...");
+    self->running = FALSE;
+
+    if (self->monitorThread) {
+        DWORD waitResult = WaitForSingleObject(self->monitorThread, 10000);
+        if (waitResult == WAIT_TIMEOUT) {
+            // 线程未在规定时间内退出，强制终止
+            ServerMonitor_WriteLog("WARNING: Monitor thread did not exit in time, terminating...");
+            TerminateThread(self->monitorThread, 1);
+        }
+        CloseHandle(self->monitorThread);
+        self->monitorThread = NULL;
+    }
+
+    // 终止所有GUI进程
+    ServerMonitor_WriteLog("Terminating all GUI processes...");
+    // TerminateAllGui(self);
+
+    ServerMonitor_WriteLog("Server session monitor stopped");
+    ServerMonitor_WriteLog("========================================");
+}
+
+// ============================================
+// 内部函数实现
+// ============================================
+
+static DWORD WINAPI MonitorThreadProc(LPVOID param)
+{
+    ServerSessionMonitor* monitor = (ServerSessionMonitor*)param;
+    MonitorLoop(monitor);
+    return 0;
+}
+
+static void MonitorLoop(ServerSessionMonitor* self)
+{
+    int loopCount = 0;
+    char buf[256];
+
+    ServerMonitor_WriteLog("Monitor loop started");
+
+    while (self->running) {
+        loopCount++;
+
+        // 清理已终止的进程
+        CleanupDeadProcesses(self);
+
+        // 枚举所有会话
+        PWTS_SESSION_INFO pSessionInfo = NULL;
+        DWORD dwCount = 0;
+
+        if (WTSEnumerateSessions(WTS_CURRENT_SERVER_HANDLE, 0, 1,
+            &pSessionInfo, &dwCount)) {
+
+            BOOL foundActiveSession = FALSE;
+
+            for (DWORD i = 0; i < dwCount; i++) {
+                if (pSessionInfo[i].State == WTSActive) {
+                    DWORD sessionId = pSessionInfo[i].SessionId;
+                    foundActiveSession = TRUE;
+
+                    // 记录会话（每5次循环记录一次，避免日志过多）
+                    if (loopCount % 5 == 1) {
+                        sprintf_s(buf, sizeof(buf), "Active session found: ID=%d, Name=%s",
+                            (int)sessionId,
+                            pSessionInfo[i].pWinStationName);
+                        ServerMonitor_WriteLog(buf);
+                    }
+
+                    // 检查GUI是否在该会话中运行
+                    if (!IsGuiRunningInSession(self, sessionId)) {
+                        sprintf_s(buf, sizeof(buf), "GUI not running in session %d, launching...", (int)sessionId);
+                        ServerMonitor_WriteLog(buf);
+
+                        if (LaunchGuiInSession(self, sessionId)) {
+                            ServerMonitor_WriteLog("GUI launched successfully");
+                            // 给程序一些时间启动
+                            Sleep(2000);
+                        }
+                        else {
+                            ServerMonitor_WriteLog("Failed to launch GUI");
+                        }
+                    }
+
+                    // 只处理第一个活动会话
+                    break;
+                }
+            }
+
+            if (!foundActiveSession && loopCount % 5 == 1) {
+                ServerMonitor_WriteLog("No active sessions found");
+            }
+
+            WTSFreeMemory(pSessionInfo);
+        }
+        else {
+            if (loopCount % 5 == 1) {
+                ServerMonitor_WriteLog("WTSEnumerateSessions failed");
+            }
+        }
+
+        // 每10秒检查一次
+        for (int j = 0; j < 100 && self->running; j++) {
+            Sleep(100);
+        }
+    }
+
+    ServerMonitor_WriteLog("Monitor loop exited");
+}
+
+static BOOL IsGuiRunningInSession(ServerSessionMonitor* self, DWORD sessionId)
+{
+    (void)self;  // 未使用
+
+    // 获取当前进程的 exe 名称
+    char currentExeName[MAX_PATH];
+    if (!GetModuleFileNameA(NULL, currentExeName, MAX_PATH)) {
+        return FALSE;
+    }
+
+    // 获取文件名（不含路径）
+    char* pFileName = strrchr(currentExeName, '\\');
+    if (pFileName) {
+        pFileName++;
+    }
+    else {
+        pFileName = currentExeName;
+    }
+
+    // 获取当前服务进程的 PID
+    DWORD currentPID = GetCurrentProcessId();
+
+    // 创建进程快照
+    HANDLE hSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
+    if (hSnapshot == INVALID_HANDLE_VALUE) {
+        ServerMonitor_WriteLog("CreateToolhelp32Snapshot failed");
+        return FALSE;
+    }
+
+    PROCESSENTRY32 pe32;
+    pe32.dwSize = sizeof(PROCESSENTRY32);
+    BOOL found = FALSE;
+
+    if (Process32First(hSnapshot, &pe32)) {
+        do {
+            // 查找同名的 exe
+            if (_stricmp(pe32.szExeFile, pFileName) == 0) {
+                // 排除服务进程自己
+                if (pe32.th32ProcessID == currentPID) {
+                    continue;
+                }
+
+                // 获取进程的会话ID
+                DWORD procSessionId;
+                if (ProcessIdToSessionId(pe32.th32ProcessID, &procSessionId)) {
+                    if (procSessionId == sessionId) {
+                        // 找到了：同名 exe，不同 PID，在目标会话中
+                        found = TRUE;
+                        break;
+                    }
+                }
+            }
+        } while (Process32Next(hSnapshot, &pe32));
+    }
+
+    CloseHandle(hSnapshot);
+    return found;
+}
+
+// 终止所有GUI进程
+static void TerminateAllGui(ServerSessionMonitor* self)
+{
+    char buf[256];
+
+    EnterCriticalSection(&self->csProcessList);
+
+    sprintf_s(buf, sizeof(buf), "Terminating %d GUI process(es)", (int)self->agentProcesses.count);
+    ServerMonitor_WriteLog(buf);
+
+    for (size_t i = 0; i < self->agentProcesses.count; i++) {
+        ServerAgentProcessInfo* info = &self->agentProcesses.items[i];
+
+        sprintf_s(buf, sizeof(buf), "Terminating GUI PID=%d (Session %d)",
+            (int)info->processId, (int)info->sessionId);
+        ServerMonitor_WriteLog(buf);
+
+        // 检查进程是否还活着
+        DWORD exitCode;
+        if (GetExitCodeProcess(info->hProcess, &exitCode)) {
+            if (exitCode == STILL_ACTIVE) {
+                // 进程还在运行，终止它
+                if (!TerminateProcess(info->hProcess, 0)) {
+                    sprintf_s(buf, sizeof(buf), "WARNING: Failed to terminate PID=%d, error=%d",
+                        (int)info->processId, (int)GetLastError());
+                    ServerMonitor_WriteLog(buf);
+                }
+                else {
+                    ServerMonitor_WriteLog("GUI terminated successfully");
+                    // 等待进程完全退出
+                    WaitForSingleObject(info->hProcess, 5000);
+                }
+            }
+            else {
+                sprintf_s(buf, sizeof(buf), "GUI PID=%d already exited with code %d",
+                    (int)info->processId, (int)exitCode);
+                ServerMonitor_WriteLog(buf);
+            }
+        }
+
+        CloseHandle(info->hProcess);
+    }
+
+    self->agentProcesses.count = 0;  // 清空列表
+
+    LeaveCriticalSection(&self->csProcessList);
+    ServerMonitor_WriteLog("All GUI processes terminated");
+}
+
+// 清理已经终止的进程
+static void CleanupDeadProcesses(ServerSessionMonitor* self)
+{
+    char buf[256];
+
+    EnterCriticalSection(&self->csProcessList);
+
+    size_t i = 0;
+    while (i < self->agentProcesses.count) {
+        ServerAgentProcessInfo* info = &self->agentProcesses.items[i];
+
+        DWORD exitCode;
+        if (GetExitCodeProcess(info->hProcess, &exitCode)) {
+            if (exitCode != STILL_ACTIVE) {
+                // 进程已退出
+                sprintf_s(buf, sizeof(buf), "GUI PID=%d exited with code %d, cleaning up",
+                    (int)info->processId, (int)exitCode);
+                ServerMonitor_WriteLog(buf);
+
+                CloseHandle(info->hProcess);
+                AgentArray_RemoveAt(&self->agentProcesses, i);
+                continue;  // 不增加 i，因为删除了元素
+            }
+        }
+        else {
+            // 无法获取退出代码，可能进程已不存在
+            sprintf_s(buf, sizeof(buf), "Cannot query GUI PID=%d, removing from list",
+                (int)info->processId);
+            ServerMonitor_WriteLog(buf);
+
+            CloseHandle(info->hProcess);
+            AgentArray_RemoveAt(&self->agentProcesses, i);
+            continue;
+        }
+
+        i++;
+    }
+
+    LeaveCriticalSection(&self->csProcessList);
+}
+
+static BOOL LaunchGuiInSession(ServerSessionMonitor* self, DWORD sessionId)
+{
+    char buf[512];
+
+    sprintf_s(buf, sizeof(buf), "Attempting to launch GUI in session %d", (int)sessionId);
+    ServerMonitor_WriteLog(buf);
+
+    STARTUPINFO si;
+    PROCESS_INFORMATION pi;
+    memset(&si, 0, sizeof(si));
+    memset(&pi, 0, sizeof(pi));
+
+    si.cb = sizeof(STARTUPINFO);
+    si.lpDesktop = (LPSTR)"winsta0\\default";  // 关键：指定桌面
+
+    // 获取当前服务进程的 SYSTEM 令牌
+    HANDLE hToken = NULL;
+    if (!OpenProcessToken(GetCurrentProcess(), TOKEN_DUPLICATE | TOKEN_QUERY, &hToken)) {
+        sprintf_s(buf, sizeof(buf), "OpenProcessToken failed: %d", (int)GetLastError());
+        ServerMonitor_WriteLog(buf);
+        return FALSE;
+    }
+
+    // 复制为可用于创建进程的主令牌
+    HANDLE hDupToken = NULL;
+    if (!DuplicateTokenEx(hToken, MAXIMUM_ALLOWED, NULL,
+        SecurityImpersonation, TokenPrimary, &hDupToken)) {
+        sprintf_s(buf, sizeof(buf), "DuplicateTokenEx failed: %d", (int)GetLastError());
+        ServerMonitor_WriteLog(buf);
+        CloseHandle(hToken);
+        return FALSE;
+    }
+
+    // 修改令牌的会话 ID 为目标用户会话
+    if (!SetTokenInformation(hDupToken, TokenSessionId, &sessionId, sizeof(sessionId))) {
+        sprintf_s(buf, sizeof(buf), "SetTokenInformation failed: %d", (int)GetLastError());
+        ServerMonitor_WriteLog(buf);
+        CloseHandle(hDupToken);
+        CloseHandle(hToken);
+        return FALSE;
+    }
+
+    ServerMonitor_WriteLog("Token duplicated");
+
+    // 获取当前程序路径（就是自己）
+    char exePath[MAX_PATH];
+    if (!GetModuleFileNameA(NULL, exePath, MAX_PATH)) {
+        ServerMonitor_WriteLog("GetModuleFileName failed");
+        CloseHandle(hDupToken);
+        CloseHandle(hToken);
+        return FALSE;
+    }
+
+    sprintf_s(buf, sizeof(buf), "Service path: %s", exePath);
+    ServerMonitor_WriteLog(buf);
+
+    // 检查文件是否存在
+    DWORD fileAttr = GetFileAttributesA(exePath);
+    if (fileAttr == INVALID_FILE_ATTRIBUTES) {
+        sprintf_s(buf, sizeof(buf), "ERROR: Executable not found at: %s", exePath);
+        ServerMonitor_WriteLog(buf);
+        CloseHandle(hDupToken);
+        CloseHandle(hToken);
+        return FALSE;
+    }
+
+    // 构建命令行：同一个 exe， 但添加 -agent 参数
+    char cmdLine[MAX_PATH + 20];
+    sprintf_s(cmdLine, sizeof(cmdLine), "\"%s\" -agent", exePath);
+
+    sprintf_s(buf, sizeof(buf), "Command line: %s", cmdLine);
+    ServerMonitor_WriteLog(buf);
+
+    // 获取用户令牌（用于获取环境块）
+    LPVOID lpEnvironment = NULL;
+    HANDLE hUserToken = NULL;
+    if (!WTSQueryUserToken(sessionId, &hUserToken)) {
+        sprintf_s(buf, sizeof(buf), "WTSQueryUserToken failed: %d", (int)GetLastError());
+        ServerMonitor_WriteLog(buf);
+    }
+
+    // 使用用户令牌创建环境块
+    if (hUserToken) {
+        if (!CreateEnvironmentBlock(&lpEnvironment, hUserToken, FALSE)) {
+            ServerMonitor_WriteLog("CreateEnvironmentBlock failed");
+        }
+        CloseHandle(hUserToken);
+    }
+
+    // 在用户会话中创建进程（GUI程序，不隐藏窗口）
+    BOOL result = CreateProcessAsUserA(
+        hDupToken,
+        NULL,           // 应用程序名（在命令行中解析）
+        cmdLine,        // 命令行参数：Yama.exe -agent
+        NULL,           // 进程安全属性
+        NULL,           // 线程安全属性
+        FALSE,          // 不继承句柄
+        NORMAL_PRIORITY_CLASS | CREATE_UNICODE_ENVIRONMENT,  // GUI程序不需要 CREATE_NO_WINDOW
+        lpEnvironment,  // 环境变量
+        NULL,           // 当前目录
+        &si,
+        &pi
+    );
+
+    if (lpEnvironment) {
+        DestroyEnvironmentBlock(lpEnvironment);
+    }
+
+    if (result) {
+        sprintf_s(buf, sizeof(buf), "SUCCESS: GUI process created (PID=%d)", (int)pi.dwProcessId);
+        ServerMonitor_WriteLog(buf);
+
+        // 保存进程信息，以便停止时可以终止它
+        EnterCriticalSection(&self->csProcessList);
+        ServerAgentProcessInfo info;
+        info.processId = pi.dwProcessId;
+        info.sessionId = sessionId;
+        info.hProcess = pi.hProcess;  // 不关闭句柄，留着后面终止
+        AgentArray_Add(&self->agentProcesses, &info);
+        LeaveCriticalSection(&self->csProcessList);
+
+        CloseHandle(pi.hThread);  // 线程句柄可以关闭
+    }
+    else {
+        DWORD err = GetLastError();
+        sprintf_s(buf, sizeof(buf), "CreateProcessAsUser failed: %d", (int)err);
+        ServerMonitor_WriteLog(buf);
+
+        // 提供更详细的错误信息
+        if (err == ERROR_FILE_NOT_FOUND) {
+            ServerMonitor_WriteLog("ERROR: Executable not found");
+        }
+        else if (err == ERROR_ACCESS_DENIED) {
+            ServerMonitor_WriteLog("ERROR: Access denied - service may not have sufficient privileges");
+        }
+        else if (err == 1314) {
+            ServerMonitor_WriteLog("ERROR: Service does not have SE_INCREASE_QUOTA privilege");
+        }
+    }
+
+    CloseHandle(hDupToken);
+    CloseHandle(hToken);
+
+    return result;
+}

server/2015Remote/ServerSessionMonitor.h

@@ -0,0 +1,51 @@
+#ifndef SERVER_SESSION_MONITOR_H
+#define SERVER_SESSION_MONITOR_H
+
+#include <windows.h>
+#include <wtsapi32.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#pragma comment(lib, "wtsapi32.lib")
+
+// GUI进程信息
+typedef struct ServerAgentProcessInfo {
+    DWORD processId;
+    DWORD sessionId;
+    HANDLE hProcess;
+} ServerAgentProcessInfo;
+
+// GUI进程数组（动态数组）
+typedef struct ServerAgentProcessArray {
+    ServerAgentProcessInfo* items;
+    size_t count;
+    size_t capacity;
+} ServerAgentProcessArray;
+
+// 会话监控器结构
+typedef struct ServerSessionMonitor {
+    HANDLE monitorThread;
+    BOOL running;
+    CRITICAL_SECTION csProcessList;
+    ServerAgentProcessArray agentProcesses;
+} ServerSessionMonitor;
+
+// 初始化会话监控器
+void ServerSessionMonitor_Init(ServerSessionMonitor* self);
+
+// 清理会话监控器资源
+void ServerSessionMonitor_Cleanup(ServerSessionMonitor* self);
+
+// 启动会话监控
+BOOL ServerSessionMonitor_Start(ServerSessionMonitor* self);
+
+// 停止会话监控
+void ServerSessionMonitor_Stop(ServerSessionMonitor* self);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* SERVER_SESSION_MONITOR_H */