python解析window快捷方式

python 解析.lnk文件,获取源文件地址的简单方法

http://stackoverflow.com/questions/397125/reading-the-target-of-a-lnk-file-in-python

点击(此处)折叠或打开

1. import struct
   
2. 
   
3. target = ''
   
4. 
   
5. try:
   
6.     with open(path, 'rb') as stream:
   
7.         content = stream.read()
   
8. 
   
9.         # skip first 20 bytes (HeaderSize and LinkCLSID)
   
10.         # read the LinkFlags structure (4 bytes)
    
11.         lflags = struct.unpack('I', content[0x14:0x18])[0]
    
12.         position = 0x18
    
13. 
    
14.         # if the HasLinkTargetIDList bit is set then skip the stored IDList
    
15.         # structure and header
    
16.         if (lflags & 0x01) == 1:
    
17.             position = struct.unpack('H', content[0x4C:0x4E])[0] + 0x4E
    
18. 
    
19.         last_pos = position
    
20.         position += 0x04
    
21. 
    
22.         # get how long the file information is (LinkInfoSize)
    
23.         length = struct.unpack('I', content[last_pos:position])[0]
    
24. 
    
25.         # skip 12 bytes (LinkInfoHeaderSize, LinkInfoFlags, and VolumeIDOffset)
    
26.         position += 0x0C
    
27. 
    
28.         # go to the LocalBasePath position
    
29.         lbpos = struct.unpack('I', content[position:position+0x04])[0]
    
30.         position = last_pos + lbpos
    
31. 
    
32.         # read the string at the given position of the determined length
    
33.         size= (length + last_pos) - position - 0x02
    
34.         temp = struct.unpack('c' * size, content[position:position+size])
    
35.         target = ''.join([chr(ord(a)) for a in temp])
    
36. except:
    
37.     # could not read the file
    
38.     pass
    
39. 
    
40. return target

可以正确获取Program Files下的文件路径

获取desktop下文件的时候会拆分为 用户目录   空格   相对目录

其他诸如或去扫雷.lnk估计也不行,但是大致可用了

顺别贴一个lnk文件结构
https://ithreats.files.wordpress.com/2009/05/lnk_the_windows_shortcut_file_format.pdf

看了下好像不太对得上, 不知道是不是我数错了偏移量,反正也懒得纠结了