易语言进程挂起源码

系统结构:ZwSuspendProcess,ZwResumeProcess,OpenProcess,CloseHandle,GetCurrentProcessId,

======窗口程序集1
           |  |
           |  |------ _按钮1_被单击
           |  |
           |  |------ _按钮2_被单击
           |  |
           |  |
======调用的Dll
           |  |
           |  |---[dll]------   ZwSuspendProcess
           |  |
           |  |---[dll]------   ZwResumeProcess
           |  |
           |  |---[dll]------   OpenProcess
           |  |
           |  |---[dll]------   CloseHandle
  ======窗口程序集1
           |  |
           |  |------ _时钟1_周期事件
           |  |
           |  |------ __启动窗口_创建完毕
           |  |
           |  |
======调用的Dll
           |  |
           |  |---[dll]------   GetCurrentProcessId

调用的DLL命令:

.DLL命令 ZwSuspendProcess, , "NTDLL.DLL", "ZwSuspendProcess", , 暂停
    .参数 进程句柄

.DLL命令 ZwResumeProcess, , "NTDLL.DLL", "ZwResumeProcess", , 恢复
    .参数 进程句柄

.DLL命令 OpenProcess, 整数型, , "OpenProcess", , 打开进程 获得进程句柄
    .参数 dwDesiredAccess, 整数型
    .参数 bInheritHandle, 整数型
    .参数 dwProcessId, 整数型

.DLL命令 CloseHandle, 整数型, , "CloseHandle"
    .参数 hObject, 整数型

调用的DLL命令:

.DLL命令 GetCurrentProcessId, 整数型, "kernel32.dll", "GetCurrentProcessId", , 取当前进程标识符_