[HILFE] mit VB Suspenden/Resumen

[[PROTOTYPE2]]

 Spoiler

Public Class Form1
Private prName As Process
Private szDLLName As String
Private dwProcessID As Long = 0
Private dwStartAddr As Long
Private dwBuffer As Long
<Flags()> _
Public Enum ThreadAccess As Integer
TERMINATE = (&H1)
SUSPEND_RESUME = (&H2)
GET_CONTEXT = (&H8)
SET_CONTEXT = (&H10)
SET_INFORMATION = (&H20)
QUERY_INFORMATION = (&H40)
SET_THREAD_TOKEN = (&H80)
IMPERSONATE = (&H100)
DIRECT_IMPERSONATION = (&H200)
End Enum
Private Declare Function OpenThread Lib "kernel32.dll" (ByVal dwDesiredAccess As ThreadAccess, ByVal bInheritHandle As Boolean, ByVal dwThreadId As UInteger) As IntPtr
Private Declare Function SuspendThread Lib "kernel32.dll" (ByVal hThread As IntPtr) As UInteger
Private Declare Function ResumeThread Lib "kernel32.dll" (ByVal hThread As IntPtr) As UInteger
Private Declare Function KillThread Lib "kernel32.dll" (ByVal hThread As IntPtr) As UInteger
Private Declare Function CloseHandle Lib "kernel32.dll" (ByVal hHandle As IntPtr) As Boolean
Private Sub SuspendProcess(ByVal process As System.Diagnostics.Process)
For Each t As ProcessThread In process.Threads
Dim th As IntPtr
th = OpenThread(ThreadAccess.SUSPEND_RESUME, False, t.Id)
If th <> IntPtr.Zero Then
SuspendThread(th)
CloseHandle(th)
End If
Next
End Sub
Private Sub ResumeProcess(ByVal process As System.Diagnostics.Process)
For Each t As ProcessThread In process.Threads
Dim th As IntPtr
th = OpenThread(ThreadAccess.SUSPEND_RESUME, False, t.Id)
If th <> IntPtr.Zero Then
ResumeThread(th)
CloseHandle(th)
End If
Next
End Sub
Private Sub KillProcess(ByVal process As System.Diagnostics.Process)
For Each t As ProcessThread In process.Threads
Dim th As IntPtr
th = OpenThread(ThreadAccess.TERMINATE, False, t.Id)
If th <> IntPtr.Zero Then
KillThread(th)
CloseHandle(th)
End If
Next
End Sub
Private Sub Button4_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button4.Click
Me.Close()
End Sub

Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
Name = "HGWC"
Name = "XTrap.xt"
Name = "Aegis"
Name = "Aegis64"
Name = "S4Client"
For Each HGWC In Process.GetProcessesByName(Name)
HGWC.Kill()
Next
For Each XTrap In Process.GetProcessesByName(Name)
XTrap.Kill()
Next
For Each Aegis In Process.GetProcessesByName(Name)
Aegis.Kill()
Next
For Each Aegis64 In Process.GetProcessesByName(Name)
Aegis64.Kill()
Next
For Each S4Client In Process.GetProcessesByName(Name)
S4Client.Kill()
Next
End Sub

Private Sub Button2_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button2.Click
Name = "HGWC"
Name = "XTrap.xt"
Name = "Aegis"
Name = "Aegis64"
Name = "S4Client"
For Each HGWC In Process.GetProcessesByName(Name)
SuspendThread("HGWC")
Next
For Each XTrap In Process.GetProcessesByName(Name)
SuspendThread("XTrap.xt")
Next
For Each Aegis In Process.GetProcessesByName(Name)
SuspendThread("Aegis")
Next
For Each Aegis64 In Process.GetProcessesByName(Name)
SuspendThread("Aegis64")
Next
For Each S4Client In Process.GetProcessesByName(Name)
SuspendThread("S4Client")
Next
End Sub

Private Sub Button3_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button3.Click
Name = "HGWC"
Name = "XTrap.xt"
Name = "Aegis"
Name = "Aegis64"
Name = "S4Client"
For Each HGWC In Process.GetProcessesByName(Name)
ResumeThread("HGWC")
Next
For Each XTrap In Process.GetProcessesByName(Name)
ResumeThread("XTrap.xt")
Next
For Each Aegis In Process.GetProcessesByName(Name)
ResumeThread("Aegis")
Next
For Each Aegis64 In Process.GetProcessesByName(Name)
ResumeThread("Aegis64")
Next
For Each S4Client In Process.GetProcessesByName(Name)
ResumeThread("S4Client")
Next
End Sub

Private Sub Form1_FormClosing(ByVal sender As Object, ByVal e As System.Windows.Forms.FormClosingEventArgs) Handles Me.FormClosing
End
End Sub

Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
Timer1.Enabled = True
End Sub

Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick
If Process.GetProcessesByName("S4Client").Length = 1 Then
Label6.ForeColor = Color.Green
Label6.Text = "Running"
Else
Label6.ForeColor = Color.Red
Label6.Text = "Not Running"
End If
If Process.GetProcessesByName("XTrap.xt").Length = 1 Then
Label7.ForeColor = Color.Green
Label7.Text = "Running"
Else
Label7.ForeColor = Color.Red
Label7.Text = "Not Running"
End If
If Process.GetProcessesByName("Aegis").Length = 1 Then
Label8.ForeColor = Color.Green
Label8.Text = "Running"
Else
Label8.ForeColor = Color.Red
Label8.Text = "Not Running"
End If
If Process.GetProcessesByName("Aegis64").Length = 1 Then
Label9.ForeColor = Color.Green
Label9.Text = "Running"
Else
Label9.ForeColor = Color.Red
Label9.Text = "Not Running"
End If
If Process.GetProcessesByName("HGWC").Length = 1 Then
Label10.ForeColor = Color.Green
Label10.Text = "Running"
Else
Label10.ForeColor = Color.Red
Label10.Text = "Not Running"
End If
End Sub
End Class

wo liegt da der fehler?

Closen, Killen, und die labels ändern

geht alles wunderbar... das problem ist aber das Suspenden(pausieren)/Resumen(starten)

[-AmA-]

Könnte sein das du keine Debug Rechte hast?
Sieh dir dazu diese Funktion an:
advapi32.dll\LookupPrivilegeValueA
oder
advapi32.dll\LookupPrivilegeValue

Folgende Funktionen der ntdll könntest du brauchen:

ntdll\NtSuspendProcess
ntdll\NtResumeProcess
ntdll\NtTerminateProcess

Übergib jeweils das Handle des gewünschten Prozesses

[bestora]

Haste auch alle Includes beachtet?

oder du benutzt visual basic 2010.....

[他媽的]

er benutz 2010 ;O wie ich

[Al Kappaccino]

Es liegt nicht zwangsweise an VB bzw. der API. Du willst nur mal wieder cool sein und S4 suspenden und hast anscheinend immer noch nicht begriffen, dass du an Aegis nicht vorbeikommst ohne es zu hooken. Da nützen dir deine kopierten Funktionen alle nichts

[-AmA-]

Originally Posted by JakeFrost77

Es liegt nicht zwangsweise an VB bzw. der API. Du willst nur mal wieder cool sein und S4 suspenden und hast anscheinend immer noch nicht begriffen, dass du an Aegis nicht vorbeikommst ohne es zu hooken. Da nützen dir deine kopierten Funktionen alle nichts

Oha... bin da nicht ganz im Bild aber vorher konnte man doch einfach sämtliche Thread's beenden und dann war Aegis weg...

Zum Glück spiel ich nicht mehr S4