Add(MainForm,2953706,161,84)
{
}
Add(InlineCode,3935702,238,126)
{
 @Color=16777130
 WorkPoints=#7:doPause|8:doResume|
 DataPoints=#9:ProcessId|
 Code=#15:unit HiAsmUnit;|0:|9:interface|0:|29:uses Windows,kol,Share,Debug;|0:|4:type|28: THiAsmClass = class(TDebug)|10:   private|0:|9:   public|26:     ProcessId: THI_Event;|52:     procedure doPause(var _Data:TData; Index:word);|53:     procedure doResume(var _Data:TData; Index:word);|5: end;|0:|0:|14:implementation|0:|5:const|22:  NTDLL = 'ntdll.dll';|33:  PROCESS_SUSPEND_RESUME = $0800;|26:  SE_DEBUG_PRIVILEGE = 20;|1: |74:function NtSuspendProcess(pid: THandle): HRESULT; stdcall; external NTDLL;|73:function NtResumeProcess(pid: THandle): HRESULT; stdcall; external NTDLL;|80:function RtlAdjustPrivilege(Privilege: ULONG; Enable: BOOL; CurrentThread: BOOL;|58:  out OldPrivilege: BOOL): ULONG; stdcall; external NTDLL;|1: |46:procedure Pause(Flag: Boolean; PID: Cardinal);|3:var|20:  hProcess: THandle;|5:begin|62:  hProcess := OpenProcess(PROCESS_SUSPEND_RESUME, False, PID);|5:  try|16:    if Flag then|32:      NtSuspendProcess(hProcess)|8:    else|32:      NtResumeProcess(hProcess);|9:  finally|26:    CloseHandle(hProcess);|6:  end;|4:end;|0:|30:procedure THiAsmClass.doPause;|5:begin|43:Pause(True, ReadInteger(_Data, ProcessId));|4:end;|0:|31:procedure THiAsmClass.doResume;|5:begin|44:Pause(False, ReadInteger(_Data, ProcessId));|4:end;|0:|4:end.|
 link(ProcessID,12368957:Text,[])
}
Add(Edit,12368957,238,77)
{
 Left=15
 Top=10
}
Add(Button,7318487,161,126)
{
 Left=20
 Top=50
 link(onClick,3935702:doPause,[])
}
Add(Button,7535854,161,161)
{
 Left=85
 Top=50
 link(onClick,3935702:doResume,[(215,167)(215,139)])
}