PUSH窗口工具可载入任意功能窗口

ProcessID ＝ 进程_名取ID (ProcessName)
AsmLoad ＝ { 200, 0, 0, 0, 104, 2, 0, 0, 128, 104, 0, 0, 0, 0, 104, 1, 0, 0, 0, 104, 0, 0, 0, 0, 104, 0, 0, 0, 0, 104, 0, 0, 0, 0, 104, 1, 0, 1, 0, 104, 2, 0, 1, 6, 104 } ＋ 到字节集 (WindowsID) ＋ { 104, 3, 0, 0, 0, 187 } ＋ 到字节集 (FunctionAddress) ＋ { 232, 8, 0, 0, 0, 129, 196, 40, 0, 0, 0, 201, 195, 141, 68, 36, 8, 129, 236, 12, 0, 0, 0, 80, 255, 116, 36, 20, 49, 192, 137, 68, 36, 8, 137, 68, 36, 12, 137, 68, 36, 16, 141, 84, 36, 8, 82, 255, 211, 139, 68, 36, 12, 139, 84, 36, 16, 139, 76, 36, 20, 129, 196, 24, 0, 0, 0, 194, 4, 0 }
CallAddress ＝ 内存_申请内存 (ProcessID, 取字节集长度 (AsmLoad))
调试输出 (取十六进制文本 (CallAddress))
.如果真 (CallAddress ＝ 0)
返回 (假)
.如果真结束
内存_写字节集 (ProcessID, CallAddress, AsmLoad)
线程_关闭句柄 (进程_远程调用线程 (ProcessID, CallAddress))
内存_释放 (ProcessID, CallAddress)

易语言程序堆栈地址不会变动，直接获取到了 窗口信息 和 窗口ID，最后写入汇编指令远程执行就可以了。