Noob Question - OpenProcess under Vista and 7

[mmosoft]

Hello all.

I've got a feeling that I am going to take stone throws ^^.

I use my own bot since 3 months under XP, but I have just passed under Windows 7.
Since 7, it is impossible to make the OpenProcess function work.

I use those functions :

//On autorise la lecture de la mémorie sur le jeu
SetsPrivilege("SeDebugPrivilege", Vrai)

//On crée un ID avec tous les droits qui pointe vers le handle de WoW
nRes = API("user32", "GetWindowThreadProcessId", gnWOW_HANDLE, &gnWOW_ID)

//On ouvre l'ID avec tous les droits
gnWOW = API("kernel32", "OpenProcess", 0x1F0FFF, Faux, gnWOW_ID)

Under XP, OpenProcess always return a non zero Value
Under 7, the same function always return a 0 value :/.

I read all the MSDN lib and found this => Windows Server 2003 and Windows XP/2000: The size of the PROCESS_ALL_ACCESS flag increased on Windows Server 2008 and Windows Vista. If an application compiled for Windows Server 2008 and Windows Vista is run on Windows Server 2003 or Windows XP/2000, the PROCESS_ALL_ACCESS flag is too large and the function specifying this flag fails with ERROR_ACCESS_DENIED. To avoid this problem, specify the minimum set of access rights required for the operation. If PROCESS_ALL_ACCESS must be used, set _WIN32_WINNT to the minimum operating system targeted by your application (for example,
#define _WIN32_WINNT _WIN32_WINNT_WINXP
). For more information, see Using the Windows Headers.

Can someone give me the value of the PROCESS_ALL_ACCESS flag under 7 and Vista.
Under XP it's 0x1F0FFF but under 7 and Vista ???

Thx a lot and sorry for my Noobinesstitude ^^.

[ashleyww]

Run your bot as admin.

Do you still get this?

[mmosoft]

Yes, I forgot saying that I've put the exe as admin and Windows XP (sp3) compatible.

[ashleyww]

Urm... Not sure them mate...

Have you tried not using Windows XP (sp3) compatible?
Juts run it as admin...

[mmosoft]

Yes, I try this too.

[flukes1]

Try 0x1FFFFF.

(edited because I fail at adding)

[mmosoft]

0x1FFFFF don't work :/.

I don't know where is the problem.

I create the exe, and run it with admin rights and it doesn't work.

[maclone]

You should add that you're coding in WinDev

[Liwyn]

void SetDebugPrivileges()
{
    void* tokenHandle;
    OpenProcessToken(GetCurrentProcess(), TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &tokenHandle);
    TOKEN_PRIVILEGES privilegeToken;
    LookupPrivilegeValue(0, SE_DEBUG_NAME, &privilegeToken.Privileges[0].Luid);
    privilegeToken.PrivilegeCount = 1;
    privilegeToken.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
    AdjustTokenPrivileges(tokenHandle, 0, &privilegeToken, sizeof(TOKEN_PRIVILEGES), 0, 0);
    CloseHandle(tokenHandle);
}

If I understand your problem you dont have the rights to open the process (got the same rpoblem in 7) this function works for me to get the rights

[luciferc]

I dont have to any of that for my vs2010 proj.

In 64bit Win 7 Legit

[lanman92]

Am I missing something that you should still just use PROCESS_ALL_ACCESS as your value...? If it's set to what platform you want, the precompiler should pick what value to use. That's most likely not the problem.

[Cypher]

Stop ****ing using PROCESS_ALL_ACCESS. Just OR the flags you actually need together.

To inject a DLL you want this:
// Get a handle for the target process.
EnsureCloseHandle Process(OpenProcess(
PROCESS_QUERY_INFORMATION | // Required by Alpha
PROCESS_CREATE_THREAD | // For CreateRemoteThread
PROCESS_VM_OPERATION | // For VirtualAllocEx/VirtualFreeEx
PROCESS_VM_WRITE, // For WriteProcessMemory
FALSE, ProcID));

Ugh, I swear this has got to be the millionth time I've told people this on this forum.

[mmosoft]

OK.

After many and many trys, I finally found what the problem ...

And the problem is Windev ^^. How I'm surprised lol.

I use Windev 12 but there is a new Version : Windev 14.

I download it, recompiled the project and create the exe, and now it works fine.

Thx all for help. :wave:

[Cypher]

Cool story bro. You're still retarded for putting the flags in manually.

[mmosoft]

Bro, as U said !

Have U look the 1st post => gnWOW = API("kernel32", "OpenProcess", 0x1F0FFF, Faux, gnWOW_ID)

Why are U saying I'm retarded ? I'm not using PROCESS_ALL_ACCESS flag.

I don't know why U are always criticize us. Sorry about our stupidity.

And maybe one day somebody is going to create a bot with Windev, and he will be happy to find this post. I'm not telling my life / story ...