failed to inject with not CURRENT_PROCESS

zcecil · Post by **zcecil** » Sun Jan 16, 2005 4:22 am

hi,
I have a program written in BCB6 Pro and latest madcollection, running as localsystem, and failed to InjectLibrary with
(ALL_SESSIONS | SYSTEM_PROCESSES) & (!CURRENT_PROCESS).

However, InjectLibrary with (ALL_SESSIONS | SYSTEM_PROCESSES) works,
is this a bug of BCB?

PInvoke · Post by **PInvoke** » Sun Jan 16, 2005 4:35 am

In C++ isn't it &&, making that:

(ALL_SESSIONS | SYSTEM_PROCESSES) && (!CURRENT_PROCESS)

Post by **madshi** » Sun Jan 16, 2005 11:26 am

It should be "&". That's for bit wise operation, while "&&" is for logical operations.

zcecil, could you please send me a demo project with both sources and binary files? Thanks.

PInvoke · Post by **PInvoke** » Sun Jan 16, 2005 3:02 pm

Ahhhh, this is why I code with Delphi

zcecil · Post by **zcecil** » Mon Jan 17, 2005 3:33 am

Sent

Post by **madshi** » Mon Jan 17, 2005 8:03 pm

For whatever reason BCB calculates "!CURRENT_PROCESS -> 0". Don't ask my why. Strange enough "~((DWORD)CURRENT_PROCESS)" seems to work. But I don't really understand this. But well, after all I'm a Delphi programmer!

dcsoft · Post by **dcsoft** » Tue Jan 18, 2005 12:47 am

madshi wrote:For whatever reason BCB calculates "!CURRENT_PROCESS -> 0". Don't ask my why. Strange enough "~((DWORD)CURRENT_PROCESS)" seems to work. But I don't really understand this. But well, after all I'm a Delphi programmer!

The '!' is a logical NOT. CURRENT_PROCESS is 0x08, which is non-zero. Therefore, !CURRENT_PROCESS is zero.

The '~' is a bitwise NOT. That inverts all the bits, as you desire here.

C requires a good source-level debugger!

-- David

Post by **madshi** » Tue Jan 18, 2005 7:45 am

dcsoft wrote:The '!' is a logical NOT. CURRENT_PROCESS is 0x08, which is non-zero. Therefore, !CURRENT_PROCESS is zero.

Thanks for the explanation!

Oh, how I love Delphi.

PInvoke · Post by **PInvoke** » Tue Jan 18, 2005 8:40 am

Oh, how I love Delphi.

Ditto.

zcecil · Post by **zcecil** » Thu Jan 20, 2005 2:21 am

dcsoft wrote:
madshi wrote:For whatever reason BCB calculates "!CURRENT_PROCESS -> 0". Don't ask my why. Strange enough "~((DWORD)CURRENT_PROCESS)" seems to work. But I don't really understand this. But well, after all I'm a Delphi programmer!
The '!' is a logical NOT. CURRENT_PROCESS is 0x08, which is non-zero. Therefore, !CURRENT_PROCESS is zero.

The '~' is a bitwise NOT. That inverts all the bits, as you desire here.

C requires a good source-level debugger!

-- David

Oops, I forgot that!

Thanks.