Help get debug privilage from windows vista.

BlitzPlus Forums/BlitzPlus Programming/Help get debug privilage from windows vista.

Wings

(Posted 2010) [#1]

It whold be nice to have run as debug privilage. as the process i trying to debyg has denied my rights to read from memmory.

This is a try to set debug privilage within a blitz basic program.
i also running application as admin but it always fails.

first i got Error code is: 1313 A Specified privilage dose Not exist
EDIT:
Now iam getting a 997. verlapped I/O operation is in progress.
EDIT2: Caseclosed !
Now finaly this works.. i uploaded the code here.. code below is working.
and i leave it here as a referens for others like me..

Sollution after disable UAEC REBOT VISTA !!

Have any one manage to set run as debug....

;the code below is conversion from autoit code.


;C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f

    Const MY_TOKEN_ADJUST_PRIVILEGES = $0020
    Const MY_TOKEN_QUERY = $0008
    Const MY_SE_PRIVILEGE_ENABLED = $0002


;Const TOKEN_ADJUST_PRIVILEGES = $0020
;      Const TOKEN_QUERY = $0008
      Const ANYSIZE_ARRAY = 1
      Const PROCESS_ALL_ACCESS = $1F0FFF
      Const SE_DEBUG_NAME$ = "SeDebugPrivilege" ;"SeShutdownPrivilege" ;
      Const SE_PRIVILEGE_ENABLED = $2


SetPrivilege(SE_DEBUG_NAME,1)



Function SetPrivilege( privilege$, bEnable )



    Local hToken, SP_auxret, SP_ret, hCurrProcess, nTokens, nTokenIndex, priv$
    nTokens = 1

	Print "Creates bank LUDI"
	LUID = CreateBank(4);("dword;int")

	Print "GetCurentProcess()"
       api_SetLastError(0) ;Reset last error..
	hCurrProcess = api_GetCurrentProcess()
	err= (api_GetLastError() )
	Print "error="+err
	Print "Api_Get_CurrentProcess() returned "+Hex$(hCurrProcess)

	Print "Run OpenProcessToken "+Hex$(hCurrProcess)+" "+hCurrProcess
	
	bank1=CreateBank(4)
	PokeInt bank1,0,0 ; A bank with a null sweetnes.
	
	priv=MY_TOKEN_ADJUST_PRIVILEGES Or MY_TOKEN_QUERY
	
	TOK=api_OpenProcessToken (hCurrProcess,priv ,bank1)
	err= (api_GetLastError() )
	If err=998 Then RuntimeError "Invalid access To memory location. code: "+err 
	
	If TOK=True Then
		Print "OpenProcessToken success !!!"
	Else
		RuntimeError "Failed here: api_OpenProcessToken (hCurrProcess,priv ,bank1) error="+err
	End If
	Delay 5000

	hToken = TOK
	nTokenIndex = 1
	While nTokenIndex <= nTokens
	
		priv$ = privilege$
		tmpbnk=CreateBank(256)
		For i=1 To Len(priv$)
			PokeByte tmpbnk,Asc(Mid$(priv$,i,1)),i ; ()
		Next
		
		
		voidstr$=""
		Print "run api_LookupPrivilegeValue  "+Chr$(34)+SE_DEBUG_NAME$+Chr$(34)
		api_SetLastError 0
		ret=api_LookupPrivilegeValue (voidstr$,SE_DEBUG_NAME,LUID)
		
		If Not ret ; if this fails.
			err=api_GetLastError ()
			If err=1313 RuntimeError "api_LookupPrivilegeValue (voidstr$,"+Chr$(34)+SE_DEBUG_NAME$+Chr$(34)+",LUID) Code:"+err+Chr$(13)+"Explanation"+Chr$(13)+" ERROR_NO_SUCH_PRIVILEGE 1313 (0x521)"+Chr$(13)+"A specified privilege does Not exist."
			If err=997 Then RuntimeError err+Chr$(13)+"Overlapped I/O operation is in progress."
			If err>0 Then RuntimeError err
		End If
		
		Print ret
		Delay 1000
	
		Print "waits 1 sec..."
		Delay 1000
	Wend
	


	Delay 5000

xlsior

(Posted 2010) [#2]

You probably need to disable UAC first...

Wings

(Posted 2010) [#3]

yes i did... disable user UAEC and also i run as administrator...

;C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f

But forgot to rebot vista !!

But instead i am getting 997 errors
"Oerlapped I/O operation is in progress."

Wings

(Posted 2010) [#4]

Case Closed