How to force SysWOW64 for 32-bit DLL

Code: [Select]

%CapiScriptArch%=x86

[Process]
Arch,x86
   .
   .
   .
Require_FileQ,advpack.dll
Puts advpack.dll in System32, not SysWow64. How do I get what  ineed?

as written here: Require_FileQ http://theoven.org/index.php?topic=43.0

Set,%PluginArch%,x86
Require_FileQ,clbcatq.dll


following your example

%PluginArch%=x86

[Process]
Arch,x86
   .
   .
   .
Require_FileQ,advpack.dll

Still having problems. I can't run Process Monitor in Win8.1SE because fltlib.dll is copied in system32 not syswow64.

Code: [Select]

[Variables]
%ProgramFolder%=Sysinternals_Suite
%ProgramExe%=
%Project_Type%=
%PluginArch%=x86

[Process]
Arch,x86

...

[Variables]
%ProgramFolder%=Sysinternals_Suite
%ProgramExe%=
%Project_Type%=
%PluginArch%=x86

[Process]
Arch,x86


I am pretty sure you did something wrong,
 you should not use that way on Sysinternals_Suite anyway, I wrote above for your standalone plugin following the way you suggest ...
  personally, better not to use [Variables] for %PluginArch% .....
anyway,



On current
"Sysinternals Process Monitor"
and
"Sysinternals Suite"
plugins change this section:

 

Code: [Select]

[Add_fltmgr]
//to run procmon.exe on hostx64 both fltlib.dll required...
// Thanks, dera!
Require_File,drivers\fltmgr.sys
If,Not,ExistFile,%target_win%\fltlib.dll,Require_FileQ,fltlib.dll
//-
If,Not,%SourceArch%,Equal,x86,Begin
  If,%TargetWOW64%,Equal,x86,Begin
    Set,%PluginArch%,x86
    Require_FileQ,fltlib.dll
    Set,%PluginArch%,""
  End
End
//-
If,%CoreType%,Equal,NT5X,Run,%ScriptFile%,Add_fltmgr_NT5X

Let us know it is all ok now 

looking your log,
on KeePass 2.23
(KeePass 2.23) Unrecognized command: [RequirefileQ,mscoree.dll]
because there is no such command RequirefileQ

correct one is
Require_FileQ,mscoree.dll
http://theoven.org/index.php?topic=43.0


also on your Spybot.script , there is a warning for registry 0x7 ( ) , check with RegCPE see how it converts.. (maybe all ok maybe not, well in anyway it is not an important line)