• 欢迎访问搞代码网站,推荐使用最新版火狐浏览器和Chrome浏览器访问本网站!
  • 如果您觉得本站非常有看点,那么赶紧使用Ctrl+D 收藏搞代码吧

Accessing 64 bit registry from a 32 bit process

mysql 搞代码 4年前 (2022-01-09) 16次浏览 已收录 0个评论

As you may know, Windows is virtualizing some parts of the registry under 64 bit. So if you try to open, for example, this key : “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\90″, from a 32 bit C# application running on a 6

As you may know, Windows is virtualizing some parts of the registry under 64 bit.

So if you try to open, for example, this key : “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\90″, from a 32 bit C# application running on a 64 bit system, you will be redirected to : “HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Microsoft SQL Server\90″

Why ? Because Windows uses the Wow6432Node registry entry to present a separate view of HKEY_LOCAL_MACHINE\SOFTWARE for 32 bit applications that runs on a 64 bit systems.

If you want to explicitly open the 64 bit view of the registry, here is what you have to perform :

You are using VS 2010 and version 4.x of the .NET framework

It’s really simple, all you need to do is, instead of doing :

//Will redirect you to the 32 bit view

RegistryKey sqlsrvKey = Registry.LocalMachine.OpenSubKey(@"SOFTWARE\Microsoft\Microsoft SQL Server\90");

do the following :

RegistryKey localMachineX64View = RegistryKey.OpenBaseKey(RegistryHive.LocalMachine, RegistryView.Registry64);

RegistryKey sqlsrvKey = localMachineX64View.OpenSubKey(@"SOFTWARE\Microsoft\Microsoft SQL Server\90");

Prior versions of the .NET framework

For the prior versions of the framework, we have to use P/Invoke and call the function RegOpenKeyExW with parameter KEY_WOW64_64KEY

enumRegWow64Options

{

None = 0,

KEY_WOW64_64KEY = 0x0100,

KEY_WOW64_32KEY = 0x0200

}

enumRegistryRights

{

ReadKey = 131097,

WriteKey = 131078

}

///

/// Open a registry key using the Wow64 node instead of the default 32-bit node.

///

/// Parent key to the key to be opened.

/// Name of the key to be opened

/// Whether or not this key is writable

/// 32-bit node or 64-bit node

///

staticRegistryKey _openSubKey(RegistryKey parentKey,string subKeyName, bool writable, RegWow64Options opt

本文来源gao!%daima.com搞$代*!码9网(

ions)

{

//Sanity check

if(parentKey == null|| _getRegistryKeyHandle(parentKey) == IntPtr.Zero)

{

returnnull;

}

//Set rights

intrights = (int)RegistryRights.ReadKey;

if(writable)

rights = (int)RegistryRights.WriteKey;

//Call the native function >.<

intsubKeyHandle, result = RegOpenKeyEx(_getRegistryKeyHandle(parentKey), subKeyName, 0, rights | (int)options,out subKeyHandle);

//If we errored, return null

if(result != 0)

{

returnnull;

}

//Get the key represented by the pointer returned by RegOpenKeyEx

RegistryKey subKey = _pointerToRegistryKey((IntPtr)subKeyHandle, writable,false);

returnsubKey;

}

///

/// Get a pointer to a registry key.

///

/// Registry key to obtain the pointer of.

/// Pointer to the given registry key.

staticIntPtr _getRegistryKeyHandle(RegistryKey registryKey)

{

//Get the type of the RegistryKey

Type registryKeyType =typeof(RegistryKey);

//Get the FieldInfo of the 'hkey' member of RegistryKey

System.Reflection.FieldInfo fieldInfo =

registryKeyType.GetField("hkey", System.Reflection.BindingFlags.NonPublic | System.Reflection.BindingFlags.Instance);

//Get the handle held by hkey

SafeHandle handle = (SafeHandle)fieldInfo.GetValue(registryKey);

//Get the unsafe handle

IntPtr dangerousHandle = handle.DangerousGetHandle();

returndangerousHandle;

}

///

/// Get a registry key from a pointer.

///

/// Pointer to the registry key

/// Whether or not the key is writable.

/// Whether or not we own the handle.

/// Registry key pointed to by the given pointer.

staticRegistryKey _pointerToRegistryKey(IntPtr hKey,bool writable, bool ownsHandle)

{

//Get the BindingFlags for private contructors

System.Reflection.BindingFlags privateConstructors = System.Reflection.BindingFlags.Instance | System.Reflection.BindingFlags.NonPublic;

//Get the Type for the SafeRegistryHandle

Type safeRegistryHandleType =typeof(Microsoft.Win32.SafeHandles.SafeHandleZeroOrMinusOneIsInvalid).Assembly.GetType("Microsoft.Win32.SafeHandles.SafeRegistryHandle");

//Get the array of types matching the args of the ctor we want

Type[] safeRegistryHandleCtorTypes =new Type[] { typeof(IntPtr),typeof(bool) };

//Get the constructorinfo for our object

System.Reflection.ConstructorInfo safeRegistryHandleCtorInfo = safeRegistryHandleType.GetConstructor(

privateConstructors,null, safeRegistryHandleCtorTypes,null);

//Invoke the constructor, getting us a SafeRegistryHandle

Object safeHandle = safeRegistryHandleCtorInfo.Invoke(newObject[] { hKey, ownsHandle });

//Get the type of a RegistryKey

Type registryKeyType =typeof(RegistryKey);

//Get the array of types matching the args of the ctor we want

Type[] registryKeyConstructorTypes =new Type[] { safeRegistryHandleType, typeof(bool) };

//Get the constructorinfo for our object

System.Reflection.ConstructorInfo registryKeyCtorInfo = registryKeyType.GetConstructor(

privateConstructors,null, registryKeyConstructorTypes,null);

//Invoke the constructor, getting us a RegistryKey

RegistryKey resultKey = (RegistryKey)registryKeyCtorInfo.Invoke(newObject[] { safeHandle, writable });

//return the resulting key

returnresultKey;

}

[DllImport("advapi32.dll", CharSet = CharSet.Auto)]

publicstatic extern int RegOpenKeyEx(IntPtr hKey, stringsubKey, intulOptions, intsamDesired, outint phkResult);

Then we can open our registry key like this :

RegistryKey sqlsrvKey = _openSubKey(Registry.LocalMachine,@"SOFTWARE\Microsoft\Microsoft SQL Server\90",false, RegWow64Options.KEY_WOW64_64KEY);

As you can see, the framework 4 make our life easier.

Referenced from: http://dotnetgalactics.wordpress.com/2010/05/10/accessing-64-bit-registry-from-a-32-bit-process/


搞代码网(gaodaima.com)提供的所有资源部分来自互联网,如果有侵犯您的版权或其他权益,请说明详细缘由并提供版权或权益证明然后发送到邮箱[email protected],我们会在看到邮件的第一时间内为您处理,或直接联系QQ:872152909。本网站采用BY-NC-SA协议进行授权
转载请注明原文链接:Accessing 64 bit registry from a 32 bit process

喜欢 (0)
[搞代码]
分享 (0)
发表我的评论
取消评论

表情 贴图 加粗 删除线 居中 斜体 签到

Hi,您需要填写昵称和邮箱!

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址