关掉64位系统中32位程序的目录重定向

在64位Windows系统中运行的32位程序会被系统欺骗.

例如windows\system32的目录实际是windows\syswow64目录的映射.

program files实际是program files(x86)的映射.

注册表的hkey_local_machine\software实际是hkey_local_machine\software\wow6432node子键的映射.

那么如何访问到真正的64位程序的目录和注册表呢?

关掉目录重定向即可.

关闭文件的重定向

var
 OldWow64RedirectionValue: LongBool;

function DisableWowRedirection: Boolean;
 type
 TWow64DisableWow64FsRedirection = function(var Wow64FsEnableRedirection
 : LongBool): LongBool; StdCall;

var
 hHandle: THandle;
 Wow64DisableWow64FsRedirection: TWow64DisableWow64FsRedirection;

begin
 Result := true;

try
 hHandle := GetModuleHandle('kernel32.dll');
 @Wow64DisableWow64FsRedirection := GetProcAddress(hHandle,
 'Wow64DisableWow64FsRedirection');

if ((hHandle <> 0) and (@Wow64DisableWow64FsRedirection <> nil)) then
 Wow64DisableWow64FsRedirection(OldWow64RedirectionValue);
 except
 Result := False;
 end;
 end;

function RevertWowRedirection: Boolean;
 type
 TWow64RevertWow64FsRedirection = function(var Wow64RevertWow64FsRedirection
 : LongBool): LongBool; StdCall;

var
 hHandle: THandle;
 Wow64RevertWow64FsRedirection: TWow64RevertWow64FsRedirection;
 begin
 Result := true;
 try
 hHandle := GetModuleHandle('kernel32.dll');
 @Wow64RevertWow64FsRedirection := GetProcAddress(hHandle,
 'Wow64RevertWow64FsRedirection');

if ((hHandle <> 0) and (@Wow64RevertWow64FsRedirection <> nil)) then
 Wow64RevertWow64FsRedirection(OldWow64RedirectionValue);
 except
 Result := False;
 end;
 end;

注册表就很简单了.

var
  r: TRegistry;
begin

  r := TRegistry.Create;
  r.RootKey := HKEY_LOCAL_MACHINE;
  r.Access := r.Access or KEY_WOW64_64KEY; //注意这一行.
  if r.OpenKey('SOFTWARE\abc', true) then
  begin
    r.WriteString('test', 'test');
  end;
  r.Free;

end;