如何绕过注册表反射 (Wow6432Node)? [英] How to bypass registry reflection (Wow6432Node)?

问题描述

我想从注册表中提取某些信息，但由于我的脚本在 32 位引擎中运行，因此它只会从 Wow6432Node 中提取某些键的信息.有没有办法绕过注册表反射并从两者中读取

I want to extract certain information from the registry but since my script is running inside a 32-bit engine, it will extract information only from the Wow6432Node for certain keys. Is there a way to bypass registry reflection and read from both

HKEY_LOCAL_MACHINESOFTWAREMicrosoft

HKEY_LOCAL_MACHINESOFTWAREMicrosoft

和

HKEY_LOCAL_MACHINESOFTWAREWow6432NodeMicrosoft

HKEY_LOCAL_MACHINESOFTWAREWow6432NodeMicrosoft

?

我只想从键中读取值，而不是更新它.

I just want to read the values from the keys, not update it.

谢谢.

推荐答案

您可以通过传递 不同的标志 RegOpenKeyEx/RegCreateKeyEx 函数:KEY_WOW64_64KEY 和 KEY_WOW64_32KEY

You can read and write specifically to the 32 or 64 bit views of the registry by passing different flags to the RegOpenKeyEx/RegCreateKeyEx functions: KEY_WOW64_64KEY and KEY_WOW64_32KEY

这篇关于如何绕过注册表反射 (Wow6432Node)?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！