HKLM and HKLM64

[rudi]

I just prooved on Win7-64, that when writing to HKLM[64]SoftwareMyTestKey, the following keys are accessed (ProcMon.exe):

1. using HKLM64

1.a - 32 bit compiled: HKLMSoftwareMyTestKey

1.b - 64 bit compiled: HKLMSoftwareMyTestKey

2.) using HKLM

2.a - 32 bit compiled: HKLMSoftwareWow6432NodeMyTestKey

2.b - 64 bit compiled: HKLMSoftwareMyTestKey

So when you are managing registry keys of a 32bit application (that will store it's values in "...Wow6432node...") , you will need to

• compile your script 32 bit, and

• use HKLM and *NOT* HKLM64

Regars, Rudi.

<edit: grammar>

Edited September 28, 2012 by rudi

[guinness]

Thank you rudi for the insight.

[legend]

if you use hklm and not hklm64, and compile it for 32 bit, it wont work a x64 bit os.

you have to use hklm64, and compile it for win32, and it will work for both

[JohnOne]

How certain are you about that because rudi has just stated otherwise and produced

his method and findings.

What are yours?

[rudi]

Hi.

I just prooved the results on a WinXP-32 box: It *ALWAYS* addresses HKLMSoftwareMyTestKey.

1. using HKLM64

1.a - 32 bit compiled: HKLMSoftwareMyTestKey

1.b - 64 bit compiled: <doesn't run on 32bit WinXP>

2.) using HKLM

2.a - 32 bit compiled: HKLMSoftwareMyTestKey

2.b - 64 bit compiled: <doesn't run on 32bit WinXP>

I *COMPILED* the scripts, and just right now double checked, that it's like I described in posting #21, this thread, on a Win7-64bit system.

the 4 compiles are available here: (I have no 32bit system at hand right now):

https://dl.dropbox.com/u/19989673/temp/hklm-64-32.zip

Use procmon.exe to see the results.

Regards, Rudi.

<edit>

Edited October 2, 2012 by rudi

[MariusN]

Thanks Adventurer....This cleared a lot of confusion for me :-)

Edited February 12, 2013 by MariusN