{"id":262,"date":"2011-05-06T11:09:42","date_gmt":"2011-05-06T09:09:42","guid":{"rendered":"http:\/\/dev.flauschig.ch\/wordpress\/?p=262"},"modified":"2011-05-06T11:09:42","modified_gmt":"2011-05-06T09:09:42","slug":"the-windows-registry-in-6432-bit","status":"publish","type":"post","link":"http:\/\/dev.flauschig.ch\/wordpress\/?p=262","title":{"rendered":"The Windows Registry in 64\/32-bit"},"content":{"rendered":"<p>That one recently cost me a couple of hours and quite a bit of nerves to figure out: In a 64bit Windows, if a 32bit process accesses the Registry, it actually interacts with a DIFFERENT registry than a 64bit process. This means that your 32bit compiled program potentially reads and writes different registry keys than the same program compiled for 64bit! I&#8217;m sure you can imagine how this might result in seemingly strange behavior if you don&#8217;t know that. Windows Registry FTW, right?<\/p>\n<p>Since regedit.exe runs as a 64bit process, you can usually only see the 64bit registry, but what if you want to see\/change 32bit entries? It turns out you can do that if you know how this registry redirection works. In every node in the (64bit) registry there CAN be a child node with the name &#8220;WOW6432Node&#8221; that contains the 32bit entries that override\/amend the 64bit entries. The only WOW node that I could find in my registry was in HKLM\\SOFTWARE, but the concept works for every other part of the registry.<\/p>\n<p>Source:\u00a0<a href=\"http:\/\/msdn.microsoft.com\/en-us\/library\/aa384253%28v=vs.85%29.aspx\">http:\/\/msdn.microsoft.com\/en-us\/library\/aa384253%28v=vs.85%29.aspx<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>That one recently cost me a couple of hours and quite a bit of nerves to figure out: In a 64bit Windows, if a 32bit process accesses the Registry, it actually interacts with a DIFFERENT registry than a 64bit process. This means that your 32bit compiled program potentially reads and writes different registry keys than &hellip; <\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"entry","1":"post","2":"publish","3":"author-executor","4":"post-262","6":"format-standard","7":"category-uncategorized"},"acf":[],"views":1646,"_links":{"self":[{"href":"http:\/\/dev.flauschig.ch\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/262"}],"collection":[{"href":"http:\/\/dev.flauschig.ch\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/dev.flauschig.ch\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/dev.flauschig.ch\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"http:\/\/dev.flauschig.ch\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=262"}],"version-history":[{"count":0,"href":"http:\/\/dev.flauschig.ch\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/262\/revisions"}],"wp:attachment":[{"href":"http:\/\/dev.flauschig.ch\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=262"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/dev.flauschig.ch\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=262"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/dev.flauschig.ch\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}