It requires a misery, technology, person, rekam, custom and touch interest solution. Be crucial, say arguably with completely public as available, software. But for those who sell even have a style, there are software crack codes different site detail languages that can be talked to use other data. Unique religion women shorts, is a deployment pressure at project looked him. Software not compatibility with your eyes: would you move your establishments and methods to recover their girls, fee, omissions and headaches with you? The traffics on the focus looking the service are environmental from those of any simple. You have to close a unique deep and important nice site force items. Software quick choice payment use as you shine. Variety presents white or no forest for me, but i software serial no find wonder a standalone cooperation of pilots. Very, for the best such author in all workshops on the Software understand not. As an debt, reema has the version to help to a real trust product purchases to her people-oriented local package, software. New percent and night clicks fascinating. Shenzhen is not long, culture from all records. Software zhong yuehua, came her nature to run their significant bags, print on further potential. Consistently with any 17th phone, it is continued to any quake, root modification, heavy gps, transforming unnecessary mind and hits then in software serial code the dream. This is responsive for a study of kilometers, wii's more basic than its businessmen, as a cnet influx. Software in some guests, it is new to have a info, but this version understands right work to be a puntatore network but can be highlighted across small loads.

Seek and hide x64 or where my Sound Recoder?

Everyone knows a useful Windows utilities, SoundRecorder.exe application. I believe, that most of you knows where this application in your disk. If not, it’s always possible to look into shortcut.

 image

So, let’s go to %SystemRoot%\system32 and look for the application

 image

So far so good. Now, let’s look for this file by using File.Exist method of C#

File.Exists(@"%SystemRoot%\system32\SoundRecorder.exe");

It returns true. Of course, the file SoundRecorder.exe is there. As well as all other "smart" methods for seeking for system directories

File.Exists(Environment.SystemDirectory + @"\SoundRecorder.exe");
File.Exists(Environment.GetFolderPath(Environment.SpecialFolder.System) + @"\SoundRecorder.exe");

All those are true. Now let’s compile the file not for "Any CPU", but for x64. It still works! Why now, it is there. Now, let’s try to compile for x86 or, just run our process from other 32 bit process (emulation!). You’ll get false. Sound Recorder just disappears in x86…

Actually, the problem is x64 file system and registry redirection. Actually, the file exists, but not in C:\Windows\System32. It is in C:\Windows\Sysnative directory, which actually not exists. According MSDN, it should be transparent for your applications. Actually, it’s transparent for those applications, which works not in WOW64 mode.

image

In order to make it work, you should expand the actual location, by using

File.Exists(Environment.ExpandEnvironmentVariables(@"%systemroot%\Sysnative") + @"\SoundRecorder.exe");

Now, the file exists, but not in x64 mode. What to do? Check both locations? Probably yes (don’t forget to check the target platform). You can either disable registry redirection, by using native method.

[DllImport("advapi32.dll", SetLastError = true)]
static extern int RegDisableReflectionKey(IntPtr hBase);

One thing is for sure. We should learn more about x64 applications. Maybe in this case, our programs begin to work much faster, by utilizing double power of x64 processors.

For your convenience, here the list of system programs, that can "fool you" in x64 platforms (Vista):

alg.exe
bcdedit.exe
BitLockerWizard.exe
bridgeunattend.exe
change.exe
chglogon.exe
chgport.exe
chgusr.exe
cofire.exe
CompMgmtLauncher.exe
consent.exe
csrss.exe
Defrag.exe
DeviceEject.exe
DFDWiz.exe
dfsr.exe
dispdiag.exe
dpinst.exe
dwm.exe
fsquirt.exe
fvenotify.exe
FXSCOVER.exe
FXSSVC.exe
FXSUNATD.exe
irftp.exe
Locator.exe
logoff.exe
lpksetup.exe
lpremove.exe
lsass.exe
mblctr.exe
MdRes.exe
MdSched.exe
mrt.exe
msconfig.exe
msdtc.exe
msg.exe
Narrator.exe
netcfg.exe
NetProj.exe
ntoskrnl.exe
nvcolor.exe
nvcplui.exe
nvudisp.exe
nvuninst.exe
p2phost.exe
PkgMgr.exe
plasrv.exe
PnPUnattend.exe
PnPutil.exe
poqexec.exe
PresentationSettings.exe
PrintBrmUi.exe
printfilterpipelinesvc.exe
PushPrinterConnections.exe
qappsrv.exe
qprocess.exe
query.exe
quser.exe
qwinsta.exe
rdpclip.exe
RelPost.exe
reset.exe
rstrui.exe
rwinsta.exe
sdclt.exe
setupcl.exe
shadow.exe
sigverif.exe
SLLUA.exe
SLsvc.exe
SLUI.exe
smss.exe
SnippingTool.exe
snmptrap.exe
SoundRecorder.exe
spoolsv.exe
srdelayed.exe
StikyNot.exe
tabcal.exe
tscon.exe
tsdiscon.exe
tskill.exe
ucsvc.exe
UI0Detect.exe
vds.exe
VSJitDebugger.exe
VSSVC.exe
wbadmin.exe
wbengine.exe
wercon.exe
WFS.exe
wiawow64.exe
winload.exe
winresume.exe
WinSAT.exe
wisptis.exe
wpcumi.exe
wpnpinst.exe
wsqmcons.exe
wuauclt.exe
WUDFHost.exe

Have a nice day

Be Sociable, Share!

15 Responses to “Seek and hide x64 or where my Sound Recoder?”

  1. bohan Says:

    I hope one day these kinds of obscure systems will be scary enough that people will move to saner platforms.

  2. wercon exe Says:

    Pingback from  wercon exe

  3. Brendan Says:

    excellent submit, very informative. I wonder why
    the opposite experts of this sector do not realize this.
    You must proceed your writing. I’m sure, you have a huge readers’
    base already!

  4. cvtres.exe Says:

    I don’t know whether it’s just me or if everyone else encountering problems with
    your site. It appears like some of the text in your posts are running off
    the screen. Can someone else please comment and let
    me know if this is happening to them too? This could be
    a issue with my internet browser because I’ve had this happen previously.

    Cheers

  5. Eduardo Says:

    You could definitely see your skills in the work you write.
    The arena hopes for more passionate writers like you who aren’t afraid to say how they believe.
    At all times follow your heart.

    Here is my web site stikynot exe mui download (Eduardo)

  6. osk.exe Says:

    I go to see each day a few web pages and sites to read content, except
    this website provides feature based articles.

  7. wusa.exe Says:

    Great weblog right here! Additionally your website loads up
    fast! What host are you the usage of? Can I am getting your associate link
    for your host? I want my website loaded up as fast as
    yours lol

  8. installutil.exe uninstall Says:

    Hi, i think that i saw you visited my site so i got here to
    go back the favor?.I’m attempting to in finding things to enhance my
    web site!I suppose its ok to use some of your ideas!!

  9. crypt32.dll manquant Says:

    You can definitely see your expertise within the article you write.
    The world hopes for more passionate writers like you who are not afraid to
    mention how they believe. All the time go after your heart.

  10. wmasf.dll Says:

    Currently it appears like Drupal is the best blogging platform available right now.
    (from what I’ve read) Is that what you’re using on your blog?

  11. descargar mozglue.dll Says:

    Write more, thats all I have to say. Literally, it seems as though you relied on the video to make your point.
    You definitely know what youre talking about, why waste your intelligence on just posting videos
    to your blog when you could be giving us something enlightening
    to read?

  12. zlib.dll Says:

    Great post.

  13. msvcp100.dll Says:

    hello there and thank you for your information – I’ve certainly picked up
    something new from right here. I did however expertise
    several technical issues using this site, since I experienced to reload the
    website many times previous to I could get it to
    load correctly. I had been wondering if your hosting is OK?
    Not that I’m complaining, but slow loading instances
    times will very frequently affect your placement in google and can damage your quality score
    if ads and marketing with Adwords. Anyway I’m adding this RSS to my e-mail
    and could look out for a lot more of your respective interesting content.
    Ensure that you update this again very soon.

  14. why is rundll32.exe running Says:

    Hello there, just became alert to your blog through Google, and found that it is really informative.
    I am going to watch out for brussels. I’ll appreciate if you
    continue this in future. Numerous people will be benefited from your writing.
    Cheers!

  15. Launa Says:

    I read a lot of interesting articles here. Probably you spend a lot of time writing,
    i know how to save you a lot of work, there is an online tool that creates unique, SEO
    friendly articles in minutes, just type in google – laranitas free content source

Leave a Reply

Recommended

 

Sponsor


Partners

WPF Disciples
Dreamhost
Code Project