64-Bit Commands

Accessing 64-bit Registry Values

Five 64-bit registry commands and one 64-bit parameter are available in agent procedures. 64-bit Windows isolates registry usage by 32-bit applications by providing a separate logical view of the registry. The redirection to the separate logical view is enabled automatically and is transparent for the following registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE
HKEY_USERS\*\SOFTWARE\Classes
HKEY_USERS\*_Classes

Since the Kaseya agent is a 32-bit application, you must use the following commands and parameter to access the registry data that are stored in the above keys by the 64-bit applications.

IF Commands

get64BitRegistryValue()
has64bitRegistryKey()

STEP Commands

delete64BitRegistryValue()
delete64BitRegistryKey()
set64BitRegistryValue()
64-bit Registry Value parameter in the getVariable() command

Specifying 64-bit Paths in File Commands

The following commands...

deleteFile()
writeFile()
executeFile()
renameLockedFile()
getFile()
get-variable() File Content parameter

... can specify 64-bit directories using the following variables:

Use This Environment Variable	To Target This Directory
`%windir%\sysnative`	`<drive>:\Windows\System32`
`%ProgramW6432%`	`<drive>:\Program Files`
`%CommonProgramW6432%`	`<drive>:\Program Files\Common Files`

For compatibility reasons, Microsoft has placed 64-bit system files in the \Windows\system32 directory and 32-bit system files in the \Windows\SysWOW64 directory. Similarly, 64-bit application files are installed to the \Program Files and 32-bit application files are installed to the \Program Files (x86) folder. Since the Kaseya agent is a 32-bit application, when a file path containing \Windows\system32 or \Program Files is specified on a 64-bit machine, the file access is automatically redirected to the \Windows\SysWOW64 or \Program Files (x86) folders. To access files in \Windows\system32 and \Program Files folders, use these environment variables when specifying parameters for these file commands.

In Directory Path Commands

The getDirectoryPathFromRegistry() command—and any subsequent ...In Directory Path command—cannot be used to access files in the \Program Files and \Windows\System32 directories on a target 64-bit machine. These commands can still access 32-bit or 64-bit files in any other folder.

Identifying 64-bit Machines

64-bit machine IDs typically display a x64 in the Version column of audit pages.