64位系统上32位进程拷贝文件到System32目录时的重定向

64位系统上，32位进程拷贝文件到"System32"目录时，会被文件系统重定向到"SysWOW64"目录

要禁用这种重定向，需要用到下面2个API：

Wow64DisableWow64FsRedirection()

Wow64RevertWow64FsRedirection()
 
下面是微软的示例代码：

  #ifdef _WIN32_WINNT
  #undef _WIN32_WINNT
  #endif
  #define _WIN32_WINNT 0x0501
 
  #ifdef NTDDI_VERSION
  #undef NTDDI_VERSION
  #endif
  #define NTDDI_VERSION 0x05010000
 
  #include <Windows.h>
 
  void main()
  {
      HANDLE hFile = INVALID_HANDLE_VALUE;
      PVOID OldValue = NULL;
 
      //  Disable redirection immediately prior to the native API
 
      //  function call.
 
      if( Wow64DisableWow64FsRedirection(&OldValue) )
      {
          //  Any function calls in this block of code should be as concise
 
          //  and as simple as possible to avoid unintended results.
 
          hFile = CreateFile(TEXT("C:\\Windows\\System32\\Notepad.exe"),
              GENERIC_READ,
              FILE_SHARE_READ,
              NULL,
              OPEN_EXISTING,
              FILE_ATTRIBUTE_NORMAL,
              NULL);
 
          //  Immediately re-enable redirection. Note that any resources
 
          //  associated with OldValue are cleaned up by this call.
 
          if ( FALSE == Wow64RevertWow64FsRedirection(OldValue) )
          {
              //  Failure to re-enable redirection should be considered
 
              //  a criticial failure and execution aborted.
 
              return;
          }
      }
 
      //  The handle, if valid, now can be used as usual, and without
 
      //  leaving redirection disabled. 
 
      if( INVALID_HANDLE_VALUE != hFile )
      {
          // Use the file handle
 
      }
  }

参考：

https://msdn.microsoft.com/zh-cn/library/windows/desktop/aa365743%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396