Function EnumRegHivePersistence

windowsregistry.go:89–125

EnumRegHivePersistence parse the specified key and subkey and return all string key/value in a []RegistryValue

(key registry.Key, subkey string)

// EnumRegHivePersistence parse the specified key and subkey and return all string key/value in a []RegistryValue
func EnumRegHivePersistence(key registry.Key, subkey string) (values []RegistryValue, err error) {
	k, err := registry.OpenKey(key, "", registry.READ)
	if err != nil {
		return nil, err
	}
	defer k.Close()

	subkeys, err := k.ReadSubKeyNames(0)
	if err != nil {
		return nil, err
	}

	if key == registry.USERS {
		for _, s := range subkeys {
			if len(s) > 10 && !strings.HasSuffix(s, "_Classes") {
				v, err := enumRegSubKey(key, s+`\`+subkey)
				if err != nil {
					return nil, err
				}
				for _, item := range v {
					values = append(values, item)
				}

			}
		}
	} else {
		v, err := enumRegSubKey(key, subkey)
		if err != nil {
			return nil, err
		}
		for _, item := range v {
			values = append(values, item)
		}
	}

	return values, nil
}

// enumRegSubKey format subkey values in []RegistryValue
func enumRegSubKey(key registry.Key, subkey string) (values []RegistryValue, err error) {