Page 1 of 1

Registry Search utility

Posted: 18 Feb 2018, 16:22
by berban
Some registry search utilities exist, but I wanted to create my own customizeable one because the registry is sensitive and I want to know exactly what the application is doing.

Github Link: https://github.com/berban/RegistrySearch
Download (includes RegJump.exe): https://github.com/berban/RegistrySearc ... master.zip


Image

Not a whole lot to explain with the script. Search by key or value name in the "Name" box, or search by value (data contents) in the "Value" box, or search using both criteria (OR-type search.) Checking "RegEx" changes both name and value strings to regular expressions. Double-click an entry in the treeview to open it in regedit.exe.

This script relies on the systernals utility "RegJump" (https://docs.microsoft.com/en-us/sysint ... ds/regjump) which to be honest is pretty hack-y and doesn't always work. I think it's basically AutoHotkey keystrokes. If you want to use an alternate method, just replace the function "RegJump()" at the top of the main code.

There's a few settings in the "User Settings" section of the .ini file, but overall it's super basic so just add your own customizations to the code if you want more functionality (e.g. name AND value search, export results to text, edit keys from the treeview, etc.) Let me know if you have questions about anything.

Re: Registry Search utility

Posted: 18 Feb 2018, 19:06
by SpecialGuest
Thanks for sharing :thumbup:

Here's a way to avoid RegJump: Set the Last Key and then "reopen" Regedit on that "last visited key".

Code: Select all

cmd:="
(ltrim join&
REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit /v LastKey /t REG_SZ /d Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion /f
START regedit"
)
Run,%comspec% /c %cmd%
Return
Enjoy

Re: Registry Search utility

Posted: 18 Feb 2018, 21:33
by berban
Thanks SpecialGuest, yeah I’ve used that method in the past. I remember it not working all the time but I don’t recall exactly why. It’s possible I was doing it wrong. It also requires reopening regedit each time but I guess it’s not really a program you need to multitask with. I’ll take a second look into it.