Added flag functionality to specify that a created registry key should be volatile, and changed the default behavior to instead create non-volatile keys

Author: masterDeus

examples/reg.py

@@ -186,7 +186,7 @@ def run(self, remoteName, remoteHost):
             if self.__action == 'QUERY':
                 self.query(dce, self.__options.keyName)
             elif self.__action == 'ADD':
-                self.add(dce, self.__options.keyName)
+                self.add(dce, self.__options.keyName, self.__options.volatile)
             elif self.__action == 'DELETE':
                 self.delete(dce, self.__options.keyName)
             elif self.__action == 'SAVE':
@@ -256,8 +256,14 @@ def query(self, dce, keyName):
                     # ans5 = rrp.hBaseRegGetVersion(rpc, ans2['phkResult'])
                     # ans3 = rrp.hBaseRegEnumKey(rpc, ans2['phkResult'], 0)
 
-    def add(self, dce, keyName):
+    def add(self, dce, keyName, volatile):
         hRootKey, subKey = self.__strip_root_key(dce, keyName)
+        
+        # Convert volatile flag into option.
+        dwOption = 0x00000000
+        if volatile is True:
+            dwOption = 0x00000001
+
 
         # READ_CONTROL | rrp.KEY_SET_VALUE | rrp.KEY_CREATE_SUB_KEY should be equal to KEY_WRITE (0x20006)
         if self.__options.v is None: # Try to create subkey
@@ -270,9 +276,9 @@ def add(self, dce, keyName):
             # Should I use ans2?
 
             ans3 = rrp.hBaseRegCreateKey(
-                dce, hRootKey, subKeyCreate,
-                samDesired=READ_CONTROL | rrp.KEY_SET_VALUE | rrp.KEY_CREATE_SUB_KEY
-            )
+                dce, hRootKey, subKeyCreate, dwOptions=dwOption,
+                samDesired=READ_CONTROL | rrp.KEY_SET_VALUE | rrp.KEY_CREATE_SUB_KEY)
+
             if ans3['ErrorCode'] == 0:
                 print('Successfully set subkey %s' % (
                     keyName
@@ -570,6 +576,8 @@ def __parse_lp_data(valueType, valueData):
     add_parser.add_argument('-vd', action='append', metavar="VALUEDATA", required=False, help='Specifies the registry '
                            'value data that is to be set. In case of adding a REG_MULTI_SZ value, set this option once for each '
                            'line you want to add.', default=[])
+    add_parser.add_argument('--volatile', action='store_true', required=False, help='Specify that the key is intended to be volitile '
+                            'and deleted upon system reboot')
 
     # An delete command
     delete_parser = subparsers.add_parser('delete', help='Deletes a subkey or entries from the registry')