From 99d66a08cc89e63f05689bd63b6818a47015d92b Mon Sep 17 00:00:00 2001
From: vm-packages <vm-packages@mandiant.com>
Date: Mon, 9 Oct 2023 12:12:11 +0000
Subject: [PATCH] Add reg_export.vm

Closes https://github.com/mandiant/VM-Packages/issues/183.
---
 packages/reg_export.vm/reg_export.vm.nuspec          | 12 ++++++++++++
 packages/reg_export.vm/tools/chocolateyinstall.ps1   | 10 ++++++++++
 packages/reg_export.vm/tools/chocolateyuninstall.ps1 |  7 +++++++
 3 files changed, 29 insertions(+)
 create mode 100644 packages/reg_export.vm/reg_export.vm.nuspec
 create mode 100644 packages/reg_export.vm/tools/chocolateyinstall.ps1
 create mode 100644 packages/reg_export.vm/tools/chocolateyuninstall.ps1

diff --git a/packages/reg_export.vm/reg_export.vm.nuspec b/packages/reg_export.vm/reg_export.vm.nuspec
new file mode 100644
index 000000000..1cdd81ff1
--- /dev/null
+++ b/packages/reg_export.vm/reg_export.vm.nuspec
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
+  <metadata>
+    <id>reg_export.vm</id>
+    <version>1.3</version>
+    <authors>Adam Kramer</authors>
+    <description>A CLI that exports the raw content of a registry value to a file</description>
+    <dependencies>
+      <dependency id="common.vm" />
+    </dependencies>
+  </metadata>
+</package>
diff --git a/packages/reg_export.vm/tools/chocolateyinstall.ps1 b/packages/reg_export.vm/tools/chocolateyinstall.ps1
new file mode 100644
index 000000000..79e76a85d
--- /dev/null
+++ b/packages/reg_export.vm/tools/chocolateyinstall.ps1
@@ -0,0 +1,10 @@
+$ErrorActionPreference = 'Stop'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'reg_export'
+$category = 'Utilities'
+
+$exeUrl = 'https://github.com/adamkramer/reg_export/releases/download/v1.3/reg_export.exe'
+$exeSha256 = '0786cf26a63a059986fa7c568c1833825104e52565c17ff777f45d3118a8b274'
+
+VM-Install-Single-Exe $toolName $category $exeUrl -exeSha256 $exeSha256 -consoleApp $true
diff --git a/packages/reg_export.vm/tools/chocolateyuninstall.ps1 b/packages/reg_export.vm/tools/chocolateyuninstall.ps1
new file mode 100644
index 000000000..e6af9a144
--- /dev/null
+++ b/packages/reg_export.vm/tools/chocolateyuninstall.ps1
@@ -0,0 +1,7 @@
+$ErrorActionPreference = 'Continue'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'reg_export'
+$category = 'Utilities'
+
+VM-Uninstall $toolName $category