RegdatXP handles non active WinNT/2K/XP/2003 registry files. It has also (binary) Search and Replace functions for the Registry.
The full version can directly repair corrupt registry files in some cases. The Registry as displayed by Regedit or Regedt32 is composed of the following root keys:
HKLM HKEY_LOCAL_MACHINE
This contains all the information in the current SOFTWARE, SYSTEM, SAM, and SECURITY files of the System32Config directory.
HKU HKEY_USERS
This key contains the .Default and other user keys and a repetition of the HKEY_CURRENT_USER key.
HKCU HKEY_CURRENT_USER
This contains all the information stored in the Ntuser.dat and usrClass.dat of the current user.
HKCR HKEY_CLASSES_ROOT
This is a repeat of the HKLMSoftwareClasses key and contains the information pertaining to the file associations and the OLE references that make the shell.
HKCC HKEY_CURRENT_CONFIG
This is a repeat of HKLMSystemCurrentControlSet keys currently in use.
In general, non active registry files are obtained from Registry Backups, or simply as file copies from a dual boot system. On WinXP, Registry backups are regularly created through the System Restore function (activated by default) and can be found in the System Volume Information folders.
RegdatXP can also generate kind of snapshot files which can be compared to later Registry states. In contrary to Backup files, however, the snapshot files can not be used to replace original registry files.
There may be situations where one wants to view, or export, keys from a WinNT/2K/XP registry file while being on a Win9x/Me platform. RegdatXP therefore runs also on Win9x/Me, but it can not handle registry files from these systems.
