RegdatXP

RegdatXP reads non active NT based registry files like Ntuser.dat and usrClass.dat and compares them to the current Registry. It is an NT version of Regdat and has binary Search and Replace functions for the Registry. Registry Backups can be done by command-line arguments.

The full version can recover data from corrupt registry files, repair a corrupt file directly in many cases and remove user passwords from offline Sam files. RegdatXP can also open NT based registry files when running on Win9x/ME.

Fixes the following:
HKLM HKEY_LOCAL_MACHINE
This contains all the information in the current SOFTWARE, SYSTEM, SAM, and SECURITY files of the System32Config directory.

HKU HKEY_USERS
This key contains the .Default and other user keys and a repetition of the HKEY_CURRENT_USER key.

HKCU HKEY_CURRENT_USER
This contains all the information stored in the Ntuser.dat and usrClass.dat of the current user.

HKCR HKEY_CLASSES_ROOT

This is a repeat of the HKLMSoftwareClasses key and contains the information pertaining to the file associations and the OLE references that make the shell.

HKCC HKEY_CURRENT_CONFIG