hivexregedit(1) hivexregedit(1) (NAME) hivexregedit - regedit (SYNOPSIS) hivexregedit --merge [--prefix prefix] [--encoding enc] \ hivefile [regfile] hivexregedit --export [--prefix prefix] hivefile key > regfile (DESCRIPTION) hivexregedit (hive) . virt-win-reg(1) . ("hive") . "--merge" regedit () . "/s" regedit.exe . "--export" ( ) regedit . (ENCODING) "hivexregedit" regedit (re- encode) . UTF-8 . regedit UTF-16LE . ( "--merge") : iconv -f utf-16le -t utf-8 < win.reg | dos2unix > linux.reg "--export" : unix2dos < linux.reg | iconv -f utf-8 -t utf-16le > win.reg Win::Hivex::Regedit(3) . file(1) . regedit.exe UTF-16LE (CRLF) : $ file software.reg software.reg: Little-endian UTF-16 Unicode text, with very long lines, with CRLF line terminators "--merge" . (SHELL QUOTING) "\" () . '' ( ) . CurrentControlSet "CurrentControlSet" . "CurrentControlSet" "ControlSet001" . . "HKLM\SYSTEM\Select" : $ hivexregedit --export SYSTEM '\Select' [\Select] "Current"=dword:00000001 "Default"=dword:00000001 "Failed"=dword:00000000 "LastKnownGood"=dword:00000002 "Current" . "Current..." . (EXAMPLES) $ virt-cat WindowsGuest /Windows/System32/config/software > software.hive $ hivexregedit --export \ --prefix 'HKEY_LOCAL_MACHINE\SOFTWARE' \ software.hive '\Microsoft' > ms-keys.reg $ hivexregedit --merge system.hive \ --prefix 'HKEY_LOCAL_MACHINE\SYSTEM' additions.reg (OPTIONS) --help . --debug hivex. . --merge hivexregedit --merge [--prefix prefix] [--encoding enc] \ hivefile [regfile] "regfile" ( regedit) "hivefile". "regfile" . ( ). "--prefix" . . "--encoding" . "UTF-16LE" . "ASCII" . --export hivexregedit --export [--prefix prefix] hivefile key > regfile "key" "hivefile" . ( ). regedit . "--prefix" . . --prefix prefix . software "HKEY_LOCAL_MACHINE\SOFTWARE" . "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft" "\Microsoft" . . ( virt-win-reg(1) ). "--prefix 'HKEY_LOCAL_MACHINE\SOFTWARE'" . --encoding UTF-16LE|ASCII () . "ENCODING STRINGS" Win::Hivex::Regedit(3) . UTF-16LE . --unsafe-printable-strings () UTF-16LE . ( ) . : o UTF-16LE . ASCII . o . o . ( "ENCODING STRINGS" Win::Hivex::Regedit(3) ). . --unsafe (heuristics) . / . --max-depth depth . / . . ( ) . . (SEE ALSO) virt-win-reg(1), Win::Hivex::Regedit(3), Win::Hivex(3), hivexsh(1), dos2unix(1), unix2dos(1), iconv(1), . (AUTHOR) Richard W.M. Jones (COPYRIGHT) Copyright (C) 2010 Red Hat Inc. (GNU GPL) / ( ) . . . : Free Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. hivex-1.3.24 2026-06-22 hivexregedit(1)