RawReg - reghive viewer/editor

Submit portable freeware that you find here. It helps if you include information like description, extraction instruction, Unicode support, whether it writes to the registry, and so on.

Moderators: usdcs, Andrew Lee, webfork

Post Reply
Message
Author
User avatar
joby_toss
Posts: 2902
Joined: Sat Feb 09, 2008 9:57 am
Location: Romania
Contact:

RawReg - reghive viewer/editor

#1 Post by joby_toss » Sat Jun 11, 2016 11:59 pm

http://reboot.pro/files/file/95-rawreg/
http://reboot.pro/topic/4684-raw-registry-editor/
RawReg allows to edit offline Windows NT registry hives.

It can be used (for example) to edit BCD hives, NTUSER, software and many other registry hives found inside Windows NT (2000, XP, Vista, 7, 8, ...)

This tool provides information about the physical offset position of each registry key on the hive file, a very handy feature if you are debugging a registry hive with the aid of an hexadecimal editor.

What can it do?

- Browse the hive structure
- Edit the data on values
- Change the title of values
- Show a map with information of data inside each bin
- Show details about physical offset of any given key

Please note that unlike any other raw registry editors, this is the only program that can really add more data onto a given registry hive and manage the bin space properly. In the past, people were limited to only change data on keys that needed to have the exact same size, there are no such restrictions here and many things can be added - post your requests and I'll see if they can be included.

This tool is available "as is". With so many things going on at the same time, it is not possible to add extra features or correct reported defects. My apologies.

What is the advantage of not using Win32 API?

- No need to load a hive into the local registry
- Overcome any security restrictions imposed by Win32 API
- Works on every Windows platform (from Windows 9x all the way up to Vista)
- No UAC restrictions regarding hive load without administrator permissions
- More features can be added in the future.
Image

Note: this tool works great with the small RegHive files created by Sandboxie.
Tested version 1.3 and it saves its settings in RawReg.ini file inside its own folder while being stealth.

Database entry: http://www.portablefreeware.com/index.php?id=2786

User avatar
Ennovy
Posts: 423
Joined: Mon Mar 12, 2007 5:21 am
Location: The Netherlands

Re: RawReg - reghive viewer/editor

#2 Post by Ennovy » Sun Jun 12, 2016 12:42 am

joby_toss wrote: Note: this tool works great with the small RegHive files created by Sandboxie.
Tested version 1.3 and it saves its settings in RawReg.ini file inside its own folder while being stealth.

Database entry: http://www.portablefreeware.com/index.php?id=2786
Thanks for sharing, voted
Tough times never last but tough people do
-- Robert H. Schuller --

shnbwmn
Posts: 244
Joined: Sat Jul 11, 2015 12:59 am

Re: RawReg - reghive viewer/editor

#3 Post by shnbwmn » Sun Jun 12, 2016 7:12 am

Apart from RawReg (upvoted!), Registry Viewer (my default), and Buster's Sandbox Analyser (complex and only works with Sandboxie), are there any other programs that can open RegHives?

User avatar
Midas
Posts: 3972
Joined: Mon Dec 07, 2009 7:09 am
Location: Sol3

Re: RawReg - reghive viewer/editor

#4 Post by Midas » Sun Jun 12, 2016 10:04 am

RawReg looks like a valuable addition to any serious portablist toolbox -- especially for those of the sand-boxing persuasion... Thanks joby. 8)

User avatar
billon
Posts: 487
Joined: Sat Jun 23, 2012 4:28 pm

Re: RawReg - reghive viewer/editor

#5 Post by billon » Sun Jun 12, 2016 11:56 am

Thank you, joby! :)

@shnbwmn: try Windows Registry Recovery

User avatar
joby_toss
Posts: 2902
Joined: Sat Feb 09, 2008 9:57 am
Location: Romania
Contact:

Re: RawReg - reghive viewer/editor

#6 Post by joby_toss » Sun Jun 12, 2016 11:57 am

@shnbwmn: I use MiTeC Windows Registry Recovery to view them and now RawReg to edit them.

I'm glad you guys find this useful and I'd like to say Thank you! to Mr. Nuno Brito, the author. Although the app could use some improvements, I don't know of any other tool capable to edit these hive files in offline mode.

User avatar
Midas
Posts: 3972
Joined: Mon Dec 07, 2009 7:09 am
Location: Sol3

Re: RawReg - reghive viewer/editor

#7 Post by Midas » Mon Jun 13, 2016 5:20 am

If memory serves me right, Nuno Brito is also the author and chief mod of Reboot.pro. The fact that he still finds the time to release free software is no mean feat, so all the praise is well deserved. 8)

shnbwmn
Posts: 244
Joined: Sat Jul 11, 2015 12:59 am

Re: RawReg - reghive viewer/editor

#8 Post by shnbwmn » Mon Jun 13, 2016 7:33 am

@billon @joby_toss : Thanks!

JohnW
Posts: 364
Joined: Wed Apr 19, 2006 9:18 am
Location: London, UK

Re: RawReg - reghive viewer/editor

#9 Post by JohnW » Sat Jun 25, 2016 7:21 am

@shnbwmn mentioned Buster's Sandbox Analyser (BSA) in passing. There is no other mention of it in TPFC.
I took a look at the program and just as shnbwmn wrote, it is complex.
The instructions blow your mind!
It is stated to be portable. I suspect that it isn't for its main use, as it requires WinPCap.
Nonetheless I extracted the appropriate files and placed them in the BSA directory. It seemed to run.
I then found that it is very easy to run Utilities and/or Analysis from the main menu.
It does indeed have an easy to use RegHive explorer as well as a PE explorer, a Process explorer, a File Disassembler, a Hasher, a Hex Editor etc
You can actually export the RegHive to a Reg file.
A few other features include PDF file analysis, URL analyzer and a APK analyzer.
I was intrigued by the last mentioned but it needed Java.
Anyway- just thought it might be of passing interest.

User avatar
I am Baas
Posts: 4142
Joined: Thu Aug 07, 2008 4:51 am

Re: RawReg - reghive viewer/editor

#10 Post by I am Baas » Sun Jun 26, 2016 10:10 am

JohnW wrote:@shnbwmn mentioned Buster's Sandbox Analyser (BSA) in passing. There is no other mention of it in TPFC.
http://www.portablefreeware.com/forums/ ... =4&t=11118
Bəəs 2.0

JohnW
Posts: 364
Joined: Wed Apr 19, 2006 9:18 am
Location: London, UK

Re: RawReg - reghive viewer/editor

#11 Post by JohnW » Sun Jun 26, 2016 11:07 am

I stand corrected Baas. Sorry about that!
I'll excuse myself to some extent because the Search facility in the Forum is not very intelligent.

shnbwmn
Posts: 244
Joined: Sat Jul 11, 2015 12:59 am

Re: RawReg - reghive viewer/editor

#12 Post by shnbwmn » Sun Jun 26, 2016 1:31 pm

JohnW wrote:... the Search facility in the Forum is not very intelligent.
http://www.portablefreeware.com/forums/ ... 275#p66275

:wink:

Post Reply