Obtaining a complete list of registry keys used by your program:
If you enable any of the registry logging options, Thinstall will print out a complete list of registry keys your program accessed during its execution when the program quits. To find this list search your log file for "ExitProcess",
immediately after this you should find the registry access listing. The registry keys will be listed based on the type of access requested by the program, for example:
019041 47ac ---Registry keys that where 'opened' ----
019042 47ac HKEY_CURRENT_USER\SOFTWARE
019043 47ac HKEY_CURRENT_USER\SOFTWARE\Cygnus Solutions
019044 47ac HKEY_CURRENT_USER\SOFTWARE\Cygnus Solutions\Cygwin
019045 47ac HKEY_CURRENT_USER\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2
019046 47ac HKEY_CURRENT_USER\SOFTWARE\Cygnus Solutions\Cygwin\Program Options
019047 47ac HKEY_LOCAL_MACHINE\SOFTWARE
019048 47ac HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions
019049 47ac HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin
019050 47ac HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2
019051 47ac HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\Program Options
019052 47ac ---Registry keys that where 'created' ----
019053 47ac HKEY_CURRENT_USER\SOFTWARE
019054 47ac HKEY_CURRENT_USER\SOFTWARE\Cygnus Solutions
019055 47ac HKEY_CURRENT_USER\SOFTWARE\Cygnus Solutions\Cygwin
019056 47ac HKEY_CURRENT_USER\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2
019057 47ac HKEY_CURRENT_USER\SOFTWARE\Cygnus Solutions\Cygwin\Program Options
019058 47ac HKEY_LOCAL_MACHINE\SOFTWARE
019059 47ac HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions
019060 47ac HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin
019061 47ac HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2
019062 47ac HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\Program Options
019063 47ac ---Registry keys that where 'read' ----
019064 47ac HKEY_CURRENT_USER\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2
019065 47ac ---Registry keys that where 'written' ----
019066 47ac ---Registry keys that where 'enumerated' ----
019067 47ac ---Registry keys that where 'queried' ----