> I don't understand how people figure out what registry entries to make out of the ether for certain changes. Experience, trial and error, documentation, reve

> I don't understand how people figure out what registry entries to make out of the ether for certain changes. Experience, trial and error, documentation, reverse engineering... you can use something like ntregmon to see everything a program touches in the registry and work from there. The quantity can be overwhealming and when you finally whittle it down you realise what you want isn't there, it was in a .ini in a random 90's file path the whole time.