Hi
I used in order to compare registry changes before and after install.

This help also in case malware attacks that changed registry system.

How to read/dump/compare registry hives - CodeProject

regdump | Get regdump at SourceForge.net