Hello,
Is there any way to know from where (RVA) a program accesses a specific reg entry? Say for examlpe I know that at location xyz in the reg the program reads a number and if non zero is does this or that. How do I find the RVA where it reads the xyz value. Do I need to set a breakpoint on registry reads and then manually check? The probelm with that is I only have access to trw at the moment and don't know how to return to the trw to set a breakpoint after program execution. If I press ctrl+w (or was it m anyhow), as it says in the manual, the computer hangs. Thankful for any help.

// SuperCali