View Full Version : How to put a breakpoint on RegistryRead
IlyaZ
June 28th, 2004, 03:00
I've searched everywhere but I need guidance on how I can put a breakpoint on registryreads. What are the command and do I need to include/mount additional DLL files like in Softice? If that's the case how do I do it with Ollydbg?
Thanks in advance,
IlyaZ
Lord_Looser
June 28th, 2004, 07:02
in OllyDbg (with debugged application, advapi32.dll already loaded) – press Alt-E (Executable modules) – select advapi32.dll line – press Ctrl-N (View names) – directly typewrite “reg” letters inside the window – F2 is setting breakpoint
reg read/write function Names in advapi32.dll
Address Name
793518BF RegCloseKey
79389C86 RegConnectRegistryA
79368521 RegConnectRegistryW
79352A9D RegCreateKeyA
79352ED6 RegCreateKeyExA
7935297C RegCreateKeyExW
79352A7D RegCreateKeyW
79353EA2 RegDeleteKeyA
79360D26 RegDeleteKeyW
79360CA1 RegDeleteValueA
79360BA3 RegDeleteValueW
793663E9 RegDisablePredefinedCache
79353CDE RegEnumKeyA
79353BF1 RegEnumKeyExA
79353F27 RegEnumKeyExW
7935400B RegEnumKeyW
79354B10 RegEnumValueA
79360F89 RegEnumValueW
79360C0B RegFlushKey
793625AC RegGetKeySecurity
7938A39B RegLoadKeyA
793694A7 RegLoadKeyW
79353A15 RegNotifyChangeKeyValue
79354067 RegOpenCurrentUser
79352608 RegOpenKeyA
793524B9 RegOpenKeyExA
79351CAB RegOpenKeyExW
79351DA3 RegOpenKeyW
79358896 RegOpenUserClassesRoot
793897AD RegOverridePredefKey
79360D8E RegQueryInfoKeyA
793542D2 RegQueryInfoKeyW
7938A987 RegQueryMultipleValuesA
7938AD2C RegQueryMultipleValuesW
79358712 RegQueryValueA
79352C9C RegQueryValueExA
79351DDB RegQueryValueExW
7935388E RegQueryValueW
7938A5CE RegReplaceKeyA
7938A6ED RegReplaceKeyW
7938B11C RegRestoreKeyA
7938B1C1 RegRestoreKeyW
79362F7D RegSaveKeyA
7938B29C RegSaveKeyW
79362DFB RegSetKeySecurity
7935901A RegSetValueA
79353024 RegSetValueExA
79352B8D RegSetValueExW
79360542 RegSetValueW
7938A4AF RegUnLoadKeyA
7938A551 RegUnLoadKeyW
IlyaZ
June 28th, 2004, 08:27
thank you
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.