The content of that section can be summed up in a phrase I remember seeing a few times in cracking tutorials: "follow the data". This is much easier today with debuggers/hardware that offer memory read/write breakpoints, but in general the fruitful strategy is to find the data and follow where it goes.
1 comment
[ 2.0 ms ] story [ 13.6 ms ] threadThe content of that section can be summed up in a phrase I remember seeing a few times in cracking tutorials: "follow the data". This is much easier today with debuggers/hardware that offer memory read/write breakpoints, but in general the fruitful strategy is to find the data and follow where it goes.