Say I open a ram dump in a hex editor and find a label through text search. I trace that back to its offset memory location. Now, how do I determine which value following after it should be the value it has been set as default? It seems that 32bit values seem to follow an organized structure following the label but others which cross the boundary do not. Any help?
what do you mean? An example please.
Thanks but I figured it out. Also figured out how to walk the stack within 7 hours of self-training. Lol I made some pretty cool codes last night, I should go ahead and get hacker status and start sharing soon. :)