Question

When I am in debug and I am dealing with some legacy code or some framework sometimes I need to get the property that contains a particular value. For example I know I put 153 on UI and I need to know where is it after I put it there. This will help to understand lot of things about this framework. That`s a one usage, the question is how to do it?

Answer 1

I wonder if you are referring to a “reverse engineering” requirement
where, you do not have source-level debug and
cannot use symbol reference to locate the field in question.

If that is so, and you know a general address range where the change might occur,
you could take a snapshot of the memory area before and after the change.

A diff on two text snapshots in this way would locate the address.

---

Another way would be to run a search through the address range to locate the entered value.

• This is prone to false-positives depending on the ‘simplicity’ of the changed value
  (153, for example, is very difficult to search)
• If the input can be altered in the program memory, it will also cause false-negatives

---

Some debug environments support data-watchpoints.
But these are usually not available for large ranges.