I'm a little vague on the details, but I think there are some tricks you use to narrow it down and then go spelunking. Maybe a particular variable needs to be i

I'm a little vague on the details, but I think there are some tricks you use to narrow it down and then go spelunking. Maybe a particular variable needs to be in a page aligned struct so you only need to find a magic value at one of N places, etc. Like I said, I don't know the specifics, but there are methods of doing better than guessing.