|
You can set a read/write hardware breakpoint to obtain the location that reads/writes the string.
Another possibility is a pure static approach: searching for xrefs in the code. Doing that, you will see that 0x7B31B6 loads the data location into eax and then calls 0x40A748.
|