Use the freakin' Debugger
blog.erratasec.com