let us assume that there is a application (i have its executable) that reads a file (of some unknown format). I want to trace the input (e.g. a file) that is parsed by a executable i.e. I want to know when a input is read and how is it "consumed" by the executable. Is there a generic way to setting breakpoints to do so? I asked for a generic method because I may not be using a particular debugger.
The generic way for settings the breakpoints could be as follows:
ReadFileEx. The executable might also use
NtReadFile. Set breakpoints on these functions.