title: How can I find the data structure that represents mine layout of Minesweeper in memory?
body: <p>I'm trying to learn about reverse engineering, using Minesweeper as a sample application.  I've found this <a href="http://blogs.msdn.com/debuggingtoolbox/archive/2007/03/28/windbg-script-playing-with-minesweeper.aspx" rel="noreferrer">MSDN article</a> on a simple WinDbg command that reveals all the mines but it is old, is not explained in any detail and really isn't what I'm looking for.</p>
  
  <p>I have <a href="http://www.hex-rays.com/idapro/" rel="noreferrer">IDA Pro disassembler</a> and the <a href="http://www.microsoft.com/whdc/devtools/debugging/installx86.Mspx" rel="noreferrer">WinDbg debugger</a> and I've loaded winmine.exe into both of them.  Can someone provide some practical tips for either of these programs in terms of finding the location of the data structure that represents the mine field?</p>
  
  <p>In WinDbg I can set breakpoints, but it is difficult for me to imagine at what point to set a breakpoint and at what memory location.  Similarly, when I view the static code in IDA Pro, I'm not sure where to even begin to find the function or data structure that represents the mine field.</p>
  
  <p>Are there any Reverse Engineers on Stackoverflow that can point me in the right direction?</p>