Yeah, often some trial and error is needed. As for the second question, I cover that in another article: https://medium.com/@vickieli/diving-into-unserialize-pop-chains-35bc1141b69a
Written by Vickie Li
Professional investigator of nerdy stuff. Hacks and secures. Creates god awful infographics. https://twitter.com/vickieli7