search for: sub_75f000

Displaying 1 result from an estimated 1 matches for "sub_75f000".

2001 Dec 11
0
VirtualProtect and app crash: what's your interpretation?
...et=0075fd82 Note that this call has a protect of 2, not 4. That means the branch at 00760D97 must have been taken. That branch gets taken if *(long *)75D734 is not equal to 2. gdb shows that the contents is 3. And where does this value come from? It is loaded only in this subroutine: 0075F000 sub_75F000 proc near ; CODE XREF: start+7C^Yp 0075F000 call ds:GetVersion 0075F006 movzx ecx, ah 0075F009 movzx edx, al 0075F00C mov dword_75D738, ecx 0075F012 mov dword_75D730, edx 0075F018...