Displaying 1 result from an estimated 1 matches for "sub_75f000".
2001 Dec 11
0
VirtualProtect and app crash: what's your interpretation?
...et=0075fd82
Note that this call has a protect of 2, not 4. That means the branch at
00760D97 must have been taken. That branch gets taken if
*(long *)75D734 is not equal to 2. gdb shows that the contents is 3. And
where does this value come from?
It is loaded only in this subroutine:
0075F000 sub_75F000 proc near ; CODE XREF: start+7C^Yp
0075F000 call ds:GetVersion
0075F006 movzx ecx, ah
0075F009 movzx edx, al
0075F00C mov dword_75D738, ecx
0075F012 mov dword_75D730, edx
0075F018...