SoftICE crashing on Windows 2003

#12 05-02-2006, 16:44

WinXP: ntoskrnl.exe!PsGetCurrentProcess

Code:

mov eax, fs:[124]
mov eax, [eax+44]
ret

Win2003: ntoskrnl.exe!PsGetCurrentProcess

Code:

mov eax, fs:[124]
mov eax, [eax+38]
ret

So the internals structures have changed, but it is still interesting that SoftICE loads on one PC running Win2003 without executing the code at all while the other PC crashes becuase of the changed structure.