Read of memory location 0x7ffe0000 in windows NT
Marcus Meissner
marcus at jet.franken.de
Mon Apr 1 23:30:23 CST 2002
On Tue, Apr 02, 2002 at 12:11:09AM +0200, Laurent Pinchart wrote:
> Hi everybody,
>
> I've stumbled accross some code which reads a dword at memory location
> 0x7ffe000, which causes the program to crash and the wine debugger to start.
>
> After some investigation, it seems that reading the memory location
> 0x7ffe0000 should return KeTickCount.LowPart to the user process. Has anyone
> ever heard about that ? I was wondering if it was a native windows NT
> behaviour, or if it was done by a special kernel-space exception handler
> installed by the program.
What program uses that code? Does it change the behaviour if run with
-winver win98 or similar?
Ciao, Marcus
More information about the wine-devel
mailing list