Re: Read to 0x7ffe02c0

2006-08-22 Thread Juan Lang
> All you need to do is to change this: > http://source.winehq.org/source/dlls/ntdll/thread.c#L218 > to look like: > > NtAllocateVirtualMemory( NtCurrentProcess(), &addr, 0, &size, > MEM_RESERVE | MEM_COMMIT, PAGE_READONLY ); Ah, indeed. Thank you, that solves it for me. --Juan

Re: Read to 0x7ffe02c0

2006-08-22 Thread Robert Reif
Vitaliy Margolen wrote: Tuesday, August 22, 2006, 1:56:20 AM, Juan Lang wrote: --- Vitaliy Margolen <[EMAIL PROTECTED]> wrote: 0x7ffe is KSHARED_USER_DATA and 0x2c0 is (not even sure how to get what is at this offset). You can see it's declaration in include/ddk/wdm.h

Re: Read to 0x7ffe02c0

2006-08-22 Thread Vitaliy Margolen
Tuesday, August 22, 2006, 1:56:20 AM, Juan Lang wrote: > --- Vitaliy Margolen <[EMAIL PROTECTED]> wrote: >> 0x7ffe is KSHARED_USER_DATA and 0x2c0 is (not even sure how to get >> what is at this offset). You can see it's declaration in >> include/ddk/wdm.h > Thanks Vitaliy. So this is supposed

Re: Read to 0x7ffe02c0

2006-08-22 Thread Juan Lang
--- Robert Shearman <[EMAIL PROTECTED]> wrote: > It might be easier to implement the necessary functions in userenv, > depending on which ones it uses. Thanks for the suggestion. I think not in this case; it's calling unnamed ordinal 149. --Jua

Re: Read to 0x7ffe02c0

2006-08-22 Thread Robert Shearman
Juan Lang wrote: Hi folks, I'm trying to debug an access (by native userenv.dll in my case, but also by MS Money 2006) to address 0x7ffe02c0. It might be easier to implement the necessary functions in userenv, depending on which ones it uses. -- Rob Shearman

Re: Read to 0x7ffe02c0

2006-08-22 Thread Juan Lang
--- Vitaliy Margolen <[EMAIL PROTECTED]> wrote: > 0x7ffe is KSHARED_USER_DATA and 0x2c0 is (not even sure how to get > what is at this offset). You can see it's declaration in > include/ddk/wdm.h Thanks Vitaliy. So this is supposed to be a boolean for some processor feature? I guess it doesn

Re: Read to 0x7ffe02c0

2006-08-21 Thread Vitaliy Margolen
Monday, August 21, 2006, 8:45:02 PM, Juan Lang wrote: > Hi folks, I'm trying to debug an access (by native userenv.dll in my case, > but also by MS Money 2006) to address 0x7ffe02c0. This is my > understanding so far: > The TEB is at 0x7ffe, so, according to winternl.h, offset 0x02c0 > within

Read to 0x7ffe02c0

2006-08-21 Thread Juan Lang
Hi folks, I'm trying to debug an access (by native userenv.dll in my case, but also by MS Money 2006) to address 0x7ffe02c0. This is my understanding so far: The TEB is at 0x7ffe, so, according to winternl.h, offset 0x02c0 within it is in the middle of GDI_TEB_BATCH. That doesn't make any se