WinXP: ntoskrnl.exe!PsGetCurrentProcess
Code:
mov eax, fs:[124]
mov eax, [eax+44]
ret
Win2003: ntoskrnl.exe!PsGetCurrentProcess
Code:
mov eax, fs:[124]
mov eax, [eax+38]
ret
So the internals structures have changed, but it is still interesting that SoftICE loads on one PC running Win2003 without executing the code at all while the other PC crashes becuase of the changed structure.