Question about which tools to use, bugs, the best way to implement a function, etc should go here. Don't forget to see if your question is answered in the wiki first! When in doubt post here.
Your trying to operate on the dword (4 bytes long) from 0xffffffff -> 100000002. Now fairly obviously the last 3 bytes of the dword are outside the 32-bit address space.