f818cb90 bf83e8ef win32k!UserSetLastError f818cc6c bf834a37 win32k!xxxCreateWindowEx+0xf3 f818cd20 8054162c win32k!NtUserCreateWindowEx+0x1c1 f818cd20 7c91e4f4 nt!KiFastCallEntry+0xfc
win32k!xxxCreateWindowEx: ... bf81b621 57 push edi bf83de96 e81eecfcff call win32k!UserFindAtom (bf80cab9) bf83de9b 6685c0 test ax,ax bf83de9e 8945e4 mov dword ptr [ebp-1Ch],eax bf83dea1 0f84d9c40c00 je win32k!xxxCreateWindowEx+0x1d8 (bf90a380) ... bf90a380 687f050000 push 57Fh bf90a385 e96045f3ff jmp win32k!xxxCreateWindowEx+0xee (bf83e8ea) ... bf83e8ea e89c4efcff call win32k!UserSetLastError (bf80378b)
win32k!UserFindAtom: bf80cab9 8bff mov edi,edi bf80cabb 55 push ebp bf80cabc 8bec mov ebp,esp bf80cabe 51 push ecx bf80cabf 8365fc00 and dword ptr [ebp-4],0 bf80cac3 8d45fc lea eax,[ebp-4] bf80cac6 50 push eax bf80cac7 ff7508 push dword ptr [ebp+8] bf80caca ff35f8969abf push dword ptr [win32k!UserAtomTableHandle (bf9a96f8)] bf80cad0 ff15acd098bf call dword ptr [win32k!_imp__RtlLookupAtomInAtomTable (bf98d0ac)] bf80cad6 85c0 test eax,eax bf80cad8 7c08 jl win32k!UserFindAtom+0x21 (bf80cae2) bf80cada 668b45fc mov ax,word ptr [ebp-4] bf80cade c9 leave bf80cadf c20400 ret 4 bf80cae2 50 push eax bf80cae3 e8c8950200 call win32k!SetLastNtError (bf8360b0) bf80cae8 ebf0 jmp win32k!UserFindAtom+0x27 (bf80cada)
There are 31,314 total registered users.
[+] expand