API tools faq
paste
Advertisement
Guest User

win32k!NtUserSetProp

a guest
Sep 22nd, 2015
370
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
ASM (NASM) 3.09 KB | None | 0 0
raw download clone embed print report
  1. kd> uf win32k!NtUserSetProp
  2.  
  3. win32k!NtUserSetProp:
  4. bf8282f4 8bff             mov     edi,edi
  5. bf8282f6 55               push    ebp
  6. bf8282f7 8bec             mov     ebp,esp
  7. bf8282f9 56               push    esi
  8. bf8282fa e85b88fdff       call    win32k!EnterCrit (bf800b5a)
  9. bf8282ff 8b4d08           mov     ecx,[ebp+0x8]
  10. bf828302 e80993fdff       call    win32k!ValidateHwnd (bf801610)
  11. bf828307 8bf0             mov     esi,eax
  12. bf828309 85f6             test    esi,esi
  13. bf82830b 7471             jz      win32k!NtUserSetProp+0x95 (bf82837e)
  14.  
  15. win32k!NtUserSetProp+0x19:
  16. bf82830d a118ae9abf       mov     eax,[win32k!gptiCurrent (bf9aae18)]
  17. bf828312 8b403c           mov     eax,[eax+0x3c]
  18. bf828315 8b4004           mov     eax,[eax+0x4]
  19. bf828318 397008           cmp     [eax+0x8],esi
  20. bf82831b 53               push    ebx
  21. bf82831c 57               push    edi
  22. bf82831d 743e             jz      win32k!NtUserSetProp+0x74 (bf82835d)
  23.  
  24. win32k!NtUserSetProp+0x2b:
  25. bf82831f 8b3d68cb98bf     mov edi,[win32k!_imp__PsGetCurrentProcess (bf98cb68)]
  26. bf828325 ffd7             call    edi
  27. bf828327 8b1d1ccb98bf     mov ebx,[win32k!_imp__PsGetProcessWin32Process (bf98cb1c)]
  28. bf82832d 50               push    eax
  29. bf82832e ffd3             call    ebx
  30. bf828330 8b4e08           mov     ecx,[esi+0x8]
  31. bf828333 8b492c           mov     ecx,[ecx+0x2c]
  32. bf828336 8b8060010000     mov     eax,[eax+0x160]
  33. bf82833c 3b8160010000     cmp     eax,[ecx+0x160]
  34. bf828342 7546             jnz     win32k!NtUserSetProp+0x69 (bf82838a)
  35.  
  36. win32k!NtUserSetProp+0x50:
  37. bf828344 ffd7             call    edi
  38. bf828346 50               push    eax
  39. bf828347 ffd3             call    ebx
  40. bf828349 8b4e08           mov     ecx,[esi+0x8]
  41. bf82834c 8b492c           mov     ecx,[ecx+0x2c]
  42. bf82834f 8b8064010000     mov     eax,[eax+0x164]
  43. bf828355 3b8164010000     cmp     eax,[ecx+0x164]
  44. bf82835b 752d             jnz     win32k!NtUserSetProp+0x69 (bf82838a)
  45.  
  46. win32k!NtUserSetProp+0x69:
  47. bf82838a 6a05             push    0x5
  48. bf82838c 33f6             xor     esi,esi
  49. bf82838e e878b4fdff       call    win32k!UserSetLastError (bf80380b)
  50. bf828393 ebe7             jmp     win32k!NtUserSetProp+0x93 (bf82837c)
  51.  
  52. win32k!NtUserSetProp+0x74:
  53. bf82835d 8b450c           mov     eax,[ebp+0xc]
  54. bf828360 c1e810           shr     eax,0x10
  55. bf828363 66f7d8           neg     ax
  56. bf828366 1bc0             sbb     eax,eax
  57. bf828368 83e002           and     eax,0x2
  58. bf82836b 50               push    eax
  59. bf82836c ff7510           push    dword ptr [ebp+0x10]
  60. bf82836f 0fb7450c         movzx   eax,word ptr [ebp+0xc]
  61. bf828373 50               push    eax
  62. bf828374 56               push    esi
  63. bf828375 e820000000       call    win32k!InternalSetProp (bf82839a)
  64. bf82837a 8bf0             mov     esi,eax
  65.  
  66. win32k!NtUserSetProp+0x93:
  67. bf82837c 5f               pop     edi
  68. bf82837d 5b               pop     ebx
  69.  
  70. win32k!NtUserSetProp+0x95:
  71. bf82837e e80388fdff       call    win32k!LeaveCrit (bf800b86)
  72. bf828383 8bc6             mov     eax,esi
  73. bf828385 5e               pop     esi
  74. bf828386 5d               pop     ebp
  75. bf828387 c20c00           ret     0xc
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!