On Sun, 29 Aug 2004 21:30:50 +0200, Uwe Bonnes wrote: > Why does this double restoring ebx help? Good question. I don't know. Possibly the window procedure is declared using a calling convention that somehow mangles even the wrapper stack, so we're popping garbage off it into %ebx. But I'm out of ideas for now.