Function at 0x5d0b60
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x7bee43
mov eax, dword fs:[0]
push eax
sub esp, 0x454
push ebx
push ebp
push esi
push edi
mov eax, dword [0x89b044]
xor eax, esp
push eax
lea eax, [esp + 0x468]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0xac], edi
xor ebp, ebp
push ebp
lea ecx, [edi + 0x34]
mov dword [edi], vtable.DuiLib::CAnimationManager.0
mov dword [edi + 4], ebp
mov dword [edi + 8], ebp
mov dword [edi + 0xc], ebp
mov dword [edi + 0x10], ebp
mov dword [edi + 0x14], ebp
mov dword [edi + 0x18], 0x64
mov dword [edi + 0x1c], 0xa
mov dword [edi + 0x20], ebp
call fcn.005fea10
mov dword [edi + 0x24], ebp
mov dword [edi + 0x28], ebp
mov dword [edi + 0x2c], ebp
mov dword [edi + 0x30], ebp
mov dword [edi + 0x38], ebp
mov dword [edi + 0x3c], ebp
push ebp
lea ecx, [edi + 0x50]
mov dword [esp + 0x474], ebp
call fcn.005fea10
mov dword [edi + 0x40], ebp
mov dword [edi + 0x44], ebp
mov dword [edi + 0x48], ebp
mov dword [edi + 0x4c], ebp
mov dword [edi + 0x54], ebp
mov dword [edi + 0x58], ebp
push ebp
lea ecx, [edi + 0x64]
mov byte [esp + 0x474], 1
call fcn.005fea10
mov dword [edi + 0x5c], ebp
mov dword [edi + 0x60], ebp
mov dword [edi + 0x68], ebp
mov dword [edi + 0x6c], ebp
lea eax, [esp + 0x23]
push eax
lea ecx, [esp + 0x27]
lea esi, [edi + 0x70]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 2
call fcn.005d0740
push 0xffffffffffffffff
mov ebx, 3
push str.Linear
lea ecx, [esp + 0x2c]
mov byte [esp + 0x478], bl
call fcn.0059d4a0
mov dword [esp + 0xa8], ebp
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 4
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InQuad
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 1
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 5
call fcn.005d0640
mov byte [esp + 0x470], bl
lea ecx, [esp + 0x24]
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutQuad
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 2
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 6
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InOutQuad
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], ebx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 7
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutInQuad
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 4
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 8
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InCubic
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 5
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 9
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutCubic
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 6
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0xa
call fcn.005d0640
mov byte [esp + 0x470], bl
lea ecx, [esp + 0x24]
call fcn.0059cc80
push 0xffffffffffffffff
push str.InOutCubic
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 7
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0xb
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutInCubic
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 8
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0xc
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InQuart
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 9
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0xd
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutQuart
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0xa
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0xe
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InOutQuart
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0xb
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0xf
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutInQuart
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0xc
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x10
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InQuint
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0xd
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x11
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutQuint
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0xe
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0x12
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InOutQuint
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0xf
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x13
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutInQuint
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x10
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x14
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InSine
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x11
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0x15
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutSine
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x12
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x16
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InOutSine
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x13
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x17
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutInSine
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x14
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0x18
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InExpo
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x15
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x19
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutExpo
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x16
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x1a
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InOutExpo
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x17
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0x1b
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutInExpo
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x18
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x1c
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InCirc
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x19
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x1d
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutCirc
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x1a
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0x1e
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InOutCirc
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x1b
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x1f
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutInCirc
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x1c
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x20
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InElastic
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x1d
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0x21
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutElastic
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x1e
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x22
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InOutElastic
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x1f
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x23
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutInElastic
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x20
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0x24
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InBack
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x21
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x25
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutBack
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x22
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x26
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InOutBack
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x23
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0x27
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutInBack
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x24
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x28
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InBounce
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x25
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x29
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutBounce
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x26
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0x2a
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InOutBounce
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x27
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x2b
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutInBounce
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x28
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x2c
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.InCurve
lea ecx, [esp + 0x2c]
call fcn.0059d4a0
mov dword [esp + 0xa8], 0x29
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0x2d
call fcn.005d0640
lea ecx, [esp + 0x24]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.OutCurve
lea ecx, [esp + 0x360]
call fcn.0059d4a0
mov dword [esp + 0x3dc], 0x2a
lea edx, [esp + 0x358]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x2e
call fcn.005d0640
lea ecx, [esp + 0x358]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.SineCurve
lea ecx, [esp + 0xb8]
call fcn.0059d4a0
mov dword [esp + 0x134], 0x2b
lea ecx, [esp + 0xb0]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x2f
call fcn.005d0640
lea ecx, [esp + 0xb0]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.CosineCurve
lea ecx, [esp + 0x250]
call fcn.0059d4a0
mov dword [esp + 0x2cc], 0x2c
lea eax, [esp + 0x248]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
mov byte [esp + 0x478], 0x30
call fcn.005d0640
lea ecx, [esp + 0x248]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.BezierSpline
lea ecx, [esp + 0x140]
call fcn.0059d4a0
mov dword [esp + 0x1bc], 0x2d
lea edx, [esp + 0x138]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x31
call fcn.005d0640
lea ecx, [esp + 0x138]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.TCBSpline
lea ecx, [esp + 0x1c8]
call fcn.0059d4a0
mov dword [esp + 0x244], 0x2e
lea ecx, [esp + 0x1c0]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, esi
mov byte [esp + 0x478], 0x32
call fcn.005d0640
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push str.Custom
lea ecx, [esp + 0x2d8]
call fcn.0059d4a0
mov dword [esp + 0x354], 0x2f
mov byte [esp + 0x470], 0x33
lea eax, [esp + 0x2d0]
push eax
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.005d0640
lea ecx, [esp + 0x2d0]
mov byte [esp + 0x470], bl
call fcn.0059cc80
push 0xffffffffffffffff
push 0x802c74
lea ecx, [esp + 0x3e8]
call fcn.0059d4a0
mov dword [esp + 0x464], 0x30
lea edx, [esp + 0x3e0]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
mov byte [esp + 0x478], 0x34
call fcn.005d0640
lea ecx, [esp + 0x3e0]
mov byte [esp + 0x470], bl
call fcn.0059cc80
mov eax, edi
mov ecx, dword [esp + 0x468]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x460
ret