Function at 0x43dc30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4e61d1
mov eax, dword fs:[0]
push eax
sub esp, 0x60
push ebx
push ebp
push esi
push edi
mov eax, dword [0x806d00]
xor eax, esp
push eax
lea eax, [esp + 0x74]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 0x1c]
call dword [0x6ac9d8]
xor ebx, ebx
push str.:_images_scanpapyrus64.png
lea ecx, [esp + 0x1c]
mov dword [esp + 0x80], ebx
call dword [0x6abbc4]
push ecx
mov eax, esp
mov dword [esp + 0x40], esp
mov dword [eax], ebx
push ebx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x88], 1
call dword [0x6ad6f8]
push 1
push ebx
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x88], 2
call dword [0x6ac9d4]
lea ecx, [esp + 0x44]
mov byte [esp + 0x7c], 1
call dword [0x6ad700]
lea ecx, [esp + 0x18]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea ecx, [esp + 0x24]
push 0x6ec548
push ecx
call fcn.00422fe0
add esp, 0xc
mov edi, dword [0x6adbc8]
push eax
lea edx, [esp + 0x20]
push edx
mov ecx, esi
mov byte [esp + 0x84], 3
call edi
mov ecx, eax
call dword [0x6adb38]
lea ecx, [esp + 0x20]
mov dword [esi + 0x378], eax
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
cmp dword [esi + 0x378], ebx
je 0x43e984
mov ecx, esi
call edi
mov ecx, eax
call dword [0x6adb3c]
cmp eax, ebx
je 0x43dd3c
push 1
mov ecx, eax
call dword [0x6ac9d0]
push ebx
lea eax, [esp + 0x24]
push str.Click_here_to_save_the_project___br___open_an_existing_project__br___or_start_a_new_project.
push eax
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x378]
push eax
mov byte [esp + 0x80], 4
call dword [0x6ac9cc]
lea ecx, [esp + 0x20]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
mov ecx, dword [esi + 0x378]
call dword [0x6ac9c8]
mov ecx, dword [0x6adbbc]
push eax
call dword [0x6abad4]
mov edi, eax
cmp edi, ebx
je 0x43e984
push 0x6b602a
lea ecx, [esp + 0x18]
call dword [0x6abbc4]
push ebx
lea ecx, [esp + 0x2c]
push str.New_Project
push ecx
mov byte [esp + 0x88], 5
call fcn.00422fe0
add esp, 0xc
mov ebp, eax
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x28]
mov byte [esp + 0x80], 6
call dword [0x6ac080]
push ebp
push eax
mov ecx, edi
mov byte [esp + 0x84], 7
call dword [0x6ac9c4]
lea ecx, [esp + 0x24]
mov dword [esi + 0x37c], eax
mov byte [esp + 0x7c], 6
call dword [0x6ac078]
lea ecx, [esp + 0x28]
mov byte [esp + 0x7c], 5
call dword [0x6abc18]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push str.CtrlW
lea ecx, [esp + 0x18]
call dword [0x6abbc4]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 8
call dword [0x6ad304]
mov ecx, dword [esi + 0x37c]
push eax
mov byte [esp + 0x80], 9
call dword [0x6ac9c0]
lea ecx, [esp + 0x28]
mov byte [esp + 0x7c], 8
call dword [0x6ad308]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea ecx, [esp + 0x2c]
push str.Start_a_new_project
push ecx
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x37c]
mov ebp, dword [0x6ac9bc]
push eax
mov byte [esp + 0x80], 0xa
call ebp
lea ecx, [esp + 0x28]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea edx, [esp + 0x2c]
push str.Start_a_new_project
push edx
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x37c]
push eax
mov byte [esp + 0x80], 0xb
call dword [0x6ac9cc]
mov byte [esp + 0x7c], bl
lea ecx, [esp + 0x28]
call dword [0x6abc18]
mov eax, dword [esi + 0x37c]
push ebx
push str.1newProject__
push esi
push str.2triggered__
push eax
call dword [0x6abbb4]
mov ecx, dword [esi + 0x37c]
add esp, 0x14
push 1
call dword [0x6ac88c]
mov ecx, dword [esi + 0x37c]
push ebx
call dword [0x6ac9b8]
push str.:_images_OpenProject
lea ecx, [esp + 0x18]
call dword [0x6abbc4]
push ebx
lea ecx, [esp + 0x30]
push str.Open_Project...
push ecx
mov byte [esp + 0x88], 0xc
call fcn.00422fe0
add esp, 0xc
mov dword [esp + 0x28], eax
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x28]
mov byte [esp + 0x80], 0xd
call dword [0x6ac080]
mov ecx, dword [esp + 0x28]
push ecx
push eax
mov ecx, edi
mov byte [esp + 0x84], 0xe
call dword [0x6ac9c4]
lea ecx, [esp + 0x24]
mov dword [esi + 0x380], eax
mov byte [esp + 0x7c], 0xd
call dword [0x6ac078]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], 0xc
call dword [0x6abc18]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push str.CtrlO
lea ecx, [esp + 0x18]
call dword [0x6abbc4]
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], 0xf
call dword [0x6ad304]
mov ecx, dword [esi + 0x380]
push eax
mov byte [esp + 0x80], 0x10
call dword [0x6ac9c0]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], 0xf
call dword [0x6ad308]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea eax, [esp + 0x30]
push str.Open_an_existing_project
push eax
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x380]
mov byte [esp + 0x7c], 0x11
push eax
call dword [0x6ac9cc]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea ecx, [esp + 0x30]
push str.Open_an_existing_project
push ecx
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x380]
push eax
mov byte [esp + 0x80], 0x12
call ebp
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
mov edx, dword [esi + 0x380]
push ebx
push str.1openProject__
push esi
push str.2triggered__
push edx
call dword [0x6abbb4]
add esp, 0x14
push str.:_images_SaveProject
lea ecx, [esp + 0x18]
call dword [0x6abbc4]
push ebx
lea eax, [esp + 0x28]
push 0x6ec410
push eax
mov byte [esp + 0x88], 0x13
call fcn.00422fe0
add esp, 0xc
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x14
call dword [0x6ac080]
mov edx, dword [esp + 0x2c]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x84], 0x15
call dword [0x6ac9c4]
lea ecx, [esp + 0x28]
mov dword [esi + 0x384], eax
mov byte [esp + 0x7c], 0x14
call dword [0x6ac078]
lea ecx, [esp + 0x24]
mov byte [esp + 0x7c], 0x13
call dword [0x6abc18]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push str.CtrlShiftS
lea ecx, [esp + 0x18]
call dword [0x6abbc4]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], 0x16
call dword [0x6ad304]
mov ecx, dword [esi + 0x384]
push eax
mov byte [esp + 0x80], 0x17
call dword [0x6ac9c0]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], 0x16
call dword [0x6ad308]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea ecx, [esp + 0x30]
push str.Save_the_current_project
push ecx
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x384]
push eax
mov byte [esp + 0x80], 0x18
call dword [0x6ac9cc]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea edx, [esp + 0x30]
push str.Save_the_current_project
push edx
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x384]
push eax
mov byte [esp + 0x80], 0x19
call ebp
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
mov eax, dword [esi + 0x384]
push ebx
push str.1saveProject__
push esi
push str.2triggered__
push eax
call dword [0x6abbb4]
push ebx
lea ecx, [esp + 0x44]
push str.Save_Project_As...
push ecx
call fcn.00422fe0
add esp, 0x20
push eax
mov ecx, edi
mov byte [esp + 0x80], 0x1a
call dword [0x6ac994]
lea ecx, [esp + 0x2c]
mov dword [esi + 0x388], eax
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea edx, [esp + 0x30]
push str.Give_the_project_a_different_name
push edx
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x388]
push eax
mov byte [esp + 0x80], 0x1b
call dword [0x6ac9cc]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea eax, [esp + 0x30]
push str.Give_the_project_a_different_name
push eax
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x388]
push eax
mov byte [esp + 0x80], 0x1c
call ebp
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
push str.1saveAsProject__
push esi
mov ecx, dword [esi + 0x388]
push str.2triggered__
push ecx
call dword [0x6abbb4]
add esp, 0x14
push str.:_images_CloseProject
lea ecx, [esp + 0x18]
call dword [0x6abbc4]
push ebx
lea edx, [esp + 0x28]
push str.Close_Project
push edx
mov byte [esp + 0x88], 0x1d
call fcn.00422fe0
add esp, 0xc
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x1e
call dword [0x6ac080]
mov ecx, dword [esp + 0x2c]
push ecx
push eax
mov ecx, edi
mov byte [esp + 0x84], 0x1f
call dword [0x6ac9c4]
lea ecx, [esp + 0x28]
mov dword [esi + 0x390], eax
mov byte [esp + 0x7c], 0x1e
call dword [0x6ac078]
lea ecx, [esp + 0x24]
mov byte [esp + 0x7c], 0x1d
call dword [0x6abc18]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push str.CtrlW
lea ecx, [esp + 0x18]
call dword [0x6abbc4]
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], 0x20
call dword [0x6ad304]
mov ecx, dword [esi + 0x390]
push eax
mov byte [esp + 0x80], 0x21
call dword [0x6ac9c0]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], 0x20
call dword [0x6ad308]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea eax, [esp + 0x30]
push str.Close_the_current_project
push eax
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x390]
push eax
mov byte [esp + 0x80], 0x22
call dword [0x6ac9cc]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea ecx, [esp + 0x30]
push str.Close_the_current_project
push ecx
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x390]
push eax
mov byte [esp + 0x80], 0x23
call ebp
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
mov edx, dword [esi + 0x390]
push ebx
push str.1closeProject__
push esi
push str.2triggered__
push edx
call dword [0x6abbb4]
add esp, 0x14
push str.:_images_RecoverProject
lea ecx, [esp + 0x18]
call dword [0x6abbc4]
push ebx
lea eax, [esp + 0x28]
push str.Restore_Project
push eax
mov byte [esp + 0x88], 0x24
call fcn.00422fe0
add esp, 0xc
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x25
call dword [0x6ac080]
mov edx, dword [esp + 0x2c]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x84], 0x26
call dword [0x6ac9c4]
lea ecx, [esp + 0x28]
mov dword [esi + 0x38c], eax
mov byte [esp + 0x7c], 0x25
call dword [0x6ac078]
lea ecx, [esp + 0x24]
mov byte [esp + 0x7c], 0x24
call dword [0x6abc18]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push str.CtrlR
lea ecx, [esp + 0x18]
call dword [0x6abbc4]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], 0x27
call dword [0x6ad304]
mov ecx, dword [esi + 0x38c]
push eax
mov byte [esp + 0x80], 0x28
call dword [0x6ac9c0]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], 0x27
call dword [0x6ad308]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea ecx, [esp + 0x30]
push str.Restore_the_autosaved_project
push ecx
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x38c]
push eax
mov byte [esp + 0x80], 0x29
call dword [0x6ac9cc]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea edx, [esp + 0x30]
push str.Restore_the_autosaved_project
push edx
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x38c]
push eax
mov byte [esp + 0x80], 0x2a
call ebp
lea ecx, [esp + 0x2c]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
mov eax, dword [esi + 0x38c]
push ebx
push str.1recoverProject__
push esi
push str.2triggered__
push eax
call dword [0x6abbb4]
add esp, 0x14
lea eax, [esi + 0x384]
lea ecx, [esi + 0x148]
push eax
call fcn.00432d80
lea eax, [esi + 0x388]
push eax
lea ecx, [esi + 0x148]
call fcn.00432d80
lea eax, [esi + 0x390]
push eax
lea ecx, [esi + 0x148]
call fcn.00432d80
mov ecx, edi
call dword [0x6ac9b4]
push str.:_images_ScanSettingsSmall
lea ecx, [esp + 0x18]
call dword [0x6abbc4]
push ebx
lea ecx, [esp + 0x28]
push 0x6ec2a4
push ecx
mov byte [esp + 0x88], 0x2b
call fcn.00422fe0
add esp, 0xc
mov dword [esp + 0x2c], eax
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x2c
call dword [0x6ac080]
mov ecx, dword [esp + 0x2c]
push ecx
push eax
mov ecx, edi
mov byte [esp + 0x84], 0x2d
call dword [0x6ac9c4]
lea ecx, [esp + 0x28]
mov dword [esi + 0x394], eax
mov byte [esp + 0x7c], 0x2c
call dword [0x6ac078]
lea ecx, [esp + 0x24]
mov byte [esp + 0x7c], 0x2b
call dword [0x6abc18]
lea ecx, [esp + 0x14]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea edx, [esp + 0x34]
push str.ScanPapyrus_Settings
push edx
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x394]
push eax
mov byte [esp + 0x80], 0x2e
call dword [0x6ac9cc]
lea ecx, [esp + 0x30]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
push ebx
lea eax, [esp + 0x38]
push 0x6ec280
push eax
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x394]
push eax
mov byte [esp + 0x80], 0x2f
call ebp
lea ecx, [esp + 0x34]
mov byte [esp + 0x7c], bl
call dword [0x6abc18]
mov ecx, dword [esi + 0x394]
push ebx
push str.1settings__
push esi
push str.2triggered__
push ecx
call dword [0x6abbb4]
add esp, 0x14
mov ecx, edi
call dword [0x6ac9b4]
lea ecx, [esp + 0x18]
call dword [0x6ac9d8]
push 0x6b602a
lea ecx, [esp + 0x24]
mov byte [esp + 0x80], 0x30
call dword [0x6abbc4]
push ecx
mov eax, esp
mov dword [esp + 0x38], esp
push ebx
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x50]
mov byte [esp + 0x88], 0x31
mov dword [eax], ebx
call dword [0x6ad6f8]
push 1
push ebx
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x88], 0x32
call dword [0x6ac9d4]
lea ecx, [esp + 0x44]
mov byte [esp + 0x7c], 0x31
call dword [0x6ad700]
lea ecx, [esp + 0x20]
mov byte [esp + 0x7c], 0x30
call dword [0x6abc18]
push ebx
lea eax, [esp + 0x3c]
push str.Quit
push eax
call fcn.00422fe0
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
mov byte [esp + 0x84], 0x33
call dword [0x6ac9c4]
lea ecx, [esp + 0x38]
mov dword [esi + 0x398], eax
mov byte [esp + 0x7c], 0x30
call dword [0x6abc18]
push ebx
push str.Close_ScanPapyrus
lea edx, [esp + 0x44]
push edx
call fcn.00422fe0
add esp, 0xc
mov ecx, dword [esi + 0x398]
push eax
mov byte [esp + 0x80], 0x34
call ebp
lea ecx, [esp + 0x3c]
mov byte [esp + 0x7c], 0x30
call dword [0x6abc18]
mov eax, dword [esi + 0x398]
mov ebp, dword [0x6abbb4]
push ebx
push str.1close__
push esi
push str.2triggered__
push eax
call ebp
lea eax, [esi + 0x148]
push eax
lea ecx, [esp + 0x6c]
push ecx
call fcn.0043a720
add esp, 0x1c
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
mov byte [esp + 0x7c], 0x35
lea ecx, [ecx]
mov edx, eax
inc eax
mov dword [esp + 0x58], eax
test edx, edx
jne 0x43e82e
cmp ecx, dword [esp + 0x60]
je 0x43e82e
mov ecx, dword [ecx]
mov dword [esp + 0x3c], ecx
cmp eax, ebx
je 0x43e821
mov ecx, dword [esp + 0x3c]
push ebx
call dword [0x6ac88c]
mov eax, dword [esp + 0x58]
dec eax
mov dword [esp + 0x58], eax
jmp 0x43e807
mov ecx, dword [esp + 0x5c]
add ecx, 4
mov dword [esp + 0x5c], ecx
jmp 0x43e7f0
mov ecx, dword [esp + 0x54]
mov byte [esp + 0x7c], 0x30
call dword [0x6abbf0]
test al, al
jne 0x43e84f
mov edx, dword [esp + 0x54]
push edx
call dword [0x6abbf4]
add esp, 4
push ebx
lea eax, [esp + 0x40]
push str.Recent_Documents
push eax
call fcn.00422fe0
add esp, 0xc
push eax
mov ecx, edi
mov byte [esp + 0x80], 0x36
call dword [0x6adb40]
mov edi, eax
lea ecx, [esp + 0x3c]
mov dword [esi + 0x1c8], edi
mov byte [esp + 0x7c], 0x30
call dword [0x6abc18]
cmp edi, ebx
je 0x43e976
mov ecx, dword [esi + 0x1c8]
push 9
call dword [0x6adb44]
mov ecx, dword [esi + 0x1c8]
push ebx
push str.1openRecentFile_const_QString_
push esi
push str.2openRecentFile_const_QString_
push ecx
call ebp
mov edx, dword [esi + 0x1c8]
push ebx
push str.1updateRecentFileActions_const_QStringList_
push edx
push str.2updateRecentFileActions_const_QStringList_
push esi
call ebp
add esp, 0x28
push ebx
lea ecx, [esp + 0x40]
call dword [0x6abb50]
lea ecx, [esp + 0x64]
mov byte [esp + 0x7c], 0x37
call dword [0x6abb4c]
push eax
push 0x809728
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x88], 0x38
call dword [0x6abb54]
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
mov byte [esp + 0x80], 0x39
call dword [0x6ab6ac]
mov edi, dword [0x6abb5c]
lea ecx, [esp + 0x44]
mov byte [esp + 0x7c], 0x3b
call edi
lea ecx, [esp + 0x64]
mov byte [esp + 0x7c], 0x3c
call edi
mov ecx, dword [esi + 0x1c8]
lea edx, [esp + 0x14]
push edx
call dword [0x6adb48]
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x7c], 0x37
call dword [0x6abbf0]
test al, al
jne 0x43e967
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x18]
call fcn.00401260
lea ecx, [esp + 0x3c]
mov byte [esp + 0x7c], 0x30
call dword [0x6abba4]
lea ecx, [esp + 0x18]
mov byte [esp + 0x7c], bl
call dword [0x6ac078]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x7c], 0xffffffff
call dword [0x6ac078]
mov ecx, dword [esp + 0x74]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6c
ret