Function at 0x6e4d90
Capabilities:
Set thread local storage value
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf8
mov dword [ebp - 4], 0x58
mov dword [ebp - 0x34], 0x2a
mov dword [ebp - 0x98], 2
mov dword [ebp - 0xb8], 0x5b
mov dword [ebp - 0xe8], 0x40
mov dword [ebp - 0x88], 0xb
mov dword [ebp - 0x1c], 0x64
mov dword [ebp - 0x18], 0x4a
mov dword [ebp - 0x10], 0x4c
mov dword [ebp - 0x28], 0x4c
mov dword [ebp - 0x20], 0x3b
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x14], 0x28
mov dword [ebp - 8], 0x37
mov dword [ebp - 0xcc], 0x55
mov dword [ebp - 0xb4], 0x37
mov dword [ebp - 0x38], 0x51
mov dword [ebp - 0x30], 0x4a
mov dword [ebp - 0x2c], 0x5a
mov dword [ebp - 0xa0], 4
mov dword [ebp - 0x24], 0x44
mov dword [ebp - 0xf4], 0x25
mov dword [ebp - 0xc], 0x22
mov dword [ebp - 0xd0], 6
mov eax, dword [0x83b93c]
add eax, 0xa
push eax
mov ecx, dword [0x83b9dc]
add ecx, 0x1b
push ecx
mov edx, dword [ebp - 0x24]
add edx, 0x1f
push edx
mov eax, dword [ebp - 0x34]
add eax, 5
push eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x1a
push ecx
mov edx, dword [0x83b990]
sub edx, 0x31
push edx
mov eax, dword [0x83b9fc]
add eax, 0xd
push eax
mov ecx, dword [ebp - 0x3c]
add ecx, 0x44
push ecx
mov edx, dword [0x83b9c0]
add edx, 0x5b
push edx
call fcn.00427680
add esp, 0x24
mov dword [ebp - 0x40], 0
jmp 0x6e4ec2
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
mov ecx, dword [0x83b9f0]
sub ecx, 0x186b1
cmp dword [ebp - 0x40], ecx
jge 0x6e4f52
mov edx, dword [ebp - 4]
sub edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x18]
jge 0x6e4ef0
mov dword [ebp - 0x64], 1
jmp 0x6e4ef7
mov dword [ebp - 0x64], 0
mov ecx, dword [ebp - 0x98]
cmp ecx, dword [ebp - 0x10]
jge 0x6e4f0b
mov dword [ebp - 0x68], 1
jmp 0x6e4f12
mov dword [ebp - 0x68], 0
mov edx, dword [ebp - 0x88]
sub edx, dword [ebp - 0x34]
and edx, dword [ebp - 0x64]
or edx, dword [ebp - 0x68]
je 0x6e4f4d
push 0x77f4
push 0x10dfa
push 0x148c2
push 0x3934
call dword [sym.imp.KERNEL32.dll_InterlockedPushEntrySList]
add esp, 0x10
mov eax, dword [0x83b940]
sub eax, 1
mov dword [0x83b940], eax
jmp 0x6e4eb9
mov ecx, dword [0x83b9f8]
add ecx, 0x14
push ecx
mov edx, dword [0x83b9bc]
sub edx, 0x28
push edx
mov eax, dword [ebp - 4]
sub eax, 0x49
push eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x13
push ecx
call fcn.00428190
add esp, 0x10
mov edx, dword [ebp + 8]
or edx, 0xd9ac
sub edx, 0x54ac
xor edx, 0x611f
xor edx, 0xe845
mov eax, dword [ebp + 0x14]
or eax, 0x2b00
xor eax, 0x3b81
xor eax, 0x4468
mov byte [eax + str.LwQOhllRwRitOnUFyKdgeA], dl
mov ecx, dword [0x83b940]
add ecx, 1
mov dword [0x83b940], ecx
mov dword [ebp - 0x44], 0
jmp 0x6e4fd0
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x186db
cmp dword [ebp - 0x44], eax
jge 0x6e500b
push 0x15ae2
push 0x175b6
push 0x46db
push 0xbd00
call dword [sym.imp.USER32.dll_SetMenu]
add esp, 0x10
mov ecx, dword [0x83b9bc]
sub ecx, 1
mov dword [0x83b9bc], ecx
jmp 0x6e4fc7
mov dword [ebp - 0x48], 0
jmp 0x6e501d
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
mov eax, dword [0x83b9d8]
sub eax, 0x186d4
cmp dword [ebp - 0x48], eax
jge 0x6e5068
push 0x93b9
push 0xbd61
push 0x11a2f
push 0xb06d
push 0x11b57
push 0x6e1f
push 0x14a05
push 0xafc
call dword [sym.imp.USER32.dll_IsWindowVisible]
add esp, 0x20
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
jmp 0x6e5014
mov edx, dword [ebp + 0x18]
and edx, 0xfcd3
and edx, 0x8f27
xor edx, 0x80f9
mov eax, 0x3aee
sub eax, dword [ebp + 0x14]
xor eax, 0x3bd0
xor eax, 0xffffe732
mov byte [eax + str.LwQOhllRwRitOnUFyKdgeA], dl
mov dword [ebp - 0x4c], 0
jmp 0x6e50a7
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x186db
cmp dword [ebp - 0x4c], edx
jge 0x6e50f5
push 0x140dd
push 0x15ae8
push 0x1483b
push 0x16481
push 0x12bf
push 0xca72
push 0x111f0
push 0x151db
call dword [sym.imp.KERNEL32.dll_ReadConsoleW]
add esp, 0x20
mov eax, dword [0x83b9c0]
sub eax, 1
mov dword [0x83b9c0], eax
jmp 0x6e509e
mov ecx, dword [ebp + 0x14]
or ecx, 0xf0b5
xor ecx, 0x636f9191
mov edx, dword [ebp + 8]
xor edx, 0x110c
xor edx, 0xccd1
mov dword [edx + str.LwQOhllRwRitOnUFyKdgeA], ecx
mov eax, dword [0x83b994]
add eax, 0xb
push eax
call fcn.0041e980
add esp, 4
mov ecx, dword [ebp + 0x18]
and ecx, 0x1429
xor ecx, 0x771b
or ecx, 0x4e81
xor ecx, 0x6f58
mov edx, dword [ebp + 0x14]
add edx, 0x29da
xor edx, 0x87c0
mov byte [edx + str.LwQOhllRwRitOnUFyKdgeA], cl
mov dword [ebp - 0x50], 0
jmp 0x6e516c
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x186c2
cmp dword [ebp - 0x50], ecx
jge 0x6e5235
mov edx, dword [0x83b93c]
sub edx, 1
mov dword [0x83b93c], edx
mov eax, dword [0x83b93c]
cmp eax, dword [ebp - 0xa0]
jge 0x6e51a3
mov dword [ebp - 0x6c], 1
jmp 0x6e51aa
mov dword [ebp - 0x6c], 0
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x30]
jge 0x6e51bb
mov dword [ebp - 0x70], 1
jmp 0x6e51c2
mov dword [ebp - 0x70], 0
mov edx, dword [ebp - 8]
sub edx, 1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0xb8]
jge 0x6e51df
mov dword [ebp - 0x74], 1
jmp 0x6e51e6
mov dword [ebp - 0x74], 0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x6c]
and edx, dword [ebp - 0x18]
and edx, dword [ebp - 0x70]
xor edx, dword [ebp - 0x1c]
or edx, dword [ebp - 0x74]
je 0x6e5230
push 0x2f17
push 0xd1a0
push 0x2ab6
push 0x20d7
push 0xeb0f
push 0x5c6f
call dword [sym.imp.USER32.dll_CreateWindowExA]
add esp, 0x18
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
jmp 0x6e5163
mov ecx, dword [ebp + 0x14]
xor ecx, 0x9e82
sub ecx, 0x7675
xor ecx, 0x4d18
mov edx, dword [ebp + 8]
add edx, 0xf927
and edx, 0xe5b8
add edx, 0x89de
xor edx, 0x14ecb
mov byte [edx + str.LwQOhllRwRitOnUFyKdgeA], cl
mov eax, dword [ebp - 4]
sub eax, 0x10
push eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x52
push ecx
mov edx, dword [0x83b9c0]
add edx, 0x24
push edx
mov eax, dword [0x83b9dc]
add eax, 0x19
push eax
mov ecx, dword [0x83b9fc]
add ecx, 0x3f
push ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x29
push edx
mov eax, dword [0x83b994]
sub eax, 0x1f
push eax
mov ecx, dword [ebp - 0x24]
sub ecx, 7
push ecx
call fcn.00424110
add esp, 0x20
mov edx, dword [ebp + 0x18]
xor edx, 0x4f9b
xor edx, 0x9c79
mov eax, 0x56e7
sub eax, dword [ebp + 0x10]
xor eax, 0x1a62
mov byte [eax + str.LwQOhllRwRitOnUFyKdgeA], dl
mov ecx, dword [0x83b9c0]
mov dword [ebp - 0xd8], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0xdc], edx
mov eax, dword [0x83b9c0]
add eax, 1
mov dword [0x83b9c0], eax
mov ecx, dword [ebp - 0xd8]
cmp ecx, dword [ebp - 0xdc]
jge 0x6e5310
mov dword [ebp - 0x78], 1
jmp 0x6e5317
mov dword [ebp - 0x78], 0
mov edx, dword [0x83b93c]
add edx, 1
mov dword [0x83b93c], edx
mov eax, dword [0x83b93c]
cmp eax, dword [ebp - 0xb4]
jge 0x6e533c
mov dword [ebp - 0x7c], 1
jmp 0x6e5343
mov dword [ebp - 0x7c], 0
mov ecx, dword [ebp - 0x78]
and ecx, dword [ebp - 0x7c]
je 0x6e53d1
mov edx, dword [ebp - 0x10]
or edx, dword [ebp - 0x24]
cmp edx, dword [ebp - 0x14]
jge 0x6e5363
mov dword [ebp - 0x80], 1
jmp 0x6e536a
mov dword [ebp - 0x80], 0
mov eax, dword [0x83b9c4]
add eax, dword [ebp - 4]
mov dword [ebp - 0xe0], eax
mov ecx, dword [0x83b9bc]
mov dword [ebp - 0xe4], ecx
mov edx, dword [0x83b9c4]
sub edx, 1
mov dword [0x83b9c4], edx
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0xe4]
jge 0x6e53ad
mov dword [ebp - 0x84], 1
jmp 0x6e53b7
mov dword [ebp - 0x84], 0
mov ecx, dword [ebp - 0x80]
and ecx, dword [ebp - 0x84]
je 0x6e53d1
mov edx, dword [0x83b93c]
sub edx, 1
mov dword [0x83b93c], edx
mov eax, dword [0x83b940]
add eax, 1
mov dword [0x83b940], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x29
push ecx
mov edx, dword [ebp - 0x28]
add edx, 0x12
push edx
mov eax, dword [0x83b93c]
sub eax, 0x27
push eax
call fcn.00412b80
add esp, 0xc
mov dword [ebp - 0x54], 0
jmp 0x6e540f
mov ecx, dword [ebp - 0x54]
add ecx, 1
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x27
cmp dword [ebp - 0x54], edx
jge 0x6e543e
mov eax, dword [0x83b9f4]
or eax, dword [ebp - 0x88]
and eax, dword [ebp - 8]
xor eax, dword [ebp - 0x3c]
je 0x6e543c
mov ecx, dword [0x83b9f8]
add ecx, 1
mov dword [0x83b9f8], ecx
jmp 0x6e5406
mov edx, dword [ebp - 0x28]
sub edx, 1
mov dword [ebp - 0x28], edx
mov eax, 0xcb20
sub eax, dword [ebp + 0x10]
and eax, 0x2716
xor eax, 0x667
mov ecx, dword [ebp + 0x1c]
or ecx, 0x347e
xor ecx, 0xac7
xor ecx, 0x36b4
mov byte [ecx + str.LwQOhllRwRitOnUFyKdgeA], al
mov edx, dword [ebp - 0x10]
sub edx, 1
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x20]
jge 0x6e5494
mov dword [ebp - 0x94], 1
jmp 0x6e549e
mov dword [ebp - 0x94], 0
mov ecx, dword [ebp - 0xe8]
cmp ecx, dword [0x83b9c0]
jge 0x6e54b8
mov dword [ebp - 0x8c], 1
jmp 0x6e54c2
mov dword [ebp - 0x8c], 0
mov edx, dword [ebp - 0x28]
cmp edx, dword [0x83b9c4]
jge 0x6e54d9
mov dword [ebp - 0x90], 1
jmp 0x6e54e3
mov dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x8c]
and eax, dword [ebp - 0x90]
or eax, dword [ebp - 0x94]
je 0x6e560f
mov ecx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 8]
jge 0x6e5518
mov dword [ebp - 0xa8], 1
jmp 0x6e5522
mov dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x98]
jge 0x6e553c
mov dword [ebp - 0x9c], 1
jmp 0x6e5546
mov dword [ebp - 0x9c], 0
mov ecx, dword [0x83b940]
cmp ecx, dword [0x83b990]
jge 0x6e5560
mov dword [ebp - 0xa4], 1
jmp 0x6e556a
mov dword [ebp - 0xa4], 0
mov edx, dword [ebp - 0x9c]
and edx, dword [ebp - 0xa0]
xor edx, dword [ebp - 0xa4]
or edx, dword [ebp - 0xa8]
je 0x6e560f
mov eax, dword [0x83b990]
sub eax, 1
mov dword [0x83b990], eax
mov ecx, dword [0x83b990]
cmp ecx, dword [0x83b93c]
jge 0x6e55af
mov dword [ebp - 0xac], 1
jmp 0x6e55b9
mov dword [ebp - 0xac], 0
mov edx, dword [ebp - 4]
mov dword [ebp - 0xec], edx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 1
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0xec]
cmp edx, dword [ebp - 0xf0]
jge 0x6e55ee
mov dword [ebp - 0xb0], 1
jmp 0x6e55f8
mov dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xac]
or eax, dword [ebp - 0xb0]
je 0x6e560f
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [0x83b9d8]
cmp edx, dword [0x83b9fc]
jge 0x6e5629
mov dword [ebp - 0xc4], 1
jmp 0x6e5633
mov dword [ebp - 0xc4], 0
mov eax, dword [0x83b9dc]
imul eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0xb8]
jge 0x6e5653
mov dword [ebp - 0xbc], 1
jmp 0x6e565d
mov dword [ebp - 0xbc], 0
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
cmp edx, dword [0x83b9c0]
jge 0x6e567d
mov dword [ebp - 0xc0], 1
jmp 0x6e5687
mov dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xbc]
and eax, dword [ebp - 0xc0]
or eax, dword [ebp - 0xc4]
je 0x6e570f
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0xd0]
jge 0x6e56b2
mov dword [ebp - 0xc8], 1
jmp 0x6e56bc
mov dword [ebp - 0xc8], 0
mov edx, dword [ebp - 0x34]
and edx, dword [ebp - 0xc8]
mov eax, dword [0x83b9f0]
imul eax, dword [ebp - 0xc]
or edx, eax
mov ecx, dword [0x83b9f4]
sub ecx, dword [ebp - 0x2c]
or edx, ecx
je 0x6e570f
mov edx, dword [0x83b940]
add edx, 1
mov dword [0x83b940], edx
mov eax, dword [0x83b9c4]
imul eax, dword [0x83b940]
cmp eax, dword [ebp - 0xcc]
jge 0x6e570f
mov ecx, dword [0x83b9f0]
sub ecx, 1
mov dword [0x83b9f0], ecx
mov edx, dword [ebp + 0x18]
or edx, 0x5d78
xor edx, 0xdfff
mov eax, dword [ebp + 0x10]
xor eax, 0x8ac4
xor eax, 0xb6b2
mov byte [eax + str.LwQOhllRwRitOnUFyKdgeA], dl
mov dword [ebp - 0x58], 0
jmp 0x6e5743
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x22
cmp dword [ebp - 0x58], edx
jge 0x6e5759
mov eax, dword [ebp - 0x30]
sub eax, 1
mov dword [ebp - 0x30], eax
jmp 0x6e573a
mov ecx, 0xe7a0
sub ecx, dword [ebp + 0x18]
xor ecx, 0x1469
mov edx, dword [ebp + 0x14]
xor edx, 0x3c83
xor edx, 0x6175
mov byte [edx + str.LwQOhllRwRitOnUFyKdgeA], cl
mov eax, dword [0x83b9c0]
sub eax, 6
push eax
mov ecx, dword [0x83b9c4]
sub ecx, 0x13
push ecx
mov edx, dword [0x83b9f0]
add edx, 8
push edx
mov eax, dword [0x83b9d8]
add eax, 5
push eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x1f
push ecx
mov edx, dword [0x83b994]
sub edx, 0x47
push edx
mov eax, dword [ebp - 0x10]
sub eax, 6
push eax
call fcn.0041e650
add esp, 0x1c
mov ecx, dword [ebp + 8]
xor ecx, 0x2c26
xor ecx, 0xf1a1
mov edx, 0x2c8a
sub edx, dword [ebp + 0x1c]
xor edx, 0xfffff01c
mov byte [edx + str.LwQOhllRwRitOnUFyKdgeA], cl
call fcn.0041fa50
mov eax, dword [0x83b9dc]
add eax, 1
mov dword [0x83b9dc], eax
mov ecx, 0x4562
sub ecx, dword [ebp + 0x14]
and ecx, 0x2bb0
xor ecx, 0x48655741
mov edx, dword [ebp + 0x1c]
xor edx, 0xbee3
sub edx, 0x28b6
and edx, 0x672c
xor edx, 0x412c
mov dword [edx + str.LwQOhllRwRitOnUFyKdgeA], ecx
mov dword [ebp - 0x5c], 0
jmp 0x6e583e
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
mov ecx, dword [0x83b9f4]
sub ecx, 0x186f9
cmp dword [ebp - 0x5c], ecx
jge 0x6e587c
push 0x908c
push 0x16349
push 0x18103
push 0x62f5
push 0xe948
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
add esp, 0x14
mov edx, dword [ebp - 4]
sub edx, 1
mov dword [ebp - 4], edx
jmp 0x6e5835
mov eax, dword [ebp - 0xd0]
add eax, 0x15
push eax
mov ecx, dword [0x83b9dc]
add ecx, 0x18
push ecx
mov edx, dword [ebp - 0x20]
add edx, 0x23
push edx
mov eax, dword [ebp - 4]
sub eax, 3
push eax
mov ecx, dword [0x83b9fc]
sub ecx, 0x18
push ecx
mov edx, dword [0x83b9dc]
sub edx, 0x27
push edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x36
push eax
call fcn.00422d30
add esp, 0x1c
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x34]
jge 0x6e58d5
mov dword [ebp - 0xd4], 1
jmp 0x6e58df
mov dword [ebp - 0xd4], 0
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x38]
and eax, dword [0x83b9f4]
or eax, dword [ebp - 8]
or eax, dword [ebp - 0xd4]
je 0x6e590b
mov ecx, dword [0x83b9f8]
add ecx, 1
mov dword [0x83b9f8], ecx
mov dword [ebp - 0x60], 0
jmp 0x6e591d
mov eax, dword [0x83b990]
sub eax, 0x186d9
cmp dword [ebp - 0x60], eax
jge 0x6e596b
push 0xf14f
push 0x837b
push 0xaddd
push 0x4477
push 0x527c
push 0x108d
push 0x10738
push 0x8dc3
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov edx, dword [ebp + 0xc]
or edx, 0xfe82
xor edx, 0x416c8aa5
mov eax, dword [ebp + 0x14]
or eax, 0x175f
xor eax, 0x5fff
mov dword [eax + str.LwQOhllRwRitOnUFyKdgeA], edx
mov ecx, dword [ebp - 0xf4]
sub ecx, 0x21
push ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x38
push edx
mov eax, dword [0x83b994]
sub eax, 0x31
push eax
mov ecx, dword [0x83b9f8]
sub ecx, 0x4b
push ecx
mov edx, dword [ebp - 0x3c]
add edx, 0x28
push edx
mov eax, dword [ebp - 0xc]
add eax, 0x1d
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 5
push ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x11
push edx
mov eax, dword [0x83b93c]
sub eax, 0x12
push eax
call fcn.00423bf0
add esp, 0x24
mov ecx, dword [ebp + 0x14]
sub ecx, 0x5e6a
xor ecx, 0xffffff0e
mov edx, dword [ebp + 8]
and edx, 0x19d9
xor edx, 0x19ca
mov byte [edx + str.LwQOhllRwRitOnUFyKdgeA], cl
call fcn.00417ba0
mov eax, str.LwQOhllRwRitOnUFyKdgeA
jmp 0x6e5a59
mov esp, ebp
pop ebp
ret