Function at 0x4856f0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x28
xor eax, eax
mov ecx, dword [0x6255e0]
xor ecx, ebp
mov dword [ebp - 0x10], ecx
mov ecx, dword [0x625f50]
mov edx, dword [0x625f54]
mov esi, ecx
sub esi, 0xe193f402
sub esi, 0xe8e66dd9
add esi, 0xe193f402
sub esi, 0x805c4944
add esi, 0xccc8a912
add esi, 0x805c4944
sub esi, 0x2721dacb
add esi, 0xe8e66dd9
add esi, 0x2721dacb
mov edi, 0xf47c3a91
add edi, 0
sub edi, 1
sub edi, 0xf47c3a91
mov ebx, eax
sub ebx, esi
mov esi, eax
sub esi, edi
add ebx, esi
mov esi, eax
sub esi, ebx
mov edi, eax
sub edi, esi
mov esi, eax
sub esi, 0x4e06bdd7
add edi, esi
mov esi, eax
sub esi, edi
sub eax, 0xccc8a912
add esi, eax
sub esi, 0xae89f61d
sub esi, 0x4e06bdd7
add esi, 0xae89f61d
imul ecx, esi
and ecx, 1
cmp ecx, 0
sete al
and al, 1
mov byte [ebp - 0x12], al
cmp edx, 0xa
setl al
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x18], 0x437ad415
mov eax, dword [ebp - 0x18]
mov ecx, eax
sub ecx, 0xb63a0618
mov dword [ebp - 0x1c], eax
je 0x485ab2
jmp 0x4857d0
mov eax, dword [ebp - 0x1c]
sub eax, 0x31afba5
je 0x48629d
jmp 0x4857e3
mov eax, dword [ebp - 0x1c]
sub eax, 0x1df7fbca
je 0x4860aa
jmp 0x4857f6
mov eax, dword [ebp - 0x1c]
sub eax, 0x22c757a4
je 0x485d13
jmp 0x485809
mov eax, dword [ebp - 0x1c]
sub eax, 0x437ad415
je 0x485847
jmp 0x48581c
mov eax, dword [ebp - 0x1c]
sub eax, 0x5c6c2319
je 0x485cff
jmp 0x48582f
mov eax, dword [ebp - 0x1c]
sub eax, 0x6e738d66
je 0x486291
jmp 0x485842
jmp 0x4862bd
mov al, byte [ebp - 0x12]
mov cl, byte [ebp - 0x11]
mov dl, al
xor dl, 0xff
and dl, 1
mov ah, 1
mov ch, ah
xor ch, 1
mov dh, al
and dh, ch
mov bl, ah
xor bl, 1
and bl, 0xff
and ch, 1
or dl, dh
or bl, ch
xor dl, bl
mov ch, cl
xor ch, 0xff
and ch, 1
mov dh, ah
xor dh, 1
mov bl, cl
and bl, dh
mov bh, ah
xor bh, 1
and bh, 0xff
and dh, 1
or ch, bl
or bh, dh
xor ch, bh
mov dh, ah
xor dh, 1
and dh, 1
mov bl, ah
xor bl, 1
and bl, 1
or dh, bl
mov bl, dl
xor bl, 0xff
mov bh, ch
xor bh, 0xff
mov byte [ebp - 0x1d], ah
xor ah, 0
mov byte [ebp - 0x1e], bl
and bl, 0
and dl, ah
mov byte [ebp - 0x1f], bh
and bh, 0
and ch, ah
or bl, dl
or bh, ch
xor bl, bh
mov dl, byte [ebp - 0x1e]
mov ch, byte [ebp - 0x1f]
or dl, ch
xor dl, 0xff
or ah, 0
and dl, ah
or bl, dl
mov dl, byte [ebp - 0x1d]
xor dl, 1
mov ah, dh
xor ah, 0xff
mov bh, byte [ebp - 0x1d]
xor bh, 1
mov ch, dl
and ch, 0xff
mov byte [ebp - 0x20], bh
and bh, 1
mov byte [ebp - 0x21], ah
and ah, 0xff
mov byte [ebp - 0x22], al
mov al, byte [ebp - 0x20]
and dh, al
or ch, bh
or ah, dh
xor ch, ah
mov ah, byte [ebp - 0x21]
or dl, ah
xor dl, 0xff
or al, 1
and dl, al
or ch, dl
mov al, bl
xor al, 0xff
and al, 1
mov dl, byte [ebp - 0x1d]
xor dl, 1
and bl, dl
or al, bl
xor ch, 0xff
mov dl, al
xor dl, ch
and dl, al
mov al, byte [ebp - 0x22]
xor al, 0xff
and al, 1
mov ch, byte [ebp - 0x1d]
xor ch, 1
mov dh, byte [ebp - 0x22]
and dh, ch
mov bl, byte [ebp - 0x1d]
xor bl, 1
and bl, 0xff
and ch, 1
or al, dh
or bl, ch
xor al, bl
xor al, 0xff
xor al, 0
and al, 0
mov ch, byte [ebp - 0x1d]
xor ch, 0
and ch, 1
mov dh, byte [ebp - 0x1d]
xor dh, 1
mov bl, dh
and bl, 0
mov bh, byte [ebp - 0x1d]
xor bh, 1
and bh, 0xff
and dh, 1
or ch, bl
or bh, dh
xor ch, bh
mov dh, ch
xor dh, 0xff
mov bl, byte [ebp - 0x22]
xor bl, dh
mov dh, byte [ebp - 0x22]
and bl, dh
mov bh, cl
xor bh, 0xff
and bh, 1
mov ah, byte [ebp - 0x1d]
xor ah, 1
mov dh, cl
and dh, ah
or bh, dh
mov ah, byte [ebp - 0x1d]
xor ah, 0
mov dh, bh
xor dh, ah
and dh, bh
xor ch, 0xff
mov ah, cl
xor ah, ch
and ah, cl
mov cl, al
xor cl, 0xff
mov ch, bl
xor ch, 0xff
mov bh, byte [ebp - 0x1d]
xor bh, 0
mov byte [ebp - 0x23], cl
and cl, 0
and al, bh
mov byte [ebp - 0x24], ch
and ch, 0
and bl, bh
or cl, al
or ch, bl
xor cl, ch
mov al, byte [ebp - 0x23]
mov ch, byte [ebp - 0x24]
or al, ch
xor al, 0xff
or bh, 0
and al, bh
or cl, al
mov al, dh
xor al, 0xff
mov bl, ah
xor bl, 0xff
mov bh, byte [ebp - 0x1d]
xor bh, 0
mov ch, al
and ch, 0
and dh, bh
mov byte [ebp - 0x25], bl
and bl, 0
and ah, bh
or ch, dh
or bl, ah
xor ch, bl
mov ah, byte [ebp - 0x25]
or al, ah
xor al, 0xff
or bh, 0
and al, bh
or ch, al
mov al, cl
xor al, 0xff
and al, 0
mov dh, byte [ebp - 0x1d]
xor dh, 0
and cl, dh
mov bl, ch
xor bl, 0xff
and bl, 0
and ch, dh
or al, cl
or bl, ch
xor al, bl
mov cl, dl
xor cl, 0xff
mov ch, al
xor ch, 0xff
mov dh, byte [ebp - 0x1d]
xor dh, 1
or cl, ch
or dh, 1
xor cl, 0xff
and cl, dh
mov ch, dl
xor ch, 0xff
mov dh, al
and dh, ch
xor al, 0xff
and dl, al
or dh, dl
mov al, cl
xor al, 0xff
mov dl, dh
xor dl, 0xff
mov ch, byte [ebp - 0x1d]
xor ch, 1
mov bl, al
and bl, 0xff
and cl, ch
mov bh, dl
and bh, 0xff
and dh, ch
or bl, cl
or bh, dh
xor bl, bh
or al, dl
xor al, 0xff
or ch, 1
and al, ch
or bl, al
test bl, 1
mov esi, 0xb63a0618
mov edi, 0x22c757a4
cmovne edi, esi
mov dword [ebp - 0x18], edi
jmp 0x4862bd
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x625f08], eax
xor eax, eax
mov ecx, dword [0x625f50]
mov edx, dword [0x625f54]
mov esi, 0x4a0cb4da
add esi, 0
sub esi, 0x52060d4c
sub esi, 0x4a0cb4da
add esi, 0xe757a787
sub esi, 1
sub esi, 0xe757a787
add esi, 0x2b1952e7
add esi, 0x52060d4c
sub esi, 0x2b1952e7
mov edi, eax
sub edi, ecx
add edi, 0
sub eax, esi
add eax, 0
add edi, 0x80b9fe1b
add edi, eax
sub edi, 0x80b9fe1b
mov eax, 0x910bc592
add eax, 0
sub eax, edi
sub eax, 0x910bc592
imul ecx, eax
and ecx, 1
cmp ecx, 0
sete bl
cmp edx, 0xa
setl bh
mov al, bl
xor al, 0xff
and al, 1
mov ah, 1
mov cl, ah
xor cl, 1
mov ch, bl
and ch, cl
or al, ch
mov cl, bh
xor cl, 0xff
and cl, 1
mov ch, ah
xor ch, 1
mov dl, bh
and dl, ch
mov dh, ah
xor dh, 1
and dh, 0xff
and ch, 1
or cl, dl
or dh, ch
xor cl, dh
mov dl, ah
xor dl, 0
and dl, 1
mov ch, ah
xor ch, 1
and ch, 0
or dl, ch
mov ch, al
xor ch, 0xff
mov dh, cl
xor dh, 0xff
mov byte [ebp - 0x26], ah
xor ah, 1
mov byte [ebp - 0x27], ch
and ch, 0xff
and al, ah
mov byte [ebp - 0x28], dh
and dh, 0xff
and cl, ah
or ch, al
or dh, cl
xor ch, dh
mov al, byte [ebp - 0x27]
mov cl, byte [ebp - 0x28]
or al, cl
xor al, 0xff
or ah, 1
and al, ah
or ch, al
mov al, byte [ebp - 0x26]
xor al, 0
mov ah, dl
xor ah, 0xff
mov dh, byte [ebp - 0x26]
xor dh, 1
mov cl, al
and cl, 0xff
mov byte [ebp - 0x29], dh
and dh, 0
mov byte [ebp - 0x2a], ah
and ah, 0xff
mov byte [ebp - 0x2b], al
mov al, byte [ebp - 0x29]
and dl, al
or cl, dh
or ah, dl
xor cl, ah
mov dl, byte [ebp - 0x2b]
mov ah, byte [ebp - 0x2a]
or dl, ah
xor dl, 0xff
or al, 1
and dl, al
or cl, dl
mov al, ch
xor al, 0xff
and al, 0
mov dl, byte [ebp - 0x26]
xor dl, 0
and ch, dl
mov dh, byte [ebp - 0x26]
xor dh, 1
and dh, 0
and dl, 1
or al, ch
or dh, dl
xor al, dh
xor cl, 0xff
mov dl, al
xor dl, cl
and dl, al
mov al, bl
xor al, 0xff
and al, 0
mov cl, byte [ebp - 0x26]
xor cl, 0
mov ch, bl
and ch, cl
mov dh, byte [ebp - 0x26]
xor dh, 1
and dh, 0
and cl, 1
or al, ch
or dh, cl
xor al, dh
mov cl, bh
xor cl, 0xff
xor al, 0xff
mov ch, byte [ebp - 0x26]
xor ch, 1
or cl, al
or ch, 1
xor cl, 0xff
and cl, ch
mov al, bh
xor al, 0xff
and al, 0
mov ch, byte [ebp - 0x26]
xor ch, 0
and bh, ch
mov dh, byte [ebp - 0x26]
xor dh, 1
and dh, 0
and ch, 1
or al, bh
or dh, ch
xor al, dh
xor bl, 0xff
xor al, 0xff
mov ch, byte [ebp - 0x26]
xor ch, 1
or bl, al
or ch, 1
xor bl, 0xff
and bl, ch
mov al, cl
and al, bl
xor cl, bl
or al, cl
mov cl, dl
xor cl, 0xff
mov ch, al
xor ch, 0xff
mov dh, byte [ebp - 0x26]
xor dh, 0
or cl, ch
or dh, 0
xor cl, 0xff
and cl, dh
mov ch, dl
xor ch, 0xff
and ch, 0
mov dh, byte [ebp - 0x26]
xor dh, 0
and dl, dh
mov bl, al
xor bl, 0xff
and bl, 0
and al, dh
or ch, dl
or bl, al
xor ch, bl
mov al, cl
and al, ch
xor cl, ch
or al, cl
test al, 1
mov esi, 0x5c6c2319
mov edi, 0x22c757a4
cmovne edi, esi
mov dword [ebp - 0x18], edi
jmp 0x4862bd
mov eax, dword [ebp - 0x10]
xor eax, ebp
mov ecx, eax
call fcn.006086d3
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
mov ecx, dword [0x625f50]
mov edx, dword [0x625f54]
mov esi, ecx
sub esi, 0xa4e415c4
sub esi, 0x1eb94ba3
add esi, 0xa4e415c4
sub esi, 0xda5d36b5
sub esi, 0x3fada8b7
add esi, 0xda5d36b5
mov edi, eax
sub edi, esi
mov esi, eax
sub esi, 0x1eb94ba3
add edi, esi
mov esi, eax
sub esi, edi
mov edi, eax
sub edi, 0x346ef2cd
sub esi, edi
sub esi, 0xa310e6cc
sub esi, 1
add esi, 0xa310e6cc
sub esi, 0xb6891f41
sub esi, 0x346ef2cd
add esi, 0xb6891f41
sub esi, 0xa26f6715
add esi, 0x64bd92bd
add esi, 0xa26f6715
mov edi, eax
sub edi, esi
mov esi, eax
sub esi, 0x3fada8b7
add edi, esi
sub eax, edi
sub eax, 0x78780b5b
sub eax, 0x64bd92bd
add eax, 0x78780b5b
imul ecx, eax
and ecx, 1
cmp ecx, 0
sete bl
cmp edx, 0xa
setl bh
mov al, bl
xor al, 0xff
and al, 0
mov ah, 1
mov cl, ah
xor cl, 0
mov ch, bl
and ch, cl
mov dl, ah
xor dl, 1
and dl, 0
and cl, 1
or al, ch
or dl, cl
xor al, dl
mov cl, bh
xor cl, 0xff
and cl, 1
mov dl, ah
xor dl, 1
mov ch, bh
and ch, dl
mov dh, ah
xor dh, 1
and dh, 0xff
and dl, 1
or cl, ch
or dh, dl
xor cl, dh
mov dl, ah
xor dl, 1
and dl, 1
mov ch, ah
xor ch, 1
and ch, 1
or dl, ch
mov ch, al
xor ch, 0xff
mov dh, cl
xor dh, 0xff
mov byte [ebp - 0x2c], ah
xor ah, 1
mov byte [ebp - 0x2d], ch
and ch, 0xff
and al, ah
mov byte [ebp - 0x2e], dh
and dh, 0xff
and cl, ah
or ch, al
or dh, cl
xor ch, dh
mov al, byte [ebp - 0x2d]
mov cl, byte [ebp - 0x2e]
or al, cl
xor al, 0xff
or ah, 1
and al, ah
or ch, al
mov al, dl
and al, 1
xor dl, 1
or al, dl
mov dl, ch
xor dl, 0xff
and dl, 0
mov ah, byte [ebp - 0x2c]
xor ah, 0
and ch, ah
mov dh, byte [ebp - 0x2c]
xor dh, 1
and dh, 0
and ah, 1
or dl, ch
or dh, ah
xor dl, dh
xor dl, 0xff
xor al, 0xff
mov ah, byte [ebp - 0x2c]
xor ah, 1
or dl, al
or ah, 1
xor dl, 0xff
and dl, ah
mov al, bl
xor al, 0xff
and al, 0
mov ah, byte [ebp - 0x2c]
xor ah, 0
mov ch, bl
and ch, ah
mov dh, byte [ebp - 0x2c]
xor dh, 1
and dh, 0
and ah, 1
or al, ch
or dh, ah
xor al, dh
mov ah, bh
xor ah, 0xff
xor al, 0xff
mov ch, byte [ebp - 0x2c]
xor ch, 1
or ah, al
or ch, 1
xor ah, 0xff
and ah, ch
mov al, bh
xor al, 0xff
and al, 1
mov ch, byte [ebp - 0x2c]
xor ch, 1
and bh, ch
mov dh, byte [ebp - 0x2c]
xor dh, 1
and dh, 0xff
and ch, 1
or al, bh
or dh, ch
xor al, dh
xor bl, 0xff
xor al, 0xff
mov ch, byte [ebp - 0x2c]
xor ch, 1
or bl, al
or ch, 1
xor bl, 0xff
and bl, ch
mov al, ah
and al, bl
xor ah, bl
or al, ah
mov ah, dl
xor ah, 0xff
and ah, 1
mov ch, byte [ebp - 0x2c]
xor ch, 1
mov dh, dl
and dh, ch
or ah, dh
mov ch, al
xor ch, 0xff
and ch, 1
mov dh, byte [ebp - 0x2c]
xor dh, 1
mov bl, al
and bl, dh
or ch, bl
mov dh, byte [ebp - 0x2c]
xor dh, 1
and dh, 1
mov bl, byte [ebp - 0x2c]
xor bl, 1
mov bh, bl
and bh, 1
mov cl, byte [ebp - 0x2c]
xor cl, 1
and cl, 0xff
and bl, 1
or dh, bh
or cl, bl
xor dh, cl
mov cl, ah
xor cl, 0xff
mov bl, byte [ebp - 0x2c]
xor bl, 1
mov bh, byte [ebp - 0x2c]
xor bh, 1
or cl, bl
or bh, 1
xor cl, 0xff
and cl, bh
xor dl, 0xff
mov bl, dh
xor bl, 0xff
mov bh, byte [ebp - 0x2c]
xor bh, 0
or dl, bl
or bh, 0
xor dl, 0xff
and dl, bh
mov bl, ch
xor bl, 0xff
mov bh, byte [ebp - 0x2c]
xor bh, 1
mov byte [ebp - 0x2f], al
mov al, byte [ebp - 0x2c]
xor al, 0
or bl, bh
or al, 0
xor bl, 0xff
and bl, al
mov al, byte [ebp - 0x2f]
xor al, 0xff
mov bh, dh
xor bh, 0xff
mov byte [ebp - 0x30], al
mov al, byte [ebp - 0x2c]
xor al, 0
mov byte [ebp - 0x31], al
mov al, byte [ebp - 0x30]
or al, bh
mov bh, byte [ebp - 0x31]
or bh, 0
xor al, 0xff
and al, bh
mov bh, cl
and bh, dl
xor cl, dl
or bh, cl
mov cl, bl
and cl, al
xor bl, al
or cl, bl
mov al, bh
xor al, 0xff
and al, 1
mov dl, byte [ebp - 0x2c]
xor dl, 1
and bh, dl
mov bl, cl
xor bl, 0xff
and bl, 0xff
and cl, dl
or al, bh
or bl, cl
xor al, bl
mov cl, ah
xor cl, 0xff
mov dl, ch
xor dl, 0xff
mov bl, byte [ebp - 0x2c]
xor bl, 1
mov bh, cl
and bh, 0xff
and ah, bl
mov byte [ebp - 0x32], dl
and dl, 0xff
and ch, bl
or bh, ah
or dl, ch
xor bh, dl
mov dl, byte [ebp - 0x32]
or cl, dl
xor cl, 0xff
or bl, 1
and cl, bl
or bh, cl
mov cl, bh
xor cl, 0xff
and cl, 0
mov ah, byte [ebp - 0x2c]
xor ah, 0
and bh, ah
mov ch, byte [ebp - 0x2c]
xor ch, 1
and ch, 0
and ah, 1
or cl, bh
or ch, ah
xor cl, ch
mov ah, dh
and ah, 1
xor dh, 1
or ah, dh
xor ah, 0xff
mov ch, cl
xor ch, ah
and ch, cl
mov cl, al
xor cl, 0xff
mov ah, ch
xor ah, 0xff
mov dh, byte [ebp - 0x2c]
xor dh, 0
mov bl, cl
and bl, 0
and al, dh
mov bh, ah
and bh, 0
and ch, dh
or bl, al
or bh, ch
xor bl, bh
or cl, ah
xor cl, 0xff
or dh, 0
and cl, dh
or bl, cl
test bl, 1
mov esi, 0x1df7fbca
mov edi, 0x31afba5
cmovne edi, esi
mov dword [ebp - 0x18], edi
jmp 0x4862bd
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x625f08], eax
xor eax, eax
mov ecx, dword [0x625f50]
mov edx, dword [0x625f54]
mov esi, eax
sub esi, 0x519dd35d
add esi, 0x8e42f63a
add esi, 0x519dd35d
sub esi, 0x18e6133c
sub esi, 1
add esi, 0x18e6133c
add esi, 0xd25f8632
sub esi, 0x8e42f63a
sub esi, 0xd25f8632
mov edi, 0x730fc09b
add edi, 0
sub edi, ecx
sub edi, 0x730fc09b
sub eax, 0xf3be22d5
sub eax, esi
add eax, 0xf3be22d5
sub edi, 0x1815b970
add edi, eax
add edi, 0x1815b970
mov eax, 0x791569df
add eax, 0
sub eax, edi
sub eax, 0x791569df
imul ecx, eax
and ecx, 1
cmp ecx, 0
sete bl
cmp edx, 0xa
setl bh
mov al, bh
xor al, 0xff
and al, 0
mov ah, 1
mov cl, ah
xor cl, 0
mov ch, bh
and ch, cl
mov dl, ah
xor dl, 1
and dl, 0
and cl, 1
or al, ch
or dl, cl
xor al, dl
mov cl, bl
xor cl, 0xff
mov dl, al
and dl, cl
xor al, 0xff
mov cl, bl
and cl, al
or dl, cl
xor dl, 0xff
mov al, bl
xor al, 0xff
mov cl, ah
xor cl, 0
or dl, al
or cl, 0
xor dl, 0xff
and dl, cl
mov al, bl
xor al, 0xff
and al, 1
mov cl, ah
xor cl, 1
mov ch, bl
and ch, cl
mov dh, ah
xor dh, 1
and dh, 0xff
and cl, 1
or al, ch
or dh, cl
xor al, dh
xor al, 0xff
mov cl, bh
xor cl, al
and cl, bh
mov al, bh
xor al, 0xff
and al, 1
mov ch, ah
xor ch, 1
and bh, ch
mov dh, ah
xor dh, 1
and dh, 0xff
and ch, 1
or al, bh
or dh, ch
xor al, dh
xor bl, 0xff
xor al, 0xff
mov ch, ah
xor ch, 0
or bl, al
or ch, 0
xor bl, 0xff
and bl, ch
mov al, cl
xor al, 0xff
mov ch, bl
xor ch, 0xff
mov dh, ah
xor dh, 1
mov bh, al
and bh, 0xff
and cl, dh
mov byte [ebp - 0x33], ch
and ch, 0xff
and bl, dh
or bh, cl
or ch, bl
xor bh, ch
mov cl, byte [ebp - 0x33]
or al, cl
xor al, 0xff
or dh, 1
and al, dh
or bh, al
mov al, dl
xor al, 0xff
mov ch, bh
xor ch, 0xff
mov dh, ah
xor dh, 1
or al, ch
or dh, 1
xor al, 0xff
and al, dh
mov ch, dl
xor ch, 0xff
mov dh, bh
and dh, ch
xor bh, 0xff
and dl, bh
or dh, dl
mov dl, al
xor dl, 0xff
mov ch, dh
xor ch, 0xff
xor ah, 1
mov bl, dl
and bl, 0xff
and al, ah
mov bh, ch
and bh, 0xff
and dh, ah
or bl, al
or bh, dh
xor bl, bh
or dl, ch
xor dl, 0xff
or ah, 1
and dl, ah
or bl, dl
test bl, 1
mov esi, 0x6e738d66
mov edi, 0x31afba5
cmovne edi, esi
mov dword [ebp - 0x18], edi
jmp 0x4862bd
mov dword [ebp - 0x18], 0xb63a0618
jmp 0x4862bd
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x625f08], eax
mov dword [ebp - 0x18], 0x1df7fbca
jmp 0x4857b7