Function at 0x4cd160
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x54
call 0x4cd16c
pop eax
mov ebx, ecx
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x70]
mov ecx, dword [ecx + 8]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 8], ebx
inc eax
mov dword [esp + 0x24], eax
jmp 0x4cd1b7
cmp byte [esp + 0xc], 0
mov ebx, dword [esp + 8]
je 0x4cdf94
cmp esi, ebp
je 0x4cd8f0
mov dword [esp], ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 4], ecx
mov ecx, esi
mov ebx, esi
nop
movzx eax, byte [ebx]
test al, al
js 0x4cd1f0
lea esi, [ebx + 1]
cmp eax, 0xd
jbe 0x4cd260
jmp 0x4cd280
movzx edi, byte [ebx + 1]
mov edx, eax
and edx, 0x1f
and edi, 0x3f
cmp al, 0xdf
jbe 0x4cd230
movzx esi, byte [ebx + 2]
shl edi, 6
and esi, 0x3f
or esi, edi
cmp al, 0xf0
jb 0x4cd241
movzx eax, byte [ebx + 3]
and edx, 7
shl esi, 6
lea edi, [ebx + 4]
shl edx, 0x12
and eax, 0x3f
or eax, esi
mov esi, edi
or eax, edx
cmp eax, 0xd
jbe 0x4cd260
jmp 0x4cd280
shl edx, 6
lea esi, [ebx + 2]
or edx, edi
mov eax, edx
cmp eax, 0xd
jbe 0x4cd260
jmp 0x4cd280
shl edx, 0xc
lea edi, [ebx + 3]
or esi, edx
mov eax, esi
mov esi, edi
cmp eax, 0xd
ja 0x4cd280
nop word cs:[eax + eax]
nop dword [eax]
mov edx, 0x2600
bt edx, eax
jae 0x4cd280
cmp esi, ebp
mov ebx, esi
jne 0x4cd1d0
jmp 0x4cd8a0
mov ebp, 1
cmp eax, 0x80
jb 0x4cd2a5
mov ebp, 2
cmp eax, 0x800
jb 0x4cd2a5
cmp eax, 0x10000
mov ebp, 4
sbb ebp, 0
mov edx, dword [esp + 0x74]
mov edi, dword [esp]
sub edx, ebx
cmp ebp, edx
jae 0x4cd2bd
cmp byte [ebx + ebp], 0xbf
jg 0x4cd2c3
jmp 0x4ce1cb
jne 0x4ce1cb
cmp eax, 0x3e
mov dword [esp + 0x14], esi
jg 0x4cd2e5
cmp eax, 0x23
je 0x4cd305
cmp eax, 0x2f
jne 0x4cd313
mov ecx, dword [esp + 8]
cmp byte [ecx + 0x20], 2
je 0x4cd313
jmp 0x4cdd92
cmp eax, 0x3f
je 0x4cd305
cmp eax, 0x5c
jne 0x4cd313
cmp byte [esp + 0x1c], 2
je 0x4cd313
mov ecx, dword [esp + 8]
cmp byte [ecx + 0x20], 2
je 0x4cd313
jmp 0x4cdd79
mov edx, dword [esp + 8]
cmp byte [edx + 0x20], 0
je 0x4cdd60
mov edx, dword [esp + 8]
mov ecx, dword [edx + 0x18]
mov edx, dword [edx + 0x1c]
push dword [esp + 0x74]
push esi
push eax
call fcn.004d0c60
add esp, 0xc
cmp byte [esp + 0x1c], 0
jne 0x4cd56c
cmp edi, dword [esp + 0x6c]
mov edx, edi
jbe 0x4cd3c3
mov eax, dword [esp + 8]
mov ecx, edx
sub ecx, dword [esp + 0x24]
mov eax, dword [eax + 4]
jbe 0x4cd361
mov edx, dword [esp + 0x24]
cmp byte [eax + edx], 0xbf
mov edx, edi
jle 0x4ce1cb
cmp ecx, 2
jne 0x4cd3c3
mov edx, dword [esp + 0x24]
movzx ecx, byte [eax + edx]
and cl, 0xdf
add cl, 0xbf
cmp cl, 0x19
ja 0x4cd56c
cmp byte [eax + edx + 1], 0x3a
mov ecx, dword [esp + 4]
jne 0x4cd880
mov esi, dword [esp + 8]
mov edx, edi
cmp edi, dword [esi]
jne 0x4cd3a2
mov ecx, esi
call fcn.00409480
mov eax, dword [esi + 4]
mov edx, edi
mov byte [eax + edx], 0x2f
inc edx
inc dword [esp + 0x18]
mov dword [esi + 8], edx
mov esi, dword [esp + 0x14]
mov ecx, edx
mov eax, dword [esp + 8]
cmp byte [eax + 0x20], 2
je 0x4cd3d5
jmp 0x4cd580
mov ecx, dword [esp + 4]
mov eax, dword [esp + 8]
cmp byte [eax + 0x20], 2
jne 0x4cd580
cmp byte [esp + 0x1c], 2
jne 0x4cd6e9
mov eax, dword [esp + 8]
mov edi, edx
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x10], edx
mov edx, edi
mov dword [esp + 0x20], eax
jmp 0x4cd431
lea esi, [edx + ebp]
mov eax, edx
mov ecx, ebp
mov ebp, dword [esp + 8]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x20], edx
add eax, edx
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [ebp + 8], esi
mov edx, esi
mov ecx, esi
mov ebx, dword [esp + 0xc]
mov esi, dword [esp + 0x14]
mov ebp, edi
test ebp, ebp
je 0x4cd86f
movzx eax, byte [ebx]
test al, al
js 0x4cd451
mov ecx, eax
shr ecx, 5
mov ecx, dword [ecx*4 + 0x8fe424]
bt ecx, eax
jae 0x4cd4c0
inc ebx
dec ebp
mov dword [esp + 0xc], ebx
mov edi, ebp
lea ebx, [eax + eax*2 + str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
mov ebp, 3
mov eax, dword [esp + 0x10]
sub eax, edx
cmp eax, ebp
jae 0x4cd400
mov ecx, edx
mov dword [esp], edx
mov edx, dword [esp + 0x10]
add ecx, ebp
jb 0x4ce1cb
lea esi, [edx + edx]
mov eax, 8
cmp esi, ecx
cmovbe esi, ecx
cmp esi, 9
cmovb esi, eax
test esi, esi
js 0x4ce1cb
test edx, edx
mov dword [esp + 4], ecx
je 0x4cd514
mov eax, dword [esp + 0x20]
mov dword [esp + 0x34], eax
mov eax, 1
mov dword [esp + 0x3c], edx
jmp 0x4cd516
mov dword [esp], edx
mov edx, 1
mov dword [esp + 0xc], 1
mov edi, ebp
sub edi, edx
je 0x4cd562
movsx ecx, byte [ebx + edx]
mov eax, edx
test ecx, ecx
js 0x4cd4f8
mov edx, ecx
shr edx, 5
mov esi, dword [edx*4 + 0x8fe424]
lea edx, [eax + 1]
bt esi, ecx
jae 0x4cd4d0
mov edx, dword [esp]
lea ecx, [eax - 1]
cmp ecx, ebp
jae 0x4ce1cb
lea ecx, [ebx + eax]
mov ebp, eax
mov dword [esp + 0xc], ecx
jmp 0x4cd465
xor eax, eax
mov dword [esp + 0x38], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x20], ebp
lea ecx, [esp + 0x28]
mov edx, 1
push eax
push esi
call fcn.00422eb0
add esp, 8
cmp dword [esp + 0x28], 1
je 0x4ce1cb
mov edx, dword [esp + 0x2c]
mov ebp, dword [esp + 8]
mov dword [esp + 0x10], esi
mov eax, dword [esp]
mov ecx, dword [esp + 0x20]
mov dword [ebp + 4], edx
mov dword [ebp], esi
mov esi, dword [esp + 4]
jmp 0x4cd40f
mov edx, dword [esp]
xor edi, edi
jmp 0x4cd465
mov ecx, dword [esp + 4]
mov edx, edi
mov eax, dword [esp + 8]
cmp byte [eax + 0x20], 2
je 0x4cd3d5
mov esi, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], eax
jmp 0x4cd5bf
mov eax, dword [esp + 0xc]
mov ecx, ebp
mov ebp, dword [esp]
mov dword [esp + 0xc], eax
mov esi, ecx
add eax, ebp
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 8]
mov ebx, dword [esp + 4]
add ebp, esi
mov edx, ebp
mov ecx, ebp
mov dword [eax + 8], ebp
mov ebp, edi
test ebp, ebp
mov dword [esp], edx
je 0x4cd6d4
movzx eax, byte [ebx]
test al, al
js 0x4cd5e2
mov ecx, eax
shr ecx, 5
mov ecx, dword [ecx*4 + 0x8fe444]
bt ecx, eax
jae 0x4cd640
inc ebx
dec ebp
mov dword [esp + 4], ebx
mov edi, ebp
lea ebx, [eax + eax*2 + str._00_01_02_03_04_05_06_07_08_09_0A_0B_0C_0D_0E_0F_10_11_12_13_14_15_16_17_18_19_1A_1B_1C_1D_1E_1F_20_21_22_23_24_25_26_27_28_29_2A_2B_2C_2D_2E_2F_30_31_32_33_34_35_36_37_38_39_3A_3B_3C_3D_3E_3F_40_41_42_43_44_45_46_47_48_49_4A_4B_4C_4D_4E_4F_50_51_52_53_54_55_56_57_58_59_5A_5B_5C_5D_5E_5F_60_61_62_63_64_65_66_67_68_69_6A_6B_6C_6D_6E_6F_70_71_72_73_74_75_76_77_78_79_7A_7B_7C_7D_7E_7F_80_81_82_83_84_85_86_87_88_89_8A_8B_8C_8D_8E_8F_90_91_92_93_94_95_96_97_98_99_9A_9B_9C_9D_9E_9F_A0_A1_A2_A3_A4_A5_A6_A7_A8_A9_AA_AB_AC_AD_AE_AF_B0_B1_B2_B3_B4_B5_B6_B7_B8_B9_BA_BB_BC_BD_BE_BF_C0_C1_C2_C3_C4_C5_C6_C7_C8_C9_CA_CB_CC_CD_CE_CF_D0_D1_D2_D3_D4_D5_D6_D7_D8_D9_DA_DB_DC_DD_DE_DF_E0_E1_E2_E3_E4_E5_E6_E7_E8_E9_EA_EB_EC_ED_EE_EF_F0_F1_F2_F3_F4_F5_F6_F7_F8_F9_FA_FB_FC_FD_FE_FF]
mov ebp, 3
mov ecx, dword [esp + 0x10]
mov esi, dword [esp]
mov eax, ecx
sub eax, esi
cmp eax, ebp
jae 0x4cd590
add esi, ebp
jb 0x4ce1cb
lea eax, [ecx + ecx]
cmp eax, esi
cmova esi, eax
mov eax, 8
cmp esi, 9
cmovb esi, eax
test esi, esi
js 0x4ce1cb
mov eax, dword [esp + 0xc]
test ecx, ecx
je 0x4cd68d
mov dword [esp + 0x34], eax
mov eax, 1
mov dword [esp + 0x3c], ecx
jmp 0x4cd68f
mov edx, 1
mov dword [esp + 4], 1
nop dword [eax]
mov edi, ebp
sub edi, edx
je 0x4cd6cd
movsx ecx, byte [ebx + edx]
mov eax, edx
test ecx, ecx
js 0x4cd674
mov edx, ecx
shr edx, 5
mov esi, dword [edx*4 + 0x8fe444]
lea edx, [eax + 1]
bt esi, ecx
jae 0x4cd650
lea ecx, [eax - 1]
cmp ecx, ebp
jae 0x4ce1cb
lea ecx, [ebx + eax]
mov ebp, eax
mov dword [esp + 4], ecx
jmp 0x4cd5f6
xor eax, eax
mov dword [esp + 0x38], eax
lea eax, [esp + 0x34]
lea ecx, [esp + 0x28]
mov edx, 1
push eax
push esi
call fcn.00422eb0
add esp, 8
cmp dword [esp + 0x28], 1
je 0x4ce1cb
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 8]
mov ecx, ebp
mov dword [esp + 0x10], esi
mov dword [edx + 4], eax
mov dword [edx], esi
jmp 0x4cd596
xor edi, edi
jmp 0x4cd5f6
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x74]
cmp esi, ebp
jne 0x4cd1c6
jmp 0x4cd8a4
mov eax, dword [esp + 8]
mov edi, edx
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xc], edx
mov edx, edi
mov dword [esp + 0x10], eax
jmp 0x4cd72c
mov ecx, ebp
add ebp, edx
mov eax, edx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x10], edx
add eax, edx
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 8]
mov ebx, dword [esp + 4]
mov edx, ebp
mov ecx, ebp
mov dword [eax + 8], ebp
mov ebp, edi
test ebp, ebp
je 0x4cd86f
movzx eax, byte [ebx]
test al, al
js 0x4cd74c
mov ecx, eax
shr ecx, 5
mov ecx, dword [ecx*4 + 0x8fe434]
bt ecx, eax
jae 0x4cd7c0
inc ebx
dec ebp
mov dword [esp + 4], ebx
mov edi, ebp
lea ebx, [eax + eax*2 + str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
mov ebp, 3
mov eax, dword [esp + 0xc]
sub eax, edx
cmp eax, ebp
jae 0x4cd700
mov ecx, edx
mov dword [esp], edx
mov edx, dword [esp + 0xc]
add ecx, ebp
jb 0x4ce1cb
lea esi, [edx + edx]
mov eax, 8
cmp esi, ecx
cmovbe esi, ecx
cmp esi, 9
cmovb esi, eax
test esi, esi
js 0x4ce1cb
mov dword [esp + 0x20], ebp
mov ebp, ecx
test edx, edx
je 0x4cd818
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov eax, 1
mov dword [esp + 0x3c], edx
jmp 0x4cd81a
mov dword [esp], edx
mov edx, 1
mov dword [esp + 4], 1
mov edi, ebp
sub edi, edx
je 0x4cd861
movsx ecx, byte [ebx + edx]
mov eax, edx
test ecx, ecx
js 0x4cd7f8
mov edx, ecx
shr edx, 5
mov esi, dword [edx*4 + 0x8fe434]
lea edx, [eax + 1]
bt esi, ecx
jae 0x4cd7d0
mov edx, dword [esp]
lea ecx, [eax - 1]
cmp ecx, ebp
jae 0x4ce1cb
mov esi, dword [esp + 0x14]
lea ecx, [ebx + eax]
mov ebp, eax
mov dword [esp + 4], ecx
jmp 0x4cd760
xor eax, eax
mov dword [esp + 0x38], eax
lea eax, [esp + 0x34]
lea ecx, [esp + 0x28]
mov edx, 1
push eax
push esi
call fcn.00422eb0
add esp, 8
cmp dword [esp + 0x28], 1
je 0x4ce1cb
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 8]
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0x20]
mov dword [eax + 4], edx
mov dword [eax], esi
mov esi, dword [esp + 0x14]
mov eax, dword [esp]
jmp 0x4cd70a
mov esi, dword [esp + 0x14]
mov edx, dword [esp]
xor edi, edi
jmp 0x4cd760
mov dword [esp], edx
mov ebp, dword [esp + 0x74]
cmp esi, ebp
jne 0x4cd1c6
jmp 0x4cd8a4
mov edx, edi
mov eax, dword [esp + 8]
cmp byte [eax + 0x20], 2
je 0x4cd3d5
jmp 0x4cd580
mov ecx, dword [esp + 4]
cmp dword [esp + 0x18], ecx
ja 0x4ce1cb
mov eax, dword [esp + 8]
mov dword [esp + 0xc], 0
mov dword [esp + 4], ecx
mov edx, dword [eax + 4]
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4cd8df
cmp eax, ecx
jae 0x4cd8df
cmp byte [edx + eax], 0xbf
jle 0x4ce1cb
mov dword [esp + 0xc], 0
mov ebx, ecx
jmp 0x4cd903
mov edx, dword [ebx + 4]
mov ebx, ecx
mov eax, ecx
mov dword [esp + 0xc], 0
mov dword [esp + 4], ecx
mov edi, eax
not eax
add eax, ecx
cmp eax, 5
ja 0x4cdb76
mov eax, dword [eax*4 + 0x4ce1d0]
mov ecx, dword [esp + 4]
mov dword [esp], edx
add eax, dword [esp + 0x50]
jmp eax
mov ecx, dword [esp + 4]
jmp 0x4cd1a8
mov esi, ecx
mov ebp, dword [esp + 0x74]
mov ecx, dword [esp + 4]
cmp dword [esp + 0x18], ecx
jbe 0x4cd8ae
jmp 0x4ce1cb
mov esi, dword [esp + 8]
mov eax, dword [esi + 0x18]
test eax, eax
je 0x4cdd96
mov ecx, dword [esi + 0x1c]
push 0
push eax
call dword [ecx + 0x14]
add esp, 8
jmp 0x4cdd96
mov esi, dword [esp + 8]
cmp edi, dword [esi]
mov ebp, dword [esp + 0x74]
jne 0x4cdda5
mov ecx, esi
call fcn.00409480
mov ecx, dword [esp]
mov edi, dword [esi + 4]
lea eax, [ecx + 1]
mov byte [edi + ecx], 0x2f
mov dword [esi + 8], eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
cmp eax, ecx
ja 0x4ce1cb
test eax, eax
je 0x4cddfa
mov ecx, dword [esp + 4]
cmp eax, ecx
jae 0x4cddf1
mov ebx, ecx
cmp byte [edi + eax], 0xbf
mov ecx, dword [esp]
mov dl, 1
mov dword [esp + 0xc], edx
mov edx, edi
jg 0x4cd903
jmp 0x4ce1cb
mov ecx, dword [esp]
jne 0x4ce1cb
mov dl, 1
test ecx, ecx
mov dword [esp + 0xc], edx
je 0x4cde1c
mov ecx, dword [esp + 4]
mov edx, edi
test ecx, ecx
mov ebx, ecx
mov ecx, dword [esp]
jne 0x4cd903
jmp 0x4ce1cb
xor ecx, ecx
mov ebx, 1
mov edx, edi
jmp 0x4cd903
cmp byte [esp + 0x1c], 0
jne 0x4ce164
mov eax, dword [esp + 0x6c]
mov ecx, dword [ebx + 4]
mov edi, dword [ebx + 8]
test eax, eax
mov dword [esp + 0xc], ecx
je 0x4cdfc4
cmp edi, eax
jbe 0x4cdfef
mov ecx, dword [esp + 0xc]
cmp byte [ecx + eax], 0xbf
jg 0x4cdff5
jmp 0x4ce1cb
test edi, edi
js 0x4ce1cb
je 0x4ce170
movzx eax, byte [0x90320d]
xor ecx, ecx
mov edx, edi
call fcn.0049d570
test eax, eax
jne 0x4ce175
jmp 0x4ce1cb
jne 0x4ce1cb
sub edi, eax
jb 0x4ce1cb
js 0x4ce1cb
mov edx, 1
je 0x4ce028
movzx eax, byte [0x90320d]
xor ecx, ecx
mov edx, edi
call fcn.0049d570
mov edx, eax
mov eax, dword [esp + 0x6c]
test edx, edx
je 0x4ce1cb
mov ecx, dword [esp + 0xc]
mov dword [ebx + 8], eax
add eax, ecx
push edi
push eax
mov dword [esp + 8], edx
push edx
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x78]
add esp, 0xc
cmp eax, dword [ebx]
mov dword [esp + 4], edi
jne 0x4ce062
mov ecx, ebx
mov edi, eax
call fcn.00409480
mov eax, edi
mov edi, dword [esp + 4]
mov ecx, dword [ebx + 4]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xc]
xor edx, edx
mov dword [esp + 0x14], esi
mov byte [ecx + eax], 0x2f
inc eax
mov ecx, edi
mov dword [esp + 0x10], eax
mov dword [ebx + 8], eax
mov eax, dword [esp]
add eax, edi
sub ecx, eax
jmp 0x4ce098
inc edx
add edx, ecx
cmp ebx, 0x2f
jne 0x4ce116
cmp edx, edi
je 0x4ce114
mov eax, edx
mov edx, dword [esp]
add edx, eax
movzx ebx, byte [edx]
test bl, bl
jns 0x4ce090
movzx ebp, byte [edx + 1]
mov edi, ebx
and edi, 0x1f
and ebp, 0x3f
cmp bl, 0xdf
jbe 0x4ce0e5
movzx esi, byte [edx + 2]
shl ebp, 6
and esi, 0x3f
or esi, ebp
cmp bl, 0xf0
jb 0x4ce0f5
movzx ebx, byte [edx + 3]
and edi, 7
shl esi, 6
add edx, 4
shl edi, 0x12
and ebx, 0x3f
or ebx, esi
or ebx, edi
jmp 0x4ce0ff
shl edi, 6
add edx, 2
or edi, ebp
mov ebp, dword [esp + 0x74]
mov ebx, edi
jmp 0x4ce107
shl edi, 0xc
add edx, 3
or esi, edi
mov ebx, esi
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 4]
add edx, ecx
cmp ebx, 0x2f
je 0x4ce098
jmp 0x4ce116
mov eax, edi
mov ecx, dword [esp]
sub edi, eax
lea ebx, [ecx + eax]
mov eax, dword [esp + 8]
mov eax, dword [eax]
sub eax, dword [esp + 0x10]
cmp eax, edi
jb 0x4ce1a1
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
add ecx, eax
push edi
push ebx
push ecx
mov ebx, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, edi
mov eax, dword [esp + 8]
cmp dword [esp + 4], 0
mov dword [eax + 8], ebx
je 0x4ce164
push dword [esp]
push 0
push dword [0x903200]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, esi
mov edx, ebp
add esp, 0x54
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 1
mov dword [ebx + 8], 0
push edi
push dword [esp + 0x10]
mov dword [esp + 8], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
xor eax, eax
cmp eax, dword [ebx]
mov dword [esp + 4], edi
je 0x4ce04c
jmp 0x4ce062
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov ecx, esi
push 1
push 1
push edi
call fcn.004f2050
add esp, 0xc
mov eax, dword [esi + 4]
mov dword [esp + 0xc], eax
mov eax, dword [esi + 8]
mov esi, dword [esp + 0x14]
jmp 0x4ce130
ud2