Function at 0x4cf220
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x658968
mov eax, dword fs:[0]
push eax
sub esp, 0x90
mov eax, dword [0x6af168]
xor eax, esp
mov dword [esp + 0x88], eax
push ebx
push esi
push edi
mov eax, dword [0x6af168]
xor eax, esp
push eax
lea eax, [esp + 0xa0]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov esi, ecx
xor edi, edi
mov eax, esi
mov dword [esp + 0x20], esi
call fcn.0055c010
cmp dword [esi + 0xb0], edi
je 0x4cf2b7
call fcn.00624ae1
cdq
mov ecx, 0xb
idiv ecx
sub edx, 5
mov dword [esi + 0xb4], edx
call fcn.00624ae1
cdq
mov ecx, 0xb
idiv ecx
lea eax, [edx - 5]
mov edx, dword [esi + 0xb4]
push eax
mov dword [esi + 0xb8], eax
push edx
mov eax, ebx
call fcn.00526cb0
jmp 0x4cf2c3
mov dword [esi + 0xb4], edi
mov dword [esi + 0xb8], edi
mov eax, dword [esi + 0xa4]
lea ecx, [esi + 0xc0]
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x10]
mov edi, dword [edx - 4]
push 0
lea ecx, [esp + 0x28]
call fcn.005029b0
lea eax, [esp + 0x24]
push eax
mov ecx, ebx
call fcn.00525260
mov ecx, dword [edi + 0x3c]
mov edx, dword [edi + 0x38]
mov eax, dword [edi + 0x34]
add ecx, 0x14
push ecx
mov ecx, dword [edi + 0x30]
add edx, 0x14
push edx
sub eax, 0xa
push eax
sub ecx, 0xa
push ecx
mov eax, ebx
call fcn.005252f0
mov edx, dword [esp + 0x10]
cmp dword [edx], 0
je 0x4cf360
mov eax, dword [edi + 0x38]
sub eax, 0xc8
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [edi + 0x3c]
sub eax, 0xb1
cdq
sub eax, edx
sar eax, 1
add eax, dword [edi + 0x34]
push 0xb1
push 0xc8
push eax
mov eax, dword [esp + 0x1c]
sar ecx, 1
add ecx, dword [edi + 0x30]
mov edi, dword [eax]
push ecx
mov eax, ebx
call fcn.00526180
mov eax, dword [esp + 0x10]
cmp byte [eax + 9], 0
je 0x4cf37d
cmp byte [eax + 0xa], 0
jne 0x4cf37d
mov eax, dword [esp + 0x14]
call fcn.004cf0e0
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
add dword [esp + 0x10], 0x14
add eax, 1
cmp eax, 5
mov dword [esp + 0x14], eax
jl 0x4cf2db
mov ecx, dword [0x6b8594]
push 0
push 0
push ecx
mov ecx, ebx
call fcn.00525c50
lea eax, [esi + 0xc4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 5
lea ebx, [ebx]
cmp dword [eax], 0
mov edi, dword [eax - 8]
je 0x4cf4d7
cmp byte [edi + 0x56], 0
je 0x4cf3fe
mov ecx, dword [0x6b8a28]
mov eax, dword [edi + 0x3c]
sub eax, dword [ecx + 0x28]
cdq
sub eax, edx
sar eax, 1
add eax, dword [edi + 0x34]
push eax
mov eax, dword [edi + 0x38]
sub eax, dword [ecx + 0x24]
cdq
sub eax, edx
sar eax, 1
add eax, dword [edi + 0x30]
push eax
push ecx
mov ecx, ebx
call fcn.00525c50
mov dl, byte [edi + 0x59]
neg dl
lea ecx, [esp + 0x24]
sbb edx, edx
and edx, 0x6c2dec
add edx, 0x93c814
push edx
call fcn.005029b0
lea eax, [esp + 0x24]
push eax
mov ecx, ebx
call fcn.00525260
mov ecx, dword [0x6b85f4]
mov eax, ebx
call fcn.00525250
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
push 0xffffffffffffffff
add eax, 0xc
push 0
push eax
lea ecx, [esp + 0x50]
mov dword [esp + 0x68], 0xf
mov dword [esp + 0x64], 0
mov byte [esp + 0x54], 0
call fcn.00401d10
mov eax, ebx
mov dword [esp + 0xa8], 0
call fcn.00525240
mov edx, dword [eax]
mov edx, dword [edx + 0x1c]
lea ecx, [esp + 0x44]
push ecx
mov ecx, eax
call edx
mov dword [esp + 0x1c], eax
mov eax, ebx
call fcn.00525240
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [edi + 0x34]
lea edx, [eax + ecx + 0x1a]
mov eax, dword [edi + 0x38]
sub eax, dword [esp + 0x1c]
push edx
cdq
sub eax, edx
sar eax, 1
add eax, dword [edi + 0x30]
mov ecx, ebx
push eax
lea eax, [esp + 0x4c]
push eax
call fcn.00525c20
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x5c], 0x10
jb 0x4cf4d7
mov ecx, dword [esp + 0x48]
push ecx
call fcn.0062493b
add esp, 4
fldz
fcomp qword [edi + 0x108]
fnstsw ax
test ah, 5
jp 0x4cf545
mov esi, dword [edi + 0x30]
mov edx, dword [edi + 0x34]
mov cl, 1
mov eax, ebx
add esi, 4
mov dword [esp + 0x1c], edx
call fcn.005252b0
fld qword [edi + 0x108]
fmul qword [0x686838]
call fcn.0062a660
push eax
mov ecx, 0xffffff
lea eax, [esp + 0x38]
call fcn.005029f0
push eax
mov ecx, ebx
call fcn.00525260
mov eax, dword [esp + 0x1c]
mov ecx, dword [0x6b890c]
push eax
push esi
push ecx
mov ecx, ebx
call fcn.00525c50
xor cl, cl
mov eax, ebx
call fcn.005252b0
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
add eax, 0x14
sub dword [esp + 0x10], 1
mov dword [esp + 0x14], eax
jne 0x4cf3c0
mov edx, dword [0x6b8600]
push 0x20c
mov edi, 0xf
push edi
push edx
mov ecx, ebx
call fcn.00525c50
mov dword [esp + 0x94], edi
mov dword [esp + 0x90], 0
mov byte [esp + 0x80], 0
mov dword [esp + 0xa8], 1
mov ecx, dword [0x6b8504]
mov eax, ebx
call fcn.00525250
push 0xb6ffff
lea ecx, [esp + 0x28]
call fcn.005029b0
lea eax, [esp + 0x24]
push eax
mov ecx, ebx
call fcn.00525260
xor eax, eax
cmp dword [esi + 0xa0], eax
mov dword [esp + 0x5c], edi
mov dword [esp + 0x58], eax
mov byte [esp + 0x48], al
lea ecx, [esp + 0x44]
jne 0x4cf5f0
push 0x15
push str.Apprentice_Challenges
call fcn.00402300
mov byte [esp + 0xa8], 2
jmp 0x4cf604
push 0x17
push str.Grand_Master_Challenges
call fcn.00402300
mov byte [esp + 0xa8], 3
mov edx, dword [esi]
mov edx, dword [edx + 0xf8]
lea eax, [esp + 0x44]
push eax
push 0x30
push ebx
lea ecx, [esp + 0x40]
push ecx
mov ecx, esi
call edx
mov byte [esp + 0xa8], 1
cmp dword [esp + 0x5c], 0x10
jb 0x4cf639
mov eax, dword [esp + 0x48]
push eax
call fcn.0062493b
add esp, 4
mov ecx, dword [esp + 0x18]
push ecx
mov edx, ebx
mov ecx, esi
call fcn.004cecb0
mov edx, dword [esi + 0x8c]
cmp dword [edx + 0x930], 0
je 0x4cf740
cmp dword [esi + 0xa0], 0xe
jge 0x4cf740
mov eax, dword [esi + 0xc4]
test eax, eax
je 0x4cf740
cmp byte [eax + 0xd8], 0
jne 0x4cf740
mov eax, dword [0x6b85a0]
push 0x221
push 0x265
push eax
mov ecx, ebx
call fcn.00525c50
mov edi, dword [0x6b85f4]
mov ecx, edi
mov eax, ebx
call fcn.00525250
push 0xffffff
lea ecx, [esp + 0x28]
call fcn.005029b0
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00525260
mov eax, dword [esi + 0x8c]
mov edx, dword [eax + 0x930]
mov ecx, dword [edx + 0x190]
mov eax, dword [eax + 0x918]
push 1
mov dword [esp + 0x1c], ecx
call fcn.0047fe40
mov edx, dword [esp + 0x18]
push eax
push edx
lea eax, [esp + 0x68]
push str._d____d
push eax
call fcn.004e7a20
add esp, 0x10
mov byte [esp + 0xa8], 4
mov edx, dword [edi]
mov edx, dword [edx + 0x1c]
push 0x247
lea eax, [esp + 0x64]
push eax
mov ecx, edi
call edx
mov ecx, 0x2c6
sub ecx, eax
push ecx
lea edx, [esp + 0x68]
push edx
mov ecx, ebx
call fcn.00525c20
cmp dword [esp + 0x78], 0x10
jb 0x4cf740
mov eax, dword [esp + 0x64]
push eax
call fcn.0062493b
add esp, 4
mov ecx, dword [esi + 0xb8]
mov edx, dword [esi + 0xb4]
neg ecx
push ecx
neg edx
push edx
mov eax, ebx
call fcn.00526cb0
cmp dword [esp + 0x94], 0x10
jb 0x4cf773
mov eax, dword [esp + 0x80]
push eax
call fcn.0062493b
add esp, 4
mov ecx, dword [esp + 0xa0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x88]
xor ecx, esp
call fcn.00624940
mov esp, ebp
pop ebp
ret 4