Function at 0x81cd20
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0xa67420
mov eax, dword fs:[0]
push eax
sub esp, 0x10
mov eax, dword [0xcdc190]
xor eax, esp
mov dword [esp + 0xc], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0xcdc190]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov eax, dword [0xce1d00]
mov edi, dword [eax + 0x568]
lea ebx, [eax + 0x28c8]
movzx eax, byte [ebx + 0x28]
push eax
push eax
push 0
mov esi, ecx
call fcn.00898b00
movzx eax, byte [ebx + 0x28]
push eax
push eax
push 1
mov ecx, esi
call fcn.00898b00
movzx eax, byte [ebx + 0x28]
push eax
push eax
push 2
mov ecx, esi
call fcn.00898b00
movzx eax, byte [ebx + 0x29]
mov word [esp + 0x18], ax
movzx cx, byte [ebx + 0x2a]
mov word [esp + 0x1a], cx
movzx dx, byte [ebx + 0x2b]
mov word [esp + 0x1c], dx
movzx eax, byte [ebx + 0x2c]
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esi + 0x21c]
mov word [esp + 0x22], ax
call fcn.00816d90
mov ecx, dword [esi + 0x200]
push 0
push 1
push 0
lea edx, [edi + 0x3c]
push edx
call fcn.0089d0e0
mov ecx, dword [esi + 0x218]
push 0
push 1
push 0
lea eax, [edi + 0x3a8e]
push eax
call fcn.0089d0e0
call fcn.00626140
mov ebx, eax
mov dword [esp + 0x14], ebx
mov byte [ebx], 0
mov ecx, dword [edi + 0x398]
push 0
push 1
push 0
push ecx
lea edx, [esp + 0x24]
push 0xa90810
push edx
mov dword [esp + 0x44], 0
call fcn.00417090
mov ecx, dword [esi + 0x204]
add esp, 0xc
push eax
call fcn.0089d0e0
or ebp, 0xffffffff
push ebx
mov dword [esp + 0x30], ebp
call fcn.00626120
add esp, 4
call fcn.00626140
mov ebx, eax
mov dword [esp + 0x14], ebx
mov byte [ebx], 0
mov eax, dword [edi + 0x2d4]
push 0
push 1
mov dword [esp + 0x34], 1
push 0
push eax
lea ecx, [esp + 0x24]
push 0xa90810
push ecx
call fcn.00417090
mov ecx, dword [esi + 0x208]
add esp, 0xc
push eax
call fcn.0089d0e0
push ebx
mov dword [esp + 0x30], ebp
call fcn.00626120
add esp, 4
call fcn.00626140
mov ebx, eax
mov dword [esp + 0x14], ebx
mov byte [ebx], 0
mov edx, dword [edi + 0x39c]
push 0
push 1
push 0
dec edx
push edx
lea eax, [esp + 0x24]
push str.CharJobNames_d
push eax
mov dword [esp + 0x44], 2
call fcn.00417090
add esp, 0xc
push eax
push str.CharCreateUIParams
mov ecx, 0xdacba0
call fcn.008e2b00
mov ecx, dword [esi + 0x210]
push eax
call fcn.0089d0e0
push ebx
mov dword [esp + 0x30], ebp
call fcn.00626120
add esp, 4
call fcn.00626140
mov ebx, eax
mov dword [esp + 0x14], ebx
mov byte [ebx], 0
movzx eax, word [edi + 0x3ac0]
movzx ecx, word [edi + 0x3abc]
push 0
push 1
movsx edx, ax
push 0
movsx eax, cx
push edx
push eax
lea ecx, [esp + 0x28]
push str._d_Kill___d_Death
push ecx
mov dword [esp + 0x48], 3
call fcn.00417090
mov ecx, dword [esi + 0x214]
add esp, 0x10
push eax
call fcn.0089d0e0
push ebx
mov dword [esp + 0x30], ebp
call fcn.00626120
mov eax, dword [edi + 0x39c]
mov ecx, dword [esi + 0x1f8]
add esp, 4
dec eax
push eax
push eax
push 0
call fcn.00898b00
mov eax, dword [edi + 0x39c]
mov ecx, dword [esi + 0x1f8]
dec eax
push eax
push eax
push 1
call fcn.00898b00
mov edi, dword [edi + 0x39c]
mov ecx, dword [esi + 0x1f8]
lea eax, [edi - 1]
push eax
push eax
push 2
call fcn.00898b00
mov ecx, dword [esi + 0x220]
lea edx, [esi + 0x234]
push edx
add ecx, 0x188
call fcn.008d2ab0
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc]
xor ecx, esp
call fcn.00a2a4ac
add esp, 0x1c
ret