Function at 0x422b70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x65a4f0
push eax
mov dword fs:[0], esp
sub esp, 0x64
push ebx
push ebp
mov ebp, dword [esp + 0x7c]
mov eax, dword [ebp]
cmp byte [eax + 0x8c5], 0
push esi
push edi
jne 0x422bee
fldz
mov ecx, dword [0x6ba020]
mov esi, dword [eax + 0x784]
fst dword [esp + 0x84]
fcomp dword [ecx + 0x310]
fnstsw ax
test ah, 0x44
jnp 0x422bd7
fld dword [ecx + 0x310]
push ecx
fstp dword [esp]
call fcn.005b57c0
fstp dword [esp + 0x88]
add esp, 4
fld dword [esp + 0x84]
push ecx
mov eax, 0xf
fstp dword [esp]
mov ecx, esi
call fcn.005192b0
mov ebx, dword [ebp + 4]
mov eax, dword [ebx + 0x8c]
cmp dword [eax + 0x7f8], 0x2b
jne 0x422c30
mov ecx, dword [ebx + 0x554c]
cmp ecx, 6
je 0x422c15
cmp ecx, 8
je 0x422c15
cmp ecx, 7
jne 0x422c30
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 0x88]
mov eax, dword [eax + 0x81c]
call fcn.005258d0
jmp 0x422c40
mov eax, dword [esp + 0x88]
lea eax, [eax + eax*4]
shl eax, 4
add eax, 0x28
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x84], eax
fild dword [esp + 0x84]
mov eax, dword [esp + 0x8c]
fstp dword [esp + 0x14]
call fcn.0041e0d0
cmp byte [esp + 0x94], 0
mov dword [esp + 0x84], eax
fild dword [esp + 0x84]
mov eax, dword [esp + 0x90]
fstp dword [esp + 0x84]
je 0x422cbd
cmp eax, 3
fld dword [esp + 0x14]
jne 0x422ca0
fadd qword [0x688aa0]
fstp dword [esp + 0x14]
jmp 0x422ceb
cmp eax, 4
jne 0x422cb1
fadd qword [0x688750]
fstp dword [esp + 0x14]
jmp 0x422ceb
fadd qword [0x689500]
fstp dword [esp + 0x14]
jmp 0x422ceb
cmp eax, 3
fld dword [esp + 0x84]
jne 0x422cd1
fadd qword [0x688aa0]
jmp 0x422ce4
cmp eax, 4
jne 0x422cde
fadd qword [0x688750]
jmp 0x422ce4
fadd qword [0x689500]
fstp dword [esp + 0x84]
mov esi, 1
add dword [ebp + 0x60], esi
mov eax, dword [ebx + 0x144]
xor edi, edi
cmp dword [eax + 0x24], edi
jne 0x422e34
or edx, 0xffffffff
lea esi, [eax + 0x28]
lea edi, [edx + 8]
call fcn.0048d8c0
mov ecx, dword [ebp + 4]
mov esi, dword [ecx + 0x144]
add esi, 0x78
or edx, edx
mov edi, 0xa
call fcn.0048d8c0
mov edx, dword [ebp + 4]
mov esi, dword [edx + 0x144]
or edx, 0xffffffff
add esi, 0xc8
lea edi, [edx + 0x18]
call fcn.0048d8c0
mov eax, dword [ebp + 4]
mov esi, dword [eax + 0x144]
add esi, 0x118
or edx, edx
mov edi, 0x36
call fcn.0048d8c0
mov ecx, dword [ebp + 4]
mov edx, dword [ecx + 0x144]
push 0x1b
xor ebx, ebx
push str._ADVICE_BEGHOULED_SAVE_SUN_
lea ecx, [esp + 0x24]
mov dword [edx + 0x24], 4
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], ebx
mov word [esp + 0x28], bx
call fcn.00404f80
mov dword [esp + 0x7c], ebx
mov edi, dword [ebp + 4]
cmp byte [edi + 0x55bc], bl
jne 0x422dc4
mov esi, dword [edi + 0x140]
lea ecx, [ebx + 7]
lea edx, [esp + 0x1c]
mov byte [edi + 0x55bc], 1
call fcn.0045c4a0
mov dword [edi + 0x55ec], 0x14
mov dword [esp + 0x7c], 0xffffffff
cmp dword [esp + 0x34], 8
jb 0x422de0
mov eax, dword [esp + 0x20]
push eax
call fcn.0062414c
add esp, 4
xor edx, edx
lea ecx, [ebp + 0x14]
xor eax, eax
cmp byte [ecx + eax], 0
jne 0x422e05
add eax, 1
cmp eax, 5
jl 0x422de7
add edx, 1
add ecx, 6
cmp edx, 9
jl 0x422de5
jmp 0x422f6b
mov ecx, dword [ebp + 4]
mov esi, dword [ecx + 0x144]
or edx, 0xffffffff
add esi, 0x168
lea edi, [edx + 0x38]
call fcn.0048d8c0
mov edx, dword [ebp + 4]
mov eax, dword [edx + 0x144]
mov dword [eax + 0x24], 5
jmp 0x422f6b
mov ecx, dword [ebx + 0x140]
cmp dword [ecx + 0x108], edi
jne 0x422eeb
push str._ADVICE_BEGHOULED_MATCH_3_
lea ecx, [esp + 0x20]
call fcn.00404d70
lea edx, [esp + 0x54]
push 0x4b
push edx
mov ecx, str.SCORE
lea edx, [esp + 0x24]
mov dword [esp + 0x84], esi
call fcn.00517980
add esp, 8
mov ebx, 8
mov byte [esp + 0x7c], 3
cmp dword [esp + 0x34], ebx
jb 0x422e90
mov eax, dword [esp + 0x20]
push eax
call fcn.0062414c
add esp, 4
mov dword [esp + 0x30], edi
mov word [esp + 0x20], di
mov edi, dword [ebp + 4]
cmp byte [edi + 0x55ba], 0
mov ecx, 7
mov dword [esp + 0x34], ecx
jne 0x422ece
mov esi, dword [edi + 0x140]
lea edx, [esp + 0x54]
mov byte [edi + 0x55ba], 1
call fcn.0045c4a0
mov dword [edi + 0x55ec], 0x12
mov dword [esp + 0x7c], 0xffffffff
cmp dword [esp + 0x6c], ebx
jb 0x422ef0
mov ecx, dword [esp + 0x58]
push ecx
call fcn.0062414c
add esp, 4
jmp 0x422ef0
mov ebx, 8
cmp dword [ebp + 0x60], 0x46
jl 0x422f6b
push str._ADVICE_BEGHOULED_ALMOST_THERE_
lea ecx, [esp + 0x3c]
call fcn.00404d70
mov dword [esp + 0x7c], 4
mov edi, dword [ebp + 4]
cmp byte [edi + 0x55d7], 0
jne 0x422f3d
mov esi, dword [edi + 0x140]
mov ecx, 7
lea edx, [esp + 0x38]
mov byte [edi + 0x55d7], 1
call fcn.0045c4a0
mov dword [edi + 0x55ec], 0x2f
mov dword [esp + 0x7c], 0xffffffff
cmp dword [esp + 0x50], ebx
jb 0x422f58
mov edx, dword [esp + 0x3c]
push edx
call fcn.0062414c
add esp, 4
xor eax, eax
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], eax
mov word [esp + 0x3c], ax
mov eax, 0x4b
cmp dword [ebp + 0x60], eax
jl 0x422fdb
mov ecx, dword [esp + 0x88]
mov dword [ebp + 0x60], eax
mov eax, dword [esp + 0x8c]
push ebp
call fcn.004266d0
mov ecx, dword [ebp + 4]
mov eax, dword [ecx + 0x140]
or edi, 0xffffffff
cmp dword [eax + 0x310], edi
je 0x422fc6
mov edx, dword [eax + 0x314]
mov esi, dword [eax + 0x108]
add edx, 0x65
cmp esi, edx
jge 0x422fb5
mov edx, esi
mov dword [eax + 0x108], edx
mov dword [ecx + 0x55ec], edi
jmp 0x423062
mov dword [eax + 0x108], 0
mov dword [ecx + 0x55ec], edi
jmp 0x423062
mov ecx, dword [esp + 0x90]
cmp ecx, 5
mov eax, dword [ebp + 0x50]
lea edi, [eax + ecx - 2]
jl 0x422ff1
add edi, 2
cmp edi, 1
jg 0x422ffd
mov edi, 1
jmp 0x423007
cmp edi, 5
jl 0x423007
mov edi, 5
xor esi, esi
test edi, edi
mov dword [esp + 0x94], esi
jle 0x423062
fld dword [esp + 0x84]
call fcn.00643d70
fld dword [esp + 0x14]
fsub qword [0x688618]
mov ebx, eax
fstp qword [esp + 0x14]
fild dword [esp + 0x94]
push 3
push 4
push ebx
fmul qword [0x6885f8]
fadd qword [esp + 0x20]
call fcn.00643d70
mov ecx, dword [ebp + 4]
push eax
call fcn.0040e010
add esi, 1
cmp esi, edi
mov dword [esp + 0x94], esi
jl 0x423030
add dword [ebp + 0x50], 1
mov ecx, dword [esp + 0x74]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x70
ret 0x14