Function at 0x51aca0
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x586b4a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1a4
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0x8c
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x1bc], ebx
je 0x51ace8
mov ecx, eax
call fcn.00544ab0
jmp 0x51acea
xor eax, eax
or edi, 0xffffffff
push 0x8c
mov dword [esp + 0x1c0], edi
mov dword [esi + 0xf4], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 1
je 0x51ad23
mov ecx, eax
call fcn.00544ab0
jmp 0x51ad25
xor eax, eax
push 0xd0
mov dword [esp + 0x1c0], edi
mov dword [esi + 0xf8], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 2
je 0x51ad5b
mov ecx, eax
call fcn.004936f0
jmp 0x51ad5d
xor eax, eax
push 0xd0
mov dword [esp + 0x1c0], edi
mov dword [esi + 0xfc], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 3
je 0x51ad93
mov ecx, eax
call fcn.004936f0
jmp 0x51ad95
xor eax, eax
push 0xd0
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x100], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 4
je 0x51adcb
mov ecx, eax
call fcn.004936f0
jmp 0x51adcd
xor eax, eax
push 0xd0
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x104], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 5
je 0x51ae03
mov ecx, eax
call fcn.004936f0
jmp 0x51ae05
xor eax, eax
push 0xd0
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x108], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 6
je 0x51ae3b
mov ecx, eax
call fcn.004936f0
jmp 0x51ae3d
xor eax, eax
push 0xd0
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x10c], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 7
je 0x51ae73
mov ecx, eax
call fcn.004936f0
jmp 0x51ae75
xor eax, eax
push 0x48
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x110], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 8
je 0x51aea8
mov ecx, eax
call fcn.004a6b80
jmp 0x51aeaa
xor eax, eax
push 0x88
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x4998], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 9
je 0x51aee0
mov ecx, eax
call fcn.004936f0
jmp 0x51aee2
xor eax, eax
push 0x98
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x499c], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
mov ebp, 0xa
cmp eax, ebx
mov dword [esp + 0x1bc], ebp
je 0x51af19
mov ecx, eax
call fcn.004936f0
jmp 0x51af1b
xor eax, eax
push 0x98
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x49a4], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 0xb
je 0x51af51
mov ecx, eax
call fcn.004936f0
jmp 0x51af53
xor eax, eax
push 0x98
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x49a8], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 0xc
je 0x51af89
mov ecx, eax
call fcn.004936f0
jmp 0x51af8b
xor eax, eax
push 0x4c3c
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x49ac], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 0xd
je 0x51afc1
mov ecx, eax
call fcn.0049d550
jmp 0x51afc3
xor eax, eax
push 0x1b0
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x49a0], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 0xe
je 0x51aff9
mov ecx, eax
call fcn.004a8b50
jmp 0x51affb
xor eax, eax
push 0x94
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x49b0], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 0xf
je 0x51b031
mov ecx, eax
call fcn.0048ee50
jmp 0x51b033
xor eax, eax
push 0x3c
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x49b4], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 0x10
je 0x51b066
mov ecx, eax
call fcn.00496a40
jmp 0x51b068
xor eax, eax
push 0x3c
mov dword [esp + 0x1c0], edi
mov dword [esi + 0x4ab8], eax
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 0x11
je 0x51b09b
mov ecx, eax
call fcn.00496a40
jmp 0x51b09d
xor eax, eax
mov dword [esp + 0x1bc], edi
mov dword [esi + 0x4abc], eax
lea edi, [esi + 0x4ae8]
push 0x3c
call fcn.005756f6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x1bc], 0x12
je 0x51b0d6
mov ecx, eax
call fcn.00496a40
jmp 0x51b0d8
xor eax, eax
mov dword [edi], eax
add edi, 4
dec ebp
mov dword [esp + 0x1bc], 0xffffffff
jne 0x51b0b0
lea edi, [esi + 0x4c04]
lea eax, [esi + 0x4c00]
push eax
mov ecx, edi
mov byte [esi + 0x4bfc], 3
call fcn.0048edb0
push ebx
mov ecx, edi
call fcn.0048edd0
lea ecx, [esi + 0x4c0c]
lea edi, [esi + 0x4c10]
push ecx
mov ecx, edi
call fcn.0048edb0
push ebx
mov ecx, edi
call fcn.0048edd0
mov edi, 0xbf000000
mov dword [esi + 0x4c18], ebx
mov dword [esi + 0x4c1c], edi
mov byte [esi + 0x18], bl
xor eax, eax
lea ecx, [esi + 0x34]
mov dl, 0xff
mov byte [esi + eax + 0x19], dl
mov dword [ecx], ebx
inc eax
add ecx, 4
cmp eax, 0x18
jl 0x51b145
mov byte [esi + 0x94], bl
mov byte [esi + 0x95], bl
or eax, 0xffffffff
mov byte [esi + 0x96], bl
mov dword [esi + 0xb8], eax
mov ecx, 0xffffff2f
mov dword [esi + 0xbc], eax
sub ecx, esi
mov dword [esi + 0xc0], eax
mov dword [esi + 0xc4], eax
mov dword [esi + 0xc8], eax
mov byte [esi + 0xcc], al
mov byte [esi + 0x97], bl
mov byte [esi + 0x98], bl
mov byte [esi + 0x99], bl
mov dword [esi + 0xa4], ebx
mov dword [esi + 0xa8], edi
mov dword [esi + 0x9c], ebx
mov byte [esi + 0xa0], bl
mov dword [esi + 0xac], ebx
mov dword [esi + 0xb0], ebx
mov dword [esi + 0xb4], ebx
lea eax, [esi + 0xd1]
mov byte [eax - 4], dl
mov byte [eax], dl
mov byte [eax + 4], bl
mov byte [eax + 8], bl
inc eax
lea ebp, [ecx + eax]
cmp ebp, 4
jl 0x51b1d6
mov ecx, 0x5050505
xor eax, eax
mov dword [esi + 0xdd], ecx
mov dl, 0x77
mov word [esi + 0xe1], cx
mov dword [esi + 0xe4], ebx
mov dword [esi + 0xe8], ebx
mov dword [esi + 0xec], ebx
mov dword [esi + 0xf0], ebx
mov byte [esi + 0x4ac4], bl
mov dword [esi + 0x4ac8], ebx
mov byte [esi + 0x4acc], bl
mov byte [esi + 0x4ae4], 1
mov byte [esi + 0x4ae5], bl
mov cl, 0x7c
cmp eax, ebx
mov byte [esi + eax + 0x4b60], al
jne 0x51b252
mov byte [esi + 0x4b94], dl
mov byte [esi + 0x4bc8], dl
jmp 0x51b269
cmp eax, 1
jne 0x51bf48
mov byte [esi + 0x4b95], 0x75
mov byte [eax + esi + 0x4bc8], cl
inc eax
cmp eax, 0x34
jl 0x51b239
mov dword [esi + 0x114], ebx
mov dword [esi + 0x118], edi
mov byte [esi + 0x4dfd], bl
mov ecx, dword [esi + 0xf4]
call fcn.00544ad0
mov ecx, dword [esi + 0xf4]
push 0x31
call fcn.00546550
mov ecx, dword [esi + 0xf4]
push 0x65ea3c
push 0x40b00000
push 0x40b00000
call fcn.00544b60
mov ecx, dword [esi + 0xf4]
push ebx
call fcn.005464a0
mov ecx, dword [esi + 0xf4]
push 0x1f
call fcn.005464b0
mov ecx, dword [esi + 0xf8]
call fcn.00544ad0
mov ecx, dword [esi + 0xf8]
push 0x31
call fcn.00546550
mov ecx, dword [esi + 0xf8]
lea edi, [esi + 0x4bc8]
push edi
push 0x40b00000
push 0x40b00000
call fcn.00544b60
mov ecx, dword [esi + 0xf8]
push ebx
call fcn.005464a0
mov ecx, dword [esi + 0xfc]
call fcn.00543e90
mov ecx, dword [esi + 0xfc]
push 0x31
call fcn.005449b0
mov ecx, dword [esi + 0xfc]
push ebx
call fcn.00544930
mov ecx, dword [esi + 0xfc]
push 0x32
push 0x65ea3c
call fcn.005449c0
mov ecx, dword [esi + 0xfc]
push 0x1f
call fcn.005448f0
mov ecx, dword [esi + 0x100]
call fcn.00543e90
mov ecx, dword [esi + 0x100]
push 0x30
call fcn.005449b0
mov ecx, dword [esi + 0x100]
push ebx
call fcn.00544930
mov ecx, dword [esi + 0x100]
push 0x31
push 0x65ea3c
call fcn.005449c0
mov ecx, dword [esi + 0x100]
push 0x1f
call fcn.005448f0
mov ecx, dword [esi + 0x104]
call fcn.00543e90
mov ecx, dword [esi + 0x104]
push 0x31
call fcn.005449b0
mov ecx, dword [esi + 0x104]
push ebx
call fcn.00544930
mov ecx, dword [esi + 0x104]
lea ebp, [esi + 0x4b94]
push 0x31
push ebp
call fcn.005449c0
mov ecx, dword [esi + 0x104]
push ebx
call fcn.005448f0
mov ecx, dword [esi + 0x108]
call fcn.00543e90
mov ecx, dword [esi + 0x108]
push 0x30
call fcn.005449b0
mov ecx, dword [esi + 0x108]
push ebx
call fcn.00544930
mov ecx, dword [esi + 0x108]
push 0x30
push ebp
call fcn.005449c0
mov ecx, dword [esi + 0x108]
push ebx
call fcn.005448f0
mov ecx, dword [esi + 0x10c]
call fcn.00543e90
mov ecx, dword [esi + 0x10c]
push 0x31
call fcn.005449b0
mov ecx, dword [esi + 0x10c]
push ebx
call fcn.00544930
mov ecx, dword [esi + 0x10c]
push 0x31
push edi
call fcn.005449c0
mov ecx, dword [esi + 0x10c]
push ebx
call fcn.005448f0
mov ecx, dword [esi + 0x110]
call fcn.00543e90
mov ecx, dword [esi + 0x110]
push 0x30
call fcn.005449b0
mov ecx, dword [esi + 0x110]
push ebx
call fcn.00544930
mov ecx, dword [esi + 0x110]
push 0x30
push edi
call fcn.005449c0
mov ecx, dword [esi + 0x110]
push ebx
call fcn.005448f0
mov ecx, dword [esi + 0x4998]
call fcn.00405d90
mov ecx, dword [esi + 0x4998]
push 4
call fcn.004a7820
mov ecx, dword [esi + 0x499c]
call fcn.004a7850
mov ecx, dword [esi + 0x499c]
push 1
call fcn.004a7820
mov ecx, dword [esi + 0x49a4]
call fcn.004977a0
mov ecx, dword [esi + 0x49a4]
push 0xc
call fcn.004977c0
mov ecx, dword [esi + 0x49a4]
push 0xc0b66666
push ebx
call fcn.00553b80
mov ecx, dword [esi + 0x49a8]
call fcn.004977a0
mov ecx, dword [esi + 0x49a8]
push 0xf
call fcn.004977c0
mov ecx, dword [esi + 0x49a8]
push 0x410ccccd
push ebx
call fcn.00553b80
mov ecx, dword [esi + 0x49ac]
call fcn.004977a0
mov ecx, dword [esi + 0x49ac]
push ebx
call fcn.004977c0
mov ecx, dword [esi + 0x49ac]
push ebx
push ebx
call fcn.00553b80
mov ecx, dword [esi + 0x49a0]
call fcn.0049d610
mov ecx, dword [esi + 0x49a0]
push 4
call fcn.0049d990
mov ecx, dword [esi + 0x49a0]
push str.Menuplate_texp_single_tour
push ebx
call fcn.0049e4e0
mov ecx, dword [esi + 0x49a0]
push str.Menuplate_texp_tag_tour
push 1
call fcn.0049e4e0
mov ecx, dword [esi + 0x49a0]
push str.Menuplate_texp_t_t_tourna
push 2
call fcn.0049e4e0
mov ecx, dword [esi + 0x49a0]
push str.Menuplate_texp_fatal_4_to
push 3
call fcn.0049e4e0
mov ecx, dword [esi + 0x49b0]
call fcn.004a8b60
mov ecx, esi
call fcn.0051ec80
mov ecx, dword [esi + 0x49b4]
call fcn.0048ee60
mov ecx, dword [esi + 0x4ab8]
call fcn.00496a50
mov ecx, dword [esi + 0x4ab8]
push 5
push 0x25
push 0x5a
call fcn.00496af0
mov ecx, dword [esi + 0x4abc]
call fcn.00496a50
mov ecx, dword [esi + 0x4abc]
push 5
push 0xffffffffffffffdb
push 0x5a
call fcn.00496af0
lea ebp, [esi + 0x4ae8]
mov dword [esp + 0x10], 0xa
mov edi, 0x3f800000
mov ecx, dword [ebp]
call fcn.00496a50
mov ecx, dword [ebp]
push ebx
push edi
push 0x41e00000
call fcn.00496b20
mov eax, dword [esp + 0x10]
add ebp, 4
dec eax
mov dword [esp + 0x10], eax
jne 0x51b5fd
push ebx
push str.Menu_
push str.Menu_n_window_for_t.fml
mov ecx, 0x63b370
call fcn.00418500
push ebx
push str.Menu_
push str.Menu_n_window_for_t2.fml
mov ecx, 0x63b370
mov dword [esi + 0x49b8], eax
call fcn.00418500
push 2
push str.Menu_
push str.Menu_select_frame2.fml
mov ecx, 0x63b370
mov dword [esi + 0x49bc], eax
call fcn.00418500
push ebx
push str.Menu_
push str.Menu_select_cursor.fml
mov ecx, 0x63b370
mov dword [esi + 0x49cc], eax
call fcn.00418500
push ebx
push str.Menu_
mov dword [esi + 0x49d0], eax
push str.Menuc_window6_2.fml
mov ecx, 0x63b370
mov dword [0x63b3c0], 0x3f800000
call fcn.00418500
push ebx
push str.Menu_
push str.Menuc_window2.fml
mov ecx, 0x63b370
mov dword [esi + 0x49c0], eax
call fcn.00418500
push ebx
push str.Menu_
push str.Menu_tou_1vs1_bar.fml
mov ecx, 0x63b370
mov dword [esi + 0x49c4], eax
call fcn.00418500
push ebx
push str.Menu_
push str.Menu_n_win_for_3th.fml
mov ecx, 0x63b370
mov dword [esi + 0x49c8], eax
call fcn.00418500
push ebx
push str.Menu_
push str.Menu_tou_3thread_bar.fml
mov ecx, 0x63b370
mov dword [esi + 0x49d4], eax
call fcn.00418500
push ebx
push str.Menu_
push str.Menu_tou_f4way_bar2.fml
mov ecx, 0x63b370
mov dword [esi + 0x49d8], eax
call fcn.00418500
push ebx
push str.Menu_
push str.MenuVS_letter.fml
mov ecx, 0x63b370
mov dword [esi + 0x49dc], eax
call fcn.00418500
push ebx
mov dword [esi + 0x49e0], eax
push str.Menulight_s
mov ecx, 0x655f38
mov dword [0x63b3c0], 0x3f87ae14
call fcn.0040fee0
push ebx
push str.Menucursor1
mov ecx, 0x655f38
mov dword [esi + 0x4ac0], eax
call fcn.0040fee0
push ebx
mov dword [esi + 0x4ad4], eax
push str.Menucursor2
mov ecx, 0x655f38
call fcn.0040fee0
push ebx
push str.Menucursor3
mov ecx, 0x655f38
mov dword [esi + 0x4ad8], eax
call fcn.0040fee0
push ebx
push str.Menu_superster_pictures_superstars_3
mov ecx, 0x655f38
mov dword [esi + 0x4adc], eax
call fcn.0040fee0
push ebx
push str.Menucolorbar_p0
mov ecx, 0x655f38
mov dword [esi + 0x4ae0], eax
call fcn.0040fee0
push ebx
push str.Menucolorbar_p1
mov ecx, 0x655f38
mov dword [esi + 0x4b10], eax
call fcn.0040fee0
push ebx
push str.Menucolorbar_p2
mov ecx, 0x655f38
mov dword [esi + 0x4b14], eax
call fcn.0040fee0
push ebx
push str.Menucolorbar_p3
mov ecx, 0x655f38
mov dword [esi + 0x4b18], eax
call fcn.0040fee0
push 0x10
push str.Menu_titlekingotring
mov ecx, 0x655f38
mov dword [esi + 0x4b1c], eax
call fcn.0040fee0
push 0x10
push str.Menu_title_t_1match
mov ecx, 0x655f38
mov dword [esi + 0x4b20], eax
call fcn.0040fee0
push 0x10
push str.Menu_title_t_2match
mov ecx, 0x655f38
mov dword [esi + 0x4b28], eax
call fcn.0040fee0
push 0x10
push str.Menu_title_t_3match
mov ecx, 0x655f38
mov dword [esi + 0x4b2c], eax
call fcn.0040fee0
push 0x10
push str.Menu_title_t_4match
mov ecx, 0x655f38
mov dword [esi + 0x4b30], eax
call fcn.0040fee0
push 0x10
push str.Menu_title_t_semifinal
mov ecx, 0x655f38
mov dword [esi + 0x4b34], eax
call fcn.0040fee0
push 0x10
push str.Menu_title_t_final
mov ecx, 0x655f38
mov dword [esi + 0x4b38], eax
call fcn.0040fee0
push 0x10
push str.Menu_title_t_m_result
mov ecx, 0x655f38
mov dword [esi + 0x4b3c], eax
call fcn.0040fee0
push 0x10
push str.Menu_titleTournament_2
mov ecx, 0x655f38
mov dword [esi + 0x4b40], eax
call fcn.0040fee0
push ebx
push str.MenuLR
mov ecx, 0x655f38
mov dword [esi + 0x4b44], eax
call fcn.0040fee0
mov dword [esi + 0x4b58], eax
lea eax, [esp + 0xd4]
push 0x60
lea ecx, [esi + 0x49e4]
push eax
or ebp, 0xffffffff
push ecx
mov ecx, 0x620cd0
mov dword [esp + 0xe0], 0xbf800000
mov dword [esp + 0xe4], 0x3f800000
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], ebp
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0x3f800000
mov dword [esp + 0xfc], 0x3f800000
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], ebp
mov dword [esp + 0x108], 0x3f800000
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], 0xbf800000
mov dword [esp + 0x114], 0xbf800000
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], ebp
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0x3f800000
mov dword [esp + 0x128], 0x3f800000
mov dword [esp + 0x12c], 0xbf800000
mov dword [esp + 0x130], 0
mov dword [esp + 0x134], ebp
mov dword [esp + 0x138], 0x3f800000
mov dword [esp + 0x13c], 0x3f800000
mov dword [0x620cf8], 8
mov dword [0x620cfc], 0x142
mov dword [0x620d00], ebx
call fcn.0040d040
lea edx, [esp + 0x134]
push 0x80
lea eax, [esi + 0x49e8]
push edx
push eax
mov ecx, 0x620cd0
mov dword [esp + 0x140], 0xbf800000
mov dword [esp + 0x144], 0x3f800000
mov dword [esp + 0x148], 0
mov dword [esp + 0x14c], 0
mov dword [esp + 0x150], 0
mov dword [esp + 0x154], 0xbf800000
mov dword [esp + 0x158], 0
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0x3f800000
mov dword [esp + 0x164], 0x3f800000
mov dword [esp + 0x168], 0
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], 0
mov dword [esp + 0x174], 0xbf800000
mov dword [esp + 0x178], 0x3f800000
mov dword [esp + 0x17c], 0
mov dword [esp + 0x180], 0xbf800000
mov dword [esp + 0x184], 0xbf800000
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0xbf800000
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0x3f800000
mov dword [esp + 0x1a0], 0x3f800000
mov dword [esp + 0x1a4], 0xbf800000
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
mov dword [esp + 0x1b0], 0
mov dword [esp + 0x1b4], 0xbf800000
mov dword [esp + 0x1b8], 0x3f800000
mov dword [esp + 0x1bc], 0x3f800000
mov dword [0x620cf8], 8
mov dword [0x620cfc], 0x112
mov dword [0x620d00], ebx
call fcn.0040d040
push 0x60
push ebx
lea ecx, [esi + 0x4b5c]
push ecx
mov ecx, 0x620cd0
call fcn.0040d040
lea edx, [esp + 0x14]
push 0x60
lea eax, [esi + 0x4ad0]
push edx
push eax
mov ecx, 0x620cd0
mov dword [esp + 0x20], 0xbf800000
mov dword [esp + 0x24], 0x3f800000
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0x3f800000
mov dword [esp + 0x3c], 0x3f800000
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], ebp
mov dword [esp + 0x48], 0x3f800000
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0xbf800000
mov dword [esp + 0x54], 0xbf800000
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0x3f800000
mov dword [esp + 0x68], 0x3f800000
mov dword [esp + 0x6c], 0xbf800000
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], ebp
mov dword [esp + 0x78], 0x3f800000
mov dword [esp + 0x7c], 0x3f800000
mov dword [0x620cf8], 8
mov dword [0x620cfc], 0x142
mov dword [0x620d00], ebx
call fcn.0040d040
lea ecx, [esp + 0x74]
push 0x60
lea edx, [esi + 0x4b24]
push ecx
push edx
mov ecx, 0x620cd0
mov dword [esp + 0x80], 0xbf800000
mov dword [esp + 0x84], 0x3f800000
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0x3f800000
mov dword [esp + 0x9c], 0x3f800000
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], ebp
mov dword [esp + 0xa8], 0x3f800000
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0xbf800000
mov dword [esp + 0xb4], 0xbf800000
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0x3f800000
mov dword [esp + 0xc8], 0x3f800000
mov dword [esp + 0xcc], 0xbf800000
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], ebp
mov dword [esp + 0xd8], 0x3f800000
mov dword [esp + 0xdc], 0x3f800000
mov dword [0x620cf8], 8
mov dword [0x620cfc], 0x142
mov dword [0x620d00], ebx
call fcn.0040d040
mov dword [esi + 0x49ec], edi
mov dword [esi + 0x49f0], edi
mov dword [esi + 0x49f4], edi
mov dword [esi + 0x49f8], edi
mov dword [esi + 0x49fc], edi
mov dword [esi + 0x4a00], edi
mov dword [esi + 0x4a04], edi
mov dword [esi + 0x4a08], edi
mov dword [esi + 0x4a0c], edi
mov dword [esi + 0x4a10], edi
mov ecx, 0x42480000
mov dword [esi + 0x4a14], edi
mov dword [esi + 0x4a18], edi
mov dword [esi + 0x4a1c], ebx
mov dword [esi + 0x4a20], ebx
mov dword [esi + 0x4a24], ebx
mov dword [esi + 0x4a28], ebx
mov dword [esi + 0x4a2c], ecx
mov dword [esi + 0x4a30], ebx
mov dword [esi + 0x4a34], ebx
mov dword [esi + 0x4a38], ebx
mov dword [esi + 0x4a3c], ebx
mov dword [esi + 0x4a40], ebx
mov dword [esi + 0x4a44], ebx
mov dword [esi + 0x4a48], ebx
mov dword [esi + 0x4a4c], ebx
mov dword [esi + 0x4a50], ebx
mov dword [esi + 0x4a54], ebx
mov dword [esi + 0x4a58], ebx
mov dword [esi + 0x4a5c], ebx
mov dword [esi + 0x4a60], ebx
mov dword [esi + 0x4a64], ebx
mov dword [esi + 0x4a68], ebx
mov dword [esi + 0x4a6c], ebx
mov eax, 0x3f000000
mov dword [esi + 0x4a70], ebx
mov dword [esi + 0x4a74], eax
mov dword [esi + 0x4a78], eax
mov dword [esi + 0x4a7c], eax
mov dword [esi + 0x4a80], edi
mov dword [esi + 0x4a84], eax
mov dword [esi + 0x4a88], eax
mov dword [esi + 0x4a8c], eax
mov dword [esi + 0x4a90], edi
mov dword [esi + 0x4a94], eax
mov dword [esi + 0x4a98], eax
mov dword [esi + 0x4a9c], eax
mov dword [esi + 0x4aa0], edi
mov dword [esi + 0x4aa4], ebx
mov dword [esi + 0x4aa8], ebx
mov dword [esi + 0x4aac], ebx
mov dword [esi + 0x4ab0], ebx
mov dword [esi + 0x4ab4], ecx
mov ecx, dword [esp + 0x1b4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1b0
ret
cmp eax, 0xa
jge 0x51bf60
mov dl, al
add dl, 0x6b
mov byte [eax + esi + 0x4b94], dl
mov dl, 0x77
jmp 0x51b262
mov byte [eax + esi + 0x4b94], cl
jmp 0x51b262