Function at 0x428ff0
Capabilities:
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x4d3c09
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
push ebp
push esi
push edi
mov ecx, dword [0x4f3c58]
mov eax, 0x523574
xor ebp, ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x18], eax
lea eax, [ecx - 1]
cmp ecx, ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x14], ebp
mov dword [esp + 0x24], 1
mov dword [esp + 0x10], ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], eax
jg 0x42906c
mov eax, dword [sym.imp.MSVCRT.dll__iob]
push 0xc3d
push str.C:Documents_and_SettingscorkumMy_DocumentsMy_ProjectsFEAWIN_5.X_fea.cpp
add eax, 0x40
push str.fatal:_attrib_AST_stack_overflow__s__d___n
push eax
call dword [sym.imp.MSVCRT.dll_fprintf]
add esp, 0x10
push 1
call dword [sym.imp.MSVCRT.dll_exit]
cmp eax, ebp
mov dword [0x4f3c58], eax
jg 0x42909f
mov ecx, dword [sym.imp.MSVCRT.dll__iob]
push 0xc41
push str.C:Documents_and_SettingscorkumMy_DocumentsMy_ProjectsFEAWIN_5.X_fea.cpp
add ecx, 0x40
push str.fatal:_attrib_AST_stack_overflow__s__d___n
push ecx
call dword [sym.imp.MSVCRT.dll_fprintf]
add esp, 0x10
push 1
call dword [sym.imp.MSVCRT.dll_exit]
mov edx, dword [0x4f3c88]
dec eax
mov dword [0x4f3c58], eax
lea esi, [edx - 3]
cmp esi, 1
jl 0x4290ee
call fcn.0046dbb0
mov edx, dword [0x4f3c88]
mov eax, dword [0x5316bc]
dec edx
inc eax
and eax, 3
mov dword [0x4f3c88], edx
mov dword [0x5316bc], eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x52f6f8
dec esi
mov dword [0x5316b8], ecx
jne 0x4290b3
mov edx, dword [0x5316c0]
and edx, 3
mov eax, dword [edx*4 + 0x531644]
cmp eax, 0x71
jne 0x42977f
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x71
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
mov eax, dword [0x4f3c58]
cmp eax, ebp
lea edi, [eax - 1]
jg 0x42916e
mov edx, dword [sym.imp.MSVCRT.dll__iob]
push 0xc48
push str.C:Documents_and_SettingscorkumMy_DocumentsMy_ProjectsFEAWIN_5.X_fea.cpp
add edx, 0x40
push str.fatal:_attrib_AST_stack_overflow__s__d___n
push edx
call dword [sym.imp.MSVCRT.dll_fprintf]
add esp, 0x10
push 1
call dword [sym.imp.MSVCRT.dll_exit]
fstp qword [0x52e440]
mov eax, dword [0x4f3c88]
mov dword [0x4f3c58], edi
lea esi, [eax - 3]
cmp esi, 1
jl 0x4291bf
call fcn.0046dbb0
mov ecx, dword [0x5316bc]
mov edx, dword [0x4f3c88]
dec edx
lea eax, [ecx + 1]
mov dword [0x4f3c88], edx
and eax, 3
mov dword [0x5316bc], eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
shl edx, 4
add edx, 0x52f6f8
dec esi
mov dword [0x5316b8], edx
jne 0x429181
mov eax, dword [0x5316c0]
mov ecx, eax
and ecx, 3
mov edx, dword [ecx*4 + 0x531644]
test byte [edx + 0x4f1c08], 0x10
je 0x42965e
mov ecx, dword [0x4f3c88]
lea esi, [ecx - 3]
cmp esi, 1
jl 0x42922c
call fcn.0046dbb0
mov edx, dword [0x4f3c88]
dec edx
mov dword [0x4f3c88], edx
mov edx, dword [0x5316bc]
lea eax, [edx + 1]
and eax, 3
mov dword [0x5316bc], eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 4
add eax, 0x52f6f8
dec esi
mov dword [0x5316b8], eax
jne 0x4291eb
mov eax, dword [0x5316c0]
and eax, 3
mov eax, dword [eax*4 + 0x531644]
cmp eax, 0x43
jne 0x4292a1
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x43
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e3d0]
jmp 0x42916e
cmp eax, 0x5a
jne 0x42930c
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x5a
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fst qword [0x52e430]
jmp 0x429168
cmp eax, 0x72
jne 0x429377
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x72
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e4f0]
jmp 0x42916e
cmp eax, 0x45
jne 0x4293e2
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x45
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e420]
jmp 0x42916e
cmp eax, 0x73
jne 0x429447
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x73
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
jmp 0x429168
cmp eax, 0x74
jne 0x4294b2
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x74
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e438]
jmp 0x42916e
cmp eax, 0x75
jne 0x42951d
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x75
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e470]
jmp 0x42916e
cmp eax, 0x68
jne 0x429588
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x68
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e4b8]
jmp 0x42916e
cmp eax, 0x76
jne 0x4295f3
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x76
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e4f8]
jmp 0x42916e
cmp eax, 0x77
jne 0x42965e
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x77
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e500]
jmp 0x42916e
fld qword [0x4dbfb0]
fmul qword [0x52e4f0]
mov dword [0x4f3c58], edi
fmul qword [0x52e4f0]
fmul qword [0x4db778]
fstp qword [0x52e4f0]
fld qword [0x52e470]
fdiv qword [0x52e4f0]
fstp qword [0x52e470]
fld qword [0x52e438]
fcomp qword [0x4db678]
fnstsw ax
test ah, 1
jne 0x4296bd
mov edx, dword [0x52e438]
mov eax, dword [0x52e43c]
mov dword [0x52e440], edx
mov dword [0x52e444], eax
push 0x90
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov esi, eax
add esp, 4
mov dword [esp + 0x28], esi
cmp esi, ebp
mov byte [esp + 0x38], 1
je 0x42a88e
mov ecx, dword [0x52e5c0]
mov edx, dword [0x52e504]
mov eax, dword [0x52e500]
push ecx
mov ecx, dword [0x52e4bc]
push edx
mov edx, dword [0x52e4b8]
push eax
mov eax, dword [0x52e474]
push ecx
mov ecx, dword [0x52e470]
push edx
mov edx, dword [0x52e424]
push eax
mov eax, dword [0x52e420]
push ecx
mov ecx, dword [0x52e444]
push edx
mov edx, dword [0x52e440]
push eax
mov eax, dword [0x52e434]
push ecx
mov ecx, dword [0x52e430]
push edx
mov edx, dword [0x52e4f4]
push eax
mov eax, dword [0x52e4f0]
push ecx
mov ecx, dword [0x52e3d4]
push edx
mov edx, dword [0x52e3d0]
push eax
push ecx
push edx
sub esp, 0xc
lea eax, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x7c], esp
push eax
call fcn.0047d4e0
mov ecx, esi
call fcn.00412060
mov dword [0x52e378], eax
mov eax, dword [esp + 0x20]
mov dword [0x4f3c58], eax
jmp 0x42a90b
cmp eax, 0x78
jne 0x429fb7
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x78
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
mov eax, dword [0x4f3c58]
cmp eax, ebp
lea edi, [eax - 1]
jg 0x4297ee
mov eax, dword [sym.imp.MSVCRT.dll__iob]
push 0xcb3
push str.C:Documents_and_SettingscorkumMy_DocumentsMy_ProjectsFEAWIN_5.X_fea.cpp
add eax, 0x40
push str.fatal:_attrib_AST_stack_overflow__s__d___n
push eax
call dword [sym.imp.MSVCRT.dll_fprintf]
add esp, 0x10
push 1
call dword [sym.imp.MSVCRT.dll_exit]
fstp qword [0x52e440]
mov ecx, dword [0x4f3c88]
mov dword [0x4f3c58], edi
lea esi, [ecx - 3]
cmp esi, 1
jl 0x42983e
call fcn.0046dbb0
mov edx, dword [0x4f3c88]
dec edx
mov dword [0x4f3c88], edx
mov edx, dword [0x5316bc]
lea eax, [edx + 1]
and eax, 3
mov dword [0x5316bc], eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 4
add eax, 0x52f6f8
dec esi
mov dword [0x5316b8], eax
jne 0x429802
mov eax, dword [0x5316c0]
mov ecx, eax
and ecx, 3
mov edx, dword [ecx*4 + 0x531644]
test byte [edx + 0x4f1c08], 0x20
je 0x429e89
mov ecx, dword [0x4f3c88]
lea esi, [ecx - 3]
cmp esi, 1
jl 0x4298ab
call fcn.0046dbb0
mov edx, dword [0x4f3c88]
dec edx
mov dword [0x4f3c88], edx
mov edx, dword [0x5316bc]
lea eax, [edx + 1]
and eax, 3
mov dword [0x5316bc], eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 4
add eax, 0x52f6f8
dec esi
mov dword [0x5316b8], eax
jne 0x42986a
mov eax, dword [0x5316c0]
and eax, 3
mov eax, dword [eax*4 + 0x531644]
cmp eax, 0x43
jne 0x429920
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x43
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e3d0]
jmp 0x4297ee
cmp eax, 0x5a
jne 0x42998b
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x5a
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fst qword [0x52e430]
jmp 0x4297e8
cmp eax, 0x73
jne 0x4299f0
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x73
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
jmp 0x4297e8
cmp eax, 0x75
jne 0x429a5b
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x75
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e470]
jmp 0x4297ee
cmp eax, 0x68
jne 0x429ac6
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x68
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e4b8]
jmp 0x4297ee
cmp eax, 0x77
jne 0x429b31
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x77
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e500]
jmp 0x4297ee
cmp eax, 0x79
jne 0x429b9c
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x79
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e4f0]
jmp 0x4297ee
cmp eax, 0x7a
jne 0x429c07
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x7a
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e508]
jmp 0x4297ee
cmp eax, 0x7b
jne 0x429c72
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x7b
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e510]
jmp 0x4297ee
cmp eax, 0x7c
jne 0x429cdd
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x7c
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e518]
jmp 0x4297ee
cmp eax, 0x7d
jne 0x429d48
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x7d
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e528]
jmp 0x4297ee
cmp eax, 0x45
jne 0x429db3
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x45
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e420]
jmp 0x4297ee
cmp eax, 0x7e
jne 0x429e1e
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x7e
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e520]
jmp 0x4297ee
cmp eax, 0x76
jne 0x429e89
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x76
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e4f8]
jmp 0x4297ee
fld qword [0x4dbfb0]
fmul qword [0x52e4f0]
push 0xa8
mov dword [0x4f3c58], edi
fmul qword [0x52e4f0]
fmul qword [0x4db778]
fld qword [0x52e470]
fdiv st(1)
fstp qword [0x52e470]
fstp st(0)
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov esi, eax
add esp, 4
mov dword [esp + 0x2c], esi
cmp esi, ebp
mov byte [esp + 0x38], 2
je 0x42a88e
mov eax, dword [0x52e524]
mov ecx, dword [0x52e520]
mov edx, dword [0x52e52c]
push eax
mov eax, dword [0x52e528]
push ecx
mov ecx, dword [0x52e51c]
push edx
mov edx, dword [0x52e518]
push eax
mov eax, dword [0x52e514]
push ecx
mov ecx, dword [0x52e510]
push edx
mov edx, dword [0x52e50c]
push eax
mov eax, dword [0x52e508]
push ecx
mov ecx, dword [0x52e504]
push edx
mov edx, dword [0x52e500]
push eax
mov eax, dword [0x52e4bc]
push ecx
mov ecx, dword [0x52e4b8]
push edx
mov edx, dword [0x52e474]
push eax
mov eax, dword [0x52e470]
push ecx
mov ecx, dword [0x52e424]
push edx
mov edx, dword [0x52e420]
push eax
mov eax, dword [0x52e444]
push ecx
mov ecx, dword [0x52e440]
push edx
mov edx, dword [0x52e434]
push eax
mov eax, dword [0x52e430]
push ecx
mov ecx, dword [0x52e4f4]
push edx
mov edx, dword [0x52e4f0]
push eax
mov eax, dword [0x52e3d4]
push ecx
mov ecx, dword [0x52e3d0]
push edx
push eax
push ecx
sub esp, 0xc
lea edx, [esp + 0xb4]
mov ecx, esp
mov dword [esp + 0x9c], esp
push edx
call fcn.0047d4e0
mov ecx, esi
call fcn.004614f0
mov dword [0x52e378], eax
mov eax, dword [esp + 0x20]
mov dword [0x4f3c58], eax
jmp 0x42a90b
cmp eax, 0x7f
jne 0x42a8a0
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x7f
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
mov eax, dword [0x4f3c58]
cmp eax, ebp
lea edi, [eax - 1]
jg 0x42a021
mov edx, dword [sym.imp.MSVCRT.dll__iob]
push 0xd41
push str.C:Documents_and_SettingscorkumMy_DocumentsMy_ProjectsFEAWIN_5.X_fea.cpp
add edx, 0x40
push str.fatal:_attrib_AST_stack_overflow__s__d___n
push edx
call dword [sym.imp.MSVCRT.dll_fprintf]
add esp, 0x10
push 1
call dword [sym.imp.MSVCRT.dll_exit]
mov eax, dword [0x4f3c88]
mov dword [0x4f3c58], edi
lea esi, [eax - 3]
cmp esi, 1
jl 0x42a072
call fcn.0046dbb0
mov ecx, dword [0x5316bc]
mov edx, dword [0x4f3c88]
dec edx
lea eax, [ecx + 1]
mov dword [0x4f3c88], edx
and eax, 3
mov dword [0x5316bc], eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
shl edx, 4
add edx, 0x52f6f8
dec esi
mov dword [0x5316b8], edx
jne 0x42a034
mov eax, dword [0x5316c0]
mov ecx, eax
and ecx, 3
mov edx, dword [ecx*4 + 0x531644]
test byte [edx + 0x4f1c08], 0x40
je 0x42a73d
mov ecx, dword [0x4f3c88]
lea esi, [ecx - 3]
cmp esi, 1
jl 0x42a0df
call fcn.0046dbb0
mov edx, dword [0x4f3c88]
dec edx
mov dword [0x4f3c88], edx
mov edx, dword [0x5316bc]
lea eax, [edx + 1]
and eax, 3
mov dword [0x5316bc], eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 4
add eax, 0x52f6f8
dec esi
mov dword [0x5316b8], eax
jne 0x42a09e
mov eax, dword [0x5316c0]
and eax, 3
mov eax, dword [eax*4 + 0x531644]
cmp eax, 0x43
jne 0x42a154
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x43
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e3d0]
jmp 0x42a021
cmp eax, 0x5a
jne 0x42a1bf
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x5a
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e430]
jmp 0x42a021
cmp eax, 0x74
jne 0x42a22a
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x74
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e438]
jmp 0x42a021
cmp eax, 0x75
jne 0x42a295
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x75
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e470]
jmp 0x42a021
cmp eax, 0x68
jne 0x42a300
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x68
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e4b8]
jmp 0x42a021
cmp eax, 0x77
jne 0x42a36b
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x77
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e500]
jmp 0x42a021
cmp eax, 0x80
jne 0x42a3db
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x80
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e4f0]
jmp 0x42a021
cmp eax, 0x7a
jne 0x42a446
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x7a
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e508]
jmp 0x42a021
cmp eax, 0x81
jne 0x42a4b6
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x81
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e510]
jmp 0x42a021
cmp eax, 0x7c
jne 0x42a521
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x7c
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e518]
jmp 0x42a021
cmp eax, 0x7d
jne 0x42a58c
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x7d
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e528]
jmp 0x42a021
cmp eax, 0x45
jne 0x42a5f7
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x45
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e420]
jmp 0x42a021
cmp eax, 0x7e
jne 0x42a662
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x7e
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e520]
jmp 0x42a021
cmp eax, 0x82
jne 0x42a6d2
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x82
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x18]
push ecx
push edx
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e530]
jmp 0x42a021
cmp eax, 0x76
jne 0x42a73d
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x20]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x76
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push 0x10
call fcn.0041dd70
add esp, 0x18
test eax, eax
je 0x42a8c8
call fcn.0041ff30
fstp qword [0x52e4f8]
jmp 0x42a021
fld qword [0x52e438]
fcomp qword [0x4db678]
mov dword [0x4f3c58], edi
fnstsw ax
test ah, 1
jne 0x42a770
mov ecx, dword [0x52e438]
mov edx, dword [0x52e43c]
mov dword [0x52e440], ecx
mov dword [0x52e444], edx
jmp 0x42a784
mov dword [0x52e440], 0
mov dword [0x52e444], 0
push 0xb0
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov esi, eax
add esp, 4
mov dword [esp + 0x2c], esi
cmp esi, ebp
mov byte [esp + 0x38], 3
je 0x42a88e
mov eax, dword [0x52e534]
mov ecx, dword [0x52e530]
mov edx, dword [0x52e524]
push eax
mov eax, dword [0x52e520]
push ecx
mov ecx, dword [0x52e52c]
push edx
mov edx, dword [0x52e528]
push eax
mov eax, dword [0x52e51c]
push ecx
mov ecx, dword [0x52e518]
push edx
mov edx, dword [0x52e514]
push eax
mov eax, dword [0x52e510]
push ecx
mov ecx, dword [0x52e50c]
push edx
mov edx, dword [0x52e508]
push eax
mov eax, dword [0x52e504]
push ecx
mov ecx, dword [0x52e500]
push edx
mov edx, dword [0x52e4bc]
push eax
mov eax, dword [0x52e4b8]
push ecx
mov ecx, dword [0x52e474]
push edx
mov edx, dword [0x52e470]
push eax
mov eax, dword [0x52e424]
push ecx
mov ecx, dword [0x52e420]
push edx
mov edx, dword [0x52e444]
push eax
mov eax, dword [0x52e440]
push ecx
mov ecx, dword [0x52e434]
push edx
mov edx, dword [0x52e430]
push eax
mov eax, dword [0x52e4f4]
push ecx
mov ecx, dword [0x52e4f0]
push edx
mov edx, dword [0x52e3d4]
push eax
mov eax, dword [0x52e3d0]
push ecx
push edx
push eax
sub esp, 0xc
lea edx, [esp + 0xbc]
mov ecx, esp
mov dword [esp + 0xa4], esp
push edx
call fcn.0047d4e0
mov ecx, esi
call fcn.00469770
mov dword [0x52e378], eax
mov eax, dword [esp + 0x20]
mov dword [0x4f3c58], eax
jmp 0x42a90b
xor eax, eax
mov dword [0x52e378], eax
mov eax, dword [esp + 0x20]
mov dword [0x4f3c58], eax
jmp 0x42a90b
lea ecx, [esp + 0x24]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x18]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x1c]
push ecx
push edx
push 0x4f1be0
push 1
call fcn.0041da70
add esp, 0x1c
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x24]
mov dword [0x4f3c58], eax
mov eax, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x14]
push edx
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x24]
push ecx
push 0x523574
push edx
push eax
call fcn.0043daf0
push 0x80
push 0x4f1c08
call fcn.0041d990
add esp, 0x24
lea ecx, [esp + 0x40]
mov dword [esp + 0x38], 0xffffffff
call fcn.0047d600
mov ecx, dword [esp + 0x30]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebp
add esp, 0x30
ret