486993:	68 ff 00 00 00       	push   $0xff
486998:	68 00 00 00 00       	push   $0x0
48699d:	e8 0c 71 f8 ff       	call   0x40daae
4869a2:	89 45 44             	mov    %eax,0x44(%ebp)
4869a5:	83 7d 28 00          	cmpl   $0x0,0x28(%ebp)
4869a9:	0f 85 07 00 00 00    	jne    0x4869b6
4869af:	c7 45 24 01 00 00 00 	movl   $0x1,0x24(%ebp)
4869b6:	89 65 f8             	mov    %esp,-0x8(%ebp)
4869b9:	ff 75 24             	push   0x24(%ebp)
4869bc:	33 c0                	xor    %eax,%eax
4869be:	ff 15 90 9a 50 00    	call   *0x509a90
4869c4:	90                   	nop
4869c5:	90                   	nop
4869c6:	39 65 f8             	cmp    %esp,-0x8(%ebp)
4869c9:	74 17                	je     0x4869e2
4869cb:	68 e0 00 00 00       	push   $0xe0
4869d0:	68 e2 d1 03 04       	push   $0x403d1e2
4869d5:	68 06 00 00 00       	push   $0x6
4869da:	e8 cb 9b 01 00       	call   0x4a05aa
4869df:	83 c4 0c             	add    $0xc,%esp
4869e2:	83 e0 01             	and    $0x1,%eax
4869e5:	83 f0 01             	xor    $0x1,%eax
4869e8:	85 c0                	test   %eax,%eax
4869ea:	0f 84 0b 00 00 00    	je     0x4869fb
4869f0:	ff 75 24             	push   0x24(%ebp)
4869f3:	e8 a3 b2 f7 ff       	call   0x401c9b
4869f8:	89 45 24             	mov    %eax,0x24(%ebp)
4869fb:	8b 5d fc             	mov    -0x4(%ebp),%ebx
4869fe:	89 5d f8             	mov    %ebx,-0x8(%ebp)
486a01:	c7 45 f4 00 00 00 00 	movl   $0x0,-0xc(%ebp)
486a08:	6a 00                	push   $0x0
486a0a:	ff 75 f4             	push   -0xc(%ebp)
486a0d:	ff 75 0c             	push   0xc(%ebp)
486a10:	e8 b0 f3 f7 ff       	call   0x405dc5
486a15:	89 45 f0             	mov    %eax,-0x10(%ebp)
486a18:	8b 45 f0             	mov    -0x10(%ebp),%eax
486a1b:	50                   	push   %eax
486a1c:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486a1f:	8b 1b                	mov    (%ebx),%ebx
486a21:	85 db                	test   %ebx,%ebx
486a23:	74 09                	je     0x486a2e
486a25:	53                   	push   %ebx
486a26:	e8 79 9b 01 00       	call   0x4a05a4
486a2b:	83 c4 04             	add    $0x4,%esp
486a2e:	58                   	pop    %eax
486a2f:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486a32:	89 03                	mov    %eax,(%ebx)
486a34:	8b 5d fc             	mov    -0x4(%ebp),%ebx
486a37:	83 c3 04             	add    $0x4,%ebx
486a3a:	89 5d f8             	mov    %ebx,-0x8(%ebp)
486a3d:	8b 5d 14             	mov    0x14(%ebp),%ebx
486a40:	8b 03                	mov    (%ebx),%eax
486a42:	85 c0                	test   %eax,%eax
486a44:	74 13                	je     0x486a59
486a46:	50                   	push   %eax
486a47:	8b 40 04             	mov    0x4(%eax),%eax
486a4a:	83 c0 08             	add    $0x8,%eax
486a4d:	50                   	push   %eax
486a4e:	e8 4b 9b 01 00       	call   0x4a059e
486a53:	59                   	pop    %ecx
486a54:	5e                   	pop    %esi
486a55:	8b f8                	mov    %eax,%edi
486a57:	f3 a4                	rep movsb %ds:(%esi),%es:(%edi)
486a59:	50                   	push   %eax
486a5a:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486a5d:	8b 1b                	mov    (%ebx),%ebx
486a5f:	85 db                	test   %ebx,%ebx
486a61:	74 09                	je     0x486a6c
486a63:	53                   	push   %ebx
486a64:	e8 3b 9b 01 00       	call   0x4a05a4
486a69:	83 c4 04             	add    $0x4,%esp
486a6c:	58                   	pop    %eax
486a6d:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486a70:	89 03                	mov    %eax,(%ebx)
486a72:	8b 5d fc             	mov    -0x4(%ebp),%ebx
486a75:	83 c3 08             	add    $0x8,%ebx
486a78:	89 5d f8             	mov    %ebx,-0x8(%ebp)
486a7b:	8b 45 1c             	mov    0x1c(%ebp),%eax
486a7e:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486a81:	89 03                	mov    %eax,(%ebx)
486a83:	8b 5d fc             	mov    -0x4(%ebp),%ebx
486a86:	83 c3 0c             	add    $0xc,%ebx
486a89:	89 5d f8             	mov    %ebx,-0x8(%ebp)
486a8c:	8b 45 24             	mov    0x24(%ebp),%eax
486a8f:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486a92:	89 03                	mov    %eax,(%ebx)
486a94:	8b 5d fc             	mov    -0x4(%ebp),%ebx
486a97:	83 c3 10             	add    $0x10,%ebx
486a9a:	89 5d f8             	mov    %ebx,-0x8(%ebp)
486a9d:	8b 45 2c             	mov    0x2c(%ebp),%eax
486aa0:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486aa3:	89 03                	mov    %eax,(%ebx)
486aa5:	8b 5d fc             	mov    -0x4(%ebp),%ebx
486aa8:	83 c3 14             	add    $0x14,%ebx
486aab:	89 5d f8             	mov    %ebx,-0x8(%ebp)
486aae:	8b 45 34             	mov    0x34(%ebp),%eax
486ab1:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486ab4:	89 03                	mov    %eax,(%ebx)
486ab6:	89 65 f8             	mov    %esp,-0x8(%ebp)
486ab9:	ff 75 3c             	push   0x3c(%ebp)
486abc:	33 c0                	xor    %eax,%eax
486abe:	ff 15 90 9a 50 00    	call   *0x509a90
486ac4:	90                   	nop
486ac5:	90                   	nop
486ac6:	39 65 f8             	cmp    %esp,-0x8(%ebp)
486ac9:	74 17                	je     0x486ae2
486acb:	68 65 02 00 00       	push   $0x265
486ad0:	68 e2 d1 03 04       	push   $0x403d1e2
486ad5:	68 06 00 00 00       	push   $0x6
486ada:	e8 cb 9a 01 00       	call   0x4a05aa
486adf:	83 c4 0c             	add    $0xc,%esp
486ae2:	83 e0 01             	and    $0x1,%eax
486ae5:	83 f0 01             	xor    $0x1,%eax
486ae8:	85 c0                	test   %eax,%eax
486aea:	0f 84 16 00 00 00    	je     0x486b06
486af0:	8b 5d fc             	mov    -0x4(%ebp),%ebx
486af3:	83 c3 18             	add    $0x18,%ebx
486af6:	89 5d f8             	mov    %ebx,-0x8(%ebp)
486af9:	ff 75 3c             	push   0x3c(%ebp)
486afc:	e8 9a b1 f7 ff       	call   0x401c9b
486b01:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486b04:	89 03                	mov    %eax,(%ebx)
486b06:	8b 5d fc             	mov    -0x4(%ebp),%ebx
486b09:	83 c3 1c             	add    $0x1c,%ebx
486b0c:	89 5d f8             	mov    %ebx,-0x8(%ebp)
486b0f:	8b 45 44             	mov    0x44(%ebp),%eax
486b12:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486b15:	89 03                	mov    %eax,(%ebx)
486b17:	8b 5d fc             	mov    -0x4(%ebp),%ebx
486b1a:	83 c3 24             	add    $0x24,%ebx
486b1d:	89 5d f8             	mov    %ebx,-0x8(%ebp)
486b20:	8b 45 54             	mov    0x54(%ebp),%eax
486b23:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486b26:	89 03                	mov    %eax,(%ebx)
486b28:	8b 5d fc             	mov    -0x4(%ebp),%ebx
486b2b:	83 c3 20             	add    $0x20,%ebx
486b2e:	89 5d f8             	mov    %ebx,-0x8(%ebp)
486b31:	8b 45 4c             	mov    0x4c(%ebp),%eax
486b34:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486b37:	89 03                	mov    %eax,(%ebx)
486b39:	8b 5d 08             	mov    0x8(%ebp),%ebx
486b3c:	8b 1b                	mov    (%ebx),%ebx
486b3e:	83 c3 0c             	add    $0xc,%ebx
486b41:	89 5d f8             	mov    %ebx,-0x8(%ebp)
486b44:	ff 75 f8             	push   -0x8(%ebp)
486b47:	6a 04                	push   $0x4
486b49:	b8 02 00 00 00       	mov    $0x2,%eax
486b4e:	e8 1d a3 01 00       	call   0x4a0e70
486b53:	83 c4 08             	add    $0x8,%esp
486b56:	8b 45 fc             	mov    -0x4(%ebp),%eax
486b59:	89 45 f4             	mov    %eax,-0xc(%ebp)
486b5c:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486b5f:	8b 1b                	mov    (%ebx),%ebx
486b61:	89 5d f0             	mov    %ebx,-0x10(%ebp)
486b64:	e8 8a cb f7 ff       	call   0x4036f3
486b69:	89 4d ec             	mov    %ecx,-0x14(%ebp)
486b6c:	8b 7d f0             	mov    -0x10(%ebp),%edi
486b6f:	c7 07 01 00 00 00    	movl   $0x1,(%edi)
486b75:	83 c7 04             	add    $0x4,%edi
486b78:	8b c1                	mov    %ecx,%eax
486b7a:	40                   	inc    %eax
486b7b:	89 07                	mov    %eax,(%edi)
486b7d:	83 c7 04             	add    $0x4,%edi
486b80:	3b fb                	cmp    %ebx,%edi
486b82:	74 04                	je     0x486b88
486b84:	8b f3                	mov    %ebx,%esi
486b86:	f3 a5                	rep movsl %ds:(%esi),%es:(%edi)
486b88:	8b 45 ec             	mov    -0x14(%ebp),%eax
486b8b:	40                   	inc    %eax
486b8c:	c1 e0 02             	shl    $0x2,%eax
486b8f:	83 c0 08             	add    $0x8,%eax
486b92:	50                   	push   %eax
486b93:	ff 75 f0             	push   -0x10(%ebp)
486b96:	e8 15 9a 01 00       	call   0x4a05b0
486b9b:	83 c4 08             	add    $0x8,%esp
486b9e:	8b 5d f8             	mov    -0x8(%ebp),%ebx
486ba1:	89 03                	mov    %eax,(%ebx)
486ba3:	8b f8                	mov    %eax,%edi
486ba5:	83 c7 08             	add    $0x8,%edi
486ba8:	8b 45 ec             	mov    -0x14(%ebp),%eax
486bab:	c1 e0 02             	shl    $0x2,%eax
486bae:	03 f8                	add    %eax,%edi
486bb0:	8b 45 f4             	mov    -0xc(%ebp),%eax
486bb3:	57                   	push   %edi
486bb4:	50                   	push   %eax
486bb5:	68 28 00 00 00       	push   $0x28
486bba:	e8 df 99 01 00       	call   0x4a059e
486bbf:	83 c4 04             	add    $0x4,%esp
486bc2:	5e                   	pop    %esi
486bc3:	8b f8                	mov    %eax,%edi
486bc5:	50                   	push   %eax
486bc6:	ad                   	lods   %ds:(%esi),%eax
486bc7:	56                   	push   %esi
486bc8:	57                   	push   %edi
486bc9:	85 c0                	test   %eax,%eax
486bcb:	74 13                	je     0x486be0
486bcd:	50                   	push   %eax
486bce:	8b 40 04             	mov    0x4(%eax),%eax
486bd1:	83 c0 08             	add    $0x8,%eax
486bd4:	50                   	push   %eax
486bd5:	e8 c4 99 01 00       	call   0x4a059e
486bda:	59                   	pop    %ecx
486bdb:	5e                   	pop    %esi
486bdc:	8b f8                	mov    %eax,%edi
486bde:	f3 a4                	rep movsb %ds:(%esi),%es:(%edi)
486be0:	5f                   	pop    %edi
486be1:	5e                   	pop    %esi
486be2:	ab                   	stos   %eax,%es:(%edi)
486be3:	ad                   	lods   %ds:(%esi),%eax
486be4:	56                   	push   %esi
486be5:	57                   	push   %edi
486be6:	85 c0                	test   %eax,%eax
486be8:	74 13                	je     0x486bfd
486bea:	50                   	push   %eax
486beb:	8b 40 04             	mov    0x4(%eax),%eax
486bee:	83 c0 08             	add    $0x8,%eax
486bf1:	50                   	push   %eax
486bf2:	e8 a7 99 01 00       	call   0x4a059e
486bf7:	59                   	pop    %ecx
486bf8:	5e                   	pop    %esi
486bf9:	8b f8                	mov    %eax,%edi
486bfb:	f3 a4                	rep movsb %ds:(%esi),%es:(%edi)
486bfd:	5f                   	pop    %edi
486bfe:	5e                   	pop    %esi
486bff:	ab                   	stos   %eax,%es:(%edi)
486c00:	b9 08 00 00 00       	mov    $0x8,%ecx
486c05:	f3 a5                	rep movsl %ds:(%esi),%es:(%edi)
486c07:	58                   	pop    %eax
486c08:	5f                   	pop    %edi
486c09:	89 07                	mov    %eax,(%edi)
486c0b:	8b 5d fc             	mov    -0x4(%ebp),%ebx
486c0e:	53                   	push   %ebx
486c0f:	53                   	push   %ebx
486c10:	8b 1b                	mov    (%ebx),%ebx
486c12:	85 db                	test   %ebx,%ebx
486c14:	74 09                	je     0x486c1f
486c16:	53                   	push   %ebx
486c17:	e8 88 99 01 00       	call   0x4a05a4
486c1c:	83 c4 04             	add    $0x4,%esp
486c1f:	5b                   	pop    %ebx
486c20:	83 c3 04             	add    $0x4,%ebx
486c23:	53                   	push   %ebx
486c24:	8b 1b                	mov    (%ebx),%ebx
486c26:	85 db                	test   %ebx,%ebx
486c28:	74 09                	je     0x486c33
486c2a:	53                   	push   %ebx
486c2b:	e8 74 99 01 00       	call   0x4a05a4
486c30:	83 c4 04             	add    $0x4,%esp
486c33:	5b                   	pop    %ebx
486c34:	e8 6b 99 01 00       	call   0x4a05a4
486c39:	83 c4 04             	add    $0x4,%esp
486c3c:	8b e5                	mov    %ebp,%esp
486c3e:	5d                   	pop    %ebp
486c3f:	c2 54 00             	ret    $0x54
486c42:	55                   	push   %ebp
486c43:	8b ec                	mov    %esp,%ebp
486c45:	81 ec 14 00 00 00    	sub    $0x14,%esp
486c4b:	ff 75 0c             	push   0xc(%ebp)
486c4e:	ff 75 08             	push   0x8(%ebp)
486c51:	8b 04 24             	mov    (%esp),%eax
486c54:	8b 00                	mov    (%eax),%eax
486c56:	8b 00                	mov    (%eax),%eax
486c58:	ff 50 40             	call   *0x40(%eax)
486c5b:	85 c0                	test   %eax,%eax
486c5d:	0f 84 04 01 00 00    	je     0x486d67
486c63:	8b 5d 08             	mov    0x8(%ebp),%ebx
486c66:	8b 1b                	mov    (%ebx),%ebx
486c68:	83 c3 0c             	add    $0xc,%ebx
486c6b:	89 5d fc             	mov    %ebx,-0x4(%ebp)
486c6e:	ff 75 fc             	push   -0x4(%ebp)
486c71:	6a 04                	push   $0x4
486c73:	b8 02 00 00 00       	mov    $0x2,%eax
486c78:	e8 f3 a1 01 00       	call   0x4a0e70
486c7d:	83 c4 08             	add    $0x8,%esp
486c80:	8b 45 0c             	mov    0xc(%ebp),%eax
486c83:	48                   	dec    %eax
486c84:	0f 8c d1 00 00 00    	jl     0x486d5b
486c8a:	89 45 f8             	mov    %eax,-0x8(%ebp)
486c8d:	8b 5d fc             	mov    -0x4(%ebp),%ebx
486c90:	8b 1b                	mov    (%ebx),%ebx
486c92:	89 5d f0             	mov    %ebx,-0x10(%ebp)
486c95:	e8 59 ca f7 ff       	call   0x4036f3
486c9a:	89 4d ec             	mov    %ecx,-0x14(%ebp)
486c9d:	2b 4d f8             	sub    -0x8(%ebp),%ecx
486ca0:	0f 8e b5 00 00 00    	jle    0x486d5b
486ca6:	83 f9 01             	cmp    $0x1,%ecx
486ca9:	7e 05                	jle    0x486cb0
486cab:	b9 01 00 00 00       	mov    $0x1,%ecx
486cb0:	89 4d f4             	mov    %ecx,-0xc(%ebp)
486cb3:	83 7d f4 00          	cmpl   $0x0,-0xc(%ebp)
486cb7:	0f 8e 9e 00 00 00    	jle    0x486d5b
486cbd:	8b 7d f0             	mov    -0x10(%ebp),%edi
486cc0:	8b 4d ec             	mov    -0x14(%ebp),%ecx
486cc3:	c7 07 01 00 00 00    	movl   $0x1,(%edi)
486cc9:	83 c7 04             	add    $0x4,%edi
486ccc:	8b c1                	mov    %ecx,%eax
486cce:	2b 45 f4             	sub    -0xc(%ebp),%eax
486cd1:	89 07                	mov    %eax,(%edi)
486cd3:	83 c7 04             	add    $0x4,%edi
486cd6:	3b fb                	cmp    %ebx,%edi
486cd8:	74 04                	je     0x486cde
486cda:	8b f3                	mov    %ebx,%esi
486cdc:	f3 a5                	rep movsl %ds:(%esi),%es:(%edi)
486cde:	8b 7d f0             	mov    -0x10(%ebp),%edi
486ce1:	83 c7 08             	add    $0x8,%edi
486ce4:	8b 45 f8             	mov    -0x8(%ebp),%eax
486ce7:	c1 e0 02             	shl    $0x2,%eax
486cea:	03 f8                	add    %eax,%edi
486cec:	8b 4d f4             	mov    -0xc(%ebp),%ecx
486cef:	8b df                	mov    %edi,%ebx
486cf1:	57                   	push   %edi
486cf2:	51                   	push   %ecx
486cf3:	53                   	push   %ebx
486cf4:	8b 1b                	mov    (%ebx),%ebx
486cf6:	53                   	push   %ebx
486cf7:	53                   	push   %ebx
486cf8:	8b 1b                	mov    (%ebx),%ebx
486cfa:	85 db                	test   %ebx,%ebx
486cfc:	74 09                	je     0x486d07
486cfe:	53                   	push   %ebx
486cff:	e8 a0 98 01 00       	call   0x4a05a4
486d04:	83 c4 04             	add    $0x4,%esp
486d07:	5b                   	pop    %ebx
486d08:	83 c3 04             	add    $0x4,%ebx
486d0b:	53                   	push   %ebx
486d0c:	8b 1b                	mov    (%ebx),%ebx
486d0e:	85 db                	test   %ebx,%ebx
486d10:	74 09                	je     0x486d1b
486d12:	53                   	push   %ebx
486d13:	e8 8c 98 01 00       	call   0x4a05a4
486d18:	83 c4 04             	add    $0x4,%esp
486d1b:	5b                   	pop    %ebx
486d1c:	e8 83 98 01 00       	call   0x4a05a4
486d21:	83 c4 04             	add    $0x4,%esp
486d24:	5b                   	pop    %ebx
486d25:	59                   	pop    %ecx
486d26:	83 c3 04             	add    $0x4,%ebx
486d29:	49                   	dec    %ecx
486d2a:	75 c6                	jne    0x486cf2
486d2c:	5f                   	pop    %edi
486d2d:	8b 45 f4             	mov    -0xc(%ebp),%eax
486d30:	c1 e0 02             	shl    $0x2,%eax
486d33:	8b f7                	mov    %edi,%esi
486d35:	03 f0                	add    %eax,%esi
486d37:	8b 4d ec             	mov    -0x14(%ebp),%ecx
486d3a:	2b 4d f8             	sub    -0x8(%ebp),%ecx
486d3d:	2b 4d f4             	sub    -0xc(%ebp),%ecx
486d40:	f3 a5                	rep movsl %ds:(%esi),%es:(%edi)
486d42:	2b 7d f0             	sub    -0x10(%ebp),%edi
486d45:	57                   	push   %edi