476406:	3b 70 50             	cmp    0x50(%eax),%esi
476409:	7d 06                	jge    0x476411
47640b:	8b 45 fc             	mov    -0x4(%ebp),%eax
47640e:	89 70 50             	mov    %esi,0x50(%eax)
476411:	55                   	push   %ebp
476412:	8b c3                	mov    %ebx,%eax
476414:	f7 d8                	neg    %eax
476416:	e8 11 ff ff ff       	call   0x47632c
47641b:	59                   	pop    %ecx
47641c:	8d 56 01             	lea    0x1(%esi),%edx
47641f:	8b 45 fc             	mov    -0x4(%ebp),%eax
476422:	8b 08                	mov    (%eax),%ecx
476424:	ff 91 84 01 00 00    	call   *0x184(%ecx)
47642a:	8b 45 fc             	mov    -0x4(%ebp),%eax
47642d:	89 70 4c             	mov    %esi,0x4c(%eax)
476430:	8b 45 fc             	mov    -0x4(%ebp),%eax
476433:	f6 40 1c 08          	testb  $0x8,0x1c(%eax)
476437:	75 1d                	jne    0x476456
476439:	8b 45 fc             	mov    -0x4(%ebp),%eax
47643c:	8b 10                	mov    (%eax),%edx
47643e:	ff 92 3c 01 00 00    	call   *0x13c(%edx)
476444:	55                   	push   %ebp
476445:	8b 45 fc             	mov    -0x4(%ebp),%eax
476448:	8b 10                	mov    (%eax),%edx
47644a:	ff 92 44 01 00 00    	call   *0x144(%edx)
476450:	e8 d7 fe ff ff       	call   0x47632c
476455:	59                   	pop    %ecx
476456:	5f                   	pop    %edi
476457:	5e                   	pop    %esi
476458:	5b                   	pop    %ebx
476459:	59                   	pop    %ecx
47645a:	59                   	pop    %ecx
47645b:	5d                   	pop    %ebp
47645c:	c3                   	ret
47645d:	8d 40 00             	lea    0x0(%eax),%eax
476460:	53                   	push   %ebx
476461:	56                   	push   %esi
476462:	57                   	push   %edi
476463:	55                   	push   %ebp
476464:	51                   	push   %ecx
476465:	8b f0                	mov    %eax,%esi
476467:	8b c6                	mov    %esi,%eax
476469:	8b 10                	mov    (%eax),%edx
47646b:	ff 92 04 02 00 00    	call   *0x204(%edx)
476471:	84 c0                	test   %al,%al
476473:	74 66                	je     0x4764db
476475:	bf 01 00 00 00       	mov    $0x1,%edi
47647a:	33 c0                	xor    %eax,%eax
47647c:	89 46 48             	mov    %eax,0x48(%esi)
47647f:	8b 46 44             	mov    0x44(%esi),%eax
476482:	8b 40 08             	mov    0x8(%eax),%eax
476485:	48                   	dec    %eax
476486:	83 f8 00             	cmp    $0x0,%eax
476489:	7c 47                	jl     0x4764d2
47648b:	89 04 24             	mov    %eax,(%esp)
47648e:	8b 46 44             	mov    0x44(%esi),%eax
476491:	8b 14 24             	mov    (%esp),%edx
476494:	e8 57 59 fa ff       	call   0x41bdf0
476499:	8b e8                	mov    %eax,%ebp
47649b:	8b 45 34             	mov    0x34(%ebp),%eax
47649e:	8b 58 08             	mov    0x8(%eax),%ebx
4764a1:	4b                   	dec    %ebx
4764a2:	83 fb 00             	cmp    $0x0,%ebx
4764a5:	7c 22                	jl     0x4764c9
4764a7:	8b 45 34             	mov    0x34(%ebp),%eax
4764aa:	8b d3                	mov    %ebx,%edx
4764ac:	e8 3f 59 fa ff       	call   0x41bdf0
4764b1:	8b 56 48             	mov    0x48(%esi),%edx
4764b4:	89 50 08             	mov    %edx,0x8(%eax)
4764b7:	89 46 48             	mov    %eax,0x48(%esi)
4764ba:	8b 50 0c             	mov    0xc(%eax),%edx
4764bd:	3b fa                	cmp    %edx,%edi
4764bf:	7d 02                	jge    0x4764c3
4764c1:	8b fa                	mov    %edx,%edi
4764c3:	4b                   	dec    %ebx
4764c4:	83 fb ff             	cmp    $0xffffffff,%ebx
4764c7:	75 de                	jne    0x4764a7
4764c9:	ff 0c 24             	decl   (%esp)
4764cc:	83 3c 24 ff          	cmpl   $0xffffffff,(%esp)
4764d0:	75 bc                	jne    0x47648e
4764d2:	8b d7                	mov    %edi,%edx
4764d4:	8b c6                	mov    %esi,%eax
4764d6:	e8 79 fe ff ff       	call   0x476354
4764db:	5a                   	pop    %edx
4764dc:	5d                   	pop    %ebp
4764dd:	5f                   	pop    %edi
4764de:	5e                   	pop    %esi
4764df:	5b                   	pop    %ebx
4764e0:	c3                   	ret
4764e1:	8d 40 00             	lea    0x0(%eax),%eax
4764e4:	53                   	push   %ebx
4764e5:	56                   	push   %esi
4764e6:	57                   	push   %edi
4764e7:	8b f2                	mov    %edx,%esi
4764e9:	8b d8                	mov    %eax,%ebx
4764eb:	3b 73 58             	cmp    0x58(%ebx),%esi
4764ee:	75 09                	jne    0x4764f9
4764f0:	83 bb 84 00 00 00 00 	cmpl   $0x0,0x84(%ebx)
4764f7:	74 6e                	je     0x476567
4764f9:	8b 83 84 00 00 00    	mov    0x84(%ebx),%eax
4764ff:	85 c0                	test   %eax,%eax
476501:	74 14                	je     0x476517
476503:	8b 50 34             	mov    0x34(%eax),%edx
476506:	80 ba 9d 00 00 00 03 	cmpb   $0x3,0x9d(%edx)
47650d:	74 08                	je     0x476517
47650f:	8b 40 34             	mov    0x34(%eax),%eax
476512:	e8 41 04 00 00       	call   0x476958
476517:	80 bb 88 00 00 00 00 	cmpb   $0x0,0x88(%ebx)
47651e:	75 44                	jne    0x476564
476520:	8b 43 5c             	mov    0x5c(%ebx),%eax
476523:	8b 3c b0             	mov    (%eax,%esi,4),%edi
476526:	8b d7                	mov    %edi,%edx
476528:	8b c3                	mov    %ebx,%eax
47652a:	8b 08                	mov    (%eax),%ecx
47652c:	ff 91 b8 01 00 00    	call   *0x1b8(%ecx)
476532:	2c 01                	sub    $0x1,%al
476534:	72 0a                	jb     0x476540
476536:	74 16                	je     0x47654e
476538:	fe c8                	dec    %al
47653a:	74 1e                	je     0x47655a
47653c:	fe c8                	dec    %al
47653e:	75 24                	jne    0x476564
476540:	8b d7                	mov    %edi,%edx
476542:	8b c3                	mov    %ebx,%eax
476544:	8b 08                	mov    (%eax),%ecx
476546:	ff 91 dc 01 00 00    	call   *0x1dc(%ecx)
47654c:	eb 16                	jmp    0x476564
47654e:	8b c3                	mov    %ebx,%eax
476550:	8b 10                	mov    (%eax),%edx
476552:	ff 92 c8 01 00 00    	call   *0x1c8(%edx)
476558:	eb 0a                	jmp    0x476564
47655a:	8b c3                	mov    %ebx,%eax
47655c:	8b 10                	mov    (%eax),%edx
47655e:	ff 92 d4 01 00 00    	call   *0x1d4(%edx)
476564:	89 73 58             	mov    %esi,0x58(%ebx)
476567:	5f                   	pop    %edi
476568:	5e                   	pop    %esi
476569:	5b                   	pop    %ebx
47656a:	c3                   	ret
47656b:	90                   	nop
47656c:	53                   	push   %ebx
47656d:	56                   	push   %esi
47656e:	8b f2                	mov    %edx,%esi
476570:	8b d8                	mov    %eax,%ebx
476572:	8b 43 5c             	mov    0x5c(%ebx),%eax
476575:	e8 6e ee f8 ff       	call   0x4053e8
47657a:	3b f0                	cmp    %eax,%esi
47657c:	7f 09                	jg     0x476587
47657e:	8b 43 5c             	mov    0x5c(%ebx),%eax
476581:	8b 04 b0             	mov    (%eax,%esi,4),%eax
476584:	5e                   	pop    %esi
476585:	5b                   	pop    %ebx
476586:	c3                   	ret
476587:	33 c0                	xor    %eax,%eax
476589:	5e                   	pop    %esi
47658a:	5b                   	pop    %ebx
47658b:	c3                   	ret
47658c:	53                   	push   %ebx
47658d:	56                   	push   %esi
47658e:	57                   	push   %edi
47658f:	51                   	push   %ecx
476590:	8b f0                	mov    %eax,%esi
476592:	c6 04 24 01          	movb   $0x1,(%esp)
476596:	8b 7e 50             	mov    0x50(%esi),%edi
476599:	85 ff                	test   %edi,%edi
47659b:	7e 3b                	jle    0x4765d8
47659d:	8b d7                	mov    %edi,%edx
47659f:	4a                   	dec    %edx
4765a0:	8b c6                	mov    %esi,%eax
4765a2:	8b 08                	mov    (%eax),%ecx
4765a4:	ff 91 88 01 00 00    	call   *0x188(%ecx)
4765aa:	80 be 9d 00 00 00 03 	cmpb   $0x3,0x9d(%esi)
4765b1:	75 43                	jne    0x4765f6
4765b3:	8b 46 58             	mov    0x58(%esi),%eax
4765b6:	3b 46 54             	cmp    0x54(%esi),%eax
4765b9:	75 3b                	jne    0x4765f6
4765bb:	8b c6                	mov    %esi,%eax
4765bd:	e8 3e 03 00 00       	call   0x476900
4765c2:	8b d0                	mov    %eax,%edx
4765c4:	8b c6                	mov    %esi,%eax
4765c6:	8b 08                	mov    (%eax),%ecx
4765c8:	ff 91 b8 01 00 00    	call   *0x1b8(%ecx)
4765ce:	84 c0                	test   %al,%al
4765d0:	75 24                	jne    0x4765f6
4765d2:	c6 04 24 00          	movb   $0x0,(%esp)
4765d6:	eb 1e                	jmp    0x4765f6
4765d8:	8b 86 84 00 00 00    	mov    0x84(%esi),%eax
4765de:	85 c0                	test   %eax,%eax
4765e0:	74 14                	je     0x4765f6
4765e2:	8b 50 34             	mov    0x34(%eax),%edx
4765e5:	80 ba 9d 00 00 00 03 	cmpb   $0x3,0x9d(%edx)
4765ec:	74 08                	je     0x4765f6
4765ee:	8b 40 34             	mov    0x34(%eax),%eax
4765f1:	e8 62 03 00 00       	call   0x476958
4765f6:	6a 01                	push   $0x1
4765f8:	8b 56 50             	mov    0x50(%esi),%edx
4765fb:	8b c6                	mov    %esi,%eax
4765fd:	e8 6a ff ff ff       	call   0x47656c
476602:	8b d0                	mov    %eax,%edx
476604:	8a 4c 24 04          	mov    0x4(%esp),%cl
476608:	8b c6                	mov    %esi,%eax
47660a:	8b 18                	mov    (%eax),%ebx
47660c:	ff 93 f0 01 00 00    	call   *0x1f0(%ebx)
476612:	84 c0                	test   %al,%al
476614:	0f 94 c3             	sete   %bl
476617:	84 db                	test   %bl,%bl
476619:	74 33                	je     0x47664e
47661b:	8b 46 50             	mov    0x50(%esi),%eax
47661e:	85 c0                	test   %eax,%eax
476620:	75 0c                	jne    0x47662e
476622:	8b c6                	mov    %esi,%eax
476624:	8b 10                	mov    (%eax),%edx
476626:	ff 92 18 01 00 00    	call   *0x118(%edx)
47662c:	eb 15                	jmp    0x476643
47662e:	3b 46 4c             	cmp    0x4c(%esi),%eax
476631:	7d 05                	jge    0x476638
476633:	ff 46 50             	incl   0x50(%esi)
476636:	eb 0b                	jmp    0x476643
476638:	8b c8                	mov    %eax,%ecx
47663a:	33 d2                	xor    %edx,%edx
47663c:	8b c6                	mov    %esi,%eax
47663e:	e8 59 02 00 00       	call   0x47689c
476643:	8b 46 50             	mov    0x50(%esi),%eax
476646:	48                   	dec    %eax
476647:	89 46 58             	mov    %eax,0x58(%esi)
47664a:	b3 01                	mov    $0x1,%bl
47664c:	eb 07                	jmp    0x476655
47664e:	8b c6                	mov    %esi,%eax
476650:	e8 1b 03 00 00       	call   0x476970
476655:	8b c3                	mov    %ebx,%eax
476657:	5a                   	pop    %edx
476658:	5f                   	pop    %edi
476659:	5e                   	pop    %esi
47665a:	5b                   	pop    %ebx
47665b:	c3                   	ret
47665c:	53                   	push   %ebx
47665d:	56                   	push   %esi
47665e:	8b f0                	mov    %eax,%esi
476660:	8b c6                	mov    %esi,%eax
476662:	e8 59 e1 ff ff       	call   0x4747c0
476667:	83 7e 50 00          	cmpl   $0x0,0x50(%esi)
47666b:	7e 0c                	jle    0x476679
47666d:	33 d2                	xor    %edx,%edx
47666f:	8b c6                	mov    %esi,%eax
476671:	8b 08                	mov    (%eax),%ecx
476673:	ff 91 88 01 00 00    	call   *0x188(%ecx)
476679:	6a 01                	push   $0x1
47667b:	8b 56 50             	mov    0x50(%esi),%edx
47667e:	8b c6                	mov    %esi,%eax
476680:	e8 e7 fe ff ff       	call   0x47656c
476685:	8b d0                	mov    %eax,%edx
476687:	b1 02                	mov    $0x2,%cl
476689:	8b c6                	mov    %esi,%eax
47668b:	8b 18                	mov    (%eax),%ebx
47668d:	ff 93 f0 01 00 00    	call   *0x1f0(%ebx)
476693:	84 c0                	test   %al,%al
476695:	0f 94 c3             	sete   %bl
476698:	84 db                	test   %bl,%bl
47669a:	74 33                	je     0x4766cf
47669c:	8b 46 50             	mov    0x50(%esi),%eax
47669f:	85 c0                	test   %eax,%eax
4766a1:	75 0c                	jne    0x4766af
4766a3:	8b c6                	mov    %esi,%eax
4766a5:	8b 10                	mov    (%eax),%edx
4766a7:	ff 92 18 01 00 00    	call   *0x118(%edx)
4766ad:	eb 19                	jmp    0x4766c8
4766af:	33 c9                	xor    %ecx,%ecx
4766b1:	8b d0                	mov    %eax,%edx
4766b3:	8b c6                	mov    %esi,%eax
4766b5:	e8 e2 01 00 00       	call   0x47689c
4766ba:	8b 46 50             	mov    0x50(%esi),%eax
4766bd:	3b 46 4c             	cmp    0x4c(%esi),%eax
4766c0:	7d 06                	jge    0x4766c8
4766c2:	ff 46 50             	incl   0x50(%esi)
4766c5:	ff 46 54             	incl   0x54(%esi)
4766c8:	33 c0                	xor    %eax,%eax
4766ca:	89 46 58             	mov    %eax,0x58(%esi)
4766cd:	eb 07                	jmp    0x4766d6
4766cf:	8b c6                	mov    %esi,%eax
4766d1:	e8 9a 02 00 00       	call   0x476970
4766d6:	8b c3                	mov    %ebx,%eax
4766d8:	5e                   	pop    %esi
4766d9:	5b                   	pop    %ebx
4766da:	c3                   	ret
4766db:	90                   	nop
4766dc:	55                   	push   %ebp
4766dd:	8b ec                	mov    %esp,%ebp
4766df:	83 c4 f4             	add    $0xfffffff4,%esp
4766e2:	53                   	push   %ebx
4766e3:	33 c9                	xor    %ecx,%ecx
4766e5:	89 4d f4             	mov    %ecx,-0xc(%ebp)
4766e8:	88 55 fb             	mov    %dl,-0x5(%ebp)
4766eb:	89 45 fc             	mov    %eax,-0x4(%ebp)
4766ee:	33 c0                	xor    %eax,%eax
4766f0:	55                   	push   %ebp
4766f1:	68 8d 68 47 00       	push   $0x47688d
4766f6:	64 ff 30             	push   %fs:(%eax)
4766f9:	64 89 20             	mov    %esp,%fs:(%eax)
4766fc:	8b 45 fc             	mov    -0x4(%ebp),%eax
4766ff:	80 b8 88 00 00 00 00 	cmpb   $0x0,0x88(%eax)
476706:	0f 85 6b 01 00 00    	jne    0x476877
47670c:	f6 45 fb 01          	testb  $0x1,-0x5(%ebp)
476710:	74 4b                	je     0x47675d
476712:	8b 45 fc             	mov    -0x4(%ebp),%eax
476715:	e8 56 02 00 00       	call   0x476970
47671a:	6a 01                	push   $0x1
47671c:	8b 45 fc             	mov    -0x4(%ebp),%eax
47671f:	8b 40 50             	mov    0x50(%eax),%eax
476722:	8b 55 fc             	mov    -0x4(%ebp),%edx
476725:	8b 52 5c             	mov    0x5c(%edx),%edx
476728:	8b 14 82             	mov    (%edx,%eax,4),%edx
47672b:	33 c9                	xor    %ecx,%ecx
47672d:	8b 45 fc             	mov    -0x4(%ebp),%eax
476730:	8b 18                	mov    (%eax),%ebx
476732:	ff 93 f0 01 00 00    	call   *0x1f0(%ebx)
476738:	84 c0                	test   %al,%al
47673a:	0f 84 a2 00 00 00    	je     0x4767e2
476740:	8d 55 f4             	lea    -0xc(%ebp),%edx
476743:	a1 ac b0 49 00       	mov    0x49b0ac,%eax
476748:	e8 eb fa f8 ff       	call   0x406238
47674d:	8b 45 f4             	mov    -0xc(%ebp),%eax
476750:	8b 55 fc             	mov    -0x4(%ebp),%edx
476753:	e8 28 33 ff ff       	call   0x469a80
476758:	e9 85 00 00 00       	jmp    0x4767e2
47675d:	6a 00                	push   $0x0
47675f:	8b 45 fc             	mov    -0x4(%ebp),%eax
476762:	8b 40 50             	mov    0x50(%eax),%eax
476765:	8b 55 fc             	mov    -0x4(%ebp),%edx
476768:	8b 52 5c             	mov    0x5c(%edx),%edx
47676b:	8b 14 82             	mov    (%edx,%eax,4),%edx
47676e:	33 c9                	xor    %ecx,%ecx
476770:	8b 45 fc             	mov    -0x4(%ebp),%eax
476773:	8b 18                	mov    (%eax),%ebx
476775:	ff 93 f0 01 00 00    	call   *0x1f0(%ebx)
47677b:	84 c0                	test   %al,%al
47677d:	74 63                	je     0x4767e2
47677f:	6a 00                	push   $0x0
476781:	8b 45 fc             	mov    -0x4(%ebp),%eax
476784:	8b 40 50             	mov    0x50(%eax),%eax
476787:	8b 55 fc             	mov    -0x4(%ebp),%edx
47678a:	8b 52 5c             	mov    0x5c(%edx),%edx
47678d:	8b 14 82             	mov    (%edx,%eax,4),%edx
476790:	b1 01                	mov    $0x1,%cl
476792:	8b 45 fc             	mov    -0x4(%ebp),%eax
476795:	8b 18                	mov    (%eax),%ebx
476797:	ff 93 f0 01 00 00    	call   *0x1f0(%ebx)
47679d:	84 c0                	test   %al,%al
47679f:	74 41                	je     0x4767e2
4767a1:	6a 00                	push   $0x0
4767a3:	8b 45 fc             	mov    -0x4(%ebp),%eax