476c3a:	8b 40 14             	mov    0x14(%eax),%eax
476c3d:	8b 8d 6c ff ff ff    	mov    -0x94(%ebp),%ecx
476c43:	89 85 70 ff ff ff    	mov    %eax,-0x90(%ebp)
476c49:	8d 85 70 ff ff ff    	lea    -0x90(%ebp),%eax
476c4f:	50                   	push   %eax
476c50:	8d 49 44             	lea    0x44(%ecx),%ecx
476c53:	e8 98 6f 02 00       	call   0x49dbf0
476c58:	8b 3e                	mov    (%esi),%edi
476c5a:	8b 46 04             	mov    0x4(%esi),%eax
476c5d:	43                   	inc    %ebx
476c5e:	8b 8d 74 ff ff ff    	mov    -0x8c(%ebp),%ecx
476c64:	2b c7                	sub    %edi,%eax
476c66:	83 c1 10             	add    $0x10,%ecx
476c69:	c1 f8 04             	sar    $0x4,%eax
476c6c:	89 8d 74 ff ff ff    	mov    %ecx,-0x8c(%ebp)
476c72:	3b d8                	cmp    %eax,%ebx
476c74:	7c aa                	jl     0x476c20
476c76:	8b 4d f4             	mov    -0xc(%ebp),%ecx
476c79:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
476c80:	59                   	pop    %ecx
476c81:	5f                   	pop    %edi
476c82:	5e                   	pop    %esi
476c83:	5b                   	pop    %ebx
476c84:	8b 4d f0             	mov    -0x10(%ebp),%ecx
476c87:	33 cd                	xor    %ebp,%ecx
476c89:	e8 98 ad 15 00       	call   0x5d1a26
476c8e:	8b e5                	mov    %ebp,%esp
476c90:	5d                   	pop    %ebp
476c91:	c2 18 00             	ret    $0x18
476c94:	e8 77 09 fd ff       	call   0x447610
476c99:	e8 52 f5 15 00       	call   0x5d61f0
476c9e:	e8 4d f5 15 00       	call   0x5d61f0
476ca3:	cc                   	int3
476ca4:	cc                   	int3
476ca5:	cc                   	int3
476ca6:	cc                   	int3
476ca7:	cc                   	int3
476ca8:	cc                   	int3
476ca9:	cc                   	int3
476caa:	cc                   	int3
476cab:	cc                   	int3
476cac:	cc                   	int3
476cad:	cc                   	int3
476cae:	cc                   	int3
476caf:	cc                   	int3
476cb0:	55                   	push   %ebp
476cb1:	8b ec                	mov    %esp,%ebp
476cb3:	6a ff                	push   $0xffffffff
476cb5:	68 fd a1 5f 00       	push   $0x5fa1fd
476cba:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
476cc0:	50                   	push   %eax
476cc1:	81 ec 98 00 00 00    	sub    $0x98,%esp
476cc7:	a1 c0 14 69 00       	mov    0x6914c0,%eax
476ccc:	33 c5                	xor    %ebp,%eax
476cce:	89 45 f0             	mov    %eax,-0x10(%ebp)
476cd1:	53                   	push   %ebx
476cd2:	56                   	push   %esi
476cd3:	57                   	push   %edi
476cd4:	50                   	push   %eax
476cd5:	8d 45 f4             	lea    -0xc(%ebp),%eax
476cd8:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
476cde:	8b d9                	mov    %ecx,%ebx
476ce0:	89 9d 6c ff ff ff    	mov    %ebx,-0x94(%ebp)
476ce6:	8b 45 0c             	mov    0xc(%ebp),%eax
476ce9:	8b 7d 08             	mov    0x8(%ebp),%edi
476cec:	89 85 74 ff ff ff    	mov    %eax,-0x8c(%ebp)
476cf2:	8b 45 10             	mov    0x10(%ebp),%eax
476cf5:	89 85 78 ff ff ff    	mov    %eax,-0x88(%ebp)
476cfb:	8b 45 14             	mov    0x14(%ebp),%eax
476cfe:	89 85 64 ff ff ff    	mov    %eax,-0x9c(%ebp)
476d04:	8b 45 18             	mov    0x18(%ebp),%eax
476d07:	89 85 70 ff ff ff    	mov    %eax,-0x90(%ebp)
476d0d:	8b 43 04             	mov    0x4(%ebx),%eax
476d10:	6a 30                	push   $0x30
476d12:	89 85 5c ff ff ff    	mov    %eax,-0xa4(%ebp)
476d18:	e8 08 a5 15 00       	call   0x5d1225
476d1d:	8b f0                	mov    %eax,%esi
476d1f:	83 c4 04             	add    $0x4,%esp
476d22:	89 b5 68 ff ff ff    	mov    %esi,-0x98(%ebp)
476d28:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
476d2f:	85 f6                	test   %esi,%esi
476d31:	74 11                	je     0x476d44
476d33:	6a 00                	push   $0x0
476d35:	8b ce                	mov    %esi,%ecx
476d37:	e8 d4 23 05 00       	call   0x4c9110
476d3c:	c7 06 c4 eb 60 00    	movl   $0x60ebc4,(%esi)
476d42:	eb 02                	jmp    0x476d46
476d44:	33 f6                	xor    %esi,%esi
476d46:	8b 8d 5c ff ff ff    	mov    -0xa4(%ebp),%ecx
476d4c:	81 c1 a4 00 00 00    	add    $0xa4,%ecx
476d52:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
476d59:	89 b5 68 ff ff ff    	mov    %esi,-0x98(%ebp)
476d5f:	8b 41 04             	mov    0x4(%ecx),%eax
476d62:	3b 41 08             	cmp    0x8(%ecx),%eax
476d65:	74 08                	je     0x476d6f
476d67:	89 30                	mov    %esi,(%eax)
476d69:	83 41 04 04          	addl   $0x4,0x4(%ecx)
476d6d:	eb 0d                	jmp    0x476d7c
476d6f:	8d 95 68 ff ff ff    	lea    -0x98(%ebp),%edx
476d75:	52                   	push   %edx
476d76:	50                   	push   %eax
476d77:	e8 a4 21 00 00       	call   0x478f20
476d7c:	8b 8d 78 ff ff ff    	mov    -0x88(%ebp),%ecx
476d82:	e8 79 71 04 00       	call   0x4bdf00
476d87:	84 c0                	test   %al,%al
476d89:	0f 85 ee 00 00 00    	jne    0x476e7d
476d8f:	8b 4f 10             	mov    0x10(%edi),%ecx
476d92:	b8 ff ff ff 7f       	mov    $0x7fffffff,%eax
476d97:	2b c1                	sub    %ecx,%eax
476d99:	83 f8 01             	cmp    $0x1,%eax
476d9c:	0f 82 c2 02 00 00    	jb     0x477064
476da2:	83 7f 14 10          	cmpl   $0x10,0x14(%edi)
476da6:	8b c7                	mov    %edi,%eax
476da8:	72 02                	jb     0x476dac
476daa:	8b 07                	mov    (%edi),%eax
476dac:	6a 01                	push   $0x1
476dae:	68 68 67 60 00       	push   $0x606768
476db3:	51                   	push   %ecx
476db4:	50                   	push   %eax
476db5:	57                   	push   %edi
476db6:	ff b5 70 ff ff ff    	push   -0x90(%ebp)
476dbc:	8d 4d d8             	lea    -0x28(%ebp),%ecx
476dbf:	e8 bc 4d 00 00       	call   0x47bb80
476dc4:	ff b5 74 ff ff ff    	push   -0x8c(%ebp)
476dca:	8d 45 d8             	lea    -0x28(%ebp),%eax
476dcd:	c7 45 fc 01 00 00 00 	movl   $0x1,-0x4(%ebp)
476dd4:	50                   	push   %eax
476dd5:	8d 45 c0             	lea    -0x40(%ebp),%eax
476dd8:	50                   	push   %eax
476dd9:	e8 22 f1 ff ff       	call   0x475f00
476dde:	83 c4 0c             	add    $0xc,%esp
476de1:	68 bc a5 60 00       	push   $0x60a5bc
476de6:	6a 07                	push   $0x7
476de8:	ff b5 78 ff ff ff    	push   -0x88(%ebp)
476dee:	8b cb                	mov    %ebx,%ecx
476df0:	c6 45 fc 02          	movb   $0x2,-0x4(%ebp)
476df4:	50                   	push   %eax
476df5:	e8 e6 7a 00 00       	call   0x47e8e0
476dfa:	8b 55 d4             	mov    -0x2c(%ebp),%edx
476dfd:	83 fa 10             	cmp    $0x10,%edx
476e00:	72 2c                	jb     0x476e2e
476e02:	8b 4d c0             	mov    -0x40(%ebp),%ecx
476e05:	42                   	inc    %edx
476e06:	8b c1                	mov    %ecx,%eax
476e08:	81 fa 00 10 00 00    	cmp    $0x1000,%edx
476e0e:	72 14                	jb     0x476e24
476e10:	8b 49 fc             	mov    -0x4(%ecx),%ecx
476e13:	83 c2 23             	add    $0x23,%edx
476e16:	2b c1                	sub    %ecx,%eax
476e18:	83 c0 fc             	add    $0xfffffffc,%eax
476e1b:	83 f8 1f             	cmp    $0x1f,%eax
476e1e:	0f 87 45 02 00 00    	ja     0x477069
476e24:	52                   	push   %edx
476e25:	51                   	push   %ecx
476e26:	e8 2a a4 15 00       	call   0x5d1255
476e2b:	83 c4 08             	add    $0x8,%esp
476e2e:	8b 55 ec             	mov    -0x14(%ebp),%edx
476e31:	c7 45 d0 00 00 00 00 	movl   $0x0,-0x30(%ebp)
476e38:	c7 45 d4 0f 00 00 00 	movl   $0xf,-0x2c(%ebp)
476e3f:	c6 45 c0 00          	movb   $0x0,-0x40(%ebp)
476e43:	83 fa 10             	cmp    $0x10,%edx
476e46:	0f 82 fa 01 00 00    	jb     0x477046
476e4c:	8b 4d d8             	mov    -0x28(%ebp),%ecx
476e4f:	42                   	inc    %edx
476e50:	8b c1                	mov    %ecx,%eax
476e52:	81 fa 00 10 00 00    	cmp    $0x1000,%edx
476e58:	72 14                	jb     0x476e6e
476e5a:	8b 49 fc             	mov    -0x4(%ecx),%ecx
476e5d:	83 c2 23             	add    $0x23,%edx
476e60:	2b c1                	sub    %ecx,%eax
476e62:	83 c0 fc             	add    $0xfffffffc,%eax
476e65:	83 f8 1f             	cmp    $0x1f,%eax
476e68:	0f 87 fb 01 00 00    	ja     0x477069
476e6e:	52                   	push   %edx
476e6f:	51                   	push   %ecx
476e70:	e8 e0 a3 15 00       	call   0x5d1255
476e75:	83 c4 08             	add    $0x8,%esp
476e78:	e9 c9 01 00 00       	jmp    0x477046
476e7d:	8b 8d 78 ff ff ff    	mov    -0x88(%ebp),%ecx
476e83:	8d 45 d8             	lea    -0x28(%ebp),%eax
476e86:	50                   	push   %eax
476e87:	e8 24 58 fe ff       	call   0x45c6b0
476e8c:	50                   	push   %eax
476e8d:	8b ce                	mov    %esi,%ecx
476e8f:	c7 45 fc 03 00 00 00 	movl   $0x3,-0x4(%ebp)
476e96:	e8 75 57 fe ff       	call   0x45c610
476e9b:	8b 55 ec             	mov    -0x14(%ebp),%edx
476e9e:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
476ea5:	83 fa 10             	cmp    $0x10,%edx
476ea8:	72 2c                	jb     0x476ed6
476eaa:	8b 4d d8             	mov    -0x28(%ebp),%ecx
476ead:	42                   	inc    %edx
476eae:	8b c1                	mov    %ecx,%eax
476eb0:	81 fa 00 10 00 00    	cmp    $0x1000,%edx
476eb6:	72 14                	jb     0x476ecc
476eb8:	8b 49 fc             	mov    -0x4(%ecx),%ecx
476ebb:	83 c2 23             	add    $0x23,%edx
476ebe:	2b c1                	sub    %ecx,%eax
476ec0:	83 c0 fc             	add    $0xfffffffc,%eax
476ec3:	83 f8 1f             	cmp    $0x1f,%eax
476ec6:	0f 87 a2 01 00 00    	ja     0x47706e
476ecc:	52                   	push   %edx
476ecd:	51                   	push   %ecx
476ece:	e8 82 a3 15 00       	call   0x5d1255
476ed3:	83 c4 08             	add    $0x8,%esp
476ed6:	8b 85 64 ff ff ff    	mov    -0x9c(%ebp),%eax
476edc:	89 70 10             	mov    %esi,0x10(%eax)
476edf:	83 7e 20 00          	cmpl   $0x0,0x20(%esi)
476ee3:	0f 8e 81 00 00 00    	jle    0x476f6a
476ee9:	57                   	push   %edi
476eea:	8d 8d 7c ff ff ff    	lea    -0x84(%ebp),%ecx
476ef0:	e8 2b f8 fd ff       	call   0x456720
476ef5:	ff b5 74 ff ff ff    	push   -0x8c(%ebp)
476efb:	8d 4d 94             	lea    -0x6c(%ebp),%ecx
476efe:	c7 45 fc 04 00 00 00 	movl   $0x4,-0x4(%ebp)
476f05:	e8 16 f8 fd ff       	call   0x456720
476f0a:	ff b5 70 ff ff ff    	push   -0x90(%ebp)
476f10:	8d 4d ac             	lea    -0x54(%ebp),%ecx
476f13:	c6 45 fc 05          	movb   $0x5,-0x4(%ebp)
476f17:	e8 94 4f 00 00       	call   0x47beb0
476f1c:	8b 85 78 ff ff ff    	mov    -0x88(%ebp),%eax
476f22:	89 45 b8             	mov    %eax,-0x48(%ebp)
476f25:	89 75 bc             	mov    %esi,-0x44(%ebp)
476f28:	8b 43 10             	mov    0x10(%ebx),%eax
476f2b:	8d 73 0c             	lea    0xc(%ebx),%esi
476f2e:	8d 8d 7c ff ff ff    	lea    -0x84(%ebp),%ecx
476f34:	c7 45 fc 06 00 00 00 	movl   $0x6,-0x4(%ebp)
476f3b:	51                   	push   %ecx
476f3c:	50                   	push   %eax
476f3d:	3b 46 08             	cmp    0x8(%esi),%eax
476f40:	74 0f                	je     0x476f51
476f42:	56                   	push   %esi
476f43:	e8 98 39 00 00       	call   0x47a8e0
476f48:	83 c4 0c             	add    $0xc,%esp
476f4b:	83 46 04 44          	addl   $0x44,0x4(%esi)
476f4f:	eb 07                	jmp    0x476f58
476f51:	8b ce                	mov    %esi,%ecx
476f53:	e8 e8 25 00 00       	call   0x479540
476f58:	8d 8d 7c ff ff ff    	lea    -0x84(%ebp),%ecx
476f5e:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
476f65:	e8 b6 6e 00 00       	call   0x47de20
476f6a:	8b 85 78 ff ff ff    	mov    -0x88(%ebp),%eax
476f70:	f6 40 04 01          	testb  $0x1,0x4(%eax)
476f74:	74 0b                	je     0x476f81
476f76:	8b 70 04             	mov    0x4(%eax),%esi
476f79:	83 e6 fc             	and    $0xfffffffc,%esi
476f7c:	83 c6 04             	add    $0x4,%esi
476f7f:	eb 07                	jmp    0x476f88
476f81:	e8 ca a1 fe ff       	call   0x461150
476f86:	8b f0                	mov    %eax,%esi
476f88:	8b 0e                	mov    (%esi),%ecx
476f8a:	3b 4e 04             	cmp    0x4(%esi),%ecx
476f8d:	0f 84 b3 00 00 00    	je     0x477046
476f93:	8b 45 1c             	mov    0x1c(%ebp),%eax
476f96:	83 ec 08             	sub    $0x8,%esp
476f99:	8b cc                	mov    %esp,%ecx
476f9b:	8b d0                	mov    %eax,%edx
476f9d:	83 78 14 10          	cmpl   $0x10,0x14(%eax)
476fa1:	72 02                	jb     0x476fa5
476fa3:	8b 10                	mov    (%eax),%edx
476fa5:	c7 41 04 00 00 00 00 	movl   $0x0,0x4(%ecx)
476fac:	89 11                	mov    %edx,(%ecx)
476fae:	8b 40 10             	mov    0x10(%eax),%eax
476fb1:	89 41 04             	mov    %eax,0x4(%ecx)
476fb4:	8d 85 60 ff ff ff    	lea    -0xa0(%ebp),%eax
476fba:	8b 4b 04             	mov    0x4(%ebx),%ecx
476fbd:	50                   	push   %eax
476fbe:	e8 4d a1 01 00       	call   0x491110
476fc3:	83 bd 60 ff ff ff 01 	cmpl   $0x1,-0xa0(%ebp)
476fca:	75 7a                	jne    0x477046
476fcc:	8b 46 04             	mov    0x4(%esi),%eax
476fcf:	33 db                	xor    %ebx,%ebx
476fd1:	8b 3e                	mov    (%esi),%edi
476fd3:	2b c7                	sub    %edi,%eax
476fd5:	a9 f0 ff ff ff       	test   $0xfffffff0,%eax
476fda:	7e 6a                	jle    0x477046
476fdc:	33 c9                	xor    %ecx,%ecx
476fde:	89 8d 74 ff ff ff    	mov    %ecx,-0x8c(%ebp)
476fe4:	0f 1f 40 00          	nopl   0x0(%eax)
476fe8:	0f 1f 84 00 00 00 00 	nopl   0x0(%eax,%eax,1)
476fef:	00
476ff0:	ff 34 0f             	push   (%edi,%ecx,1)
476ff3:	8b 85 6c ff ff ff    	mov    -0x94(%ebp),%eax
476ff9:	ff b5 64 ff ff ff    	push   -0x9c(%ebp)
476fff:	8b 08                	mov    (%eax),%ecx
477001:	e8 fa b8 01 00       	call   0x492900
477006:	85 c0                	test   %eax,%eax
477008:	74 20                	je     0x47702a
47700a:	8b 40 14             	mov    0x14(%eax),%eax
47700d:	8b 8d 6c ff ff ff    	mov    -0x94(%ebp),%ecx
477013:	89 85 70 ff ff ff    	mov    %eax,-0x90(%ebp)
477019:	8d 85 70 ff ff ff    	lea    -0x90(%ebp),%eax
47701f:	50                   	push   %eax
477020:	8d 49 44             	lea    0x44(%ecx),%ecx
477023:	e8 c8 6b 02 00       	call   0x49dbf0
477028:	8b 3e                	mov    (%esi),%edi
47702a:	8b 46 04             	mov    0x4(%esi),%eax
47702d:	43                   	inc    %ebx
47702e:	8b 8d 74 ff ff ff    	mov    -0x8c(%ebp),%ecx
477034:	2b c7                	sub    %edi,%eax
477036:	83 c1 10             	add    $0x10,%ecx
477039:	c1 f8 04             	sar    $0x4,%eax
47703c:	89 8d 74 ff ff ff    	mov    %ecx,-0x8c(%ebp)
477042:	3b d8                	cmp    %eax,%ebx
477044:	7c aa                	jl     0x476ff0
477046:	8b 4d f4             	mov    -0xc(%ebp),%ecx
477049:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
477050:	59                   	pop    %ecx
477051:	5f                   	pop    %edi
477052:	5e                   	pop    %esi
477053:	5b                   	pop    %ebx
477054:	8b 4d f0             	mov    -0x10(%ebp),%ecx
477057:	33 cd                	xor    %ebp,%ecx
477059:	e8 c8 a9 15 00       	call   0x5d1a26
47705e:	8b e5                	mov    %ebp,%esp
477060:	5d                   	pop    %ebp
477061:	c2 18 00             	ret    $0x18
477064:	e8 a7 05 fd ff       	call   0x447610
477069:	e8 82 f1 15 00       	call   0x5d61f0
47706e:	e8 7d f1 15 00       	call   0x5d61f0
477073:	cc                   	int3
477074:	cc                   	int3
477075:	cc                   	int3
477076:	cc                   	int3
477077:	cc                   	int3
477078:	cc                   	int3
477079:	cc                   	int3
47707a:	cc                   	int3
47707b:	cc                   	int3
47707c:	cc                   	int3
47707d:	cc                   	int3
47707e:	cc                   	int3
47707f:	cc                   	int3
477080:	55                   	push   %ebp
477081:	8b ec                	mov    %esp,%ebp
477083:	6a ff                	push   $0xffffffff
477085:	68 fd a1 5f 00       	push   $0x5fa1fd
47708a:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
477090:	50                   	push   %eax
477091:	81 ec 98 00 00 00    	sub    $0x98,%esp
477097:	a1 c0 14 69 00       	mov    0x6914c0,%eax
47709c:	33 c5                	xor    %ebp,%eax
47709e:	89 45 f0             	mov    %eax,-0x10(%ebp)
4770a1:	53                   	push   %ebx
4770a2:	56                   	push   %esi
4770a3:	57                   	push   %edi
4770a4:	50                   	push   %eax
4770a5:	8d 45 f4             	lea    -0xc(%ebp),%eax
4770a8:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
4770ae:	8b d9                	mov    %ecx,%ebx