436c9e:	ff 36                	push   (%esi)
436ca0:	e8 85 c8 fc ff       	call   0x40352a
436ca5:	59                   	pop    %ecx
436ca6:	59                   	pop    %ecx
436ca7:	83 66 10 00          	andl   $0x0,0x10(%esi)
436cab:	33 c0                	xor    %eax,%eax
436cad:	c7 46 14 07 00 00 00 	movl   $0x7,0x14(%esi)
436cb4:	66 89 06             	mov    %ax,(%esi)
436cb7:	5e                   	pop    %esi
436cb8:	c3                   	ret
436cb9:	83 61 10 00          	andl   $0x0,0x10(%ecx)
436cbd:	33 c0                	xor    %eax,%eax
436cbf:	c7 41 14 07 00 00 00 	movl   $0x7,0x14(%ecx)
436cc6:	66 89 01             	mov    %ax,(%ecx)
436cc9:	c3                   	ret
436cca:	56                   	push   %esi
436ccb:	57                   	push   %edi
436ccc:	8b f9                	mov    %ecx,%edi
436cce:	e8 42 43 03 00       	call   0x46b015
436cd3:	8b f0                	mov    %eax,%esi
436cd5:	85 f6                	test   %esi,%esi
436cd7:	74 10                	je     0x436ce9
436cd9:	56                   	push   %esi
436cda:	8d 4f 14             	lea    0x14(%edi),%ecx
436cdd:	e8 8d 91 ff ff       	call   0x42fe6f
436ce2:	56                   	push   %esi
436ce3:	e8 a6 60 01 00       	call   0x44cd8e
436ce8:	59                   	pop    %ecx
436ce9:	8b 47 14             	mov    0x14(%edi),%eax
436cec:	5f                   	pop    %edi
436ced:	5e                   	pop    %esi
436cee:	85 c0                	test   %eax,%eax
436cf0:	75 05                	jne    0x436cf7
436cf2:	b8 18 a4 49 00       	mov    $0x49a418,%eax
436cf7:	c3                   	ret
436cf8:	56                   	push   %esi
436cf9:	57                   	push   %edi
436cfa:	8b f9                	mov    %ecx,%edi
436cfc:	e8 75 44 03 00       	call   0x46b176
436d01:	8b f0                	mov    %eax,%esi
436d03:	85 f6                	test   %esi,%esi
436d05:	74 10                	je     0x436d17
436d07:	56                   	push   %esi
436d08:	8d 4f 1c             	lea    0x1c(%edi),%ecx
436d0b:	e8 5f 91 ff ff       	call   0x42fe6f
436d10:	56                   	push   %esi
436d11:	e8 78 60 01 00       	call   0x44cd8e
436d16:	59                   	pop    %ecx
436d17:	8b 47 1c             	mov    0x1c(%edi),%eax
436d1a:	5f                   	pop    %edi
436d1b:	5e                   	pop    %esi
436d1c:	85 c0                	test   %eax,%eax
436d1e:	75 05                	jne    0x436d25
436d20:	b8 c8 a4 49 00       	mov    $0x49a4c8,%eax
436d25:	c3                   	ret
436d26:	55                   	push   %ebp
436d27:	8b ec                	mov    %esp,%ebp
436d29:	e8 a9 45 03 00       	call   0x46b2d7
436d2e:	8b 4d 08             	mov    0x8(%ebp),%ecx
436d31:	89 01                	mov    %eax,(%ecx)
436d33:	8b c1                	mov    %ecx,%eax
436d35:	5d                   	pop    %ebp
436d36:	c2 04 00             	ret    $0x4
436d39:	68 bc 62 49 00       	push   $0x4962bc
436d3e:	e8 9d ef fe ff       	call   0x425ce0
436d43:	cc                   	int3
436d44:	68 88 61 49 00       	push   $0x496188
436d49:	e8 b2 ef fe ff       	call   0x425d00
436d4e:	cc                   	int3
436d4f:	55                   	push   %ebp
436d50:	8b ec                	mov    %esp,%ebp
436d52:	8b 45 08             	mov    0x8(%ebp),%eax
436d55:	8d 0c 00             	lea    (%eax,%eax,1),%ecx
436d58:	3d ff ff ff 7f       	cmp    $0x7fffffff,%eax
436d5d:	76 03                	jbe    0x436d62
436d5f:	83 c9 ff             	or     $0xffffffff,%ecx
436d62:	51                   	push   %ecx
436d63:	e8 20 b9 fc ff       	call   0x402688
436d68:	59                   	pop    %ecx
436d69:	5d                   	pop    %ebp
436d6a:	c2 04 00             	ret    $0x4
436d6d:	55                   	push   %ebp
436d6e:	8b ec                	mov    %esp,%ebp
436d70:	8b 45 08             	mov    0x8(%ebp),%eax
436d73:	8b d0                	mov    %eax,%edx
436d75:	83 78 14 08          	cmpl   $0x8,0x14(%eax)
436d79:	72 02                	jb     0x436d7d
436d7b:	8b 10                	mov    (%eax),%edx
436d7d:	ff 70 10             	push   0x10(%eax)
436d80:	52                   	push   %edx
436d81:	e8 60 00 00 00       	call   0x436de6
436d86:	5d                   	pop    %ebp
436d87:	c2 04 00             	ret    $0x4
436d8a:	55                   	push   %ebp
436d8b:	8b ec                	mov    %esp,%ebp
436d8d:	51                   	push   %ecx
436d8e:	56                   	push   %esi
436d8f:	8b f1                	mov    %ecx,%esi
436d91:	8b 4d 08             	mov    0x8(%ebp),%ecx
436d94:	8b 46 14             	mov    0x14(%esi),%eax
436d97:	8b 56 10             	mov    0x10(%esi),%edx
436d9a:	2b c2                	sub    %edx,%eax
436d9c:	3b c8                	cmp    %eax,%ecx
436d9e:	77 2e                	ja     0x436dce
436da0:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
436da4:	53                   	push   %ebx
436da5:	8d 1c 0a             	lea    (%edx,%ecx,1),%ebx
436da8:	57                   	push   %edi
436da9:	89 5e 10             	mov    %ebx,0x10(%esi)
436dac:	8b fe                	mov    %esi,%edi
436dae:	72 02                	jb     0x436db2
436db0:	8b 3e                	mov    (%esi),%edi
436db2:	51                   	push   %ecx
436db3:	ff 75 0c             	push   0xc(%ebp)
436db6:	8d 04 57             	lea    (%edi,%edx,2),%eax
436db9:	50                   	push   %eax
436dba:	e8 42 d0 fe ff       	call   0x423e01
436dbf:	83 c4 0c             	add    $0xc,%esp
436dc2:	33 c0                	xor    %eax,%eax
436dc4:	66 89 04 5f          	mov    %ax,(%edi,%ebx,2)
436dc8:	8b c6                	mov    %esi,%eax
436dca:	5f                   	pop    %edi
436dcb:	5b                   	pop    %ebx
436dcc:	eb 13                	jmp    0x436de1
436dce:	ff 75 0c             	push   0xc(%ebp)
436dd1:	c6 45 fc 00          	movb   $0x0,-0x4(%ebp)
436dd5:	51                   	push   %ecx
436dd6:	ff 75 fc             	push   -0x4(%ebp)
436dd9:	51                   	push   %ecx
436dda:	8b ce                	mov    %esi,%ecx
436ddc:	e8 65 74 ff ff       	call   0x42e246
436de1:	5e                   	pop    %esi
436de2:	c9                   	leave
436de3:	c2 08 00             	ret    $0x8
436de6:	55                   	push   %ebp
436de7:	8b ec                	mov    %esp,%ebp
436de9:	51                   	push   %ecx
436dea:	56                   	push   %esi
436deb:	8b f1                	mov    %ecx,%esi
436ded:	8b 4d 0c             	mov    0xc(%ebp),%ecx
436df0:	8b 46 14             	mov    0x14(%esi),%eax
436df3:	8b 56 10             	mov    0x10(%esi),%edx
436df6:	2b c2                	sub    %edx,%eax
436df8:	3b c8                	cmp    %eax,%ecx
436dfa:	77 31                	ja     0x436e2d
436dfc:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
436e00:	53                   	push   %ebx
436e01:	8d 1c 0a             	lea    (%edx,%ecx,1),%ebx
436e04:	57                   	push   %edi
436e05:	89 5e 10             	mov    %ebx,0x10(%esi)
436e08:	8b fe                	mov    %esi,%edi
436e0a:	72 02                	jb     0x436e0e
436e0c:	8b 3e                	mov    (%esi),%edi
436e0e:	8d 04 09             	lea    (%ecx,%ecx,1),%eax
436e11:	50                   	push   %eax
436e12:	ff 75 08             	push   0x8(%ebp)
436e15:	8d 04 57             	lea    (%edi,%edx,2),%eax
436e18:	50                   	push   %eax
436e19:	e8 c2 ca 00 00       	call   0x4438e0
436e1e:	83 c4 0c             	add    $0xc,%esp
436e21:	33 c0                	xor    %eax,%eax
436e23:	66 89 04 5f          	mov    %ax,(%edi,%ebx,2)
436e27:	8b c6                	mov    %esi,%eax
436e29:	5f                   	pop    %edi
436e2a:	5b                   	pop    %ebx
436e2b:	eb 13                	jmp    0x436e40
436e2d:	51                   	push   %ecx
436e2e:	ff 75 08             	push   0x8(%ebp)
436e31:	c6 45 fc 00          	movb   $0x0,-0x4(%ebp)
436e35:	ff 75 fc             	push   -0x4(%ebp)
436e38:	51                   	push   %ecx
436e39:	8b ce                	mov    %esi,%ecx
436e3b:	e8 06 77 ff ff       	call   0x42e546
436e40:	5e                   	pop    %esi
436e41:	c9                   	leave
436e42:	c2 08 00             	ret    $0x8
436e45:	55                   	push   %ebp
436e46:	8b ec                	mov    %esp,%ebp
436e48:	ff 75 0c             	push   0xc(%ebp)
436e4b:	ff 75 10             	push   0x10(%ebp)
436e4e:	ff 75 08             	push   0x8(%ebp)
436e51:	e8 ab cf fe ff       	call   0x423e01
436e56:	83 c4 0c             	add    $0xc,%esp
436e59:	5d                   	pop    %ebp
436e5a:	c3                   	ret
436e5b:	55                   	push   %ebp
436e5c:	8b ec                	mov    %esp,%ebp
436e5e:	8b 45 0c             	mov    0xc(%ebp),%eax
436e61:	66 8b 08             	mov    (%eax),%cx
436e64:	8b 45 08             	mov    0x8(%ebp),%eax
436e67:	66 89 08             	mov    %cx,(%eax)
436e6a:	5d                   	pop    %ebp
436e6b:	c3                   	ret
436e6c:	55                   	push   %ebp
436e6d:	8b ec                	mov    %esp,%ebp
436e6f:	56                   	push   %esi
436e70:	ff 75 08             	push   0x8(%ebp)
436e73:	8b f1                	mov    %ecx,%esi
436e75:	e8 51 90 ff ff       	call   0x42fecb
436e7a:	8b c6                	mov    %esi,%eax
436e7c:	5e                   	pop    %esi
436e7d:	5d                   	pop    %ebp
436e7e:	c2 04 00             	ret    $0x4
436e81:	55                   	push   %ebp
436e82:	8b ec                	mov    %esp,%ebp
436e84:	51                   	push   %ecx
436e85:	56                   	push   %esi
436e86:	8b f1                	mov    %ecx,%esi
436e88:	57                   	push   %edi
436e89:	8b 7d 08             	mov    0x8(%ebp),%edi
436e8c:	3b 7e 14             	cmp    0x14(%esi),%edi
436e8f:	77 26                	ja     0x436eb7
436e91:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
436e95:	53                   	push   %ebx
436e96:	8b de                	mov    %esi,%ebx
436e98:	72 02                	jb     0x436e9c
436e9a:	8b 1e                	mov    (%esi),%ebx
436e9c:	57                   	push   %edi
436e9d:	ff 75 0c             	push   0xc(%ebp)
436ea0:	89 7e 10             	mov    %edi,0x10(%esi)
436ea3:	53                   	push   %ebx
436ea4:	e8 58 cf fe ff       	call   0x423e01
436ea9:	83 c4 0c             	add    $0xc,%esp
436eac:	33 c0                	xor    %eax,%eax
436eae:	66 89 04 7b          	mov    %ax,(%ebx,%edi,2)
436eb2:	8b c6                	mov    %esi,%eax
436eb4:	5b                   	pop    %ebx
436eb5:	eb 10                	jmp    0x436ec7
436eb7:	ff 75 0c             	push   0xc(%ebp)
436eba:	c6 45 fc 00          	movb   $0x0,-0x4(%ebp)
436ebe:	ff 75 fc             	push   -0x4(%ebp)
436ec1:	57                   	push   %edi
436ec2:	e8 09 70 ff ff       	call   0x42ded0
436ec7:	5f                   	pop    %edi
436ec8:	5e                   	pop    %esi
436ec9:	c9                   	leave
436eca:	c2 08 00             	ret    $0x8
436ecd:	55                   	push   %ebp
436ece:	8b ec                	mov    %esp,%ebp
436ed0:	56                   	push   %esi
436ed1:	8b 75 08             	mov    0x8(%ebp),%esi
436ed4:	8b c6                	mov    %esi,%eax
436ed6:	57                   	push   %edi
436ed7:	33 ff                	xor    %edi,%edi
436ed9:	8b d7                	mov    %edi,%edx
436edb:	66 39 3e             	cmp    %di,(%esi)
436ede:	74 09                	je     0x436ee9
436ee0:	8d 40 02             	lea    0x2(%eax),%eax
436ee3:	42                   	inc    %edx
436ee4:	66 39 38             	cmp    %di,(%eax)
436ee7:	75 f7                	jne    0x436ee0
436ee9:	52                   	push   %edx
436eea:	56                   	push   %esi
436eeb:	e8 06 00 00 00       	call   0x436ef6
436ef0:	5f                   	pop    %edi
436ef1:	5e                   	pop    %esi
436ef2:	5d                   	pop    %ebp
436ef3:	c2 04 00             	ret    $0x4
436ef6:	55                   	push   %ebp
436ef7:	8b ec                	mov    %esp,%ebp
436ef9:	51                   	push   %ecx
436efa:	8b 45 0c             	mov    0xc(%ebp),%eax
436efd:	57                   	push   %edi
436efe:	8b f9                	mov    %ecx,%edi
436f00:	3b 47 14             	cmp    0x14(%edi),%eax
436f03:	77 2b                	ja     0x436f30
436f05:	83 7f 14 08          	cmpl   $0x8,0x14(%edi)
436f09:	53                   	push   %ebx
436f0a:	56                   	push   %esi
436f0b:	8b df                	mov    %edi,%ebx
436f0d:	72 02                	jb     0x436f11
436f0f:	8b 1f                	mov    (%edi),%ebx
436f11:	8d 34 00             	lea    (%eax,%eax,1),%esi
436f14:	89 47 10             	mov    %eax,0x10(%edi)
436f17:	56                   	push   %esi
436f18:	ff 75 08             	push   0x8(%ebp)
436f1b:	53                   	push   %ebx
436f1c:	e8 bf c9 00 00       	call   0x4438e0
436f21:	83 c4 0c             	add    $0xc,%esp
436f24:	33 c0                	xor    %eax,%eax
436f26:	66 89 04 1e          	mov    %ax,(%esi,%ebx,1)
436f2a:	8b c7                	mov    %edi,%eax
436f2c:	5e                   	pop    %esi
436f2d:	5b                   	pop    %ebx
436f2e:	eb 10                	jmp    0x436f40
436f30:	ff 75 08             	push   0x8(%ebp)
436f33:	c6 45 fc 00          	movb   $0x0,-0x4(%ebp)
436f37:	ff 75 fc             	push   -0x4(%ebp)
436f3a:	50                   	push   %eax
436f3b:	e8 06 70 ff ff       	call   0x42df46
436f40:	5f                   	pop    %edi
436f41:	c9                   	leave
436f42:	c2 08 00             	ret    $0x8
436f45:	55                   	push   %ebp
436f46:	8b ec                	mov    %esp,%ebp
436f48:	56                   	push   %esi
436f49:	ff 75 08             	push   0x8(%ebp)
436f4c:	8b f1                	mov    %ecx,%esi
436f4e:	e8 f5 87 fd ff       	call   0x40f748
436f53:	8b c6                	mov    %esi,%eax
436f55:	5e                   	pop    %esi
436f56:	5d                   	pop    %ebp
436f57:	c2 04 00             	ret    $0x4
436f5a:	55                   	push   %ebp
436f5b:	8b ec                	mov    %esp,%ebp
436f5d:	83 79 14 08          	cmpl   $0x8,0x14(%ecx)
436f61:	72 02                	jb     0x436f65
436f63:	8b 09                	mov    (%ecx),%ecx
436f65:	8b 45 08             	mov    0x8(%ebp),%eax
436f68:	89 08                	mov    %ecx,(%eax)
436f6a:	5d                   	pop    %ebp
436f6b:	c2 04 00             	ret    $0x4
436f6e:	55                   	push   %ebp
436f6f:	8b ec                	mov    %esp,%ebp
436f71:	83 79 14 08          	cmpl   $0x8,0x14(%ecx)
436f75:	72 02                	jb     0x436f79
436f77:	8b 09                	mov    (%ecx),%ecx
436f79:	8b 45 08             	mov    0x8(%ebp),%eax
436f7c:	89 08                	mov    %ecx,(%eax)
436f7e:	5d                   	pop    %ebp
436f7f:	c2 04 00             	ret    $0x4
436f82:	83 79 14 08          	cmpl   $0x8,0x14(%ecx)
436f86:	72 02                	jb     0x436f8a
436f88:	8b 09                	mov    (%ecx),%ecx
436f8a:	8b c1                	mov    %ecx,%eax
436f8c:	c3                   	ret
436f8d:	83 79 14 08          	cmpl   $0x8,0x14(%ecx)
436f91:	72 02                	jb     0x436f95
436f93:	8b 09                	mov    (%ecx),%ecx
436f95:	8b c1                	mov    %ecx,%eax
436f97:	c3                   	ret
436f98:	55                   	push   %ebp
436f99:	8b ec                	mov    %esp,%ebp
436f9b:	8b 45 10             	mov    0x10(%ebp),%eax
436f9e:	03 c0                	add    %eax,%eax
436fa0:	50                   	push   %eax
436fa1:	ff 75 0c             	push   0xc(%ebp)
436fa4:	ff 75 08             	push   0x8(%ebp)
436fa7:	e8 b4 c3 00 00       	call   0x443360
436fac:	83 c4 0c             	add    $0xc,%esp
436faf:	5d                   	pop    %ebp
436fb0:	c3                   	ret
436fb1:	55                   	push   %ebp
436fb2:	8b ec                	mov    %esp,%ebp
436fb4:	8b 45 10             	mov    0x10(%ebp),%eax
436fb7:	03 c0                	add    %eax,%eax
436fb9:	50                   	push   %eax
436fba:	ff 75 0c             	push   0xc(%ebp)
436fbd:	ff 75 08             	push   0x8(%ebp)
436fc0:	e8 9b c3 00 00       	call   0x443360