486d74:	e8 47 2d f8 ff       	call   0x409ac0
486d79:	57                   	push   %edi
486d7a:	56                   	push   %esi
486d7b:	e8 38 4d 00 00       	call   0x48bab8
486d80:	84 c0                	test   %al,%al
486d82:	75 1b                	jne    0x486d9f
486d84:	ff 36                	push   (%esi)
486d86:	ff 15 3c f6 48 00    	call   *0x48f63c
486d8c:	32 db                	xor    %bl,%bl
486d8e:	8d 4d 30             	lea    0x30(%ebp),%ecx
486d91:	e8 8a 2c f8 ff       	call   0x409a20
486d96:	5f                   	pop    %edi
486d97:	5e                   	pop    %esi
486d98:	8a c3                	mov    %bl,%al
486d9a:	5b                   	pop    %ebx
486d9b:	5d                   	pop    %ebp
486d9c:	c2 38 00             	ret    $0x38
486d9f:	0f bf 86 8e 00 00 00 	movswl 0x8e(%esi),%eax
486da6:	53                   	push   %ebx
486da7:	50                   	push   %eax
486da8:	0f bf 86 8c 00 00 00 	movswl 0x8c(%esi),%eax
486daf:	50                   	push   %eax
486db0:	0f bf 86 8a 00 00 00 	movswl 0x8a(%esi),%eax
486db7:	50                   	push   %eax
486db8:	0f bf 86 88 00 00 00 	movswl 0x88(%esi),%eax
486dbf:	50                   	push   %eax
486dc0:	ff 36                	push   (%esi)
486dc2:	ff 15 00 f7 48 00    	call   *0x48f700
486dc8:	83 3d b8 67 4c 00 00 	cmpl   $0x0,0x4c67b8
486dcf:	75 bd                	jne    0x486d8e
486dd1:	b8 00 03 00 00       	mov    $0x300,%eax
486dd6:	66 89 86 86 00 00 00 	mov    %ax,0x86(%esi)
486ddd:	eb af                	jmp    0x486d8e
486ddf:	55                   	push   %ebp
486de0:	8b ec                	mov    %esp,%ebp
486de2:	8b 45 28             	mov    0x28(%ebp),%eax
486de5:	83 f8 ff             	cmp    $0xffffffff,%eax
486de8:	75 05                	jne    0x486def
486dea:	b8 80 00 00 00       	mov    $0x80,%eax
486def:	53                   	push   %ebx
486df0:	56                   	push   %esi
486df1:	a9 00 08 00 00       	test   $0x800,%eax
486df6:	74 05                	je     0x486dfd
486df8:	83 e0 fb             	and    $0xfffffffb,%eax
486dfb:	eb 05                	jmp    0x486e02
486dfd:	0d 00 00 01 00       	or     $0x10000,%eax
486e02:	50                   	push   %eax
486e03:	e8 a4 4a 00 00       	call   0x48b8ac
486e08:	8b f0                	mov    %eax,%esi
486e0a:	bb 00 02 00 00       	mov    $0x200,%ebx
486e0f:	8b 45 2c             	mov    0x2c(%ebp),%eax
486e12:	83 f8 ff             	cmp    $0xffffffff,%eax
486e15:	75 02                	jne    0x486e19
486e17:	8b c3                	mov    %ebx,%eax
486e19:	8b 4d 20             	mov    0x20(%ebp),%ecx
486e1c:	83 f9 ff             	cmp    $0xffffffff,%ecx
486e1f:	75 05                	jne    0x486e26
486e21:	b9 c8 00 00 00       	mov    $0xc8,%ecx
486e26:	8b 55 24             	mov    0x24(%ebp),%edx
486e29:	83 fa ff             	cmp    $0xffffffff,%edx
486e2c:	75 03                	jne    0x486e31
486e2e:	6a 14                	push   $0x14
486e30:	5a                   	pop    %edx
486e31:	6a 01                	push   $0x1
486e33:	51                   	push   %ecx
486e34:	ff 75 10             	push   0x10(%ebp)
486e37:	52                   	push   %edx
486e38:	51                   	push   %ecx
486e39:	ff 75 1c             	push   0x1c(%ebp)
486e3c:	ff 75 18             	push   0x18(%ebp)
486e3f:	56                   	push   %esi
486e40:	ff 75 14             	push   0x14(%ebp)
486e43:	68 e0 fa 48 00       	push   $0x48fae0
486e48:	50                   	push   %eax
486e49:	ff 75 08             	push   0x8(%ebp)
486e4c:	e8 e4 ae f7 ff       	call   0x401d35
486e51:	8b 4d 0c             	mov    0xc(%ebp),%ecx
486e54:	89 01                	mov    %eax,(%ecx)
486e56:	85 c0                	test   %eax,%eax
486e58:	75 04                	jne    0x486e5e
486e5a:	32 c0                	xor    %al,%al
486e5c:	eb 12                	jmp    0x486e70
486e5e:	83 3d b8 67 4c 00 00 	cmpl   $0x0,0x4c67b8
486e65:	75 07                	jne    0x486e6e
486e67:	66 89 99 86 00 00 00 	mov    %bx,0x86(%ecx)
486e6e:	b0 01                	mov    $0x1,%al
486e70:	5e                   	pop    %esi
486e71:	5b                   	pop    %ebx
486e72:	5d                   	pop    %ebp
486e73:	c2 28 00             	ret    $0x28
486e76:	55                   	push   %ebp
486e77:	8b ec                	mov    %esp,%ebp
486e79:	8b 45 28             	mov    0x28(%ebp),%eax
486e7c:	83 ec 10             	sub    $0x10,%esp
486e7f:	40                   	inc    %eax
486e80:	f7 d8                	neg    %eax
486e82:	53                   	push   %ebx
486e83:	1b c0                	sbb    %eax,%eax
486e85:	23 45 28             	and    0x28(%ebp),%eax
486e88:	56                   	push   %esi
486e89:	57                   	push   %edi
486e8a:	0d 00 01 00 00       	or     $0x100,%eax
486e8f:	50                   	push   %eax
486e90:	e8 17 4a 00 00       	call   0x48b8ac
486e95:	8b 4d 2c             	mov    0x2c(%ebp),%ecx
486e98:	8b d8                	mov    %eax,%ebx
486e9a:	41                   	inc    %ecx
486e9b:	8b 7d 08             	mov    0x8(%ebp),%edi
486e9e:	f7 d9                	neg    %ecx
486ea0:	1b c9                	sbb    %ecx,%ecx
486ea2:	33 c0                	xor    %eax,%eax
486ea4:	23 4d 2c             	and    0x2c(%ebp),%ecx
486ea7:	40                   	inc    %eax
486ea8:	50                   	push   %eax
486ea9:	51                   	push   %ecx
486eaa:	ff 75 10             	push   0x10(%ebp)
486ead:	ff 75 24             	push   0x24(%ebp)
486eb0:	ff 75 20             	push   0x20(%ebp)
486eb3:	ff 75 1c             	push   0x1c(%ebp)
486eb6:	ff 75 18             	push   0x18(%ebp)
486eb9:	53                   	push   %ebx
486eba:	ff 75 14             	push   0x14(%ebp)
486ebd:	68 00 f9 48 00       	push   $0x48f900
486ec2:	51                   	push   %ecx
486ec3:	57                   	push   %edi
486ec4:	e8 6c ae f7 ff       	call   0x401d35
486ec9:	8b 75 0c             	mov    0xc(%ebp),%esi
486ecc:	89 06                	mov    %eax,(%esi)
486ece:	85 c0                	test   %eax,%eax
486ed0:	75 04                	jne    0x486ed6
486ed2:	32 c0                	xor    %al,%al
486ed4:	eb 40                	jmp    0x486f16
486ed6:	f6 c3 10             	test   $0x10,%bl
486ed9:	74 1d                	je     0x486ef8
486edb:	8d 4d f0             	lea    -0x10(%ebp),%ecx
486ede:	51                   	push   %ecx
486edf:	50                   	push   %eax
486ee0:	ff 15 94 f6 48 00    	call   *0x48f694
486ee6:	8b 45 f8             	mov    -0x8(%ebp),%eax
486ee9:	2b 45 f0             	sub    -0x10(%ebp),%eax
486eec:	89 47 60             	mov    %eax,0x60(%edi)
486eef:	8b 45 fc             	mov    -0x4(%ebp),%eax
486ef2:	2b 45 f4             	sub    -0xc(%ebp),%eax
486ef5:	89 47 64             	mov    %eax,0x64(%edi)
486ef8:	6a 12                	push   $0x12
486efa:	ff 15 28 f5 48 00    	call   *0x48f528
486f00:	89 46 4c             	mov    %eax,0x4c(%esi)
486f03:	33 c0                	xor    %eax,%eax
486f05:	40                   	inc    %eax
486f06:	83 3d b8 67 4c 00 00 	cmpl   $0x0,0x4c67b8
486f0d:	75 07                	jne    0x486f16
486f0f:	66 89 86 86 00 00 00 	mov    %ax,0x86(%esi)
486f16:	5f                   	pop    %edi
486f17:	5e                   	pop    %esi
486f18:	5b                   	pop    %ebx
486f19:	8b e5                	mov    %ebp,%esp
486f1b:	5d                   	pop    %ebp
486f1c:	c2 28 00             	ret    $0x28
486f1f:	55                   	push   %ebp
486f20:	8b ec                	mov    %esp,%ebp
486f22:	8b 45 28             	mov    0x28(%ebp),%eax
486f25:	53                   	push   %ebx
486f26:	56                   	push   %esi
486f27:	83 ce ff             	or     $0xffffffff,%esi
486f2a:	57                   	push   %edi
486f2b:	3b c6                	cmp    %esi,%eax
486f2d:	75 05                	jne    0x486f34
486f2f:	b8 02 00 a0 00       	mov    $0xa00002,%eax
486f34:	0d 01 00 01 00       	or     $0x10001,%eax
486f39:	50                   	push   %eax
486f3a:	e8 6d 49 00 00       	call   0x48b8ac
486f3f:	8b 4d 2c             	mov    0x2c(%ebp),%ecx
486f42:	3b ce                	cmp    %esi,%ecx
486f44:	75 05                	jne    0x486f4b
486f46:	b9 00 02 00 00       	mov    $0x200,%ecx
486f4b:	8b 7d 20             	mov    0x20(%ebp),%edi
486f4e:	3b fe                	cmp    %esi,%edi
486f50:	75 05                	jne    0x486f57
486f52:	bf c8 00 00 00       	mov    $0xc8,%edi
486f57:	8b 5d 24             	mov    0x24(%ebp),%ebx
486f5a:	3b de                	cmp    %esi,%ebx
486f5c:	75 05                	jne    0x486f63
486f5e:	bb 96 00 00 00       	mov    $0x96,%ebx
486f63:	33 d2                	xor    %edx,%edx
486f65:	33 f6                	xor    %esi,%esi
486f67:	42                   	inc    %edx
486f68:	52                   	push   %edx
486f69:	51                   	push   %ecx
486f6a:	ff 75 10             	push   0x10(%ebp)
486f6d:	53                   	push   %ebx
486f6e:	57                   	push   %edi
486f6f:	ff 75 1c             	push   0x1c(%ebp)
486f72:	ff 75 18             	push   0x18(%ebp)
486f75:	50                   	push   %eax
486f76:	56                   	push   %esi
486f77:	68 50 b7 4b 00       	push   $0x4bb750
486f7c:	51                   	push   %ecx
486f7d:	ff 75 08             	push   0x8(%ebp)
486f80:	e8 b0 ad f7 ff       	call   0x401d35
486f85:	8b d0                	mov    %eax,%edx
486f87:	8b 45 0c             	mov    0xc(%ebp),%eax
486f8a:	89 10                	mov    %edx,(%eax)
486f8c:	85 d2                	test   %edx,%edx
486f8e:	75 04                	jne    0x486f94
486f90:	32 c0                	xor    %al,%al
486f92:	eb 54                	jmp    0x486fe8
486f94:	8b 4d 14             	mov    0x14(%ebp),%ecx
486f97:	66 39 31             	cmp    %si,(%ecx)
486f9a:	74 25                	je     0x486fc1
486f9c:	51                   	push   %ecx
486f9d:	56                   	push   %esi
486f9e:	8b 35 88 f6 48 00    	mov    0x48f688,%esi
486fa4:	68 80 01 00 00       	push   $0x180
486fa9:	52                   	push   %edx
486faa:	ff d6                	call   *%esi
486fac:	8b 45 0c             	mov    0xc(%ebp),%eax
486faf:	6a 00                	push   $0x0
486fb1:	6a 00                	push   $0x0
486fb3:	68 86 01 00 00       	push   $0x186
486fb8:	ff 30                	push   (%eax)
486fba:	ff d6                	call   *%esi
486fbc:	8b 45 0c             	mov    0xc(%ebp),%eax
486fbf:	33 f6                	xor    %esi,%esi
486fc1:	83 3d b8 67 4c 00 00 	cmpl   $0x0,0x4c67b8
486fc8:	75 0a                	jne    0x486fd4
486fca:	33 c9                	xor    %ecx,%ecx
486fcc:	41                   	inc    %ecx
486fcd:	66 89 88 86 00 00 00 	mov    %cx,0x86(%eax)
486fd4:	56                   	push   %esi
486fd5:	53                   	push   %ebx
486fd6:	57                   	push   %edi
486fd7:	ff 75 1c             	push   0x1c(%ebp)
486fda:	ff 75 18             	push   0x18(%ebp)
486fdd:	ff 30                	push   (%eax)
486fdf:	ff 15 00 f7 48 00    	call   *0x48f700
486fe5:	33 c0                	xor    %eax,%eax
486fe7:	40                   	inc    %eax
486fe8:	5f                   	pop    %edi
486fe9:	5e                   	pop    %esi
486fea:	5b                   	pop    %ebx
486feb:	5d                   	pop    %ebp
486fec:	c2 28 00             	ret    $0x28
486fef:	55                   	push   %ebp
486ff0:	8b ec                	mov    %esp,%ebp
486ff2:	b8 2c 20 00 00       	mov    $0x202c,%eax
486ff7:	e8 94 ab fa ff       	call   0x431b90
486ffc:	8b 45 28             	mov    0x28(%ebp),%eax
486fff:	53                   	push   %ebx
487000:	56                   	push   %esi
487001:	83 ce ff             	or     $0xffffffff,%esi
487004:	c6 45 ff 00          	movb   $0x0,-0x1(%ebp)
487008:	57                   	push   %edi
487009:	8b fe                	mov    %esi,%edi
48700b:	3b c6                	cmp    %esi,%eax
48700d:	75 03                	jne    0x487012
48700f:	6a 0c                	push   $0xc
487011:	58                   	pop    %eax
487012:	0d 01 00 01 00       	or     $0x10001,%eax
487017:	50                   	push   %eax
487018:	e8 8f 48 00 00       	call   0x48b8ac
48701d:	8b 5d 2c             	mov    0x2c(%ebp),%ebx
487020:	8b d0                	mov    %eax,%edx
487022:	3b de                	cmp    %esi,%ebx
487024:	75 05                	jne    0x48702b
487026:	bb 20 02 00 00       	mov    $0x220,%ebx
48702b:	33 c0                	xor    %eax,%eax
48702d:	40                   	inc    %eax
48702e:	f6 c3 10             	test   $0x10,%bl
487031:	74 06                	je     0x487039
487033:	88 45 ff             	mov    %al,-0x1(%ebp)
487036:	83 f3 10             	xor    $0x10,%ebx
487039:	8b 45 20             	mov    0x20(%ebp),%eax
48703c:	3b c6                	cmp    %esi,%eax
48703e:	75 05                	jne    0x487045
487040:	b8 96 00 00 00       	mov    $0x96,%eax
487045:	8b 4d 24             	mov    0x24(%ebp),%ecx
487048:	3b ce                	cmp    %esi,%ecx
48704a:	75 05                	jne    0x487051
48704c:	b9 96 00 00 00       	mov    $0x96,%ecx
487051:	6a 00                	push   $0x0
487053:	51                   	push   %ecx
487054:	ff 75 10             	push   0x10(%ebp)
487057:	51                   	push   %ecx
487058:	50                   	push   %eax
487059:	ff 75 1c             	push   0x1c(%ebp)
48705c:	ff 75 18             	push   0x18(%ebp)
48705f:	52                   	push   %edx
487060:	68 10 f9 48 00       	push   $0x48f910
487065:	68 84 b8 4b 00       	push   $0x4bb884
48706a:	53                   	push   %ebx
48706b:	ff 75 08             	push   0x8(%ebp)
48706e:	e8 c2 ac f7 ff       	call   0x401d35
487073:	8b 75 0c             	mov    0xc(%ebp),%esi
487076:	89 06                	mov    %eax,(%esi)
487078:	85 c0                	test   %eax,%eax
48707a:	75 07                	jne    0x487083
48707c:	32 c0                	xor    %al,%al
48707e:	e9 06 01 00 00       	jmp    0x487189
487083:	80 7d ff 00          	cmpb   $0x0,-0x1(%ebp)
487087:	74 13                	je     0x48709c
487089:	6a 10                	push   $0x10
48708b:	6a 10                	push   $0x10
48708d:	68 36 10 00 00       	push   $0x1036
487092:	50                   	push   %eax
487093:	ff 15 88 f6 48 00    	call   *0x48f688
487099:	83 cb 10             	or     $0x10,%ebx
48709c:	53                   	push   %ebx
48709d:	33 db                	xor    %ebx,%ebx
48709f:	53                   	push   %ebx
4870a0:	68 36 10 00 00       	push   $0x1036
4870a5:	ff 36                	push   (%esi)
4870a7:	ff 15 88 f6 48 00    	call   *0x48f688
4870ad:	8b 45 08             	mov    0x8(%ebp),%eax
4870b0:	39 98 88 01 00 00    	cmp    %ebx,0x188(%eax)
4870b6:	74 0f                	je     0x4870c7
4870b8:	6a 13                	push   $0x13
4870ba:	53                   	push   %ebx
4870bb:	53                   	push   %ebx
4870bc:	53                   	push   %ebx
4870bd:	53                   	push   %ebx
4870be:	53                   	push   %ebx
4870bf:	ff 36                	push   (%esi)
4870c1:	ff 15 d4 f4 48 00    	call   *0x48f4d4
4870c7:	8d 85 d8 df ff ff    	lea    -0x2028(%ebp),%eax
4870cd:	89 5d e0             	mov    %ebx,-0x20(%ebp)
4870d0:	8b 1d 88 f6 48 00    	mov    0x48f688,%ebx
4870d6:	89 45 e8             	mov    %eax,-0x18(%ebp)
4870d9:	8b 45 14             	mov    0x14(%ebp),%eax
4870dc:	c7 45 dc 0f 00 00 00 	movl   $0xf,-0x24(%ebp)
4870e3:	89 45 08             	mov    %eax,0x8(%ebp)
4870e6:	68 c4 67 4c 00       	push   $0x4c67c4
4870eb:	8d 45 08             	lea    0x8(%ebp),%eax
4870ee:	50                   	push   %eax
4870ef:	8d 85 d8 df ff ff    	lea    -0x2028(%ebp),%eax
4870f5:	50                   	push   %eax
4870f6:	e8 28 3e 00 00       	call   0x48af23
4870fb:	84 c0                	test   %al,%al
4870fd:	74 66                	je     0x487165
4870ff:	8d 85 d8 df ff ff    	lea    -0x2028(%ebp),%eax
487105:	50                   	push   %eax
487106:	e8 31 bd f9 ff       	call   0x422e3c
48710b:	89 45 28             	mov    %eax,0x28(%ebp)
48710e:	8d 85 d8 df ff ff    	lea    -0x2028(%ebp),%eax
487114:	c7 04 24 a0 b8 4b 00 	movl   $0x4bb8a0,(%esp)
48711b:	50                   	push   %eax
48711c:	e8 ac be f9 ff       	call   0x422fcd
487121:	59                   	pop    %ecx
487122:	59                   	pop    %ecx
487123:	8d 85 d8 df ff ff    	lea    -0x2028(%ebp),%eax
487129:	50                   	push   %eax