86acab:	ff 71 20             	push   0x20(%ecx)
86acae:	ff 15 70 3f d8 00    	call   *0xd83f70
86acb4:	5e                   	pop    %esi
86acb5:	5f                   	pop    %edi
86acb6:	8b 4d fc             	mov    -0x4(%ebp),%ecx
86acb9:	33 cd                	xor    %ebp,%ecx
86acbb:	5b                   	pop    %ebx
86acbc:	e8 f5 0a bb ff       	call   0x41b7b6
86acc1:	8b e5                	mov    %ebp,%esp
86acc3:	5d                   	pop    %ebp
86acc4:	c2 04 00             	ret    $0x4
86acc7:	cc                   	int3
86acc8:	cc                   	int3
86acc9:	cc                   	int3
86acca:	cc                   	int3
86accb:	cc                   	int3
86accc:	cc                   	int3
86accd:	cc                   	int3
86acce:	cc                   	int3
86accf:	cc                   	int3
86acd0:	cc                   	int3
86acd1:	cc                   	int3
86acd2:	cc                   	int3
86acd3:	cc                   	int3
86acd4:	cc                   	int3
86acd5:	cc                   	int3
86acd6:	cc                   	int3
86acd7:	cc                   	int3
86acd8:	cc                   	int3
86acd9:	cc                   	int3
86acda:	cc                   	int3
86acdb:	cc                   	int3
86acdc:	cc                   	int3
86acdd:	cc                   	int3
86acde:	cc                   	int3
86acdf:	cc                   	int3
86ace0:	cc                   	int3
86ace1:	cc                   	int3
86ace2:	cc                   	int3
86ace3:	cc                   	int3
86ace4:	cc                   	int3
86ace5:	cc                   	int3
86ace6:	cc                   	int3
86ace7:	cc                   	int3
86ace8:	cc                   	int3
86ace9:	cc                   	int3
86acea:	55                   	push   %ebp
86aceb:	8b ec                	mov    %esp,%ebp
86aced:	57                   	push   %edi
86acee:	8b f9                	mov    %ecx,%edi
86acf0:	83 bf 04 03 00 00 00 	cmpl   $0x0,0x304(%edi)
86acf7:	75 46                	jne    0x86ad3f
86acf9:	56                   	push   %esi
86acfa:	8b b7 a4 03 00 00    	mov    0x3a4(%edi),%esi
86ad00:	eb 0d                	jmp    0x86ad0f
86ad02:	8b 4e 08             	mov    0x8(%esi),%ecx
86ad05:	ff 75 08             	push   0x8(%ebp)
86ad08:	8b 36                	mov    (%esi),%esi
86ad0a:	e8 2b 8c ba ff       	call   0x41393a
86ad0f:	85 f6                	test   %esi,%esi
86ad11:	75 ef                	jne    0x86ad02
86ad13:	8b 07                	mov    (%edi),%eax
86ad15:	8b b0 70 01 00 00    	mov    0x170(%eax),%esi
86ad1b:	8b ce                	mov    %esi,%ecx
86ad1d:	e8 43 19 bc ff       	call   0x42c665
86ad22:	8b cf                	mov    %edi,%ecx
86ad24:	ff d6                	call   *%esi
86ad26:	83 7f 20 00          	cmpl   $0x0,0x20(%edi)
86ad2a:	5e                   	pop    %esi
86ad2b:	74 12                	je     0x86ad3f
86ad2d:	68 05 01 00 00       	push   $0x105
86ad32:	6a 00                	push   $0x0
86ad34:	6a 00                	push   $0x0
86ad36:	ff 77 20             	push   0x20(%edi)
86ad39:	ff 15 70 3f d8 00    	call   *0xd83f70
86ad3f:	5f                   	pop    %edi
86ad40:	5d                   	pop    %ebp
86ad41:	c2 04 00             	ret    $0x4
86ad44:	cc                   	int3
86ad45:	cc                   	int3
86ad46:	cc                   	int3
86ad47:	cc                   	int3
86ad48:	cc                   	int3
86ad49:	cc                   	int3
86ad4a:	cc                   	int3
86ad4b:	cc                   	int3
86ad4c:	cc                   	int3
86ad4d:	cc                   	int3
86ad4e:	cc                   	int3
86ad4f:	cc                   	int3
86ad50:	cc                   	int3
86ad51:	cc                   	int3
86ad52:	cc                   	int3
86ad53:	cc                   	int3
86ad54:	cc                   	int3
86ad55:	cc                   	int3
86ad56:	cc                   	int3
86ad57:	cc                   	int3
86ad58:	cc                   	int3
86ad59:	cc                   	int3
86ad5a:	55                   	push   %ebp
86ad5b:	8b ec                	mov    %esp,%ebp
86ad5d:	56                   	push   %esi
86ad5e:	8b b1 d0 00 00 00    	mov    0xd0(%ecx),%esi
86ad64:	57                   	push   %edi
86ad65:	8b 7d 08             	mov    0x8(%ebp),%edi
86ad68:	89 79 60             	mov    %edi,0x60(%ecx)
86ad6b:	eb 0b                	jmp    0x86ad78
86ad6d:	8b 4e 08             	mov    0x8(%esi),%ecx
86ad70:	8b 36                	mov    (%esi),%esi
86ad72:	57                   	push   %edi
86ad73:	e8 c2 8b ba ff       	call   0x41393a
86ad78:	85 f6                	test   %esi,%esi
86ad7a:	75 f1                	jne    0x86ad6d
86ad7c:	5f                   	pop    %edi
86ad7d:	5e                   	pop    %esi
86ad7e:	5d                   	pop    %ebp
86ad7f:	c2 04 00             	ret    $0x4
86ad82:	cc                   	int3
86ad83:	cc                   	int3
86ad84:	cc                   	int3
86ad85:	cc                   	int3
86ad86:	cc                   	int3
86ad87:	cc                   	int3
86ad88:	cc                   	int3
86ad89:	cc                   	int3
86ad8a:	cc                   	int3
86ad8b:	cc                   	int3
86ad8c:	55                   	push   %ebp
86ad8d:	8b ec                	mov    %esp,%ebp
86ad8f:	8b 55 08             	mov    0x8(%ebp),%edx
86ad92:	3b 51 0c             	cmp    0xc(%ecx),%edx
86ad95:	7d 12                	jge    0x86ada9
86ad97:	85 d2                	test   %edx,%edx
86ad99:	78 0e                	js     0x86ada9
86ad9b:	8b 41 04             	mov    0x4(%ecx),%eax
86ad9e:	74 0b                	je     0x86adab
86ada0:	8b 00                	mov    (%eax),%eax
86ada2:	83 ea 01             	sub    $0x1,%edx
86ada5:	75 f9                	jne    0x86ada0
86ada7:	eb 02                	jmp    0x86adab
86ada9:	33 c0                	xor    %eax,%eax
86adab:	5d                   	pop    %ebp
86adac:	c2 04 00             	ret    $0x4
86adaf:	cc                   	int3
86adb0:	cc                   	int3
86adb1:	cc                   	int3
86adb2:	cc                   	int3
86adb3:	cc                   	int3
86adb4:	cc                   	int3
86adb5:	cc                   	int3
86adb6:	cc                   	int3
86adb7:	55                   	push   %ebp
86adb8:	8b ec                	mov    %esp,%ebp
86adba:	56                   	push   %esi
86adbb:	8b b1 a4 03 00 00    	mov    0x3a4(%ecx),%esi
86adc1:	57                   	push   %edi
86adc2:	85 f6                	test   %esi,%esi
86adc4:	74 23                	je     0x86ade9
86adc6:	8b 7d 08             	mov    0x8(%ebp),%edi
86adc9:	8b 46 08             	mov    0x8(%esi),%eax
86adcc:	8b 36                	mov    (%esi),%esi
86adce:	39 78 28             	cmp    %edi,0x28(%eax)
86add1:	74 18                	je     0x86adeb
86add3:	83 7d 0c 00          	cmpl   $0x0,0xc(%ebp)
86add7:	74 0c                	je     0x86ade5
86add9:	57                   	push   %edi
86adda:	8b c8                	mov    %eax,%ecx
86addc:	e8 26 e1 ba ff       	call   0x418f07
86ade1:	85 c0                	test   %eax,%eax
86ade3:	75 06                	jne    0x86adeb
86ade5:	85 f6                	test   %esi,%esi
86ade7:	75 e0                	jne    0x86adc9
86ade9:	33 c0                	xor    %eax,%eax
86adeb:	5f                   	pop    %edi
86adec:	5e                   	pop    %esi
86aded:	5d                   	pop    %ebp
86adee:	c2 08 00             	ret    $0x8
86adf1:	cc                   	int3
86adf2:	cc                   	int3
86adf3:	cc                   	int3
86adf4:	cc                   	int3
86adf5:	cc                   	int3
86adf6:	cc                   	int3
86adf7:	cc                   	int3
86adf8:	cc                   	int3
86adf9:	cc                   	int3
86adfa:	cc                   	int3
86adfb:	cc                   	int3
86adfc:	cc                   	int3
86adfd:	cc                   	int3
86adfe:	cc                   	int3
86adff:	55                   	push   %ebp
86ae00:	8b ec                	mov    %esp,%ebp
86ae02:	56                   	push   %esi
86ae03:	8b b1 d0 00 00 00    	mov    0xd0(%ecx),%esi
86ae09:	57                   	push   %edi
86ae0a:	85 f6                	test   %esi,%esi
86ae0c:	74 1d                	je     0x86ae2b
86ae0e:	8b 7d 08             	mov    0x8(%ebp),%edi
86ae11:	8b 46 08             	mov    0x8(%esi),%eax
86ae14:	8b 36                	mov    (%esi),%esi
86ae16:	39 78 28             	cmp    %edi,0x28(%eax)
86ae19:	74 12                	je     0x86ae2d
86ae1b:	57                   	push   %edi
86ae1c:	8b c8                	mov    %eax,%ecx
86ae1e:	e8 e4 e0 ba ff       	call   0x418f07
86ae23:	85 c0                	test   %eax,%eax
86ae25:	75 06                	jne    0x86ae2d
86ae27:	85 f6                	test   %esi,%esi
86ae29:	75 e6                	jne    0x86ae11
86ae2b:	33 c0                	xor    %eax,%eax
86ae2d:	5f                   	pop    %edi
86ae2e:	5e                   	pop    %esi
86ae2f:	5d                   	pop    %ebp
86ae30:	c2 04 00             	ret    $0x4
86ae33:	cc                   	int3
86ae34:	cc                   	int3
86ae35:	cc                   	int3
86ae36:	cc                   	int3
86ae37:	cc                   	int3
86ae38:	cc                   	int3
86ae39:	cc                   	int3
86ae3a:	cc                   	int3
86ae3b:	cc                   	int3
86ae3c:	cc                   	int3
86ae3d:	cc                   	int3
86ae3e:	cc                   	int3
86ae3f:	cc                   	int3
86ae40:	6a 08                	push   $0x8
86ae42:	b8 98 d8 b9 00       	mov    $0xb9d898,%eax
86ae47:	e8 3f f4 b9 ff       	call   0x40a28b
86ae4c:	8b f1                	mov    %ecx,%esi
86ae4e:	83 65 ec 00          	andl   $0x0,-0x14(%ebp)
86ae52:	83 be e8 00 00 00 ff 	cmpl   $0xffffffff,0xe8(%esi)
86ae59:	75 1a                	jne    0x86ae75
86ae5b:	8b 86 f4 00 00 00    	mov    0xf4(%esi),%eax
86ae61:	83 e8 10             	sub    $0x10,%eax
86ae64:	50                   	push   %eax
86ae65:	e8 c4 16 bd ff       	call   0x43c52e
86ae6a:	59                   	pop    %ecx
86ae6b:	8d 48 10             	lea    0x10(%eax),%ecx
86ae6e:	8b 45 08             	mov    0x8(%ebp),%eax
86ae71:	89 08                	mov    %ecx,(%eax)
86ae73:	eb 58                	jmp    0x86aecd
86ae75:	e8 9b b7 bc ff       	call   0x436615
86ae7a:	50                   	push   %eax
86ae7b:	8d 4d f0             	lea    -0x10(%ebp),%ecx
86ae7e:	e8 91 ed b9 ff       	call   0x409c14
86ae83:	0f b6 86 ea 00 00 00 	movzbl 0xea(%esi),%eax
86ae8a:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
86ae8e:	50                   	push   %eax
86ae8f:	0f b6 86 e9 00 00 00 	movzbl 0xe9(%esi),%eax
86ae96:	50                   	push   %eax
86ae97:	0f b6 86 e8 00 00 00 	movzbl 0xe8(%esi),%eax
86ae9e:	50                   	push   %eax
86ae9f:	8d 45 f0             	lea    -0x10(%ebp),%eax
86aea2:	68 a4 1e c4 00       	push   $0xc41ea4
86aea7:	50                   	push   %eax
86aea8:	e8 3d 11 bb ff       	call   0x41bfea
86aead:	8b 7d f0             	mov    -0x10(%ebp),%edi
86aeb0:	83 c7 f0             	add    $0xfffffff0,%edi
86aeb3:	57                   	push   %edi
86aeb4:	e8 75 16 bd ff       	call   0x43c52e
86aeb9:	8b 75 08             	mov    0x8(%ebp),%esi
86aebc:	83 c4 18             	add    $0x18,%esp
86aebf:	83 c0 10             	add    $0x10,%eax
86aec2:	8b cf                	mov    %edi,%ecx
86aec4:	89 06                	mov    %eax,(%esi)
86aec6:	e8 49 9d b9 ff       	call   0x404c14
86aecb:	8b c6                	mov    %esi,%eax
86aecd:	e8 45 35 ba ff       	call   0x40e417
86aed2:	c2 04 00             	ret    $0x4
86aed5:	cc                   	int3
86aed6:	cc                   	int3
86aed7:	cc                   	int3
86aed8:	cc                   	int3
86aed9:	cc                   	int3
86aeda:	cc                   	int3
86aedb:	cc                   	int3
86aedc:	cc                   	int3
86aedd:	cc                   	int3
86aede:	cc                   	int3
86aedf:	cc                   	int3
86aee0:	cc                   	int3
86aee1:	cc                   	int3
86aee2:	cc                   	int3
86aee3:	cc                   	int3
86aee4:	cc                   	int3
86aee5:	cc                   	int3
86aee6:	cc                   	int3
86aee7:	cc                   	int3
86aee8:	cc                   	int3
86aee9:	cc                   	int3
86aeea:	cc                   	int3
86aeeb:	cc                   	int3
86aeec:	cc                   	int3
86aeed:	cc                   	int3
86aeee:	cc                   	int3
86aeef:	cc                   	int3
86aef0:	cc                   	int3
86aef1:	cc                   	int3
86aef2:	cc                   	int3
86aef3:	cc                   	int3
86aef4:	cc                   	int3
86aef5:	cc                   	int3
86aef6:	cc                   	int3
86aef7:	cc                   	int3
86aef8:	cc                   	int3
86aef9:	cc                   	int3
86aefa:	6a 18                	push   $0x18
86aefc:	b8 dc d8 b9 00       	mov    $0xb9d8dc,%eax
86af01:	e8 85 f3 b9 ff       	call   0x40a28b
86af06:	8b f9                	mov    %ecx,%edi
86af08:	33 db                	xor    %ebx,%ebx
86af0a:	89 5d fc             	mov    %ebx,-0x4(%ebp)
86af0d:	89 5d f0             	mov    %ebx,-0x10(%ebp)
86af10:	e8 00 b7 bc ff       	call   0x436615
86af15:	8b 4d 08             	mov    0x8(%ebp),%ecx
86af18:	50                   	push   %eax
86af19:	e8 f6 ec b9 ff       	call   0x409c14
86af1e:	ff b7 c4 00 00 00    	push   0xc4(%edi)
86af24:	89 5d fc             	mov    %ebx,-0x4(%ebp)
86af27:	8d 4d dc             	lea    -0x24(%ebp),%ecx
86af2a:	43                   	inc    %ebx
86af2b:	89 5d f0             	mov    %ebx,-0x10(%ebp)
86af2e:	e8 57 d4 bb ff       	call   0x42838a
86af33:	6a 5a                	push   $0x5a
86af35:	ff 75 e4             	push   -0x1c(%ebp)
86af38:	89 5d fc             	mov    %ebx,-0x4(%ebp)
86af3b:	ff 15 30 33 d8 00    	call   *0xd83330
86af41:	85 c0                	test   %eax,%eax
86af43:	74 2c                	je     0x86af71
86af45:	50                   	push   %eax
86af46:	8b 87 e8 00 00 00    	mov    0xe8(%edi),%eax
86af4c:	f7 d8                	neg    %eax
86af4e:	50                   	push   %eax
86af4f:	6a 48                	push   $0x48
86af51:	ff 15 64 37 d8 00    	call   *0xd83764
86af57:	50                   	push   %eax
86af58:	8d 87 04 01 00 00    	lea    0x104(%edi),%eax
86af5e:	50                   	push   %eax
86af5f:	68 24 1f c4 00       	push   $0xc41f24
86af64:	ff 75 08             	push   0x8(%ebp)
86af67:	e8 7e 10 bb ff       	call   0x41bfea
86af6c:	83 c4 10             	add    $0x10,%esp
86af6f:	eb 0f                	jmp    0x86af80
86af71:	8d 8f 04 01 00 00    	lea    0x104(%edi),%ecx
86af77:	51                   	push   %ecx
86af78:	8b 4d 08             	mov    0x8(%ebp),%ecx