438ced:	ff 15 10 74 4a 00    	call   *0x4a7410
438cf3:	59                   	pop    %ecx
438cf4:	8b 4e 08             	mov    0x8(%esi),%ecx
438cf7:	85 c9                	test   %ecx,%ecx
438cf9:	74 04                	je     0x438cff
438cfb:	49                   	dec    %ecx
438cfc:	89 4e 08             	mov    %ecx,0x8(%esi)
438cff:	8b 45 98             	mov    -0x68(%ebp),%eax
438d02:	8b 4d 0c             	mov    0xc(%ebp),%ecx
438d05:	89 08                	mov    %ecx,(%eax)
438d07:	e8 a9 77 05 00       	call   0x4904b5
438d0c:	c2 08 00             	ret    $0x8
438d0f:	68 a4 f9 40 00       	push   $0x40f9a4
438d14:	8d 4d d0             	lea    -0x30(%ebp),%ecx
438d17:	e8 70 31 fe ff       	call   0x41be8c
438d1c:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
438d20:	8d 45 d0             	lea    -0x30(%ebp),%eax
438d23:	6a 00                	push   $0x0
438d25:	50                   	push   %eax
438d26:	8d 4d a8             	lea    -0x58(%ebp),%ecx
438d29:	e8 5c 36 fe ff       	call   0x41c38a
438d2e:	68 20 eb 49 00       	push   $0x49eb20
438d33:	8d 45 a8             	lea    -0x58(%ebp),%eax
438d36:	50                   	push   %eax
438d37:	e8 5f 77 05 00       	call   0x49049b
438d3c:	cc                   	int3
438d3d:	8b ff                	mov    %edi,%edi
438d3f:	55                   	push   %ebp
438d40:	8b ec                	mov    %esp,%ebp
438d42:	83 ec 14             	sub    $0x14,%esp
438d45:	8b c1                	mov    %ecx,%eax
438d47:	53                   	push   %ebx
438d48:	56                   	push   %esi
438d49:	b3 01                	mov    $0x1,%bl
438d4b:	89 45 f0             	mov    %eax,-0x10(%ebp)
438d4e:	8b 70 04             	mov    0x4(%eax),%esi
438d51:	8b ce                	mov    %esi,%ecx
438d53:	57                   	push   %edi
438d54:	8b 7d 0c             	mov    0xc(%ebp),%edi
438d57:	89 4d f4             	mov    %ecx,-0xc(%ebp)
438d5a:	8b 56 04             	mov    0x4(%esi),%edx
438d5d:	88 5d fc             	mov    %bl,-0x4(%ebp)
438d60:	80 7a 39 00          	cmpb   $0x0,0x39(%edx)
438d64:	75 36                	jne    0x438d9c
438d66:	8b 07                	mov    (%edi),%eax
438d68:	8b ca                	mov    %edx,%ecx
438d6a:	32 db                	xor    %bl,%bl
438d6c:	89 4d f4             	mov    %ecx,-0xc(%ebp)
438d6f:	3b 42 0c             	cmp    0xc(%edx),%eax
438d72:	73 07                	jae    0x438d7b
438d74:	fe c3                	inc    %bl
438d76:	88 5d fc             	mov    %bl,-0x4(%ebp)
438d79:	eb 14                	jmp    0x438d8f
438d7b:	75 0b                	jne    0x438d88
438d7d:	8b 47 04             	mov    0x4(%edi),%eax
438d80:	3b 42 10             	cmp    0x10(%edx),%eax
438d83:	8b 07                	mov    (%edi),%eax
438d85:	0f 92 c3             	setb   %bl
438d88:	88 5d fc             	mov    %bl,-0x4(%ebp)
438d8b:	84 db                	test   %bl,%bl
438d8d:	74 04                	je     0x438d93
438d8f:	8b 12                	mov    (%edx),%edx
438d91:	eb 03                	jmp    0x438d96
438d93:	8b 52 08             	mov    0x8(%edx),%edx
438d96:	80 7a 39 00          	cmpb   $0x0,0x39(%edx)
438d9a:	74 cc                	je     0x438d68
438d9c:	8b c1                	mov    %ecx,%eax
438d9e:	89 45 f8             	mov    %eax,-0x8(%ebp)
438da1:	84 db                	test   %bl,%bl
438da3:	74 2c                	je     0x438dd1
438da5:	3b 0e                	cmp    (%esi),%ecx
438da7:	75 1d                	jne    0x438dc6
438da9:	57                   	push   %edi
438daa:	51                   	push   %ecx
438dab:	8b 4d f0             	mov    -0x10(%ebp),%ecx
438dae:	8d 45 f4             	lea    -0xc(%ebp),%eax
438db1:	6a 01                	push   $0x1
438db3:	50                   	push   %eax
438db4:	e8 40 02 00 00       	call   0x438ff9
438db9:	8b 08                	mov    (%eax),%ecx
438dbb:	8b 45 08             	mov    0x8(%ebp),%eax
438dbe:	89 08                	mov    %ecx,(%eax)
438dc0:	c6 40 04 01          	movb   $0x1,0x4(%eax)
438dc4:	eb 50                	jmp    0x438e16
438dc6:	8d 4d f8             	lea    -0x8(%ebp),%ecx
438dc9:	e8 d8 00 00 00       	call   0x438ea6
438dce:	8b 45 f8             	mov    -0x8(%ebp),%eax
438dd1:	8b 17                	mov    (%edi),%edx
438dd3:	32 c9                	xor    %cl,%cl
438dd5:	39 50 0c             	cmp    %edx,0xc(%eax)
438dd8:	73 05                	jae    0x438ddf
438dda:	8b 75 08             	mov    0x8(%ebp),%esi
438ddd:	eb 12                	jmp    0x438df1
438ddf:	75 09                	jne    0x438dea
438de1:	8b 48 10             	mov    0x10(%eax),%ecx
438de4:	3b 4f 04             	cmp    0x4(%edi),%ecx
438de7:	0f 92 c1             	setb   %cl
438dea:	8b 75 08             	mov    0x8(%ebp),%esi
438ded:	84 c9                	test   %cl,%cl
438def:	74 1d                	je     0x438e0e
438df1:	8b 4d f0             	mov    -0x10(%ebp),%ecx
438df4:	8d 45 f4             	lea    -0xc(%ebp),%eax
438df7:	57                   	push   %edi
438df8:	ff 75 f4             	push   -0xc(%ebp)
438dfb:	ff 75 fc             	push   -0x4(%ebp)
438dfe:	50                   	push   %eax
438dff:	e8 f5 01 00 00       	call   0x438ff9
438e04:	c6 46 04 01          	movb   $0x1,0x4(%esi)
438e08:	8b 08                	mov    (%eax),%ecx
438e0a:	89 0e                	mov    %ecx,(%esi)
438e0c:	eb 06                	jmp    0x438e14
438e0e:	89 06                	mov    %eax,(%esi)
438e10:	c6 46 04 00          	movb   $0x0,0x4(%esi)
438e14:	8b c6                	mov    %esi,%eax
438e16:	5f                   	pop    %edi
438e17:	5e                   	pop    %esi
438e18:	5b                   	pop    %ebx
438e19:	c9                   	leave
438e1a:	c2 08 00             	ret    $0x8
438e1d:	8b ff                	mov    %edi,%edi
438e1f:	55                   	push   %ebp
438e20:	8b ec                	mov    %esp,%ebp
438e22:	6a ff                	push   $0xffffffff
438e24:	68 7b 13 49 00       	push   $0x49137b
438e29:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
438e2f:	50                   	push   %eax
438e30:	51                   	push   %ecx
438e31:	56                   	push   %esi
438e32:	a1 dc 38 4a 00       	mov    0x4a38dc,%eax
438e37:	33 c5                	xor    %ebp,%eax
438e39:	50                   	push   %eax
438e3a:	8d 45 f4             	lea    -0xc(%ebp),%eax
438e3d:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
438e43:	8b f1                	mov    %ecx,%esi
438e45:	8b 46 04             	mov    0x4(%esi),%eax
438e48:	50                   	push   %eax
438e49:	ff 30                	push   (%eax)
438e4b:	8d 45 f0             	lea    -0x10(%ebp),%eax
438e4e:	50                   	push   %eax
438e4f:	e8 62 05 00 00       	call   0x4393b6
438e54:	ff 76 04             	push   0x4(%esi)
438e57:	ff 15 10 74 4a 00    	call   *0x4a7410
438e5d:	83 66 04 00          	andl   $0x0,0x4(%esi)
438e61:	83 66 08 00          	andl   $0x0,0x8(%esi)
438e65:	59                   	pop    %ecx
438e66:	8b 4d f4             	mov    -0xc(%ebp),%ecx
438e69:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
438e70:	59                   	pop    %ecx
438e71:	5e                   	pop    %esi
438e72:	c9                   	leave
438e73:	c3                   	ret
438e74:	8b ff                	mov    %edi,%edi
438e76:	55                   	push   %ebp
438e77:	8b ec                	mov    %esp,%ebp
438e79:	51                   	push   %ecx
438e7a:	56                   	push   %esi
438e7b:	8b f1                	mov    %ecx,%esi
438e7d:	89 75 fc             	mov    %esi,-0x4(%ebp)
438e80:	e8 a1 05 00 00       	call   0x439426
438e85:	89 46 04             	mov    %eax,0x4(%esi)
438e88:	c6 40 39 01          	movb   $0x1,0x39(%eax)
438e8c:	8b 46 04             	mov    0x4(%esi),%eax
438e8f:	89 40 04             	mov    %eax,0x4(%eax)
438e92:	8b 46 04             	mov    0x4(%esi),%eax
438e95:	89 00                	mov    %eax,(%eax)
438e97:	8b 46 04             	mov    0x4(%esi),%eax
438e9a:	89 40 08             	mov    %eax,0x8(%eax)
438e9d:	8b c6                	mov    %esi,%eax
438e9f:	83 66 08 00          	andl   $0x0,0x8(%esi)
438ea3:	5e                   	pop    %esi
438ea4:	c9                   	leave
438ea5:	c3                   	ret
438ea6:	8b ff                	mov    %edi,%edi
438ea8:	55                   	push   %ebp
438ea9:	8b ec                	mov    %esp,%ebp
438eab:	51                   	push   %ecx
438eac:	8b d1                	mov    %ecx,%edx
438eae:	8b 02                	mov    (%edx),%eax
438eb0:	80 78 39 00          	cmpb   $0x0,0x39(%eax)
438eb4:	74 07                	je     0x438ebd
438eb6:	8b 40 08             	mov    0x8(%eax),%eax
438eb9:	89 02                	mov    %eax,(%edx)
438ebb:	eb 3f                	jmp    0x438efc
438ebd:	8b 08                	mov    (%eax),%ecx
438ebf:	80 79 39 00          	cmpb   $0x0,0x39(%ecx)
438ec3:	74 3d                	je     0x438f02
438ec5:	8b 48 04             	mov    0x4(%eax),%ecx
438ec8:	80 79 39 00          	cmpb   $0x0,0x39(%ecx)
438ecc:	75 26                	jne    0x438ef4
438ece:	56                   	push   %esi
438ecf:	57                   	push   %edi
438ed0:	8b f0                	mov    %eax,%esi
438ed2:	8b f8                	mov    %eax,%edi
438ed4:	53                   	push   %ebx
438ed5:	8b d9                	mov    %ecx,%ebx
438ed7:	89 4d fc             	mov    %ecx,-0x4(%ebp)
438eda:	8b c7                	mov    %edi,%eax
438edc:	3b 31                	cmp    (%ecx),%esi
438ede:	75 11                	jne    0x438ef1
438ee0:	89 0a                	mov    %ecx,(%edx)
438ee2:	8b f1                	mov    %ecx,%esi
438ee4:	8b 49 04             	mov    0x4(%ecx),%ecx
438ee7:	8b fe                	mov    %esi,%edi
438ee9:	8b c3                	mov    %ebx,%eax
438eeb:	80 79 39 00          	cmpb   $0x0,0x39(%ecx)
438eef:	74 e4                	je     0x438ed5
438ef1:	5b                   	pop    %ebx
438ef2:	5f                   	pop    %edi
438ef3:	5e                   	pop    %esi
438ef4:	80 78 39 00          	cmpb   $0x0,0x39(%eax)
438ef8:	75 02                	jne    0x438efc
438efa:	89 0a                	mov    %ecx,(%edx)
438efc:	8b c2                	mov    %edx,%eax
438efe:	c9                   	leave
438eff:	c3                   	ret
438f00:	8b c8                	mov    %eax,%ecx
438f02:	8b 41 08             	mov    0x8(%ecx),%eax
438f05:	80 78 39 00          	cmpb   $0x0,0x39(%eax)
438f09:	74 f5                	je     0x438f00
438f0b:	eb ed                	jmp    0x438efa
438f0d:	8b ff                	mov    %edi,%edi
438f0f:	56                   	push   %esi
438f10:	8b f1                	mov    %ecx,%esi
438f12:	8b 16                	mov    (%esi),%edx
438f14:	80 7a 39 00          	cmpb   $0x0,0x39(%edx)
438f18:	74 11                	je     0x438f2b
438f1a:	33 c0                	xor    %eax,%eax
438f1c:	50                   	push   %eax
438f1d:	50                   	push   %eax
438f1e:	50                   	push   %eax
438f1f:	50                   	push   %eax
438f20:	50                   	push   %eax
438f21:	e8 40 73 05 00       	call   0x490266
438f26:	83 c4 14             	add    $0x14,%esp
438f29:	eb 3a                	jmp    0x438f65
438f2b:	8b 4a 08             	mov    0x8(%edx),%ecx
438f2e:	80 79 39 00          	cmpb   $0x0,0x39(%ecx)
438f32:	75 18                	jne    0x438f4c
438f34:	8b 11                	mov    (%ecx),%edx
438f36:	80 7a 39 00          	cmpb   $0x0,0x39(%edx)
438f3a:	75 0c                	jne    0x438f48
438f3c:	8b 02                	mov    (%edx),%eax
438f3e:	8b ca                	mov    %edx,%ecx
438f40:	8b d0                	mov    %eax,%edx
438f42:	80 78 39 00          	cmpb   $0x0,0x39(%eax)
438f46:	74 f4                	je     0x438f3c
438f48:	89 0e                	mov    %ecx,(%esi)
438f4a:	eb 19                	jmp    0x438f65
438f4c:	8b 42 04             	mov    0x4(%edx),%eax
438f4f:	eb 0c                	jmp    0x438f5d
438f51:	3b 50 08             	cmp    0x8(%eax),%edx
438f54:	75 0d                	jne    0x438f63
438f56:	89 06                	mov    %eax,(%esi)
438f58:	8b d0                	mov    %eax,%edx
438f5a:	8b 40 04             	mov    0x4(%eax),%eax
438f5d:	80 78 39 00          	cmpb   $0x0,0x39(%eax)
438f61:	74 ee                	je     0x438f51
438f63:	89 06                	mov    %eax,(%esi)
438f65:	8b c6                	mov    %esi,%eax
438f67:	5e                   	pop    %esi
438f68:	c3                   	ret
438f69:	8b ff                	mov    %edi,%edi
438f6b:	55                   	push   %ebp
438f6c:	8b ec                	mov    %esp,%ebp
438f6e:	8b 55 08             	mov    0x8(%ebp),%edx
438f71:	56                   	push   %esi
438f72:	8b 32                	mov    (%edx),%esi
438f74:	8b 46 08             	mov    0x8(%esi),%eax
438f77:	89 02                	mov    %eax,(%edx)
438f79:	8b 46 08             	mov    0x8(%esi),%eax
438f7c:	80 78 39 00          	cmpb   $0x0,0x39(%eax)
438f80:	75 03                	jne    0x438f85
438f82:	89 50 04             	mov    %edx,0x4(%eax)
438f85:	8b 42 04             	mov    0x4(%edx),%eax
438f88:	89 46 04             	mov    %eax,0x4(%esi)
438f8b:	8b 41 04             	mov    0x4(%ecx),%eax
438f8e:	3b 50 04             	cmp    0x4(%eax),%edx
438f91:	75 05                	jne    0x438f98
438f93:	89 70 04             	mov    %esi,0x4(%eax)
438f96:	eb 0f                	jmp    0x438fa7
438f98:	8b 42 04             	mov    0x4(%edx),%eax
438f9b:	3b 50 08             	cmp    0x8(%eax),%edx
438f9e:	75 05                	jne    0x438fa5
438fa0:	89 70 08             	mov    %esi,0x8(%eax)
438fa3:	eb 02                	jmp    0x438fa7
438fa5:	89 30                	mov    %esi,(%eax)
438fa7:	89 56 08             	mov    %edx,0x8(%esi)
438faa:	89 72 04             	mov    %esi,0x4(%edx)
438fad:	5e                   	pop    %esi
438fae:	5d                   	pop    %ebp
438faf:	c2 04 00             	ret    $0x4
438fb2:	8b ff                	mov    %edi,%edi
438fb4:	55                   	push   %ebp
438fb5:	8b ec                	mov    %esp,%ebp
438fb7:	8b 55 08             	mov    0x8(%ebp),%edx
438fba:	56                   	push   %esi
438fbb:	8b 72 08             	mov    0x8(%edx),%esi
438fbe:	8b 06                	mov    (%esi),%eax
438fc0:	89 42 08             	mov    %eax,0x8(%edx)
438fc3:	8b 06                	mov    (%esi),%eax
438fc5:	80 78 39 00          	cmpb   $0x0,0x39(%eax)
438fc9:	75 03                	jne    0x438fce
438fcb:	89 50 04             	mov    %edx,0x4(%eax)
438fce:	8b 42 04             	mov    0x4(%edx),%eax
438fd1:	89 46 04             	mov    %eax,0x4(%esi)
438fd4:	8b 41 04             	mov    0x4(%ecx),%eax
438fd7:	3b 50 04             	cmp    0x4(%eax),%edx
438fda:	75 05                	jne    0x438fe1
438fdc:	89 70 04             	mov    %esi,0x4(%eax)
438fdf:	eb 0e                	jmp    0x438fef
438fe1:	8b 42 04             	mov    0x4(%edx),%eax
438fe4:	3b 10                	cmp    (%eax),%edx
438fe6:	75 04                	jne    0x438fec
438fe8:	89 30                	mov    %esi,(%eax)
438fea:	eb 03                	jmp    0x438fef
438fec:	89 70 08             	mov    %esi,0x8(%eax)
438fef:	89 16                	mov    %edx,(%esi)
438ff1:	89 72 04             	mov    %esi,0x4(%edx)
438ff4:	5e                   	pop    %esi
438ff5:	5d                   	pop    %ebp
438ff6:	c2 04 00             	ret    $0x4
438ff9:	6a 4c                	push   $0x4c
438ffb:	b8 be 12 49 00       	mov    $0x4912be,%eax
439000:	e8 01 75 05 00       	call   0x490506
439005:	8b f1                	mov    %ecx,%esi
439007:	81 7e 08 5c 74 d1 05 	cmpl   $0x5d1745c,0x8(%esi)
43900e:	8b 45 08             	mov    0x8(%ebp),%eax
439011:	8b 7d 10             	mov    0x10(%ebp),%edi
439014:	89 45 a8             	mov    %eax,-0x58(%ebp)
439017:	8b 45 14             	mov    0x14(%ebp),%eax
43901a:	0f 83 06 01 00 00    	jae    0x439126
439020:	51                   	push   %ecx
439021:	50                   	push   %eax
439022:	ff 76 04             	push   0x4(%esi)
439025:	57                   	push   %edi
439026:	ff 76 04             	push   0x4(%esi)
439029:	e8 50 03 00 00       	call   0x43937e
43902e:	ff 46 08             	incl   0x8(%esi)
439031:	8b d8                	mov    %eax,%ebx
439033:	8b 46 04             	mov    0x4(%esi),%eax
439036:	3b f8                	cmp    %eax,%edi
439038:	75 0d                	jne    0x439047
43903a:	89 58 04             	mov    %ebx,0x4(%eax)
43903d:	8b 46 04             	mov    0x4(%esi),%eax
439040:	89 18                	mov    %ebx,(%eax)
439042:	8b 46 04             	mov    0x4(%esi),%eax
439045:	eb 1e                	jmp    0x439065
439047:	80 7d 0c 00          	cmpb   $0x0,0xc(%ebp)
43904b:	74 0d                	je     0x43905a
43904d:	89 1f                	mov    %ebx,(%edi)