86708d:	ff 75 f8             	push   -0x8(%ebp)
867090:	8d 45 fc             	lea    -0x4(%ebp),%eax
867093:	8b ce                	mov    %esi,%ecx
867095:	50                   	push   %eax
867096:	8d 45 f8             	lea    -0x8(%ebp),%eax
867099:	50                   	push   %eax
86709a:	e8 c2 ec ba ff       	call   0x415d61
86709f:	8b 45 f8             	mov    -0x8(%ebp),%eax
8670a2:	3b c7                	cmp    %edi,%eax
8670a4:	0f 85 75 03 00 00    	jne    0x86741f
8670aa:	6a 01                	push   $0x1
8670ac:	53                   	push   %ebx
8670ad:	8d 45 fc             	lea    -0x4(%ebp),%eax
8670b0:	8b ce                	mov    %esi,%ecx
8670b2:	50                   	push   %eax
8670b3:	8d 45 f8             	lea    -0x8(%ebp),%eax
8670b6:	50                   	push   %eax
8670b7:	e8 a5 ec ba ff       	call   0x415d61
8670bc:	8b 45 f8             	mov    -0x8(%ebp),%eax
8670bf:	e9 5b 03 00 00       	jmp    0x86741f
8670c4:	8d 45 f8             	lea    -0x8(%ebp),%eax
8670c7:	50                   	push   %eax
8670c8:	8d 45 fc             	lea    -0x4(%ebp),%eax
8670cb:	50                   	push   %eax
8670cc:	68 b0 00 00 00       	push   $0xb0
8670d1:	ff 76 20             	push   0x20(%esi)
8670d4:	ff 15 20 40 d8 00    	call   *0xd84020
8670da:	6a 01                	push   $0x1
8670dc:	ff 75 f8             	push   -0x8(%ebp)
8670df:	8d 45 f8             	lea    -0x8(%ebp),%eax
8670e2:	8b ce                	mov    %esi,%ecx
8670e4:	50                   	push   %eax
8670e5:	8d 45 fc             	lea    -0x4(%ebp),%eax
8670e8:	50                   	push   %eax
8670e9:	e8 73 ec ba ff       	call   0x415d61
8670ee:	39 7d fc             	cmp    %edi,-0x4(%ebp)
8670f1:	75 19                	jne    0x86710c
8670f3:	8b 86 80 00 00 00    	mov    0x80(%esi),%eax
8670f9:	8b ce                	mov    %esi,%ecx
8670fb:	53                   	push   %ebx
8670fc:	ff 70 f4             	push   -0xc(%eax)
8670ff:	8d 45 f8             	lea    -0x8(%ebp),%eax
867102:	50                   	push   %eax
867103:	8d 45 fc             	lea    -0x4(%ebp),%eax
867106:	50                   	push   %eax
867107:	e8 55 ec ba ff       	call   0x415d61
86710c:	53                   	push   %ebx
86710d:	ff 75 f8             	push   -0x8(%ebp)
867110:	ff 75 f8             	push   -0x8(%ebp)
867113:	e9 0a 03 00 00       	jmp    0x867422
867118:	ff 75 10             	push   0x10(%ebp)
86711b:	8b ce                	mov    %esi,%ecx
86711d:	ff 75 0c             	push   0xc(%ebp)
867120:	6a 08                	push   $0x8
867122:	e8 60 37 bd ff       	call   0x43a887
867127:	e9 fd 02 00 00       	jmp    0x867429
86712c:	8d 45 f8             	lea    -0x8(%ebp),%eax
86712f:	bf b0 00 00 00       	mov    $0xb0,%edi
867134:	50                   	push   %eax
867135:	8d 45 fc             	lea    -0x4(%ebp),%eax
867138:	50                   	push   %eax
867139:	57                   	push   %edi
86713a:	ff 76 20             	push   0x20(%esi)
86713d:	ff 15 20 40 d8 00    	call   *0xd84020
867143:	53                   	push   %ebx
867144:	ff 75 fc             	push   -0x4(%ebp)
867147:	8d 45 f8             	lea    -0x8(%ebp),%eax
86714a:	8b ce                	mov    %esi,%ecx
86714c:	50                   	push   %eax
86714d:	8d 45 fc             	lea    -0x4(%ebp),%eax
867150:	50                   	push   %eax
867151:	e8 0b ec ba ff       	call   0x415d61
867156:	83 7d fc ff          	cmpl   $0xffffffff,-0x4(%ebp)
86715a:	75 12                	jne    0x86716e
86715c:	6a 01                	push   $0x1
86715e:	53                   	push   %ebx
86715f:	8d 45 f8             	lea    -0x8(%ebp),%eax
867162:	8b ce                	mov    %esi,%ecx
867164:	50                   	push   %eax
867165:	8d 45 fc             	lea    -0x4(%ebp),%eax
867168:	50                   	push   %eax
867169:	e8 f3 eb ba ff       	call   0x415d61
86716e:	6a 10                	push   $0x10
867170:	ff 15 38 40 d8 00    	call   *0xd84038
867176:	84 c0                	test   %al,%al
867178:	79 37                	jns    0x8671b1
86717a:	8d 45 f4             	lea    -0xc(%ebp),%eax
86717d:	50                   	push   %eax
86717e:	8d 45 f0             	lea    -0x10(%ebp),%eax
867181:	50                   	push   %eax
867182:	57                   	push   %edi
867183:	ff 76 20             	push   0x20(%esi)
867186:	ff 15 20 40 d8 00    	call   *0xd84020
86718c:	8b 45 f0             	mov    -0x10(%ebp),%eax
86718f:	48                   	dec    %eax
867190:	39 9e 9c 00 00 00    	cmp    %ebx,0x9c(%esi)
867196:	74 10                	je     0x8671a8
867198:	3b 45 fc             	cmp    -0x4(%ebp),%eax
86719b:	7f 03                	jg     0x8671a0
86719d:	8b 45 fc             	mov    -0x4(%ebp),%eax
8671a0:	3b 45 f8             	cmp    -0x8(%ebp),%eax
8671a3:	7c 03                	jl     0x8671a8
8671a5:	8b 45 f8             	mov    -0x8(%ebp),%eax
8671a8:	53                   	push   %ebx
8671a9:	ff 75 f4             	push   -0xc(%ebp)
8671ac:	e9 70 02 00 00       	jmp    0x867421
8671b1:	6a 11                	push   $0x11
8671b3:	ff 15 38 40 d8 00    	call   *0xd84038
8671b9:	84 c0                	test   %al,%al
8671bb:	8d 45 f4             	lea    -0xc(%ebp),%eax
8671be:	50                   	push   %eax
8671bf:	8d 45 f0             	lea    -0x10(%ebp),%eax
8671c2:	50                   	push   %eax
8671c3:	57                   	push   %edi
8671c4:	ff 76 20             	push   0x20(%esi)
8671c7:	79 48                	jns    0x867211
8671c9:	ff 15 20 40 d8 00    	call   *0xd84020
8671cf:	8b 45 f0             	mov    -0x10(%ebp),%eax
8671d2:	83 f8 01             	cmp    $0x1,%eax
8671d5:	7e 15                	jle    0x8671ec
8671d7:	53                   	push   %ebx
8671d8:	48                   	dec    %eax
8671d9:	8b ce                	mov    %esi,%ecx
8671db:	50                   	push   %eax
8671dc:	8d 45 f8             	lea    -0x8(%ebp),%eax
8671df:	50                   	push   %eax
8671e0:	8d 45 fc             	lea    -0x4(%ebp),%eax
8671e3:	50                   	push   %eax
8671e4:	e8 78 eb ba ff       	call   0x415d61
8671e9:	8b 45 f0             	mov    -0x10(%ebp),%eax
8671ec:	83 7d fc ff          	cmpl   $0xffffffff,-0x4(%ebp)
8671f0:	0f 84 0f 02 00 00    	je     0x867405
8671f6:	39 45 fc             	cmp    %eax,-0x4(%ebp)
8671f9:	8b 45 f8             	mov    -0x8(%ebp),%eax
8671fc:	75 09                	jne    0x867207
8671fe:	3b 45 f4             	cmp    -0xc(%ebp),%eax
867201:	0f 84 fe 01 00 00    	je     0x867405
867207:	53                   	push   %ebx
867208:	50                   	push   %eax
867209:	ff 75 fc             	push   -0x4(%ebp)
86720c:	e9 11 02 00 00       	jmp    0x867422
867211:	ff 15 20 40 d8 00    	call   *0xd84020
867217:	8b 45 f0             	mov    -0x10(%ebp),%eax
86721a:	8b 4d fc             	mov    -0x4(%ebp),%ecx
86721d:	3b 45 f4             	cmp    -0xc(%ebp),%eax
867220:	75 38                	jne    0x86725a
867222:	3b c1                	cmp    %ecx,%eax
867224:	75 34                	jne    0x86725a
867226:	83 f8 01             	cmp    $0x1,%eax
867229:	7e 18                	jle    0x867243
86722b:	53                   	push   %ebx
86722c:	48                   	dec    %eax
86722d:	8b ce                	mov    %esi,%ecx
86722f:	50                   	push   %eax
867230:	8d 45 f8             	lea    -0x8(%ebp),%eax
867233:	50                   	push   %eax
867234:	8d 45 fc             	lea    -0x4(%ebp),%eax
867237:	50                   	push   %eax
867238:	e8 24 eb ba ff       	call   0x415d61
86723d:	8b 4d fc             	mov    -0x4(%ebp),%ecx
867240:	8b 45 f0             	mov    -0x10(%ebp),%eax
867243:	83 f9 ff             	cmp    $0xffffffff,%ecx
867246:	0f 84 b9 01 00 00    	je     0x867405
86724c:	39 45 f8             	cmp    %eax,-0x8(%ebp)
86724f:	0f 8d b0 01 00 00    	jge    0x867405
867255:	e9 b2 fe ff ff       	jmp    0x86710c
86725a:	48                   	dec    %eax
86725b:	3b c1                	cmp    %ecx,%eax
86725d:	7f 02                	jg     0x867261
86725f:	8b c1                	mov    %ecx,%eax
867261:	3b 45 f8             	cmp    -0x8(%ebp),%eax
867264:	0f 8c b5 01 00 00    	jl     0x86741f
86726a:	e9 4d fe ff ff       	jmp    0x8670bc
86726f:	83 f8 28             	cmp    $0x28,%eax
867272:	76 5d                	jbe    0x8672d1
867274:	83 f8 2d             	cmp    $0x2d,%eax
867277:	74 25                	je     0x86729e
867279:	83 f8 2e             	cmp    $0x2e,%eax
86727c:	75 47                	jne    0x8672c5
86727e:	6a 10                	push   $0x10
867280:	ff 15 38 40 d8 00    	call   *0xd84038
867286:	84 c0                	test   %al,%al
867288:	78 3b                	js     0x8672c5
86728a:	ff 75 10             	push   0x10(%ebp)
86728d:	8b ce                	mov    %esi,%ecx
86728f:	ff 75 0c             	push   0xc(%ebp)
867292:	6a 2e                	push   $0x2e
867294:	e8 13 0c bd ff       	call   0x437eac
867299:	e9 8b 01 00 00       	jmp    0x867429
86729e:	6a 11                	push   $0x11
8672a0:	ff 15 38 40 d8 00    	call   *0xd84038
8672a6:	84 c0                	test   %al,%al
8672a8:	78 1b                	js     0x8672c5
8672aa:	6a 10                	push   $0x10
8672ac:	ff 15 38 40 d8 00    	call   *0xd84038
8672b2:	84 c0                	test   %al,%al
8672b4:	78 0f                	js     0x8672c5
8672b6:	8b 86 84 00 00 00    	mov    0x84(%esi),%eax
8672bc:	39 58 f4             	cmp    %ebx,-0xc(%eax)
8672bf:	0f 85 64 01 00 00    	jne    0x867429
8672c5:	8b ce                	mov    %esi,%ecx
8672c7:	e8 94 ad bc ff       	call   0x432060
8672cc:	e9 58 01 00 00       	jmp    0x867429
8672d1:	8d 45 f8             	lea    -0x8(%ebp),%eax
8672d4:	bf b0 00 00 00       	mov    $0xb0,%edi
8672d9:	50                   	push   %eax
8672da:	8d 45 fc             	lea    -0x4(%ebp),%eax
8672dd:	50                   	push   %eax
8672de:	57                   	push   %edi
8672df:	ff 76 20             	push   0x20(%esi)
8672e2:	ff 15 20 40 d8 00    	call   *0xd84020
8672e8:	6a 01                	push   $0x1
8672ea:	ff 75 f8             	push   -0x8(%ebp)
8672ed:	8d 45 f8             	lea    -0x8(%ebp),%eax
8672f0:	8b ce                	mov    %esi,%ecx
8672f2:	50                   	push   %eax
8672f3:	8d 45 fc             	lea    -0x4(%ebp),%eax
8672f6:	50                   	push   %eax
8672f7:	e8 65 ea ba ff       	call   0x415d61
8672fc:	83 7d fc ff          	cmpl   $0xffffffff,-0x4(%ebp)
867300:	75 19                	jne    0x86731b
867302:	8b 86 80 00 00 00    	mov    0x80(%esi),%eax
867308:	8b ce                	mov    %esi,%ecx
86730a:	53                   	push   %ebx
86730b:	ff 70 f4             	push   -0xc(%eax)
86730e:	8d 45 f8             	lea    -0x8(%ebp),%eax
867311:	50                   	push   %eax
867312:	8d 45 fc             	lea    -0x4(%ebp),%eax
867315:	50                   	push   %eax
867316:	e8 46 ea ba ff       	call   0x415d61
86731b:	6a 10                	push   $0x10
86731d:	ff 15 38 40 d8 00    	call   *0xd84038
867323:	84 c0                	test   %al,%al
867325:	79 38                	jns    0x86735f
867327:	8d 45 f0             	lea    -0x10(%ebp),%eax
86732a:	50                   	push   %eax
86732b:	8d 45 f4             	lea    -0xc(%ebp),%eax
86732e:	50                   	push   %eax
86732f:	57                   	push   %edi
867330:	ff 76 20             	push   0x20(%esi)
867333:	ff 15 20 40 d8 00    	call   *0xd84020
867339:	8b 45 f0             	mov    -0x10(%ebp),%eax
86733c:	40                   	inc    %eax
86733d:	39 9e 9c 00 00 00    	cmp    %ebx,0x9c(%esi)
867343:	74 10                	je     0x867355
867345:	3b 45 f8             	cmp    -0x8(%ebp),%eax
867348:	7c 03                	jl     0x86734d
86734a:	8b 45 f8             	mov    -0x8(%ebp),%eax
86734d:	3b 45 fc             	cmp    -0x4(%ebp),%eax
867350:	7f 03                	jg     0x867355
867352:	8b 45 fc             	mov    -0x4(%ebp),%eax
867355:	53                   	push   %ebx
867356:	50                   	push   %eax
867357:	ff 75 f4             	push   -0xc(%ebp)
86735a:	e9 c3 00 00 00       	jmp    0x867422
86735f:	6a 11                	push   $0x11
867361:	ff 15 38 40 d8 00    	call   *0xd84038
867367:	84 c0                	test   %al,%al
867369:	8d 45 f0             	lea    -0x10(%ebp),%eax
86736c:	50                   	push   %eax
86736d:	8d 45 f4             	lea    -0xc(%ebp),%eax
867370:	50                   	push   %eax
867371:	57                   	push   %edi
867372:	ff 76 20             	push   0x20(%esi)
867375:	79 47                	jns    0x8673be
867377:	ff 15 20 40 d8 00    	call   *0xd84020
86737d:	8b 86 80 00 00 00    	mov    0x80(%esi),%eax
867383:	8b 4d f0             	mov    -0x10(%ebp),%ecx
867386:	8b 40 f4             	mov    -0xc(%eax),%eax
867389:	48                   	dec    %eax
86738a:	3b c8                	cmp    %eax,%ecx
86738c:	7d 18                	jge    0x8673a6
86738e:	6a 01                	push   $0x1
867390:	8d 41 01             	lea    0x1(%ecx),%eax
867393:	8b ce                	mov    %esi,%ecx
867395:	50                   	push   %eax
867396:	8d 45 f8             	lea    -0x8(%ebp),%eax
867399:	50                   	push   %eax
86739a:	8d 45 fc             	lea    -0x4(%ebp),%eax
86739d:	50                   	push   %eax
86739e:	e8 be e9 ba ff       	call   0x415d61
8673a3:	8b 4d f0             	mov    -0x10(%ebp),%ecx
8673a6:	8b 45 fc             	mov    -0x4(%ebp),%eax
8673a9:	83 f8 ff             	cmp    $0xffffffff,%eax
8673ac:	74 57                	je     0x867405
8673ae:	3b 45 f4             	cmp    -0xc(%ebp),%eax
8673b1:	75 05                	jne    0x8673b8
8673b3:	39 4d f8             	cmp    %ecx,-0x8(%ebp)
8673b6:	74 4d                	je     0x867405
8673b8:	53                   	push   %ebx
8673b9:	ff 75 f8             	push   -0x8(%ebp)
8673bc:	eb 63                	jmp    0x867421
8673be:	ff 15 20 40 d8 00    	call   *0xd84020
8673c4:	8b 55 f4             	mov    -0xc(%ebp),%edx
8673c7:	8b 4d f0             	mov    -0x10(%ebp),%ecx
8673ca:	3b d1                	cmp    %ecx,%edx
8673cc:	75 3e                	jne    0x86740c
8673ce:	3b 4d f8             	cmp    -0x8(%ebp),%ecx
8673d1:	75 39                	jne    0x86740c
8673d3:	8b 86 80 00 00 00    	mov    0x80(%esi),%eax
8673d9:	8b 40 f4             	mov    -0xc(%eax),%eax
8673dc:	48                   	dec    %eax
8673dd:	3b c8                	cmp    %eax,%ecx
8673df:	7d 18                	jge    0x8673f9
8673e1:	6a 01                	push   $0x1
8673e3:	8d 42 01             	lea    0x1(%edx),%eax
8673e6:	8b ce                	mov    %esi,%ecx
8673e8:	50                   	push   %eax
8673e9:	8d 45 f8             	lea    -0x8(%ebp),%eax
8673ec:	50                   	push   %eax
8673ed:	8d 45 fc             	lea    -0x4(%ebp),%eax
8673f0:	50                   	push   %eax
8673f1:	e8 6b e9 ba ff       	call   0x415d61
8673f6:	8b 4d f0             	mov    -0x10(%ebp),%ecx
8673f9:	8b 45 fc             	mov    -0x4(%ebp),%eax
8673fc:	83 f8 ff             	cmp    $0xffffffff,%eax
8673ff:	74 04                	je     0x867405
867401:	3b c1                	cmp    %ecx,%eax
867403:	7f 1a                	jg     0x86741f
867405:	6a ff                	push   $0xffffffff
867407:	e9 33 fc ff ff       	jmp    0x86703f
86740c:	8d 41 01             	lea    0x1(%ecx),%eax
86740f:	3b 45 f8             	cmp    -0x8(%ebp),%eax
867412:	7c 03                	jl     0x867417
867414:	8b 45 f8             	mov    -0x8(%ebp),%eax
867417:	3b 45 fc             	cmp    -0x4(%ebp),%eax
86741a:	7f 03                	jg     0x86741f
86741c:	8b 45 fc             	mov    -0x4(%ebp),%eax
86741f:	53                   	push   %ebx
867420:	50                   	push   %eax
867421:	50                   	push   %eax
867422:	8b ce                	mov    %esi,%ecx
867424:	e8 d1 e0 bb ff       	call   0x4254fa
867429:	5f                   	pop    %edi
86742a:	5e                   	pop    %esi
86742b:	5b                   	pop    %ebx
86742c:	8b e5                	mov    %ebp,%esp
86742e:	5d                   	pop    %ebp
86742f:	c2 0c 00             	ret    $0xc
867432:	cc                   	int3
867433:	cc                   	int3
867434:	cc                   	int3
867435:	cc                   	int3
867436:	cc                   	int3
867437:	cc                   	int3
867438:	cc                   	int3
867439:	cc                   	int3
86743a:	cc                   	int3
86743b:	cc                   	int3
86743c:	cc                   	int3