48d16d:	ff 75 14             	push   0x14(%ebp)
48d170:	ff 75 10             	push   0x10(%ebp)
48d173:	ff 75 0c             	push   0xc(%ebp)
48d176:	ff 75 08             	push   0x8(%ebp)
48d179:	e8 58 fc ff ff       	call   0x48cdd6
48d17e:	83 c4 18             	add    $0x18,%esp
48d181:	8d 4d d8             	lea    -0x28(%ebp),%ecx
48d184:	8b f0                	mov    %eax,%esi
48d186:	e8 b5 a1 fe ff       	call   0x477340
48d18b:	8b c6                	mov    %esi,%eax
48d18d:	5e                   	pop    %esi
48d18e:	c9                   	leave
48d18f:	c3                   	ret
48d190:	8b ff                	mov    %edi,%edi
48d192:	55                   	push   %ebp
48d193:	8b ec                	mov    %esp,%ebp
48d195:	83 ec 18             	sub    $0x18,%esp
48d198:	a1 14 40 4c 00       	mov    0x4c4014,%eax
48d19d:	33 c5                	xor    %ebp,%eax
48d19f:	89 45 fc             	mov    %eax,-0x4(%ebp)
48d1a2:	53                   	push   %ebx
48d1a3:	56                   	push   %esi
48d1a4:	57                   	push   %edi
48d1a5:	ff 75 08             	push   0x8(%ebp)
48d1a8:	8d 4d e8             	lea    -0x18(%ebp),%ecx
48d1ab:	e8 61 c9 fe ff       	call   0x479b11
48d1b0:	8b 45 ec             	mov    -0x14(%ebp),%eax
48d1b3:	33 ff                	xor    %edi,%edi
48d1b5:	57                   	push   %edi
48d1b6:	57                   	push   %edi
48d1b7:	ff 75 10             	push   0x10(%ebp)
48d1ba:	8b 40 08             	mov    0x8(%eax),%eax
48d1bd:	ff 75 0c             	push   0xc(%ebp)
48d1c0:	89 45 f8             	mov    %eax,-0x8(%ebp)
48d1c3:	e8 68 b7 ff ff       	call   0x488930
48d1c8:	8b d8                	mov    %eax,%ebx
48d1ca:	85 db                	test   %ebx,%ebx
48d1cc:	74 7d                	je     0x48d24b
48d1ce:	8d 04 1b             	lea    (%ebx,%ebx,1),%eax
48d1d1:	8d 48 08             	lea    0x8(%eax),%ecx
48d1d4:	3b c1                	cmp    %ecx,%eax
48d1d6:	1b c0                	sbb    %eax,%eax
48d1d8:	23 c1                	and    %ecx,%eax
48d1da:	74 66                	je     0x48d242
48d1dc:	3d 00 04 00 00       	cmp    $0x400,%eax
48d1e1:	77 13                	ja     0x48d1f6
48d1e3:	e8 e8 d1 fd ff       	call   0x46a3d0
48d1e8:	8b f4                	mov    %esp,%esi
48d1ea:	85 f6                	test   %esi,%esi
48d1ec:	74 56                	je     0x48d244
48d1ee:	c7 06 cc cc 00 00    	movl   $0xcccc,(%esi)
48d1f4:	eb 13                	jmp    0x48d209
48d1f6:	50                   	push   %eax
48d1f7:	e8 36 86 ff ff       	call   0x485832
48d1fc:	8b f0                	mov    %eax,%esi
48d1fe:	59                   	pop    %ecx
48d1ff:	85 f6                	test   %esi,%esi
48d201:	74 41                	je     0x48d244
48d203:	c7 06 dd dd 00 00    	movl   $0xdddd,(%esi)
48d209:	83 c6 08             	add    $0x8,%esi
48d20c:	85 f6                	test   %esi,%esi
48d20e:	74 34                	je     0x48d244
48d210:	53                   	push   %ebx
48d211:	56                   	push   %esi
48d212:	ff 75 10             	push   0x10(%ebp)
48d215:	ff 75 0c             	push   0xc(%ebp)
48d218:	e8 13 b7 ff ff       	call   0x488930
48d21d:	85 c0                	test   %eax,%eax
48d21f:	74 23                	je     0x48d244
48d221:	8b 45 18             	mov    0x18(%ebp),%eax
48d224:	57                   	push   %edi
48d225:	57                   	push   %edi
48d226:	50                   	push   %eax
48d227:	f7 d8                	neg    %eax
48d229:	1b c0                	sbb    %eax,%eax
48d22b:	23 45 14             	and    0x14(%ebp),%eax
48d22e:	50                   	push   %eax
48d22f:	6a ff                	push   $0xffffffff
48d231:	56                   	push   %esi
48d232:	57                   	push   %edi
48d233:	ff 75 f8             	push   -0x8(%ebp)
48d236:	e8 cf 1a 00 00       	call   0x48ed0a
48d23b:	83 c4 20             	add    $0x20,%esp
48d23e:	8b f8                	mov    %eax,%edi
48d240:	eb 02                	jmp    0x48d244
48d242:	8b f7                	mov    %edi,%esi
48d244:	56                   	push   %esi
48d245:	e8 b0 c4 fd ff       	call   0x4696fa
48d24a:	59                   	pop    %ecx
48d24b:	80 7d f4 00          	cmpb   $0x0,-0xc(%ebp)
48d24f:	74 0a                	je     0x48d25b
48d251:	8b 45 e8             	mov    -0x18(%ebp),%eax
48d254:	83 a0 50 03 00 00 fd 	andl   $0xfffffffd,0x350(%eax)
48d25b:	8b c7                	mov    %edi,%eax
48d25d:	8d 65 dc             	lea    -0x24(%ebp),%esp
48d260:	5f                   	pop    %edi
48d261:	5e                   	pop    %esi
48d262:	5b                   	pop    %ebx
48d263:	8b 4d fc             	mov    -0x4(%ebp),%ecx
48d266:	33 cd                	xor    %ebp,%ecx
48d268:	e8 5d c7 fd ff       	call   0x4699ca
48d26d:	c9                   	leave
48d26e:	c3                   	ret
48d26f:	8b ff                	mov    %edi,%edi
48d271:	55                   	push   %ebp
48d272:	8b ec                	mov    %esp,%ebp
48d274:	81 ec 90 00 00 00    	sub    $0x90,%esp
48d27a:	a1 14 40 4c 00       	mov    0x4c4014,%eax
48d27f:	33 c5                	xor    %ebp,%eax
48d281:	89 45 fc             	mov    %eax,-0x4(%ebp)
48d284:	8b 45 0c             	mov    0xc(%ebp),%eax
48d287:	8b 4d 08             	mov    0x8(%ebp),%ecx
48d28a:	53                   	push   %ebx
48d28b:	8b 5d 18             	mov    0x18(%ebp),%ebx
48d28e:	56                   	push   %esi
48d28f:	8b 75 10             	mov    0x10(%ebp),%esi
48d292:	57                   	push   %edi
48d293:	33 ff                	xor    %edi,%edi
48d295:	89 8d 70 ff ff ff    	mov    %ecx,-0x90(%ebp)
48d29b:	89 b5 78 ff ff ff    	mov    %esi,-0x88(%ebp)
48d2a1:	89 3b                	mov    %edi,(%ebx)
48d2a3:	83 f8 01             	cmp    $0x1,%eax
48d2a6:	0f 85 e2 00 00 00    	jne    0x48d38e
48d2ac:	68 80 00 00 00       	push   $0x80
48d2b1:	8d 85 7c ff ff ff    	lea    -0x84(%ebp),%eax
48d2b7:	50                   	push   %eax
48d2b8:	ff 75 14             	push   0x14(%ebp)
48d2bb:	56                   	push   %esi
48d2bc:	51                   	push   %ecx
48d2bd:	e8 ce fe ff ff       	call   0x48d190
48d2c2:	83 c4 14             	add    $0x14,%esp
48d2c5:	89 85 74 ff ff ff    	mov    %eax,-0x8c(%ebp)
48d2cb:	85 c0                	test   %eax,%eax
48d2cd:	74 46                	je     0x48d315
48d2cf:	6a 01                	push   $0x1
48d2d1:	50                   	push   %eax
48d2d2:	e8 66 b0 ff ff       	call   0x48833d
48d2d7:	57                   	push   %edi
48d2d8:	89 03                	mov    %eax,(%ebx)
48d2da:	e8 19 85 ff ff       	call   0x4857f8
48d2df:	83 c4 0c             	add    $0xc,%esp
48d2e2:	39 3b                	cmp    %edi,(%ebx)
48d2e4:	0f 84 18 01 00 00    	je     0x48d402
48d2ea:	8b 8d 74 ff ff ff    	mov    -0x8c(%ebp),%ecx
48d2f0:	8d 41 ff             	lea    -0x1(%ecx),%eax
48d2f3:	50                   	push   %eax
48d2f4:	8d 85 7c ff ff ff    	lea    -0x84(%ebp),%eax
48d2fa:	50                   	push   %eax
48d2fb:	51                   	push   %ecx
48d2fc:	ff 33                	push   (%ebx)
48d2fe:	e8 00 72 00 00       	call   0x494503
48d303:	83 c4 10             	add    $0x10,%esp
48d306:	85 c0                	test   %eax,%eax
48d308:	0f 85 06 01 00 00    	jne    0x48d414
48d30e:	33 c0                	xor    %eax,%eax
48d310:	e9 f0 00 00 00       	jmp    0x48d405
48d315:	ff 15 30 e1 49 00    	call   *0x49e130
48d31b:	83 f8 7a             	cmp    $0x7a,%eax
48d31e:	0f 85 de 00 00 00    	jne    0x48d402
48d324:	57                   	push   %edi
48d325:	57                   	push   %edi
48d326:	ff 75 14             	push   0x14(%ebp)
48d329:	56                   	push   %esi
48d32a:	ff b5 70 ff ff ff    	push   -0x90(%ebp)
48d330:	e8 5b fe ff ff       	call   0x48d190
48d335:	83 c4 14             	add    $0x14,%esp
48d338:	89 85 74 ff ff ff    	mov    %eax,-0x8c(%ebp)
48d33e:	85 c0                	test   %eax,%eax
48d340:	0f 84 bc 00 00 00    	je     0x48d402
48d346:	6a 01                	push   $0x1
48d348:	50                   	push   %eax
48d349:	e8 ef af ff ff       	call   0x48833d
48d34e:	8b f0                	mov    %eax,%esi
48d350:	59                   	pop    %ecx
48d351:	59                   	pop    %ecx
48d352:	85 f6                	test   %esi,%esi
48d354:	74 2a                	je     0x48d380
48d356:	ff b5 74 ff ff ff    	push   -0x8c(%ebp)
48d35c:	56                   	push   %esi
48d35d:	ff 75 14             	push   0x14(%ebp)
48d360:	ff b5 78 ff ff ff    	push   -0x88(%ebp)
48d366:	ff b5 70 ff ff ff    	push   -0x90(%ebp)
48d36c:	e8 1f fe ff ff       	call   0x48d190
48d371:	83 c4 14             	add    $0x14,%esp
48d374:	85 c0                	test   %eax,%eax
48d376:	74 08                	je     0x48d380
48d378:	8b c6                	mov    %esi,%eax
48d37a:	8b f7                	mov    %edi,%esi
48d37c:	89 03                	mov    %eax,(%ebx)
48d37e:	eb 03                	jmp    0x48d383
48d380:	83 cf ff             	or     $0xffffffff,%edi
48d383:	56                   	push   %esi
48d384:	e8 6f 84 ff ff       	call   0x4857f8
48d389:	59                   	pop    %ecx
48d38a:	8b c7                	mov    %edi,%eax
48d38c:	eb 77                	jmp    0x48d405
48d38e:	83 f8 02             	cmp    $0x2,%eax
48d391:	75 3c                	jne    0x48d3cf
48d393:	57                   	push   %edi
48d394:	57                   	push   %edi
48d395:	ff 75 14             	push   0x14(%ebp)
48d398:	56                   	push   %esi
48d399:	e8 92 b5 ff ff       	call   0x488930
48d39e:	89 85 74 ff ff ff    	mov    %eax,-0x8c(%ebp)
48d3a4:	85 c0                	test   %eax,%eax
48d3a6:	74 5a                	je     0x48d402
48d3a8:	6a 02                	push   $0x2
48d3aa:	50                   	push   %eax
48d3ab:	e8 8d af ff ff       	call   0x48833d
48d3b0:	8b f0                	mov    %eax,%esi
48d3b2:	59                   	pop    %ecx
48d3b3:	59                   	pop    %ecx
48d3b4:	85 f6                	test   %esi,%esi
48d3b6:	74 c8                	je     0x48d380
48d3b8:	ff b5 74 ff ff ff    	push   -0x8c(%ebp)
48d3be:	56                   	push   %esi
48d3bf:	ff 75 14             	push   0x14(%ebp)
48d3c2:	ff b5 78 ff ff ff    	push   -0x88(%ebp)
48d3c8:	e8 63 b5 ff ff       	call   0x488930
48d3cd:	eb a5                	jmp    0x48d374
48d3cf:	85 c0                	test   %eax,%eax
48d3d1:	75 2f                	jne    0x48d402
48d3d3:	6a 02                	push   $0x2
48d3d5:	8d 85 78 ff ff ff    	lea    -0x88(%ebp),%eax
48d3db:	89 bd 78 ff ff ff    	mov    %edi,-0x88(%ebp)
48d3e1:	50                   	push   %eax
48d3e2:	8b 45 14             	mov    0x14(%ebp),%eax
48d3e5:	0d 00 00 00 20       	or     $0x20000000,%eax
48d3ea:	50                   	push   %eax
48d3eb:	56                   	push   %esi
48d3ec:	e8 3f b5 ff ff       	call   0x488930
48d3f1:	85 c0                	test   %eax,%eax
48d3f3:	74 0d                	je     0x48d402
48d3f5:	8a 85 78 ff ff ff    	mov    -0x88(%ebp),%al
48d3fb:	88 03                	mov    %al,(%ebx)
48d3fd:	e9 0c ff ff ff       	jmp    0x48d30e
48d402:	83 c8 ff             	or     $0xffffffff,%eax
48d405:	8b 4d fc             	mov    -0x4(%ebp),%ecx
48d408:	5f                   	pop    %edi
48d409:	5e                   	pop    %esi
48d40a:	33 cd                	xor    %ebp,%ecx
48d40c:	5b                   	pop    %ebx
48d40d:	e8 b8 c5 fd ff       	call   0x4699ca
48d412:	c9                   	leave
48d413:	c3                   	ret
48d414:	57                   	push   %edi
48d415:	57                   	push   %edi
48d416:	57                   	push   %edi
48d417:	57                   	push   %edi
48d418:	57                   	push   %edi
48d419:	e8 30 c2 fe ff       	call   0x47964e
48d41e:	cc                   	int3
48d41f:	8b ff                	mov    %edi,%edi
48d421:	55                   	push   %ebp
48d422:	8b ec                	mov    %esp,%ebp
48d424:	83 ec 1c             	sub    $0x1c,%esp
48d427:	a1 14 40 4c 00       	mov    0x4c4014,%eax
48d42c:	33 c5                	xor    %ebp,%eax
48d42e:	89 45 fc             	mov    %eax,-0x4(%ebp)
48d431:	53                   	push   %ebx
48d432:	56                   	push   %esi
48d433:	57                   	push   %edi
48d434:	ff 75 08             	push   0x8(%ebp)
48d437:	8d 4d e4             	lea    -0x1c(%ebp),%ecx
48d43a:	e8 d2 c6 fe ff       	call   0x479b11
48d43f:	8b 5d 1c             	mov    0x1c(%ebp),%ebx
48d442:	85 db                	test   %ebx,%ebx
48d444:	75 06                	jne    0x48d44c
48d446:	8b 45 e8             	mov    -0x18(%ebp),%eax
48d449:	8b 58 08             	mov    0x8(%eax),%ebx
48d44c:	33 c0                	xor    %eax,%eax
48d44e:	33 ff                	xor    %edi,%edi
48d450:	39 45 20             	cmp    %eax,0x20(%ebp)
48d453:	57                   	push   %edi
48d454:	57                   	push   %edi
48d455:	ff 75 14             	push   0x14(%ebp)
48d458:	0f 95 c0             	setne  %al
48d45b:	ff 75 10             	push   0x10(%ebp)
48d45e:	8d 04 c5 01 00 00 00 	lea    0x1(,%eax,8),%eax
48d465:	50                   	push   %eax
48d466:	53                   	push   %ebx
48d467:	e8 e4 17 00 00       	call   0x48ec50
48d46c:	83 c4 18             	add    $0x18,%esp
48d46f:	89 45 f4             	mov    %eax,-0xc(%ebp)
48d472:	85 c0                	test   %eax,%eax
48d474:	0f 84 82 00 00 00    	je     0x48d4fc
48d47a:	03 c0                	add    %eax,%eax
48d47c:	89 45 f8             	mov    %eax,-0x8(%ebp)
48d47f:	8d 48 08             	lea    0x8(%eax),%ecx
48d482:	3b c1                	cmp    %ecx,%eax
48d484:	1b c0                	sbb    %eax,%eax
48d486:	23 c1                	and    %ecx,%eax
48d488:	74 69                	je     0x48d4f3
48d48a:	3d 00 04 00 00       	cmp    $0x400,%eax
48d48f:	77 13                	ja     0x48d4a4
48d491:	e8 3a cf fd ff       	call   0x46a3d0
48d496:	8b f4                	mov    %esp,%esi
48d498:	85 f6                	test   %esi,%esi
48d49a:	74 59                	je     0x48d4f5
48d49c:	c7 06 cc cc 00 00    	movl   $0xcccc,(%esi)
48d4a2:	eb 13                	jmp    0x48d4b7
48d4a4:	50                   	push   %eax
48d4a5:	e8 88 83 ff ff       	call   0x485832
48d4aa:	8b f0                	mov    %eax,%esi
48d4ac:	59                   	pop    %ecx
48d4ad:	85 f6                	test   %esi,%esi
48d4af:	74 44                	je     0x48d4f5
48d4b1:	c7 06 dd dd 00 00    	movl   $0xdddd,(%esi)
48d4b7:	83 c6 08             	add    $0x8,%esi
48d4ba:	85 f6                	test   %esi,%esi
48d4bc:	74 37                	je     0x48d4f5
48d4be:	ff 75 f8             	push   -0x8(%ebp)
48d4c1:	57                   	push   %edi
48d4c2:	56                   	push   %esi
48d4c3:	e8 e8 e6 fd ff       	call   0x46bbb0
48d4c8:	ff 75 f4             	push   -0xc(%ebp)
48d4cb:	56                   	push   %esi
48d4cc:	ff 75 14             	push   0x14(%ebp)
48d4cf:	ff 75 10             	push   0x10(%ebp)
48d4d2:	6a 01                	push   $0x1
48d4d4:	53                   	push   %ebx
48d4d5:	e8 76 17 00 00       	call   0x48ec50
48d4da:	83 c4 24             	add    $0x24,%esp
48d4dd:	85 c0                	test   %eax,%eax
48d4df:	74 14                	je     0x48d4f5
48d4e1:	ff 75 18             	push   0x18(%ebp)
48d4e4:	50                   	push   %eax
48d4e5:	56                   	push   %esi
48d4e6:	ff 75 0c             	push   0xc(%ebp)
48d4e9:	ff 15 f8 e1 49 00    	call   *0x49e1f8
48d4ef:	8b f8                	mov    %eax,%edi
48d4f1:	eb 02                	jmp    0x48d4f5
48d4f3:	8b f7                	mov    %edi,%esi
48d4f5:	56                   	push   %esi
48d4f6:	e8 ff c1 fd ff       	call   0x4696fa
48d4fb:	59                   	pop    %ecx
48d4fc:	80 7d f0 00          	cmpb   $0x0,-0x10(%ebp)
48d500:	74 0a                	je     0x48d50c
48d502:	8b 45 e4             	mov    -0x1c(%ebp),%eax
48d505:	83 a0 50 03 00 00 fd 	andl   $0xfffffffd,0x350(%eax)
48d50c:	8b c7                	mov    %edi,%eax
48d50e:	8d 65 d8             	lea    -0x28(%ebp),%esp
48d511:	5f                   	pop    %edi
48d512:	5e                   	pop    %esi
48d513:	5b                   	pop    %ebx
48d514:	8b 4d fc             	mov    -0x4(%ebp),%ecx
48d517:	33 cd                	xor    %ebp,%ecx
48d519:	e8 ac c4 fd ff       	call   0x4699ca
48d51e:	c9                   	leave
48d51f:	c3                   	ret