b000bb:	ff d6                	call   *%esi
b000bd:	e8 55 e3 90 ff       	call   0x40e417
b000c2:	c2 04 00             	ret    $0x4
b000c5:	cc                   	int3
b000c6:	cc                   	int3
b000c7:	cc                   	int3
b000c8:	cc                   	int3
b000c9:	cc                   	int3
b000ca:	cc                   	int3
b000cb:	cc                   	int3
b000cc:	cc                   	int3
b000cd:	cc                   	int3
b000ce:	cc                   	int3
b000cf:	cc                   	int3
b000d0:	cc                   	int3
b000d1:	cc                   	int3
b000d2:	cc                   	int3
b000d3:	cc                   	int3
b000d4:	cc                   	int3
b000d5:	cc                   	int3
b000d6:	cc                   	int3
b000d7:	cc                   	int3
b000d8:	cc                   	int3
b000d9:	cc                   	int3
b000da:	cc                   	int3
b000db:	cc                   	int3
b000dc:	cc                   	int3
b000dd:	cc                   	int3
b000de:	cc                   	int3
b000df:	cc                   	int3
b000e0:	cc                   	int3
b000e1:	cc                   	int3
b000e2:	cc                   	int3
b000e3:	cc                   	int3
b000e4:	cc                   	int3
b000e5:	cc                   	int3
b000e6:	cc                   	int3
b000e7:	56                   	push   %esi
b000e8:	57                   	push   %edi
b000e9:	8b f9                	mov    %ecx,%edi
b000eb:	e8 97 d9 93 ff       	call   0x43da87
b000f0:	8b 07                	mov    (%edi),%eax
b000f2:	8b 70 24             	mov    0x24(%eax),%esi
b000f5:	8b ce                	mov    %esi,%ecx
b000f7:	e8 69 c5 92 ff       	call   0x42c665
b000fc:	8b cf                	mov    %edi,%ecx
b000fe:	ff d6                	call   *%esi
b00100:	5f                   	pop    %edi
b00101:	5e                   	pop    %esi
b00102:	c3                   	ret
b00103:	cc                   	int3
b00104:	cc                   	int3
b00105:	cc                   	int3
b00106:	cc                   	int3
b00107:	cc                   	int3
b00108:	cc                   	int3
b00109:	cc                   	int3
b0010a:	8b 41 04             	mov    0x4(%ecx),%eax
b0010d:	85 c0                	test   %eax,%eax
b0010f:	74 04                	je     0xb00115
b00111:	8b 40 38             	mov    0x38(%eax),%eax
b00114:	c3                   	ret
b00115:	33 c0                	xor    %eax,%eax
b00117:	c3                   	ret
b00118:	cc                   	int3
b00119:	cc                   	int3
b0011a:	cc                   	int3
b0011b:	8b 41 30             	mov    0x30(%ecx),%eax
b0011e:	c3                   	ret
b0011f:	8b 41 0c             	mov    0xc(%ecx),%eax
b00122:	56                   	push   %esi
b00123:	33 f6                	xor    %esi,%esi
b00125:	ff 70 70             	push   0x70(%eax)
b00128:	e8 aa a2 93 ff       	call   0x43a3d7
b0012d:	59                   	pop    %ecx
b0012e:	85 c0                	test   %eax,%eax
b00130:	74 06                	je     0xb00138
b00132:	a8 03                	test   $0x3,%al
b00134:	75 02                	jne    0xb00138
b00136:	8b f0                	mov    %eax,%esi
b00138:	8b c6                	mov    %esi,%eax
b0013a:	5e                   	pop    %esi
b0013b:	c3                   	ret
b0013c:	cc                   	int3
b0013d:	cc                   	int3
b0013e:	cc                   	int3
b0013f:	cc                   	int3
b00140:	cc                   	int3
b00141:	cc                   	int3
b00142:	cc                   	int3
b00143:	8d 41 08             	lea    0x8(%ecx),%eax
b00146:	c3                   	ret
b00147:	55                   	push   %ebp
b00148:	8b ec                	mov    %esp,%ebp
b0014a:	56                   	push   %esi
b0014b:	8b f1                	mov    %ecx,%esi
b0014d:	57                   	push   %edi
b0014e:	83 7e 04 00          	cmpl   $0x0,0x4(%esi)
b00152:	75 0e                	jne    0xb00162
b00154:	8b 4e 0c             	mov    0xc(%esi),%ecx
b00157:	8d 49 68             	lea    0x68(%ecx),%ecx
b0015a:	e8 3d 84 92 ff       	call   0x42859c
b0015f:	89 46 04             	mov    %eax,0x4(%esi)
b00162:	8b 7e 04             	mov    0x4(%esi),%edi
b00165:	ff b6 98 00 00 00    	push   0x98(%esi)
b0016b:	ff b6 94 00 00 00    	push   0x94(%esi)
b00171:	8b 07                	mov    (%edi),%eax
b00173:	8b 30                	mov    (%eax),%esi
b00175:	8b ce                	mov    %esi,%ecx
b00177:	e8 e9 c4 92 ff       	call   0x42c665
b0017c:	8b cf                	mov    %edi,%ecx
b0017e:	ff d6                	call   *%esi
b00180:	ff 75 08             	push   0x8(%ebp)
b00183:	8b f0                	mov    %eax,%esi
b00185:	8b ce                	mov    %esi,%ecx
b00187:	e8 5b d1 90 ff       	call   0x40d2e7
b0018c:	5f                   	pop    %edi
b0018d:	8b c6                	mov    %esi,%eax
b0018f:	5e                   	pop    %esi
b00190:	5d                   	pop    %ebp
b00191:	c2 04 00             	ret    $0x4
b00194:	cc                   	int3
b00195:	cc                   	int3
b00196:	cc                   	int3
b00197:	cc                   	int3
b00198:	cc                   	int3
b00199:	cc                   	int3
b0019a:	cc                   	int3
b0019b:	cc                   	int3
b0019c:	cc                   	int3
b0019d:	cc                   	int3
b0019e:	cc                   	int3
b0019f:	cc                   	int3
b001a0:	cc                   	int3
b001a1:	cc                   	int3
b001a2:	cc                   	int3
b001a3:	cc                   	int3
b001a4:	cc                   	int3
b001a5:	cc                   	int3
b001a6:	cc                   	int3
b001a7:	8b 41 10             	mov    0x10(%ecx),%eax
b001aa:	c3                   	ret
b001ab:	6a 04                	push   $0x4
b001ad:	b8 7c f2 bb 00       	mov    $0xbbf27c,%eax
b001b2:	e8 d4 a0 90 ff       	call   0x40a28b
b001b7:	8b d9                	mov    %ecx,%ebx
b001b9:	8b 7d 08             	mov    0x8(%ebp),%edi
b001bc:	39 5f 14             	cmp    %ebx,0x14(%edi)
b001bf:	74 2c                	je     0xb001ed
b001c1:	6a 3c                	push   $0x3c
b001c3:	e8 b5 a7 92 ff       	call   0x42a97d
b001c8:	59                   	pop    %ecx
b001c9:	89 45 f0             	mov    %eax,-0x10(%ebp)
b001cc:	33 f6                	xor    %esi,%esi
b001ce:	89 75 fc             	mov    %esi,-0x4(%ebp)
b001d1:	85 c0                	test   %eax,%eax
b001d3:	74 0b                	je     0xb001e0
b001d5:	57                   	push   %edi
b001d6:	53                   	push   %ebx
b001d7:	8b c8                	mov    %eax,%ecx
b001d9:	e8 63 a1 93 ff       	call   0x43a341
b001de:	8b f0                	mov    %eax,%esi
b001e0:	83 4d fc ff          	orl    $0xffffffff,-0x4(%ebp)
b001e4:	8b ce                	mov    %esi,%ecx
b001e6:	e8 0e 77 92 ff       	call   0x4278f9
b001eb:	eb 02                	jmp    0xb001ef
b001ed:	8b f7                	mov    %edi,%esi
b001ef:	8b c6                	mov    %esi,%eax
b001f1:	e8 21 e2 90 ff       	call   0x40e417
b001f6:	c2 04 00             	ret    $0x4
b001f9:	cc                   	int3
b001fa:	cc                   	int3
b001fb:	cc                   	int3
b001fc:	cc                   	int3
b001fd:	cc                   	int3
b001fe:	cc                   	int3
b001ff:	cc                   	int3
b00200:	cc                   	int3
b00201:	cc                   	int3
b00202:	cc                   	int3
b00203:	cc                   	int3
b00204:	cc                   	int3
b00205:	cc                   	int3
b00206:	cc                   	int3
b00207:	cc                   	int3
b00208:	cc                   	int3
b00209:	cc                   	int3
b0020a:	cc                   	int3
b0020b:	cc                   	int3
b0020c:	8d 41 68             	lea    0x68(%ecx),%eax
b0020f:	c3                   	ret
b00210:	8b 41 1c             	mov    0x1c(%ecx),%eax
b00213:	c3                   	ret
b00214:	8b 41 10             	mov    0x10(%ecx),%eax
b00217:	c3                   	ret
b00218:	8b 41 20             	mov    0x20(%ecx),%eax
b0021b:	c3                   	ret
b0021c:	55                   	push   %ebp
b0021d:	8b ec                	mov    %esp,%ebp
b0021f:	83 ec 40             	sub    $0x40,%esp
b00222:	53                   	push   %ebx
b00223:	33 db                	xor    %ebx,%ebx
b00225:	56                   	push   %esi
b00226:	57                   	push   %edi
b00227:	8b f9                	mov    %ecx,%edi
b00229:	89 5d ec             	mov    %ebx,-0x14(%ebp)
b0022c:	38 5d 10             	cmp    %bl,0x10(%ebp)
b0022f:	74 20                	je     0xb00251
b00231:	e8 f9 03 93 ff       	call   0x43062f
b00236:	8b 55 08             	mov    0x8(%ebp),%edx
b00239:	8b c8                	mov    %eax,%ecx
b0023b:	03 8f b8 00 00 00    	add    0xb8(%edi),%ecx
b00241:	8b 87 a0 00 00 00    	mov    0xa0(%edi),%eax
b00247:	03 c2                	add    %edx,%eax
b00249:	3b c8                	cmp    %eax,%ecx
b0024b:	1b c9                	sbb    %ecx,%ecx
b0024d:	f7 d9                	neg    %ecx
b0024f:	eb 05                	jmp    0xb00256
b00251:	8b 55 08             	mov    0x8(%ebp),%edx
b00254:	8b cb                	mov    %ebx,%ecx
b00256:	8b c2                	mov    %edx,%eax
b00258:	89 4d d0             	mov    %ecx,-0x30(%ebp)
b0025b:	2b c1                	sub    %ecx,%eax
b0025d:	3b ca                	cmp    %edx,%ecx
b0025f:	1b f6                	sbb    %esi,%esi
b00261:	23 f0                	and    %eax,%esi
b00263:	85 c9                	test   %ecx,%ecx
b00265:	74 08                	je     0xb0026f
b00267:	c6 45 fd 01          	movb   $0x1,-0x3(%ebp)
b0026b:	85 d2                	test   %edx,%edx
b0026d:	74 03                	je     0xb00272
b0026f:	88 5d fd             	mov    %bl,-0x3(%ebp)
b00272:	8a 55 10             	mov    0x10(%ebp),%dl
b00275:	84 d2                	test   %dl,%dl
b00277:	74 08                	je     0xb00281
b00279:	c6 45 fe 01          	movb   $0x1,-0x2(%ebp)
b0027d:	85 c9                	test   %ecx,%ecx
b0027f:	74 03                	je     0xb00284
b00281:	88 5d fe             	mov    %bl,-0x2(%ebp)
b00284:	83 c9 ff             	or     $0xffffffff,%ecx
b00287:	89 5d f4             	mov    %ebx,-0xc(%ebp)
b0028a:	89 4d c0             	mov    %ecx,-0x40(%ebp)
b0028d:	89 4d f0             	mov    %ecx,-0x10(%ebp)
b00290:	84 d2                	test   %dl,%dl
b00292:	74 0e                	je     0xb002a2
b00294:	8b 4f 0c             	mov    0xc(%edi),%ecx
b00297:	53                   	push   %ebx
b00298:	e8 06 76 93 ff       	call   0x4378a3
b0029d:	89 45 e8             	mov    %eax,-0x18(%ebp)
b002a0:	eb 03                	jmp    0xb002a5
b002a2:	89 4d e8             	mov    %ecx,-0x18(%ebp)
b002a5:	89 5d d8             	mov    %ebx,-0x28(%ebp)
b002a8:	85 f6                	test   %esi,%esi
b002aa:	74 51                	je     0xb002fd
b002ac:	8b 87 a4 00 00 00    	mov    0xa4(%edi),%eax
b002b2:	3b f0                	cmp    %eax,%esi
b002b4:	77 0b                	ja     0xb002c1
b002b6:	8b 97 90 00 00 00    	mov    0x90(%edi),%edx
b002bc:	0f af d6             	imul   %esi,%edx
b002bf:	eb 19                	jmp    0xb002da
b002c1:	8b 8f 90 00 00 00    	mov    0x90(%edi),%ecx
b002c7:	8b d6                	mov    %esi,%edx
b002c9:	2b d0                	sub    %eax,%edx
b002cb:	8d 41 ff             	lea    -0x1(%ecx),%eax
b002ce:	0f af 8f a4 00 00 00 	imul   0xa4(%edi),%ecx
b002d5:	0f af d0             	imul   %eax,%edx
b002d8:	03 d1                	add    %ecx,%edx
b002da:	89 55 d8             	mov    %edx,-0x28(%ebp)
b002dd:	85 d2                	test   %edx,%edx
b002df:	74 1c                	je     0xb002fd
b002e1:	33 c9                	xor    %ecx,%ecx
b002e3:	8b c2                	mov    %edx,%eax
b002e5:	6a 04                	push   $0x4
b002e7:	5a                   	pop    %edx
b002e8:	f7 e2                	mul    %edx
b002ea:	0f 90 c1             	seto   %cl
b002ed:	f7 d9                	neg    %ecx
b002ef:	0b c8                	or     %eax,%ecx
b002f1:	51                   	push   %ecx
b002f2:	e8 a0 54 93 ff       	call   0x435797
b002f7:	59                   	pop    %ecx
b002f8:	89 45 d4             	mov    %eax,-0x2c(%ebp)
b002fb:	eb 03                	jmp    0xb00300
b002fd:	89 5d d4             	mov    %ebx,-0x2c(%ebp)
b00300:	38 5d 10             	cmp    %bl,0x10(%ebp)
b00303:	8b f3                	mov    %ebx,%esi
b00305:	8b 45 08             	mov    0x8(%ebp),%eax
b00308:	0f 94 c1             	sete   %cl
b0030b:	89 5d c8             	mov    %ebx,-0x38(%ebp)
b0030e:	88 4d ff             	mov    %cl,-0x1(%ebp)
b00311:	89 5d dc             	mov    %ebx,-0x24(%ebp)
b00314:	89 75 f8             	mov    %esi,-0x8(%ebp)
b00317:	39 45 ec             	cmp    %eax,-0x14(%ebp)
b0031a:	72 08                	jb     0xb00324
b0031c:	84 c9                	test   %cl,%cl
b0031e:	0f 85 71 01 00 00    	jne    0xb00495
b00324:	3b b7 c0 00 00 00    	cmp    0xc0(%edi),%esi
b0032a:	0f 83 65 01 00 00    	jae    0xb00495
b00330:	8b 57 10             	mov    0x10(%edi),%edx
b00333:	03 55 dc             	add    -0x24(%ebp),%edx
b00336:	89 55 c4             	mov    %edx,-0x3c(%ebp)
b00339:	39 5a 18             	cmp    %ebx,0x18(%edx)
b0033c:	77 09                	ja     0xb00347
b0033e:	39 5a 1c             	cmp    %ebx,0x1c(%edx)
b00341:	0f 86 44 01 00 00    	jbe    0xb0048b
b00347:	8b cb                	mov    %ebx,%ecx
b00349:	89 5d e0             	mov    %ebx,-0x20(%ebp)
b0034c:	89 4d e4             	mov    %ecx,-0x1c(%ebp)
b0034f:	39 45 ec             	cmp    %eax,-0x14(%ebp)
b00352:	72 0a                	jb     0xb0035e
b00354:	80 7d ff 00          	cmpb   $0x0,-0x1(%ebp)
b00358:	0f 85 27 01 00 00    	jne    0xb00485
b0035e:	3b 4a 04             	cmp    0x4(%edx),%ecx
b00361:	0f 83 1e 01 00 00    	jae    0xb00485
b00367:	8b 72 30             	mov    0x30(%edx),%esi
b0036a:	03 75 e0             	add    -0x20(%ebp),%esi
b0036d:	83 3e 03             	cmpl   $0x3,(%esi)
b00370:	0f 85 b5 00 00 00    	jne    0xb0042b
b00376:	80 7d ff 00          	cmpb   $0x0,-0x1(%ebp)
b0037a:	75 1a                	jne    0xb00396
b0037c:	48                   	dec    %eax
b0037d:	39 45 ec             	cmp    %eax,-0x14(%ebp)
b00380:	74 08                	je     0xb0038a
b00382:	8b 45 e8             	mov    -0x18(%ebp),%eax
b00385:	3b 45 f8             	cmp    -0x8(%ebp),%eax
b00388:	75 0c                	jne    0xb00396
b0038a:	83 7d d0 00          	cmpl   $0x0,-0x30(%ebp)
b0038e:	b0 01                	mov    $0x1,%al
b00390:	74 06                	je     0xb00398
b00392:	8a cb                	mov    %bl,%cl
b00394:	eb 04                	jmp    0xb0039a
b00396:	8a c3                	mov    %bl,%al
b00398:	b1 01                	mov    $0x1,%cl
b0039a:	c7 06 04 00 00 00    	movl   $0x4,(%esi)
b003a0:	ff 42 1c             	incl   0x1c(%edx)
b003a3:	ff 87 a0 00 00 00    	incl   0xa0(%edi)
b003a9:	84 c0                	test   %al,%al
b003ab:	74 0d                	je     0xb003ba
b003ad:	8b 45 e4             	mov    -0x1c(%ebp),%eax
b003b0:	89 55 f4             	mov    %edx,-0xc(%ebp)
b003b3:	89 45 f0             	mov    %eax,-0x10(%ebp)
b003b6:	c6 45 ff 01          	movb   $0x1,-0x1(%ebp)
b003ba:	84 c9                	test   %cl,%cl
b003bc:	74 57                	je     0xb00415
b003be:	8b 87 a4 00 00 00    	mov    0xa4(%edi),%eax
b003c4:	8b 8f 90 00 00 00    	mov    0x90(%edi),%ecx
b003ca:	85 c0                	test   %eax,%eax
b003cc:	74 09                	je     0xb003d7
b003ce:	48                   	dec    %eax
b003cf:	89 87 a4 00 00 00    	mov    %eax,0xa4(%edi)