470927:	89 85 bc fe ff ff    	mov    %eax,-0x144(%ebp)
47092d:	8d 85 bc fe ff ff    	lea    -0x144(%ebp),%eax
470933:	68 54 ec 49 00       	push   $0x49ec54
470938:	50                   	push   %eax
470939:	e8 5d fb 01 00       	call   0x49049b
47093e:	e8 5c 0c fc ff       	call   0x43159f
470943:	cc                   	int3
470944:	cc                   	int3
470945:	cc                   	int3
470946:	cc                   	int3
470947:	cc                   	int3
470948:	cc                   	int3
470949:	cc                   	int3
47094a:	cc                   	int3
47094b:	cc                   	int3
47094c:	cc                   	int3
47094d:	cc                   	int3
47094e:	cc                   	int3
47094f:	cc                   	int3
470950:	8b ff                	mov    %edi,%edi
470952:	55                   	push   %ebp
470953:	8b ec                	mov    %esp,%ebp
470955:	8b 4d 08             	mov    0x8(%ebp),%ecx
470958:	56                   	push   %esi
470959:	ff 75 0c             	push   0xc(%ebp)
47095c:	33 f6                	xor    %esi,%esi
47095e:	8d 49 e0             	lea    -0x20(%ecx),%ecx
470961:	e8 57 f1 ff ff       	call   0x46fabd
470966:	85 c0                	test   %eax,%eax
470968:	74 24                	je     0x47098e
47096a:	57                   	push   %edi
47096b:	ff 75 1c             	push   0x1c(%ebp)
47096e:	8b 78 24             	mov    0x24(%eax),%edi
470971:	ff 75 18             	push   0x18(%ebp)
470974:	ff 75 14             	push   0x14(%ebp)
470977:	8b 37                	mov    (%edi),%esi
470979:	ff 75 10             	push   0x10(%ebp)
47097c:	ff 75 0c             	push   0xc(%ebp)
47097f:	8b 0e                	mov    (%esi),%ecx
470981:	ff 15 2c 81 4a 00    	call   *0x4a812c
470987:	8b cf                	mov    %edi,%ecx
470989:	ff 16                	call   *(%esi)
47098b:	8b f0                	mov    %eax,%esi
47098d:	5f                   	pop    %edi
47098e:	8b c6                	mov    %esi,%eax
470990:	5e                   	pop    %esi
470991:	5d                   	pop    %ebp
470992:	c2 18 00             	ret    $0x18
470995:	8b ff                	mov    %edi,%edi
470997:	55                   	push   %ebp
470998:	8b ec                	mov    %esp,%ebp
47099a:	56                   	push   %esi
47099b:	8b f1                	mov    %ecx,%esi
47099d:	e8 d0 09 fb ff       	call   0x421372
4709a2:	8b 4d 08             	mov    0x8(%ebp),%ecx
4709a5:	3b c1                	cmp    %ecx,%eax
4709a7:	76 0b                	jbe    0x4709b4
4709a9:	6b c1 0c             	imul   $0xc,%ecx,%eax
4709ac:	03 46 04             	add    0x4(%esi),%eax
4709af:	5e                   	pop    %esi
4709b0:	5d                   	pop    %ebp
4709b1:	c2 04 00             	ret    $0x4
4709b4:	e8 e6 0b fc ff       	call   0x43159f
4709b9:	cc                   	int3
4709ba:	cc                   	int3
4709bb:	cc                   	int3
4709bc:	cc                   	int3
4709bd:	cc                   	int3
4709be:	cc                   	int3
4709bf:	cc                   	int3
4709c0:	8b ff                	mov    %edi,%edi
4709c2:	55                   	push   %ebp
4709c3:	8b ec                	mov    %esp,%ebp
4709c5:	8b 45 08             	mov    0x8(%ebp),%eax
4709c8:	8b 40 0c             	mov    0xc(%eax),%eax
4709cb:	85 c0                	test   %eax,%eax
4709cd:	74 25                	je     0x4709f4
4709cf:	56                   	push   %esi
4709d0:	ff 75 20             	push   0x20(%ebp)
4709d3:	8b 30                	mov    (%eax),%esi
4709d5:	ff 75 1c             	push   0x1c(%ebp)
4709d8:	ff 75 18             	push   0x18(%ebp)
4709db:	8b 4e 0c             	mov    0xc(%esi),%ecx
4709de:	ff 75 14             	push   0x14(%ebp)
4709e1:	ff 75 10             	push   0x10(%ebp)
4709e4:	ff 75 0c             	push   0xc(%ebp)
4709e7:	50                   	push   %eax
4709e8:	ff 15 2c 81 4a 00    	call   *0x4a812c
4709ee:	ff 56 0c             	call   *0xc(%esi)
4709f1:	5e                   	pop    %esi
4709f2:	eb 05                	jmp    0x4709f9
4709f4:	b8 0e 00 07 80       	mov    $0x8007000e,%eax
4709f9:	5d                   	pop    %ebp
4709fa:	c2 1c 00             	ret    $0x1c
4709fd:	cc                   	int3
4709fe:	cc                   	int3
4709ff:	cc                   	int3
470a00:	8b ff                	mov    %edi,%edi
470a02:	55                   	push   %ebp
470a03:	8b ec                	mov    %esp,%ebp
470a05:	8b 45 08             	mov    0x8(%ebp),%eax
470a08:	8b 40 0c             	mov    0xc(%eax),%eax
470a0b:	85 c0                	test   %eax,%eax
470a0d:	74 25                	je     0x470a34
470a0f:	56                   	push   %esi
470a10:	ff 75 20             	push   0x20(%ebp)
470a13:	8b 30                	mov    (%eax),%esi
470a15:	ff 75 1c             	push   0x1c(%ebp)
470a18:	ff 75 18             	push   0x18(%ebp)
470a1b:	8b 4e 10             	mov    0x10(%esi),%ecx
470a1e:	ff 75 14             	push   0x14(%ebp)
470a21:	ff 75 10             	push   0x10(%ebp)
470a24:	ff 75 0c             	push   0xc(%ebp)
470a27:	50                   	push   %eax
470a28:	ff 15 2c 81 4a 00    	call   *0x4a812c
470a2e:	ff 56 10             	call   *0x10(%esi)
470a31:	5e                   	pop    %esi
470a32:	eb 05                	jmp    0x470a39
470a34:	b8 0e 00 07 80       	mov    $0x8007000e,%eax
470a39:	5d                   	pop    %ebp
470a3a:	c2 1c 00             	ret    $0x1c
470a3d:	cc                   	int3
470a3e:	cc                   	int3
470a3f:	cc                   	int3
470a40:	8b ff                	mov    %edi,%edi
470a42:	55                   	push   %ebp
470a43:	8b ec                	mov    %esp,%ebp
470a45:	8b 45 08             	mov    0x8(%ebp),%eax
470a48:	8b 40 0c             	mov    0xc(%eax),%eax
470a4b:	85 c0                	test   %eax,%eax
470a4d:	74 25                	je     0x470a74
470a4f:	56                   	push   %esi
470a50:	ff 75 20             	push   0x20(%ebp)
470a53:	8b 30                	mov    (%eax),%esi
470a55:	ff 75 1c             	push   0x1c(%ebp)
470a58:	ff 75 18             	push   0x18(%ebp)
470a5b:	8b 4e 14             	mov    0x14(%esi),%ecx
470a5e:	ff 75 14             	push   0x14(%ebp)
470a61:	ff 75 10             	push   0x10(%ebp)
470a64:	ff 75 0c             	push   0xc(%ebp)
470a67:	50                   	push   %eax
470a68:	ff 15 2c 81 4a 00    	call   *0x4a812c
470a6e:	ff 56 14             	call   *0x14(%esi)
470a71:	5e                   	pop    %esi
470a72:	eb 05                	jmp    0x470a79
470a74:	b8 0e 00 07 80       	mov    $0x8007000e,%eax
470a79:	5d                   	pop    %ebp
470a7a:	c2 1c 00             	ret    $0x1c
470a7d:	cc                   	int3
470a7e:	cc                   	int3
470a7f:	cc                   	int3
470a80:	8b ff                	mov    %edi,%edi
470a82:	55                   	push   %ebp
470a83:	8b ec                	mov    %esp,%ebp
470a85:	8b 45 08             	mov    0x8(%ebp),%eax
470a88:	8b 40 0c             	mov    0xc(%eax),%eax
470a8b:	85 c0                	test   %eax,%eax
470a8d:	74 1c                	je     0x470aab
470a8f:	56                   	push   %esi
470a90:	ff 75 14             	push   0x14(%ebp)
470a93:	8b 30                	mov    (%eax),%esi
470a95:	ff 75 10             	push   0x10(%ebp)
470a98:	ff 75 0c             	push   0xc(%ebp)
470a9b:	8b 4e 18             	mov    0x18(%esi),%ecx
470a9e:	50                   	push   %eax
470a9f:	ff 15 2c 81 4a 00    	call   *0x4a812c
470aa5:	ff 56 18             	call   *0x18(%esi)
470aa8:	5e                   	pop    %esi
470aa9:	eb 05                	jmp    0x470ab0
470aab:	b8 0e 00 07 80       	mov    $0x8007000e,%eax
470ab0:	5d                   	pop    %ebp
470ab1:	c2 10 00             	ret    $0x10
470ab4:	cc                   	int3
470ab5:	cc                   	int3
470ab6:	cc                   	int3
470ab7:	cc                   	int3
470ab8:	cc                   	int3
470ab9:	cc                   	int3
470aba:	cc                   	int3
470abb:	cc                   	int3
470abc:	cc                   	int3
470abd:	cc                   	int3
470abe:	cc                   	int3
470abf:	cc                   	int3
470ac0:	8b ff                	mov    %edi,%edi
470ac2:	55                   	push   %ebp
470ac3:	8b ec                	mov    %esp,%ebp
470ac5:	8b 45 08             	mov    0x8(%ebp),%eax
470ac8:	8b 48 0c             	mov    0xc(%eax),%ecx
470acb:	85 c9                	test   %ecx,%ecx
470acd:	74 17                	je     0x470ae6
470acf:	8b 01                	mov    (%ecx),%eax
470ad1:	56                   	push   %esi
470ad2:	ff 75 0c             	push   0xc(%ebp)
470ad5:	8b 70 1c             	mov    0x1c(%eax),%esi
470ad8:	51                   	push   %ecx
470ad9:	8b ce                	mov    %esi,%ecx
470adb:	ff 15 2c 81 4a 00    	call   *0x4a812c
470ae1:	ff d6                	call   *%esi
470ae3:	5e                   	pop    %esi
470ae4:	eb 05                	jmp    0x470aeb
470ae6:	b8 0e 00 07 80       	mov    $0x8007000e,%eax
470aeb:	5d                   	pop    %ebp
470aec:	c2 08 00             	ret    $0x8
470aef:	cc                   	int3
470af0:	8b ff                	mov    %edi,%edi
470af2:	55                   	push   %ebp
470af3:	8b ec                	mov    %esp,%ebp
470af5:	8b 45 08             	mov    0x8(%ebp),%eax
470af8:	8b 48 0c             	mov    0xc(%eax),%ecx
470afb:	85 c9                	test   %ecx,%ecx
470afd:	74 17                	je     0x470b16
470aff:	8b 01                	mov    (%ecx),%eax
470b01:	56                   	push   %esi
470b02:	ff 75 0c             	push   0xc(%ebp)
470b05:	8b 70 20             	mov    0x20(%eax),%esi
470b08:	51                   	push   %ecx
470b09:	8b ce                	mov    %esi,%ecx
470b0b:	ff 15 2c 81 4a 00    	call   *0x4a812c
470b11:	ff d6                	call   *%esi
470b13:	5e                   	pop    %esi
470b14:	eb 05                	jmp    0x470b1b
470b16:	b8 0e 00 07 80       	mov    $0x8007000e,%eax
470b1b:	5d                   	pop    %ebp
470b1c:	c2 08 00             	ret    $0x8
470b1f:	8b ff                	mov    %edi,%edi
470b21:	55                   	push   %ebp
470b22:	8b ec                	mov    %esp,%ebp
470b24:	83 ec 44             	sub    $0x44,%esp
470b27:	a1 dc 38 4a 00       	mov    0x4a38dc,%eax
470b2c:	33 c5                	xor    %ebp,%eax
470b2e:	89 45 fc             	mov    %eax,-0x4(%ebp)
470b31:	83 65 c4 00          	andl   $0x0,-0x3c(%ebp)
470b35:	83 65 f8 00          	andl   $0x0,-0x8(%ebp)
470b39:	53                   	push   %ebx
470b3a:	56                   	push   %esi
470b3b:	57                   	push   %edi
470b3c:	6a 1b                	push   $0x1b
470b3e:	6a 1c                	push   $0x1c
470b40:	89 4d c0             	mov    %ecx,-0x40(%ebp)
470b43:	8b da                	mov    %edx,%ebx
470b45:	68 c0 fe 40 00       	push   $0x40fec0
470b4a:	8d 4d e4             	lea    -0x1c(%ebp),%ecx
470b4d:	e8 4a bc fb ff       	call   0x42c79c
470b52:	8d 45 c4             	lea    -0x3c(%ebp),%eax
470b55:	50                   	push   %eax
470b56:	68 08 ff 40 00       	push   $0x40ff08
470b5b:	ff 75 f8             	push   -0x8(%ebp)
470b5e:	ff 15 80 7f 4a 00    	call   *0x4a7f80
470b64:	8b f8                	mov    %eax,%edi
470b66:	85 ff                	test   %edi,%edi
470b68:	79 16                	jns    0x470b80
470b6a:	8b 4d 04             	mov    0x4(%ebp),%ecx
470b6d:	57                   	push   %edi
470b6e:	68 1c 34 41 00       	push   $0x41341c
470b73:	6a 1c                	push   $0x1c
470b75:	5a                   	pop    %edx
470b76:	e8 e9 7d fa ff       	call   0x418964
470b7b:	e9 84 00 00 00       	jmp    0x470c04
470b80:	ff 75 c0             	push   -0x40(%ebp)
470b83:	83 65 c8 00          	andl   $0x0,-0x38(%ebp)
470b87:	8d 45 c0             	lea    -0x40(%ebp),%eax
470b8a:	8b 7d c4             	mov    -0x3c(%ebp),%edi
470b8d:	8d 4d cc             	lea    -0x34(%ebp),%ecx
470b90:	50                   	push   %eax
470b91:	e8 74 3a fe ff       	call   0x45460a
470b96:	8b 37                	mov    (%edi),%esi
470b98:	8d 4d c8             	lea    -0x38(%ebp),%ecx
470b9b:	51                   	push   %ecx
470b9c:	ff 70 14             	push   0x14(%eax)
470b9f:	8b 4e 18             	mov    0x18(%esi),%ecx
470ba2:	57                   	push   %edi
470ba3:	ff 15 2c 81 4a 00    	call   *0x4a812c
470ba9:	ff 56 18             	call   *0x18(%esi)
470bac:	8b f8                	mov    %eax,%edi
470bae:	85 ff                	test   %edi,%edi
470bb0:	79 13                	jns    0x470bc5
470bb2:	8b 4d 04             	mov    0x4(%ebp),%ecx
470bb5:	57                   	push   %edi
470bb6:	68 1c 34 41 00       	push   $0x41341c
470bbb:	6a 1e                	push   $0x1e
470bbd:	5a                   	pop    %edx
470bbe:	e8 a1 7d fa ff       	call   0x418964
470bc3:	eb 24                	jmp    0x470be9
470bc5:	8b 75 c8             	mov    -0x38(%ebp),%esi
470bc8:	51                   	push   %ecx
470bc9:	8b ce                	mov    %esi,%ecx
470bcb:	e8 a3 12 00 00       	call   0x471e73
470bd0:	8b f8                	mov    %eax,%edi
470bd2:	85 ff                	test   %edi,%edi
470bd4:	78 13                	js     0x470be9
470bd6:	8b 06                	mov    (%esi),%eax
470bd8:	53                   	push   %ebx
470bd9:	56                   	push   %esi
470bda:	8b 70 20             	mov    0x20(%eax),%esi
470bdd:	8b ce                	mov    %esi,%ecx
470bdf:	ff 15 2c 81 4a 00    	call   *0x4a812c
470be5:	ff d6                	call   *%esi
470be7:	8b f8                	mov    %eax,%edi
470be9:	8b 4d c8             	mov    -0x38(%ebp),%ecx
470bec:	85 c9                	test   %ecx,%ecx
470bee:	74 14                	je     0x470c04
470bf0:	83 65 c8 00          	andl   $0x0,-0x38(%ebp)
470bf4:	8b 01                	mov    (%ecx),%eax
470bf6:	51                   	push   %ecx
470bf7:	8b 70 08             	mov    0x8(%eax),%esi
470bfa:	8b ce                	mov    %esi,%ecx
470bfc:	ff 15 2c 81 4a 00    	call   *0x4a812c
470c02:	ff d6                	call   *%esi
470c04:	8b 45 c4             	mov    -0x3c(%ebp),%eax
470c07:	85 c0                	test   %eax,%eax
470c09:	74 14                	je     0x470c1f
470c0b:	83 65 c4 00          	andl   $0x0,-0x3c(%ebp)
470c0f:	8b 08                	mov    (%eax),%ecx
470c11:	50                   	push   %eax
470c12:	8b 71 08             	mov    0x8(%ecx),%esi
470c15:	8b ce                	mov    %esi,%ecx
470c17:	ff 15 2c 81 4a 00    	call   *0x4a812c
470c1d:	ff d6                	call   *%esi
470c1f:	8b 4d fc             	mov    -0x4(%ebp),%ecx
470c22:	8b c7                	mov    %edi,%eax
470c24:	5f                   	pop    %edi
470c25:	5e                   	pop    %esi
470c26:	33 cd                	xor    %ebp,%ecx
470c28:	5b                   	pop    %ebx
470c29:	e8 d2 f2 01 00       	call   0x48ff00
470c2e:	c9                   	leave
470c2f:	c3                   	ret
470c30:	8b ff                	mov    %edi,%edi
470c32:	55                   	push   %ebp
470c33:	8b ec                	mov    %esp,%ebp
470c35:	83 e4 f8             	and    $0xfffffff8,%esp
470c38:	83 ec 34             	sub    $0x34,%esp
470c3b:	a1 dc 38 4a 00       	mov    0x4a38dc,%eax
470c40:	33 c4                	xor    %esp,%eax
470c42:	89 44 24 30          	mov    %eax,0x30(%esp)
470c46:	83 64 24 10 00       	andl   $0x0,0x10(%esp)
470c4b:	8d 44 24 10          	lea    0x10(%esp),%eax
470c4f:	53                   	push   %ebx
470c50:	56                   	push   %esi
470c51:	8b f1                	mov    %ecx,%esi
470c53:	89 44 24 1c          	mov    %eax,0x1c(%esp)
470c57:	57                   	push   %edi
470c58:	8d 4c 24 20          	lea    0x20(%esp),%ecx
470c5c:	8b da                	mov    %edx,%ebx
470c5e:	e8 57 22 fe ff       	call   0x452eba
470c63:	8b d0                	mov    %eax,%edx
470c65:	8b ce                	mov    %esi,%ecx
470c67:	e8 b3 fe ff ff       	call   0x470b1f
470c6c:	8b f8                	mov    %eax,%edi