861bf4:	cc                   	int3
861bf5:	cc                   	int3
861bf6:	cc                   	int3
861bf7:	55                   	push   %ebp
861bf8:	8b ec                	mov    %esp,%ebp
861bfa:	56                   	push   %esi
861bfb:	57                   	push   %edi
861bfc:	8b f9                	mov    %ecx,%edi
861bfe:	85 ff                	test   %edi,%edi
861c00:	74 46                	je     0x861c48
861c02:	83 7f 20 00          	cmpl   $0x0,0x20(%edi)
861c06:	74 40                	je     0x861c48
861c08:	33 c0                	xor    %eax,%eax
861c0a:	8d 8f c4 00 00 00    	lea    0xc4(%edi),%ecx
861c10:	39 45 08             	cmp    %eax,0x8(%ebp)
861c13:	0f 95 c0             	setne  %al
861c16:	89 87 c0 00 00 00    	mov    %eax,0xc0(%edi)
861c1c:	e8 70 43 bb ff       	call   0x415f91
861c21:	8b 07                	mov    (%edi),%eax
861c23:	83 a7 a4 00 00 00 00 	andl   $0x0,0xa4(%edi)
861c2a:	83 a7 a8 00 00 00 00 	andl   $0x0,0xa8(%edi)
861c31:	8b b0 6c 01 00 00    	mov    0x16c(%eax),%esi
861c37:	8b ce                	mov    %esi,%ecx
861c39:	e8 27 aa bc ff       	call   0x42c665
861c3e:	8b cf                	mov    %edi,%ecx
861c40:	ff d6                	call   *%esi
861c42:	5f                   	pop    %edi
861c43:	5e                   	pop    %esi
861c44:	5d                   	pop    %ebp
861c45:	c2 04 00             	ret    $0x4
861c48:	e8 19 03 bd ff       	call   0x431f66
861c4d:	cc                   	int3
861c4e:	cc                   	int3
861c4f:	cc                   	int3
861c50:	cc                   	int3
861c51:	cc                   	int3
861c52:	cc                   	int3
861c53:	cc                   	int3
861c54:	cc                   	int3
861c55:	cc                   	int3
861c56:	cc                   	int3
861c57:	cc                   	int3
861c58:	cc                   	int3
861c59:	cc                   	int3
861c5a:	cc                   	int3
861c5b:	cc                   	int3
861c5c:	cc                   	int3
861c5d:	cc                   	int3
861c5e:	cc                   	int3
861c5f:	cc                   	int3
861c60:	cc                   	int3
861c61:	cc                   	int3
861c62:	cc                   	int3
861c63:	55                   	push   %ebp
861c64:	8b ec                	mov    %esp,%ebp
861c66:	56                   	push   %esi
861c67:	57                   	push   %edi
861c68:	8b f9                	mov    %ecx,%edi
861c6a:	85 ff                	test   %edi,%edi
861c6c:	74 68                	je     0x861cd6
861c6e:	83 7f 20 00          	cmpl   $0x0,0x20(%edi)
861c72:	74 62                	je     0x861cd6
861c74:	8b 45 08             	mov    0x8(%ebp),%eax
861c77:	be 2c 0a bd 00       	mov    $0xbd0a2c,%esi
861c7c:	c7 87 c0 00 00 00 02 	movl   $0x2,0xc0(%edi)
861c83:	00 00 00
861c86:	85 c0                	test   %eax,%eax
861c88:	75 02                	jne    0x861c8c
861c8a:	8b c6                	mov    %esi,%eax
861c8c:	50                   	push   %eax
861c8d:	8d 8f ac 00 00 00    	lea    0xac(%edi),%ecx
861c93:	e8 f2 17 bb ff       	call   0x41348a
861c98:	83 7d 0c 00          	cmpl   $0x0,0xc(%ebp)
861c9c:	74 03                	je     0x861ca1
861c9e:	8b 75 0c             	mov    0xc(%ebp),%esi
861ca1:	56                   	push   %esi
861ca2:	8d 8f b0 00 00 00    	lea    0xb0(%edi),%ecx
861ca8:	e8 dd 17 bb ff       	call   0x41348a
861cad:	8b 45 10             	mov    0x10(%ebp),%eax
861cb0:	8b cf                	mov    %edi,%ecx
861cb2:	89 87 b4 00 00 00    	mov    %eax,0xb4(%edi)
861cb8:	e8 c0 38 bb ff       	call   0x41557d
861cbd:	8b 07                	mov    (%edi),%eax
861cbf:	8b b0 6c 01 00 00    	mov    0x16c(%eax),%esi
861cc5:	8b ce                	mov    %esi,%ecx
861cc7:	e8 99 a9 bc ff       	call   0x42c665
861ccc:	8b cf                	mov    %edi,%ecx
861cce:	ff d6                	call   *%esi
861cd0:	5f                   	pop    %edi
861cd1:	5e                   	pop    %esi
861cd2:	5d                   	pop    %ebp
861cd3:	c2 0c 00             	ret    $0xc
861cd6:	e8 8b 02 bd ff       	call   0x431f66
861cdb:	cc                   	int3
861cdc:	cc                   	int3
861cdd:	cc                   	int3
861cde:	cc                   	int3
861cdf:	cc                   	int3
861ce0:	cc                   	int3
861ce1:	cc                   	int3
861ce2:	cc                   	int3
861ce3:	cc                   	int3
861ce4:	cc                   	int3
861ce5:	cc                   	int3
861ce6:	cc                   	int3
861ce7:	cc                   	int3
861ce8:	cc                   	int3
861ce9:	cc                   	int3
861cea:	cc                   	int3
861ceb:	cc                   	int3
861cec:	cc                   	int3
861ced:	cc                   	int3
861cee:	cc                   	int3
861cef:	cc                   	int3
861cf0:	cc                   	int3
861cf1:	cc                   	int3
861cf2:	cc                   	int3
861cf3:	cc                   	int3
861cf4:	cc                   	int3
861cf5:	cc                   	int3
861cf6:	cc                   	int3
861cf7:	cc                   	int3
861cf8:	cc                   	int3
861cf9:	cc                   	int3
861cfa:	55                   	push   %ebp
861cfb:	8b ec                	mov    %esp,%ebp
861cfd:	56                   	push   %esi
861cfe:	57                   	push   %edi
861cff:	8b f9                	mov    %ecx,%edi
861d01:	85 ff                	test   %edi,%edi
861d03:	74 5a                	je     0x861d5f
861d05:	83 7f 20 00          	cmpl   $0x0,0x20(%edi)
861d09:	74 54                	je     0x861d5f
861d0b:	83 3d 94 eb d7 00 00 	cmpl   $0x0,0xd7eb94
861d12:	74 4b                	je     0x861d5f
861d14:	8b 45 08             	mov    0x8(%ebp),%eax
861d17:	c7 87 c0 00 00 00 03 	movl   $0x3,0xc0(%edi)
861d1e:	00 00 00
861d21:	85 c0                	test   %eax,%eax
861d23:	75 05                	jne    0x861d2a
861d25:	b8 2c 0a bd 00       	mov    $0xbd0a2c,%eax
861d2a:	50                   	push   %eax
861d2b:	8d 8f b8 00 00 00    	lea    0xb8(%edi),%ecx
861d31:	e8 54 17 bb ff       	call   0x41348a
861d36:	8b 45 0c             	mov    0xc(%ebp),%eax
861d39:	8b cf                	mov    %edi,%ecx
861d3b:	89 87 bc 00 00 00    	mov    %eax,0xbc(%edi)
861d41:	e8 37 38 bb ff       	call   0x41557d
861d46:	8b 07                	mov    (%edi),%eax
861d48:	8b b0 6c 01 00 00    	mov    0x16c(%eax),%esi
861d4e:	8b ce                	mov    %esi,%ecx
861d50:	e8 10 a9 bc ff       	call   0x42c665
861d55:	8b cf                	mov    %edi,%ecx
861d57:	ff d6                	call   *%esi
861d59:	5f                   	pop    %edi
861d5a:	5e                   	pop    %esi
861d5b:	5d                   	pop    %ebp
861d5c:	c2 08 00             	ret    $0x8
861d5f:	e8 02 02 bd ff       	call   0x431f66
861d64:	cc                   	int3
861d65:	cc                   	int3
861d66:	cc                   	int3
861d67:	cc                   	int3
861d68:	cc                   	int3
861d69:	cc                   	int3
861d6a:	cc                   	int3
861d6b:	cc                   	int3
861d6c:	cc                   	int3
861d6d:	cc                   	int3
861d6e:	cc                   	int3
861d6f:	cc                   	int3
861d70:	cc                   	int3
861d71:	cc                   	int3
861d72:	cc                   	int3
861d73:	cc                   	int3
861d74:	cc                   	int3
861d75:	cc                   	int3
861d76:	cc                   	int3
861d77:	cc                   	int3
861d78:	cc                   	int3
861d79:	cc                   	int3
861d7a:	cc                   	int3
861d7b:	cc                   	int3
861d7c:	cc                   	int3
861d7d:	cc                   	int3
861d7e:	cc                   	int3
861d7f:	b8 58 05 c4 00       	mov    $0xc40558,%eax
861d84:	c3                   	ret
861d85:	b8 dc 01 c4 00       	mov    $0xc401dc,%eax
861d8a:	c3                   	ret
861d8b:	b8 58 05 c4 00       	mov    $0xc40558,%eax
861d90:	c3                   	ret
861d91:	33 c0                	xor    %eax,%eax
861d93:	39 81 8c 01 00 00    	cmp    %eax,0x18c(%ecx)
861d99:	74 1a                	je     0x861db5
861d9b:	83 b9 ac 01 00 00 10 	cmpl   $0x10,0x1ac(%ecx)
861da2:	7c 11                	jl     0x861db5
861da4:	39 81 84 01 00 00    	cmp    %eax,0x184(%ecx)
861daa:	75 09                	jne    0x861db5
861dac:	39 81 88 01 00 00    	cmp    %eax,0x188(%ecx)
861db2:	75 01                	jne    0x861db5
861db4:	40                   	inc    %eax
861db5:	c3                   	ret
861db6:	cc                   	int3
861db7:	cc                   	int3
861db8:	cc                   	int3
861db9:	cc                   	int3
861dba:	cc                   	int3
861dbb:	cc                   	int3
861dbc:	cc                   	int3
861dbd:	cc                   	int3
861dbe:	cc                   	int3
861dbf:	55                   	push   %ebp
861dc0:	8b ec                	mov    %esp,%ebp
861dc2:	5d                   	pop    %ebp
861dc3:	e9 3a 6b bc ff       	jmp    0x428902
861dc8:	cc                   	int3
861dc9:	cc                   	int3
861dca:	55                   	push   %ebp
861dcb:	8b ec                	mov    %esp,%ebp
861dcd:	51                   	push   %ecx
861dce:	57                   	push   %edi
861dcf:	8b f9                	mov    %ecx,%edi
861dd1:	e8 73 7f bb ff       	call   0x419d49
861dd6:	85 c0                	test   %eax,%eax
861dd8:	74 5e                	je     0x861e38
861dda:	53                   	push   %ebx
861ddb:	33 db                	xor    %ebx,%ebx
861ddd:	56                   	push   %esi
861dde:	85 ff                	test   %edi,%edi
861de0:	75 05                	jne    0x861de7
861de2:	89 5d fc             	mov    %ebx,-0x4(%ebp)
861de5:	eb 06                	jmp    0x861ded
861de7:	8b 47 20             	mov    0x20(%edi),%eax
861dea:	89 45 fc             	mov    %eax,-0x4(%ebp)
861ded:	8b cf                	mov    %edi,%ecx
861def:	e8 c5 78 bb ff       	call   0x4196b9
861df4:	8b cf                	mov    %edi,%ecx
861df6:	8b f0                	mov    %eax,%esi
861df8:	e8 4c 7f bb ff       	call   0x419d49
861dfd:	ff 75 fc             	push   -0x4(%ebp)
861e00:	56                   	push   %esi
861e01:	68 00 03 00 00       	push   $0x300
861e06:	ff 70 20             	push   0x20(%eax)
861e09:	ff 15 2c 40 d8 00    	call   *0xd8402c
861e0f:	85 ff                	test   %edi,%edi
861e11:	74 03                	je     0x861e16
861e13:	8b 5f 20             	mov    0x20(%edi),%ebx
861e16:	8b cf                	mov    %edi,%ecx
861e18:	e8 9c 78 bb ff       	call   0x4196b9
861e1d:	8b cf                	mov    %edi,%ecx
861e1f:	8b f0                	mov    %eax,%esi
861e21:	e8 23 7f bb ff       	call   0x419d49
861e26:	53                   	push   %ebx
861e27:	56                   	push   %esi
861e28:	68 00 04 00 00       	push   $0x400
861e2d:	ff 70 20             	push   0x20(%eax)
861e30:	ff 15 2c 40 d8 00    	call   *0xd8402c
861e36:	5e                   	pop    %esi
861e37:	5b                   	pop    %ebx
861e38:	5f                   	pop    %edi
861e39:	8b e5                	mov    %ebp,%esp
861e3b:	5d                   	pop    %ebp
861e3c:	c3                   	ret
861e3d:	cc                   	int3
861e3e:	cc                   	int3
861e3f:	cc                   	int3
861e40:	cc                   	int3
861e41:	cc                   	int3
861e42:	cc                   	int3
861e43:	cc                   	int3
861e44:	cc                   	int3
861e45:	cc                   	int3
861e46:	cc                   	int3
861e47:	cc                   	int3
861e48:	cc                   	int3
861e49:	cc                   	int3
861e4a:	cc                   	int3
861e4b:	cc                   	int3
861e4c:	cc                   	int3
861e4d:	cc                   	int3
861e4e:	cc                   	int3
861e4f:	cc                   	int3
861e50:	cc                   	int3
861e51:	cc                   	int3
861e52:	cc                   	int3
861e53:	cc                   	int3
861e54:	cc                   	int3
861e55:	cc                   	int3
861e56:	cc                   	int3
861e57:	cc                   	int3
861e58:	cc                   	int3
861e59:	68 00 07 00 00       	push   $0x700
861e5e:	b8 67 cb b9 00       	mov    $0xb9cb67,%eax
861e63:	e8 fd 01 bd ff       	call   0x432065
861e68:	8b f9                	mov    %ecx,%edi
861e6a:	33 db                	xor    %ebx,%ebx
861e6c:	89 9d f8 f8 ff ff    	mov    %ebx,-0x708(%ebp)
861e72:	85 ff                	test   %edi,%edi
861e74:	75 04                	jne    0x861e7a
861e76:	33 c0                	xor    %eax,%eax
861e78:	eb 03                	jmp    0x861e7d
861e7a:	8b 47 20             	mov    0x20(%edi),%eax
861e7d:	85 c0                	test   %eax,%eax
861e7f:	75 05                	jne    0x861e86
861e81:	e8 e0 00 bd ff       	call   0x431f66
861e86:	8b 87 c0 00 00 00    	mov    0xc0(%edi),%eax
861e8c:	48                   	dec    %eax
861e8d:	83 e8 01             	sub    $0x1,%eax
861e90:	0f 84 e1 00 00 00    	je     0x861f77
861e96:	83 e8 01             	sub    $0x1,%eax
861e99:	0f 85 72 03 00 00    	jne    0x862211
861e9f:	39 1d 94 eb d7 00    	cmp    %ebx,0xd7eb94
861ea5:	0f 84 66 03 00 00    	je     0x862211
861eab:	e8 65 47 bd ff       	call   0x436615
861eb0:	50                   	push   %eax
861eb1:	8d 8d f8 f8 ff ff    	lea    -0x708(%ebp),%ecx
861eb7:	e8 58 7d ba ff       	call   0x409c14
861ebc:	8d 85 f8 f8 ff ff    	lea    -0x708(%ebp),%eax
861ec2:	33 db                	xor    %ebx,%ebx
861ec4:	50                   	push   %eax
861ec5:	8b cf                	mov    %edi,%ecx
861ec7:	89 5d fc             	mov    %ebx,-0x4(%ebp)
861eca:	e8 d8 5c bb ff       	call   0x417ba7
861ecf:	e8 41 47 bd ff       	call   0x436615
861ed4:	50                   	push   %eax
861ed5:	8d 8d 04 f9 ff ff    	lea    -0x6fc(%ebp),%ecx
861edb:	e8 34 7d ba ff       	call   0x409c14
861ee0:	8b 87 b8 00 00 00    	mov    0xb8(%edi),%eax
861ee6:	53                   	push   %ebx
861ee7:	ff b7 bc 00 00 00    	push   0xbc(%edi)
861eed:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
861ef1:	8b 48 f4             	mov    -0xc(%eax),%ecx
861ef4:	f7 d9                	neg    %ecx
861ef6:	1b c9                	sbb    %ecx,%ecx
861ef8:	23 c8                	and    %eax,%ecx
861efa:	8d 85 04 f9 ff ff    	lea    -0x6fc(%ebp),%eax
861f00:	51                   	push   %ecx
861f01:	ff b5 f8 f8 ff ff    	push   -0x708(%ebp)
861f07:	8b 0d 94 eb d7 00    	mov    0xd7eb94,%ecx
861f0d:	57                   	push   %edi
861f0e:	50                   	push   %eax
861f0f:	e8 c0 24 bc ff       	call   0x4243d4
861f14:	85 c0                	test   %eax,%eax
861f16:	74 46                	je     0x861f5e
861f18:	ff b5 f8 f8 ff ff    	push   -0x708(%ebp)
861f1e:	8d 8d 04 f9 ff ff    	lea    -0x6fc(%ebp),%ecx
861f24:	e8 01 12 ba ff       	call   0x40312a
861f29:	85 c0                	test   %eax,%eax
861f2b:	74 31                	je     0x861f5e