647f45:	68 b6 4e 66 00       	push   $0x664eb6
647f4a:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
647f50:	50                   	push   %eax
647f51:	51                   	push   %ecx
647f52:	56                   	push   %esi
647f53:	a1 d4 89 72 00       	mov    0x7289d4,%eax
647f58:	33 c5                	xor    %ebp,%eax
647f5a:	50                   	push   %eax
647f5b:	8d 45 f4             	lea    -0xc(%ebp),%eax
647f5e:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
647f64:	8b f1                	mov    %ecx,%esi
647f66:	89 75 f0             	mov    %esi,-0x10(%ebp)
647f69:	e8 02 de fe ff       	call   0x635d70
647f6e:	8d 86 90 00 00 00    	lea    0x90(%esi),%eax
647f74:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
647f7b:	c7 40 14 07 00 00 00 	movl   $0x7,0x14(%eax)
647f82:	c7 40 10 00 00 00 00 	movl   $0x0,0x10(%eax)
647f89:	83 78 14 08          	cmpl   $0x8,0x14(%eax)
647f8d:	72 02                	jb     0x647f91
647f8f:	8b 00                	mov    (%eax),%eax
647f91:	33 c9                	xor    %ecx,%ecx
647f93:	66 89 08             	mov    %cx,(%eax)
647f96:	8d 86 a8 00 00 00    	lea    0xa8(%esi),%eax
647f9c:	c7 40 14 07 00 00 00 	movl   $0x7,0x14(%eax)
647fa3:	89 48 10             	mov    %ecx,0x10(%eax)
647fa6:	83 78 14 08          	cmpl   $0x8,0x14(%eax)
647faa:	72 02                	jb     0x647fae
647fac:	8b 00                	mov    (%eax),%eax
647fae:	33 c9                	xor    %ecx,%ecx
647fb0:	66 89 08             	mov    %cx,(%eax)
647fb3:	8d 86 c0 00 00 00    	lea    0xc0(%esi),%eax
647fb9:	c7 40 14 07 00 00 00 	movl   $0x7,0x14(%eax)
647fc0:	89 48 10             	mov    %ecx,0x10(%eax)
647fc3:	83 78 14 08          	cmpl   $0x8,0x14(%eax)
647fc7:	72 02                	jb     0x647fcb
647fc9:	8b 00                	mov    (%eax),%eax
647fcb:	33 c9                	xor    %ecx,%ecx
647fcd:	66 89 08             	mov    %cx,(%eax)
647fd0:	8d 86 d8 00 00 00    	lea    0xd8(%esi),%eax
647fd6:	c7 40 14 07 00 00 00 	movl   $0x7,0x14(%eax)
647fdd:	89 48 10             	mov    %ecx,0x10(%eax)
647fe0:	83 78 14 08          	cmpl   $0x8,0x14(%eax)
647fe4:	72 02                	jb     0x647fe8
647fe6:	8b 00                	mov    (%eax),%eax
647fe8:	33 c9                	xor    %ecx,%ecx
647fea:	66 89 08             	mov    %cx,(%eax)
647fed:	8d 86 f0 00 00 00    	lea    0xf0(%esi),%eax
647ff3:	c7 40 14 07 00 00 00 	movl   $0x7,0x14(%eax)
647ffa:	89 48 10             	mov    %ecx,0x10(%eax)
647ffd:	83 78 14 08          	cmpl   $0x8,0x14(%eax)
648001:	72 02                	jb     0x648005
648003:	8b 00                	mov    (%eax),%eax
648005:	33 c9                	xor    %ecx,%ecx
648007:	66 89 08             	mov    %cx,(%eax)
64800a:	8d 86 08 01 00 00    	lea    0x108(%esi),%eax
648010:	c7 40 14 07 00 00 00 	movl   $0x7,0x14(%eax)
648017:	89 48 10             	mov    %ecx,0x10(%eax)
64801a:	83 78 14 08          	cmpl   $0x8,0x14(%eax)
64801e:	72 02                	jb     0x648022
648020:	8b 00                	mov    (%eax),%eax
648022:	33 c9                	xor    %ecx,%ecx
648024:	66 89 08             	mov    %cx,(%eax)
648027:	8d 86 20 01 00 00    	lea    0x120(%esi),%eax
64802d:	c7 40 14 07 00 00 00 	movl   $0x7,0x14(%eax)
648034:	89 48 10             	mov    %ecx,0x10(%eax)
648037:	83 78 14 08          	cmpl   $0x8,0x14(%eax)
64803b:	72 02                	jb     0x64803f
64803d:	8b 00                	mov    (%eax),%eax
64803f:	33 c9                	xor    %ecx,%ecx
648041:	66 89 08             	mov    %cx,(%eax)
648044:	8d 86 38 01 00 00    	lea    0x138(%esi),%eax
64804a:	c7 40 14 07 00 00 00 	movl   $0x7,0x14(%eax)
648051:	89 48 10             	mov    %ecx,0x10(%eax)
648054:	83 78 14 08          	cmpl   $0x8,0x14(%eax)
648058:	72 02                	jb     0x64805c
64805a:	8b 00                	mov    (%eax),%eax
64805c:	33 c9                	xor    %ecx,%ecx
64805e:	66 89 08             	mov    %cx,(%eax)
648061:	89 8e 54 01 00 00    	mov    %ecx,0x154(%esi)
648067:	c6 86 58 01 00 00 01 	movb   $0x1,0x158(%esi)
64806e:	88 8e 5a 01 00 00    	mov    %cl,0x15a(%esi)
648074:	88 8e 5b 01 00 00    	mov    %cl,0x15b(%esi)
64807a:	88 8e 5c 01 00 00    	mov    %cl,0x15c(%esi)
648080:	88 8e 5d 01 00 00    	mov    %cl,0x15d(%esi)
648086:	c6 86 5e 01 00 00 01 	movb   $0x1,0x15e(%esi)
64808d:	88 8e 5f 01 00 00    	mov    %cl,0x15f(%esi)
648093:	8d 8e 64 01 00 00    	lea    0x164(%esi),%ecx
648099:	c7 86 60 01 00 00 3c 	movl   $0x3c,0x160(%esi)
6480a0:	00 00 00
6480a3:	c7 41 14 07 00 00 00 	movl   $0x7,0x14(%ecx)
6480aa:	c7 41 10 00 00 00 00 	movl   $0x0,0x10(%ecx)
6480b1:	83 79 14 08          	cmpl   $0x8,0x14(%ecx)
6480b5:	72 04                	jb     0x6480bb
6480b7:	8b 01                	mov    (%ecx),%eax
6480b9:	eb 02                	jmp    0x6480bd
6480bb:	8b c1                	mov    %ecx,%eax
6480bd:	33 d2                	xor    %edx,%edx
6480bf:	66 89 10             	mov    %dx,(%eax)
6480c2:	52                   	push   %edx
6480c3:	68 fc 56 6e 00       	push   $0x6e56fc
6480c8:	c6 45 fc 09          	movb   $0x9,-0x4(%ebp)
6480cc:	c7 46 60 00 00 20 00 	movl   $0x200000,0x60(%esi)
6480d3:	c7 46 64 0c 00 00 00 	movl   $0xc,0x64(%esi)
6480da:	89 56 68             	mov    %edx,0x68(%esi)
6480dd:	89 56 6c             	mov    %edx,0x6c(%esi)
6480e0:	89 56 70             	mov    %edx,0x70(%esi)
6480e3:	89 56 74             	mov    %edx,0x74(%esi)
6480e6:	c6 86 59 01 00 00 01 	movb   $0x1,0x159(%esi)
6480ed:	e8 fe 06 df ff       	call   0x4387f0
6480f2:	8b c6                	mov    %esi,%eax
6480f4:	8b 4d f4             	mov    -0xc(%ebp),%ecx
6480f7:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
6480fe:	59                   	pop    %ecx
6480ff:	5e                   	pop    %esi
648100:	8b e5                	mov    %ebp,%esp
648102:	5d                   	pop    %ebp
648103:	c3                   	ret
648104:	cc                   	int3
648105:	cc                   	int3
648106:	cc                   	int3
648107:	cc                   	int3
648108:	cc                   	int3
648109:	cc                   	int3
64810a:	cc                   	int3
64810b:	cc                   	int3
64810c:	cc                   	int3
64810d:	cc                   	int3
64810e:	cc                   	int3
64810f:	cc                   	int3
648110:	55                   	push   %ebp
648111:	8b ec                	mov    %esp,%ebp
648113:	6a ff                	push   $0xffffffff
648115:	68 a6 3d 66 00       	push   $0x663da6
64811a:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
648120:	50                   	push   %eax
648121:	51                   	push   %ecx
648122:	56                   	push   %esi
648123:	57                   	push   %edi
648124:	a1 d4 89 72 00       	mov    0x7289d4,%eax
648129:	33 c5                	xor    %ebp,%eax
64812b:	50                   	push   %eax
64812c:	8d 45 f4             	lea    -0xc(%ebp),%eax
64812f:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
648135:	8b f9                	mov    %ecx,%edi
648137:	8b 47 7c             	mov    0x7c(%edi),%eax
64813a:	8d 4f 7c             	lea    0x7c(%edi),%ecx
64813d:	50                   	push   %eax
64813e:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
648145:	ff 30                	push   (%eax)
648147:	8d 45 f0             	lea    -0x10(%ebp),%eax
64814a:	50                   	push   %eax
64814b:	e8 20 98 ff ff       	call   0x641970
648150:	ff 77 7c             	push   0x7c(%edi)
648153:	e8 78 83 ea ff       	call   0x4f04d0
648158:	8b 47 5c             	mov    0x5c(%edi),%eax
64815b:	8d 77 48             	lea    0x48(%edi),%esi
64815e:	83 c4 04             	add    $0x4,%esp
648161:	83 f8 08             	cmp    $0x8,%eax
648164:	72 0b                	jb     0x648171
648166:	40                   	inc    %eax
648167:	8b ce                	mov    %esi,%ecx
648169:	50                   	push   %eax
64816a:	ff 36                	push   (%esi)
64816c:	e8 6f 0c df ff       	call   0x438de0
648171:	c7 46 14 07 00 00 00 	movl   $0x7,0x14(%esi)
648178:	c7 46 10 00 00 00 00 	movl   $0x0,0x10(%esi)
64817f:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
648183:	72 02                	jb     0x648187
648185:	8b 36                	mov    (%esi),%esi
648187:	33 c0                	xor    %eax,%eax
648189:	66 89 06             	mov    %ax,(%esi)
64818c:	8d 77 30             	lea    0x30(%edi),%esi
64818f:	8b 46 14             	mov    0x14(%esi),%eax
648192:	83 f8 08             	cmp    $0x8,%eax
648195:	72 0b                	jb     0x6481a2
648197:	40                   	inc    %eax
648198:	8b ce                	mov    %esi,%ecx
64819a:	50                   	push   %eax
64819b:	ff 36                	push   (%esi)
64819d:	e8 3e 0c df ff       	call   0x438de0
6481a2:	c7 46 14 07 00 00 00 	movl   $0x7,0x14(%esi)
6481a9:	c7 46 10 00 00 00 00 	movl   $0x0,0x10(%esi)
6481b0:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
6481b4:	72 02                	jb     0x6481b8
6481b6:	8b 36                	mov    (%esi),%esi
6481b8:	33 c0                	xor    %eax,%eax
6481ba:	66 89 06             	mov    %ax,(%esi)
6481bd:	8d 77 18             	lea    0x18(%edi),%esi
6481c0:	8b 46 14             	mov    0x14(%esi),%eax
6481c3:	83 f8 08             	cmp    $0x8,%eax
6481c6:	72 0b                	jb     0x6481d3
6481c8:	40                   	inc    %eax
6481c9:	8b ce                	mov    %esi,%ecx
6481cb:	50                   	push   %eax
6481cc:	ff 36                	push   (%esi)
6481ce:	e8 0d 0c df ff       	call   0x438de0
6481d3:	c7 46 14 07 00 00 00 	movl   $0x7,0x14(%esi)
6481da:	c7 46 10 00 00 00 00 	movl   $0x0,0x10(%esi)
6481e1:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
6481e5:	72 02                	jb     0x6481e9
6481e7:	8b 36                	mov    (%esi),%esi
6481e9:	33 c0                	xor    %eax,%eax
6481eb:	66 89 06             	mov    %ax,(%esi)
6481ee:	8b 47 14             	mov    0x14(%edi),%eax
6481f1:	83 f8 08             	cmp    $0x8,%eax
6481f4:	72 0b                	jb     0x648201
6481f6:	40                   	inc    %eax
6481f7:	8b cf                	mov    %edi,%ecx
6481f9:	50                   	push   %eax
6481fa:	ff 37                	push   (%edi)
6481fc:	e8 df 0b df ff       	call   0x438de0
648201:	c7 47 14 07 00 00 00 	movl   $0x7,0x14(%edi)
648208:	c7 47 10 00 00 00 00 	movl   $0x0,0x10(%edi)
64820f:	83 7f 14 08          	cmpl   $0x8,0x14(%edi)
648213:	72 18                	jb     0x64822d
648215:	8b 07                	mov    (%edi),%eax
648217:	33 c9                	xor    %ecx,%ecx
648219:	66 89 08             	mov    %cx,(%eax)
64821c:	8b 4d f4             	mov    -0xc(%ebp),%ecx
64821f:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
648226:	59                   	pop    %ecx
648227:	5f                   	pop    %edi
648228:	5e                   	pop    %esi
648229:	8b e5                	mov    %ebp,%esp
64822b:	5d                   	pop    %ebp
64822c:	c3                   	ret
64822d:	33 c0                	xor    %eax,%eax
64822f:	66 89 07             	mov    %ax,(%edi)
648232:	8b 4d f4             	mov    -0xc(%ebp),%ecx
648235:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
64823c:	59                   	pop    %ecx
64823d:	5f                   	pop    %edi
64823e:	5e                   	pop    %esi
64823f:	8b e5                	mov    %ebp,%esp
648241:	5d                   	pop    %ebp
648242:	c3                   	ret
648243:	cc                   	int3
648244:	cc                   	int3
648245:	cc                   	int3
648246:	cc                   	int3
648247:	cc                   	int3
648248:	cc                   	int3
648249:	cc                   	int3
64824a:	cc                   	int3
64824b:	cc                   	int3
64824c:	cc                   	int3
64824d:	cc                   	int3
64824e:	cc                   	int3
64824f:	cc                   	int3
648250:	55                   	push   %ebp
648251:	8b ec                	mov    %esp,%ebp
648253:	6a ff                	push   $0xffffffff
648255:	68 2b 4f 66 00       	push   $0x664f2b
64825a:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
648260:	50                   	push   %eax
648261:	83 ec 68             	sub    $0x68,%esp
648264:	a1 d4 89 72 00       	mov    0x7289d4,%eax
648269:	33 c5                	xor    %ebp,%eax
64826b:	89 45 f0             	mov    %eax,-0x10(%ebp)
64826e:	53                   	push   %ebx
64826f:	56                   	push   %esi
648270:	57                   	push   %edi
648271:	50                   	push   %eax
648272:	8d 45 f4             	lea    -0xc(%ebp),%eax
648275:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
64827b:	8b f9                	mov    %ecx,%edi
64827d:	8b 75 08             	mov    0x8(%ebp),%esi
648280:	c7 45 8c 00 00 00 00 	movl   $0x0,-0x74(%ebp)
648287:	8d 86 b0 00 00 00    	lea    0xb0(%esi),%eax
64828d:	50                   	push   %eax
64828e:	e8 7d 02 00 00       	call   0x648510
648293:	84 c0                	test   %al,%al
648295:	74 43                	je     0x6482da
648297:	56                   	push   %esi
648298:	8b cf                	mov    %edi,%ecx
64829a:	e8 d1 04 00 00       	call   0x648770
64829f:	84 c0                	test   %al,%al
6482a1:	74 37                	je     0x6482da
6482a3:	83 7e 40 00          	cmpl   $0x0,0x40(%esi)
6482a7:	0f 94 c0             	sete   %al
6482aa:	84 c0                	test   %al,%al
6482ac:	74 33                	je     0x6482e1
6482ae:	83 bf b8 00 00 00 00 	cmpl   $0x0,0xb8(%edi)
6482b5:	0f 94 c0             	sete   %al
6482b8:	84 c0                	test   %al,%al
6482ba:	74 25                	je     0x6482e1
6482bc:	e8 1f e1 fe ff       	call   0x6363e0
6482c1:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
6482c5:	8b c8                	mov    %eax,%ecx
6482c7:	72 02                	jb     0x6482cb
6482c9:	8b 36                	mov    (%esi),%esi
6482cb:	8b 01                	mov    (%ecx),%eax
6482cd:	56                   	push   %esi
6482ce:	68 b0 3c 6e 00       	push   $0x6e3cb0
6482d3:	51                   	push   %ecx
6482d4:	ff 50 04             	call   *0x4(%eax)
6482d7:	83 c4 0c             	add    $0xc,%esp
6482da:	32 c0                	xor    %al,%al
6482dc:	e9 04 02 00 00       	jmp    0x6484e5
6482e1:	8d 8f d8 00 00 00    	lea    0xd8(%edi),%ecx
6482e7:	3b ce                	cmp    %esi,%ecx
6482e9:	74 0a                	je     0x6482f5
6482eb:	6a ff                	push   $0xffffffff
6482ed:	6a 00                	push   $0x0
6482ef:	56                   	push   %esi
6482f0:	e8 fb 05 df ff       	call   0x4388f0
6482f5:	83 7e 28 00          	cmpl   $0x0,0x28(%esi)
6482f9:	8d 4e 18             	lea    0x18(%esi),%ecx
6482fc:	0f 94 c0             	sete   %al
6482ff:	84 c0                	test   %al,%al
648301:	74 2a                	je     0x64832d
648303:	33 c0                	xor    %eax,%eax
648305:	c7 45 ec 07 00 00 00 	movl   $0x7,-0x14(%ebp)
64830c:	6a ff                	push   $0xffffffff
64830e:	50                   	push   %eax
64830f:	51                   	push   %ecx
648310:	8d 4d d8             	lea    -0x28(%ebp),%ecx
648313:	c7 45 e8 00 00 00 00 	movl   $0x0,-0x18(%ebp)
64831a:	66 89 45 d8          	mov    %ax,-0x28(%ebp)
64831e:	e8 cd 05 df ff       	call   0x4388f0
648323:	8d 45 d8             	lea    -0x28(%ebp),%eax
648326:	bb 01 00 00 00       	mov    $0x1,%ebx
64832b:	eb 17                	jmp    0x648344
64832d:	68 5c 0e 6b 00       	push   $0x6b0e5c
648332:	51                   	push   %ecx
648333:	8d 45 a8             	lea    -0x58(%ebp),%eax
648336:	50                   	push   %eax
648337:	e8 33 c9 e8 ff       	call   0x4d4c6f
64833c:	83 c4 0c             	add    $0xc,%esp
64833f:	bb 02 00 00 00       	mov    $0x2,%ebx
648344:	50                   	push   %eax
648345:	8d 8f 90 00 00 00    	lea    0x90(%edi),%ecx
64834b:	89 5d 8c             	mov    %ebx,-0x74(%ebp)
64834e:	e8 5d 81 df ff       	call   0x4404b0
648353:	f6 c3 02             	test   $0x2,%bl
648356:	74 0e                	je     0x648366
648358:	83 e3 fd             	and    $0xfffffffd,%ebx
64835b:	8d 4d a8             	lea    -0x58(%ebp),%ecx
64835e:	89 5d 8c             	mov    %ebx,-0x74(%ebp)
648361:	e8 5a 02 df ff       	call   0x4385c0
648366:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
64836d:	f6 c3 01             	test   $0x1,%bl
648370:	74 0e                	je     0x648380
648372:	83 e3 fe             	and    $0xfffffffe,%ebx
648375:	8d 4d d8             	lea    -0x28(%ebp),%ecx
648378:	89 5d 8c             	mov    %ebx,-0x74(%ebp)
64837b:	e8 40 02 df ff       	call   0x4385c0
648380:	83 7e 40 00          	cmpl   $0x0,0x40(%esi)
648384:	8d 4e 30             	lea    0x30(%esi),%ecx
648387:	0f 94 c0             	sete   %al