499c97:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
499c9e:	59                   	pop    %ecx
499c9f:	5f                   	pop    %edi
499ca0:	5e                   	pop    %esi
499ca1:	5b                   	pop    %ebx
499ca2:	8b 4d f0             	mov    -0x10(%ebp),%ecx
499ca5:	33 cd                	xor    %ebp,%ecx
499ca7:	e8 2e 78 14 00       	call   0x5e14da
499cac:	8b e5                	mov    %ebp,%esp
499cae:	5d                   	pop    %ebp
499caf:	c2 20 00             	ret    $0x20
499cb2:	cc                   	int3
499cb3:	cc                   	int3
499cb4:	cc                   	int3
499cb5:	cc                   	int3
499cb6:	cc                   	int3
499cb7:	cc                   	int3
499cb8:	cc                   	int3
499cb9:	cc                   	int3
499cba:	cc                   	int3
499cbb:	cc                   	int3
499cbc:	cc                   	int3
499cbd:	cc                   	int3
499cbe:	cc                   	int3
499cbf:	cc                   	int3
499cc0:	55                   	push   %ebp
499cc1:	8b ec                	mov    %esp,%ebp
499cc3:	6a ff                	push   $0xffffffff
499cc5:	68 f8 7f 65 00       	push   $0x657ff8
499cca:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
499cd0:	50                   	push   %eax
499cd1:	83 ec 48             	sub    $0x48,%esp
499cd4:	a1 d4 89 72 00       	mov    0x7289d4,%eax
499cd9:	33 c5                	xor    %ebp,%eax
499cdb:	89 45 f0             	mov    %eax,-0x10(%ebp)
499cde:	53                   	push   %ebx
499cdf:	56                   	push   %esi
499ce0:	57                   	push   %edi
499ce1:	50                   	push   %eax
499ce2:	8d 45 f4             	lea    -0xc(%ebp),%eax
499ce5:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
499ceb:	8b f9                	mov    %ecx,%edi
499ced:	8b 45 08             	mov    0x8(%ebp),%eax
499cf0:	8b 75 1c             	mov    0x1c(%ebp),%esi
499cf3:	89 45 b4             	mov    %eax,-0x4c(%ebp)
499cf6:	8b 45 24             	mov    0x24(%ebp),%eax
499cf9:	8b 5d 20             	mov    0x20(%ebp),%ebx
499cfc:	89 45 b8             	mov    %eax,-0x48(%ebp)
499cff:	8b 45 14             	mov    0x14(%ebp),%eax
499d02:	89 45 ac             	mov    %eax,-0x54(%ebp)
499d05:	8b 45 18             	mov    0x18(%ebp),%eax
499d08:	89 45 b0             	mov    %eax,-0x50(%ebp)
499d0b:	8b 45 0c             	mov    0xc(%ebp),%eax
499d0e:	89 45 c8             	mov    %eax,-0x38(%ebp)
499d11:	8b 45 10             	mov    0x10(%ebp),%eax
499d14:	89 45 cc             	mov    %eax,-0x34(%ebp)
499d17:	8b 46 30             	mov    0x30(%esi),%eax
499d1a:	8b 48 04             	mov    0x4(%eax),%ecx
499d1d:	89 4d c4             	mov    %ecx,-0x3c(%ebp)
499d20:	8b 01                	mov    (%ecx),%eax
499d22:	ff 50 04             	call   *0x4(%eax)
499d25:	8d 45 c0             	lea    -0x40(%ebp),%eax
499d28:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
499d2f:	50                   	push   %eax
499d30:	ff 76 14             	push   0x14(%esi)
499d33:	8d 45 ac             	lea    -0x54(%ebp),%eax
499d36:	50                   	push   %eax
499d37:	8d 45 c8             	lea    -0x38(%ebp),%eax
499d3a:	50                   	push   %eax
499d3b:	8d 45 d0             	lea    -0x30(%ebp),%eax
499d3e:	50                   	push   %eax
499d3f:	57                   	push   %edi
499d40:	e8 4b f1 ff ff       	call   0x498e90
499d45:	8b 4d c4             	mov    -0x3c(%ebp),%ecx
499d48:	83 c4 18             	add    $0x18,%esp
499d4b:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
499d52:	8b f0                	mov    %eax,%esi
499d54:	85 c9                	test   %ecx,%ecx
499d56:	74 11                	je     0x499d69
499d58:	8b 01                	mov    (%ecx),%eax
499d5a:	ff 50 08             	call   *0x8(%eax)
499d5d:	8b c8                	mov    %eax,%ecx
499d5f:	85 c9                	test   %ecx,%ecx
499d61:	74 06                	je     0x499d69
499d63:	8b 01                	mov    (%ecx),%eax
499d65:	6a 01                	push   $0x1
499d67:	ff 10                	call   *(%eax)
499d69:	80 7d d0 00          	cmpb   $0x0,-0x30(%ebp)
499d6d:	75 04                	jne    0x499d73
499d6f:	33 f6                	xor    %esi,%esi
499d71:	eb 25                	jmp    0x499d98
499d73:	8d 45 c4             	lea    -0x3c(%ebp),%eax
499d76:	50                   	push   %eax
499d77:	56                   	push   %esi
499d78:	8d 45 bc             	lea    -0x44(%ebp),%eax
499d7b:	50                   	push   %eax
499d7c:	8d 45 d0             	lea    -0x30(%ebp),%eax
499d7f:	50                   	push   %eax
499d80:	e8 04 54 13 00       	call   0x5cf189
499d85:	8b f0                	mov    %eax,%esi
499d87:	83 c4 10             	add    $0x10,%esp
499d8a:	8d 45 d0             	lea    -0x30(%ebp),%eax
499d8d:	39 45 bc             	cmp    %eax,-0x44(%ebp)
499d90:	74 06                	je     0x499d98
499d92:	83 7d c4 00          	cmpl   $0x0,-0x3c(%ebp)
499d96:	74 06                	je     0x499d9e
499d98:	c7 03 02 00 00 00    	movl   $0x2,(%ebx)
499d9e:	8d 45 ac             	lea    -0x54(%ebp),%eax
499da1:	50                   	push   %eax
499da2:	8d 45 c8             	lea    -0x38(%ebp),%eax
499da5:	50                   	push   %eax
499da6:	e8 35 94 ff ff       	call   0x4931e0
499dab:	83 c4 08             	add    $0x8,%esp
499dae:	84 c0                	test   %al,%al
499db0:	74 03                	je     0x499db5
499db2:	83 0b 01             	orl    $0x1,(%ebx)
499db5:	8b 45 b8             	mov    -0x48(%ebp),%eax
499db8:	8b 4d c8             	mov    -0x38(%ebp),%ecx
499dbb:	89 30                	mov    %esi,(%eax)
499dbd:	8b 45 b4             	mov    -0x4c(%ebp),%eax
499dc0:	89 08                	mov    %ecx,(%eax)
499dc2:	8b 4d cc             	mov    -0x34(%ebp),%ecx
499dc5:	89 48 04             	mov    %ecx,0x4(%eax)
499dc8:	8b 4d f4             	mov    -0xc(%ebp),%ecx
499dcb:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
499dd2:	59                   	pop    %ecx
499dd3:	5f                   	pop    %edi
499dd4:	5e                   	pop    %esi
499dd5:	5b                   	pop    %ebx
499dd6:	8b 4d f0             	mov    -0x10(%ebp),%ecx
499dd9:	33 cd                	xor    %ebp,%ecx
499ddb:	e8 fa 76 14 00       	call   0x5e14da
499de0:	8b e5                	mov    %ebp,%esp
499de2:	5d                   	pop    %ebp
499de3:	c2 20 00             	ret    $0x20
499de6:	cc                   	int3
499de7:	cc                   	int3
499de8:	cc                   	int3
499de9:	cc                   	int3
499dea:	cc                   	int3
499deb:	cc                   	int3
499dec:	cc                   	int3
499ded:	cc                   	int3
499dee:	cc                   	int3
499def:	cc                   	int3
499df0:	55                   	push   %ebp
499df1:	8b ec                	mov    %esp,%ebp
499df3:	6a ff                	push   $0xffffffff
499df5:	68 28 80 65 00       	push   $0x658028
499dfa:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
499e00:	50                   	push   %eax
499e01:	83 ec 38             	sub    $0x38,%esp
499e04:	a1 d4 89 72 00       	mov    0x7289d4,%eax
499e09:	33 c5                	xor    %ebp,%eax
499e0b:	89 45 f0             	mov    %eax,-0x10(%ebp)
499e0e:	53                   	push   %ebx
499e0f:	56                   	push   %esi
499e10:	57                   	push   %edi
499e11:	50                   	push   %eax
499e12:	8d 45 f4             	lea    -0xc(%ebp),%eax
499e15:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
499e1b:	8b f9                	mov    %ecx,%edi
499e1d:	8b 45 08             	mov    0x8(%ebp),%eax
499e20:	8b 75 1c             	mov    0x1c(%ebp),%esi
499e23:	8b 5d 20             	mov    0x20(%ebp),%ebx
499e26:	89 45 bc             	mov    %eax,-0x44(%ebp)
499e29:	8b 45 24             	mov    0x24(%ebp),%eax
499e2c:	89 45 cc             	mov    %eax,-0x34(%ebp)
499e2f:	8b 46 30             	mov    0x30(%esi),%eax
499e32:	8b 48 04             	mov    0x4(%eax),%ecx
499e35:	89 4d c8             	mov    %ecx,-0x38(%ebp)
499e38:	8b 01                	mov    (%ecx),%eax
499e3a:	ff 50 04             	call   *0x4(%eax)
499e3d:	8d 45 c4             	lea    -0x3c(%ebp),%eax
499e40:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
499e47:	50                   	push   %eax
499e48:	ff 76 14             	push   0x14(%esi)
499e4b:	8d 45 14             	lea    0x14(%ebp),%eax
499e4e:	50                   	push   %eax
499e4f:	8d 45 0c             	lea    0xc(%ebp),%eax
499e52:	50                   	push   %eax
499e53:	8d 45 d0             	lea    -0x30(%ebp),%eax
499e56:	50                   	push   %eax
499e57:	57                   	push   %edi
499e58:	e8 33 f0 ff ff       	call   0x498e90
499e5d:	8b 4d c8             	mov    -0x38(%ebp),%ecx
499e60:	83 c4 18             	add    $0x18,%esp
499e63:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
499e6a:	8b f0                	mov    %eax,%esi
499e6c:	85 c9                	test   %ecx,%ecx
499e6e:	74 11                	je     0x499e81
499e70:	8b 01                	mov    (%ecx),%eax
499e72:	ff 50 08             	call   *0x8(%eax)
499e75:	8b c8                	mov    %eax,%ecx
499e77:	85 c9                	test   %ecx,%ecx
499e79:	74 06                	je     0x499e81
499e7b:	8b 01                	mov    (%ecx),%eax
499e7d:	6a 01                	push   $0x1
499e7f:	ff 10                	call   *(%eax)
499e81:	80 7d d0 00          	cmpb   $0x0,-0x30(%ebp)
499e85:	75 11                	jne    0x499e98
499e87:	8b 4d cc             	mov    -0x34(%ebp),%ecx
499e8a:	c7 03 02 00 00 00    	movl   $0x2,(%ebx)
499e90:	c7 01 00 00 00 00    	movl   $0x0,(%ecx)
499e96:	eb 2e                	jmp    0x499ec6
499e98:	8d 45 c8             	lea    -0x38(%ebp),%eax
499e9b:	50                   	push   %eax
499e9c:	56                   	push   %esi
499e9d:	8d 45 c0             	lea    -0x40(%ebp),%eax
499ea0:	50                   	push   %eax
499ea1:	8d 45 d0             	lea    -0x30(%ebp),%eax
499ea4:	50                   	push   %eax
499ea5:	e8 3a 52 13 00       	call   0x5cf0e4
499eaa:	8b 4d cc             	mov    -0x34(%ebp),%ecx
499ead:	83 c4 10             	add    $0x10,%esp
499eb0:	89 01                	mov    %eax,(%ecx)
499eb2:	8d 45 d0             	lea    -0x30(%ebp),%eax
499eb5:	39 45 c0             	cmp    %eax,-0x40(%ebp)
499eb8:	74 06                	je     0x499ec0
499eba:	83 7d c8 00          	cmpl   $0x0,-0x38(%ebp)
499ebe:	74 06                	je     0x499ec6
499ec0:	c7 03 02 00 00 00    	movl   $0x2,(%ebx)
499ec6:	8d 45 14             	lea    0x14(%ebp),%eax
499ec9:	50                   	push   %eax
499eca:	8d 45 0c             	lea    0xc(%ebp),%eax
499ecd:	50                   	push   %eax
499ece:	e8 0d 93 ff ff       	call   0x4931e0
499ed3:	83 c4 08             	add    $0x8,%esp
499ed6:	84 c0                	test   %al,%al
499ed8:	74 03                	je     0x499edd
499eda:	83 0b 01             	orl    $0x1,(%ebx)
499edd:	8b 45 bc             	mov    -0x44(%ebp),%eax
499ee0:	8b 4d 0c             	mov    0xc(%ebp),%ecx
499ee3:	89 08                	mov    %ecx,(%eax)
499ee5:	8b 4d 10             	mov    0x10(%ebp),%ecx
499ee8:	89 48 04             	mov    %ecx,0x4(%eax)
499eeb:	8b 4d f4             	mov    -0xc(%ebp),%ecx
499eee:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
499ef5:	59                   	pop    %ecx
499ef6:	5f                   	pop    %edi
499ef7:	5e                   	pop    %esi
499ef8:	5b                   	pop    %ebx
499ef9:	8b 4d f0             	mov    -0x10(%ebp),%ecx
499efc:	33 cd                	xor    %ebp,%ecx
499efe:	e8 d7 75 14 00       	call   0x5e14da
499f03:	8b e5                	mov    %ebp,%esp
499f05:	5d                   	pop    %ebp
499f06:	c2 20 00             	ret    $0x20
499f09:	cc                   	int3
499f0a:	cc                   	int3
499f0b:	cc                   	int3
499f0c:	cc                   	int3
499f0d:	cc                   	int3
499f0e:	cc                   	int3
499f0f:	cc                   	int3
499f10:	55                   	push   %ebp
499f11:	8b ec                	mov    %esp,%ebp
499f13:	6a ff                	push   $0xffffffff
499f15:	68 28 80 65 00       	push   $0x658028
499f1a:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
499f20:	50                   	push   %eax
499f21:	83 ec 38             	sub    $0x38,%esp
499f24:	a1 d4 89 72 00       	mov    0x7289d4,%eax
499f29:	33 c5                	xor    %ebp,%eax
499f2b:	89 45 f0             	mov    %eax,-0x10(%ebp)
499f2e:	53                   	push   %ebx
499f2f:	56                   	push   %esi
499f30:	57                   	push   %edi
499f31:	50                   	push   %eax
499f32:	8d 45 f4             	lea    -0xc(%ebp),%eax
499f35:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
499f3b:	8b f9                	mov    %ecx,%edi
499f3d:	8b 45 08             	mov    0x8(%ebp),%eax
499f40:	8b 75 1c             	mov    0x1c(%ebp),%esi
499f43:	8b 5d 20             	mov    0x20(%ebp),%ebx
499f46:	89 45 bc             	mov    %eax,-0x44(%ebp)
499f49:	8b 45 24             	mov    0x24(%ebp),%eax
499f4c:	89 45 cc             	mov    %eax,-0x34(%ebp)
499f4f:	8b 46 30             	mov    0x30(%esi),%eax
499f52:	8b 48 04             	mov    0x4(%eax),%ecx
499f55:	89 4d c8             	mov    %ecx,-0x38(%ebp)
499f58:	8b 01                	mov    (%ecx),%eax
499f5a:	ff 50 04             	call   *0x4(%eax)
499f5d:	8d 45 c4             	lea    -0x3c(%ebp),%eax
499f60:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
499f67:	50                   	push   %eax
499f68:	ff 76 14             	push   0x14(%esi)
499f6b:	8d 45 14             	lea    0x14(%ebp),%eax
499f6e:	50                   	push   %eax
499f6f:	8d 45 0c             	lea    0xc(%ebp),%eax
499f72:	50                   	push   %eax
499f73:	8d 45 d0             	lea    -0x30(%ebp),%eax
499f76:	50                   	push   %eax
499f77:	57                   	push   %edi
499f78:	e8 13 ef ff ff       	call   0x498e90
499f7d:	8b 4d c8             	mov    -0x38(%ebp),%ecx
499f80:	83 c4 18             	add    $0x18,%esp
499f83:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
499f8a:	8b f0                	mov    %eax,%esi
499f8c:	85 c9                	test   %ecx,%ecx
499f8e:	74 11                	je     0x499fa1
499f90:	8b 01                	mov    (%ecx),%eax
499f92:	ff 50 08             	call   *0x8(%eax)
499f95:	8b c8                	mov    %eax,%ecx
499f97:	85 c9                	test   %ecx,%ecx
499f99:	74 06                	je     0x499fa1
499f9b:	8b 01                	mov    (%ecx),%eax
499f9d:	6a 01                	push   $0x1
499f9f:	ff 10                	call   *(%eax)
499fa1:	80 7d d0 00          	cmpb   $0x0,-0x30(%ebp)
499fa5:	75 11                	jne    0x499fb8
499fa7:	8b 4d cc             	mov    -0x34(%ebp),%ecx
499faa:	c7 03 02 00 00 00    	movl   $0x2,(%ebx)
499fb0:	c7 01 00 00 00 00    	movl   $0x0,(%ecx)
499fb6:	eb 2e                	jmp    0x499fe6
499fb8:	8d 45 c8             	lea    -0x38(%ebp),%eax
499fbb:	50                   	push   %eax
499fbc:	56                   	push   %esi
499fbd:	8d 45 c0             	lea    -0x40(%ebp),%eax
499fc0:	50                   	push   %eax
499fc1:	8d 45 d0             	lea    -0x30(%ebp),%eax
499fc4:	50                   	push   %eax
499fc5:	e8 bf 51 13 00       	call   0x5cf189
499fca:	8b 4d cc             	mov    -0x34(%ebp),%ecx
499fcd:	83 c4 10             	add    $0x10,%esp
499fd0:	89 01                	mov    %eax,(%ecx)
499fd2:	8d 45 d0             	lea    -0x30(%ebp),%eax
499fd5:	39 45 c0             	cmp    %eax,-0x40(%ebp)
499fd8:	74 06                	je     0x499fe0
499fda:	83 7d c8 00          	cmpl   $0x0,-0x38(%ebp)
499fde:	74 06                	je     0x499fe6
499fe0:	c7 03 02 00 00 00    	movl   $0x2,(%ebx)
499fe6:	8d 45 14             	lea    0x14(%ebp),%eax
499fe9:	50                   	push   %eax
499fea:	8d 45 0c             	lea    0xc(%ebp),%eax
499fed:	50                   	push   %eax
499fee:	e8 ed 91 ff ff       	call   0x4931e0
499ff3:	83 c4 08             	add    $0x8,%esp
499ff6:	84 c0                	test   %al,%al
499ff8:	74 03                	je     0x499ffd
499ffa:	83 0b 01             	orl    $0x1,(%ebx)
499ffd:	8b 45 bc             	mov    -0x44(%ebp),%eax
49a000:	8b 4d 0c             	mov    0xc(%ebp),%ecx
49a003:	89 08                	mov    %ecx,(%eax)
49a005:	8b 4d 10             	mov    0x10(%ebp),%ecx
49a008:	89 48 04             	mov    %ecx,0x4(%eax)
49a00b:	8b 4d f4             	mov    -0xc(%ebp),%ecx
49a00e:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
49a015:	59                   	pop    %ecx
49a016:	5f                   	pop    %edi