46777e:	89 46 30             	mov    %eax,0x30(%esi)
467781:	59                   	pop    %ecx
467782:	75 05                	jne    0x467789
467784:	21 5e 2c             	and    %ebx,0x2c(%esi)
467787:	eb 19                	jmp    0x4677a2
467789:	8b 4e 2c             	mov    0x2c(%esi),%ecx
46778c:	3b cf                	cmp    %edi,%ecx
46778e:	77 0b                	ja     0x46779b
467790:	51                   	push   %ecx
467791:	53                   	push   %ebx
467792:	50                   	push   %eax
467793:	e8 d8 00 fb ff       	call   0x417870
467798:	83 c4 0c             	add    $0xc,%esp
46779b:	53                   	push   %ebx
46779c:	e8 df 88 fd ff       	call   0x440080
4677a1:	59                   	pop    %ecx
4677a2:	5b                   	pop    %ebx
4677a3:	89 7e 28             	mov    %edi,0x28(%esi)
4677a6:	33 c0                	xor    %eax,%eax
4677a8:	5f                   	pop    %edi
4677a9:	40                   	inc    %eax
4677aa:	5e                   	pop    %esi
4677ab:	c2 04 00             	ret    $0x4
4677ae:	55                   	push   %ebp
4677af:	8b ec                	mov    %esp,%ebp
4677b1:	51                   	push   %ecx
4677b2:	8b 41 14             	mov    0x14(%ecx),%eax
4677b5:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
4677b9:	85 c0                	test   %eax,%eax
4677bb:	74 16                	je     0x4677d3
4677bd:	6a 00                	push   $0x0
4677bf:	6a 00                	push   $0x0
4677c1:	8d 4d fc             	lea    -0x4(%ebp),%ecx
4677c4:	51                   	push   %ecx
4677c5:	50                   	push   %eax
4677c6:	ff 15 f8 09 4b 00    	call   *0x4b09f8
4677cc:	85 c0                	test   %eax,%eax
4677ce:	75 03                	jne    0x4677d3
4677d0:	21 45 fc             	and    %eax,-0x4(%ebp)
4677d3:	8b 45 fc             	mov    -0x4(%ebp),%eax
4677d6:	33 d2                	xor    %edx,%edx
4677d8:	c9                   	leave
4677d9:	c3                   	ret
4677da:	e8 52 dc fc ff       	call   0x435431
4677df:	cc                   	int3
4677e0:	e8 4c dc fc ff       	call   0x435431
4677e5:	cc                   	int3
4677e6:	e8 46 dc fc ff       	call   0x435431
4677eb:	cc                   	int3
4677ec:	e9 40 dc fc ff       	jmp    0x435431
4677f1:	ff 74 24 10          	push   0x10(%esp)
4677f5:	ff 74 24 10          	push   0x10(%esp)
4677f9:	ff 74 24 10          	push   0x10(%esp)
4677fd:	ff 74 24 10          	push   0x10(%esp)
467801:	ff 71 04             	push   0x4(%ecx)
467804:	ff 15 10 0a 4b 00    	call   *0x4b0a10
46780a:	c2 10 00             	ret    $0x10
46780d:	ff 74 24 0c          	push   0xc(%esp)
467811:	ff 74 24 0c          	push   0xc(%esp)
467815:	ff 74 24 0c          	push   0xc(%esp)
467819:	ff 71 04             	push   0x4(%ecx)
46781c:	ff 15 04 0a 4b 00    	call   *0x4b0a04
467822:	c2 0c 00             	ret    $0xc
467825:	55                   	push   %ebp
467826:	8b ec                	mov    %esp,%ebp
467828:	51                   	push   %ecx
467829:	8d 45 fc             	lea    -0x4(%ebp),%eax
46782c:	50                   	push   %eax
46782d:	ff 75 0c             	push   0xc(%ebp)
467830:	c7 45 fc 04 00 00 00 	movl   $0x4,-0x4(%ebp)
467837:	ff 75 08             	push   0x8(%ebp)
46783a:	ff 71 04             	push   0x4(%ecx)
46783d:	ff 15 04 0a 4b 00    	call   *0x4b0a04
467843:	c9                   	leave
467844:	c2 08 00             	ret    $0x8
467847:	ff 74 24 04          	push   0x4(%esp)
46784b:	ff 71 04             	push   0x4(%ecx)
46784e:	ff 15 f4 09 4b 00    	call   *0x4b09f4
467854:	c2 04 00             	ret    $0x4
467857:	ff 74 24 08          	push   0x8(%esp)
46785b:	ff 74 24 08          	push   0x8(%esp)
46785f:	ff 71 04             	push   0x4(%ecx)
467862:	ff 15 f0 09 4b 00    	call   *0x4b09f0
467868:	c2 08 00             	ret    $0x8
46786b:	ff 74 24 04          	push   0x4(%esp)
46786f:	ff 71 04             	push   0x4(%ecx)
467872:	ff 15 ec 09 4b 00    	call   *0x4b09ec
467878:	c2 04 00             	ret    $0x4
46787b:	ff 74 24 04          	push   0x4(%esp)
46787f:	ff 71 04             	push   0x4(%ecx)
467882:	ff 15 e8 09 4b 00    	call   *0x4b09e8
467888:	c2 04 00             	ret    $0x4
46788b:	ff 74 24 04          	push   0x4(%esp)
46788f:	ff 71 04             	push   0x4(%ecx)
467892:	ff 15 e4 09 4b 00    	call   *0x4b09e4
467898:	c2 04 00             	ret    $0x4
46789b:	ff 74 24 08          	push   0x8(%esp)
46789f:	ff 74 24 08          	push   0x8(%esp)
4678a3:	ff 71 04             	push   0x4(%ecx)
4678a6:	ff 15 e0 09 4b 00    	call   *0x4b09e0
4678ac:	c2 08 00             	ret    $0x8
4678af:	8b 44 24 10          	mov    0x10(%esp),%eax
4678b3:	83 f8 01             	cmp    $0x1,%eax
4678b6:	75 03                	jne    0x4678bb
4678b8:	8b 41 08             	mov    0x8(%ecx),%eax
4678bb:	50                   	push   %eax
4678bc:	ff 74 24 10          	push   0x10(%esp)
4678c0:	ff 74 24 10          	push   0x10(%esp)
4678c4:	ff 74 24 10          	push   0x10(%esp)
4678c8:	ff 71 04             	push   0x4(%ecx)
4678cb:	ff 15 dc 09 4b 00    	call   *0x4b09dc
4678d1:	c2 10 00             	ret    $0x10
4678d4:	55                   	push   %ebp
4678d5:	8b ec                	mov    %esp,%ebp
4678d7:	8b 45 1c             	mov    0x1c(%ebp),%eax
4678da:	83 f8 01             	cmp    $0x1,%eax
4678dd:	75 03                	jne    0x4678e2
4678df:	8b 41 08             	mov    0x8(%ecx),%eax
4678e2:	50                   	push   %eax
4678e3:	ff 75 18             	push   0x18(%ebp)
4678e6:	ff 75 14             	push   0x14(%ebp)
4678e9:	ff 75 10             	push   0x10(%ebp)
4678ec:	ff 75 0c             	push   0xc(%ebp)
4678ef:	ff 75 08             	push   0x8(%ebp)
4678f2:	ff 71 04             	push   0x4(%ecx)
4678f5:	ff 15 d8 09 4b 00    	call   *0x4b09d8
4678fb:	5d                   	pop    %ebp
4678fc:	c2 18 00             	ret    $0x18
4678ff:	55                   	push   %ebp
467900:	8b ec                	mov    %esp,%ebp
467902:	56                   	push   %esi
467903:	8b 75 14             	mov    0x14(%ebp),%esi
467906:	85 f6                	test   %esi,%esi
467908:	57                   	push   %edi
467909:	8b f9                	mov    %ecx,%edi
46790b:	75 06                	jne    0x467913
46790d:	21 75 14             	and    %esi,0x14(%ebp)
467910:	8d 75 14             	lea    0x14(%ebp),%esi
467913:	8b 45 08             	mov    0x8(%ebp),%eax
467916:	85 c0                	test   %eax,%eax
467918:	74 07                	je     0x467921
46791a:	8b 40 1c             	mov    0x1c(%eax),%eax
46791d:	85 c0                	test   %eax,%eax
46791f:	75 06                	jne    0x467927
467921:	ff 15 60 08 4b 00    	call   *0x4b0860
467927:	56                   	push   %esi
467928:	ff 75 10             	push   0x10(%ebp)
46792b:	ff 75 0c             	push   0xc(%ebp)
46792e:	ff 77 14             	push   0x14(%edi)
467931:	50                   	push   %eax
467932:	ff 15 d4 09 4b 00    	call   *0x4b09d4
467938:	5f                   	pop    %edi
467939:	5e                   	pop    %esi
46793a:	5d                   	pop    %ebp
46793b:	c2 10 00             	ret    $0x10
46793e:	55                   	push   %ebp
46793f:	8b ec                	mov    %esp,%ebp
467941:	8b 45 10             	mov    0x10(%ebp),%eax
467944:	83 f8 ff             	cmp    $0xffffffff,%eax
467947:	56                   	push   %esi
467948:	8b f1                	mov    %ecx,%esi
46794a:	75 10                	jne    0x46795c
46794c:	33 c0                	xor    %eax,%eax
46794e:	39 45 08             	cmp    %eax,0x8(%ebp)
467951:	74 09                	je     0x46795c
467953:	ff 75 08             	push   0x8(%ebp)
467956:	ff 15 88 03 4b 00    	call   *0x4b0388
46795c:	ff 75 0c             	push   0xc(%ebp)
46795f:	50                   	push   %eax
467960:	ff 75 08             	push   0x8(%ebp)
467963:	ff 76 14             	push   0x14(%esi)
467966:	ff 15 d0 09 4b 00    	call   *0x4b09d0
46796c:	5e                   	pop    %esi
46796d:	5d                   	pop    %ebp
46796e:	c2 0c 00             	ret    $0xc
467971:	ff 74 24 10          	push   0x10(%esp)
467975:	ff 74 24 10          	push   0x10(%esp)
467979:	ff 74 24 10          	push   0x10(%esp)
46797d:	ff 74 24 10          	push   0x10(%esp)
467981:	ff 71 14             	push   0x14(%ecx)
467984:	ff 15 cc 09 4b 00    	call   *0x4b09cc
46798a:	c2 10 00             	ret    $0x10
46798d:	55                   	push   %ebp
46798e:	8b ec                	mov    %esp,%ebp
467990:	51                   	push   %ecx
467991:	ff 75 10             	push   0x10(%ebp)
467994:	8d 45 fc             	lea    -0x4(%ebp),%eax
467997:	50                   	push   %eax
467998:	ff 75 0c             	push   0xc(%ebp)
46799b:	8b 45 08             	mov    0x8(%ebp),%eax
46799e:	0d 00 00 00 20       	or     $0x20000000,%eax
4679a3:	50                   	push   %eax
4679a4:	c7 45 fc 04 00 00 00 	movl   $0x4,-0x4(%ebp)
4679ab:	e8 c1 ff ff ff       	call   0x467971
4679b0:	c9                   	leave
4679b1:	c2 0c 00             	ret    $0xc
4679b4:	55                   	push   %ebp
4679b5:	8b ec                	mov    %esp,%ebp
4679b7:	51                   	push   %ecx
4679b8:	ff 75 10             	push   0x10(%ebp)
4679bb:	8d 45 fc             	lea    -0x4(%ebp),%eax
4679be:	50                   	push   %eax
4679bf:	ff 75 0c             	push   0xc(%ebp)
4679c2:	8b 45 08             	mov    0x8(%ebp),%eax
4679c5:	0d 00 00 00 40       	or     $0x40000000,%eax
4679ca:	50                   	push   %eax
4679cb:	c7 45 fc 10 00 00 00 	movl   $0x10,-0x4(%ebp)
4679d2:	e8 9a ff ff ff       	call   0x467971
4679d7:	c9                   	leave
4679d8:	c2 0c 00             	ret    $0xc
4679db:	55                   	push   %ebp
4679dc:	8b ec                	mov    %esp,%ebp
4679de:	83 ec 58             	sub    $0x58,%esp
4679e1:	a1 40 8b 4a 00       	mov    0x4a8b40,%eax
4679e6:	56                   	push   %esi
4679e7:	6a 00                	push   $0x0
4679e9:	89 45 fc             	mov    %eax,-0x4(%ebp)
4679ec:	8d 45 a8             	lea    -0x58(%ebp),%eax
4679ef:	50                   	push   %eax
4679f0:	8d 45 ac             	lea    -0x54(%ebp),%eax
4679f3:	50                   	push   %eax
4679f4:	6a 13                	push   $0x13
4679f6:	ff 71 14             	push   0x14(%ecx)
4679f9:	c7 45 a8 50 00 00 00 	movl   $0x50,-0x58(%ebp)
467a00:	ff 15 cc 09 4b 00    	call   *0x4b09cc
467a06:	8b f0                	mov    %eax,%esi
467a08:	85 f6                	test   %esi,%esi
467a0a:	74 0f                	je     0x467a1b
467a0c:	8d 45 ac             	lea    -0x54(%ebp),%eax
467a0f:	50                   	push   %eax
467a10:	e8 34 04 fb ff       	call   0x417e49
467a15:	59                   	pop    %ecx
467a16:	8b 4d 08             	mov    0x8(%ebp),%ecx
467a19:	89 01                	mov    %eax,(%ecx)
467a1b:	8b 4d fc             	mov    -0x4(%ebp),%ecx
467a1e:	8b c6                	mov    %esi,%eax
467a20:	5e                   	pop    %esi
467a21:	e8 b8 01 fb ff       	call   0x417bde
467a26:	c9                   	leave
467a27:	c2 04 00             	ret    $0x4
467a2a:	e8 02 da fc ff       	call   0x435431
467a2f:	cc                   	int3
467a30:	e8 fc d9 fc ff       	call   0x435431
467a35:	cc                   	int3
467a36:	b8 09 25 48 00       	mov    $0x482509,%eax
467a3b:	e8 3c 02 fb ff       	call   0x417c7c
467a40:	51                   	push   %ecx
467a41:	56                   	push   %esi
467a42:	8b f1                	mov    %ecx,%esi
467a44:	89 75 f0             	mov    %esi,-0x10(%ebp)
467a47:	c7 06 54 9f 48 00    	movl   $0x489f54,(%esi)
467a4d:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
467a51:	e8 23 1c fa ff       	call   0x409679
467a56:	83 4d fc ff          	orl    $0xffffffff,-0x4(%ebp)
467a5a:	8b ce                	mov    %esi,%ecx
467a5c:	e8 39 1e fa ff       	call   0x40989a
467a61:	8b 4d f4             	mov    -0xc(%ebp),%ecx
467a64:	5e                   	pop    %esi
467a65:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
467a6c:	c9                   	leave
467a6d:	c3                   	ret
467a6e:	56                   	push   %esi
467a6f:	8b f1                	mov    %ecx,%esi
467a71:	83 7e 0c 00          	cmpl   $0x0,0xc(%esi)
467a75:	74 18                	je     0x467a8f
467a77:	83 7e 04 00          	cmpl   $0x0,0x4(%esi)
467a7b:	75 16                	jne    0x467a93
467a7d:	68 40 01 00 00       	push   $0x140
467a82:	e8 ce 85 fd ff       	call   0x440055
467a87:	85 c0                	test   %eax,%eax
467a89:	59                   	pop    %ecx
467a8a:	89 46 04             	mov    %eax,0x4(%esi)
467a8d:	75 04                	jne    0x467a93
467a8f:	33 c0                	xor    %eax,%eax
467a91:	5e                   	pop    %esi
467a92:	c3                   	ret
467a93:	8b 46 04             	mov    0x4(%esi),%eax
467a96:	8b 4e 08             	mov    0x8(%esi),%ecx
467a99:	50                   	push   %eax
467a9a:	ff 76 0c             	push   0xc(%esi)
467a9d:	89 4e 04             	mov    %ecx,0x4(%esi)
467aa0:	89 46 08             	mov    %eax,0x8(%esi)
467aa3:	ff 15 c8 09 4b 00    	call   *0x4b09c8
467aa9:	5e                   	pop    %esi
467aaa:	c3                   	ret
467aab:	56                   	push   %esi
467aac:	8b f1                	mov    %ecx,%esi
467aae:	8b 46 0c             	mov    0xc(%esi),%eax
467ab1:	85 c0                	test   %eax,%eax
467ab3:	74 10                	je     0x467ac5
467ab5:	83 f8 ff             	cmp    $0xffffffff,%eax
467ab8:	74 0b                	je     0x467ac5
467aba:	50                   	push   %eax
467abb:	ff 15 c4 09 4b 00    	call   *0x4b09c4
467ac1:	83 66 0c 00          	andl   $0x0,0xc(%esi)
467ac5:	5e                   	pop    %esi
467ac6:	c3                   	ret
467ac7:	b8 1b 25 48 00       	mov    $0x48251b,%eax
467acc:	e8 ab 01 fb ff       	call   0x417c7c
467ad1:	51                   	push   %ecx
467ad2:	56                   	push   %esi
467ad3:	8b f1                	mov    %ecx,%esi
467ad5:	89 75 f0             	mov    %esi,-0x10(%ebp)
467ad8:	c7 06 a4 9f 48 00    	movl   $0x489fa4,(%esi)
467ade:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
467ae2:	e8 92 1b fa ff       	call   0x409679
467ae7:	83 4d fc ff          	orl    $0xffffffff,-0x4(%ebp)
467aeb:	8b ce                	mov    %esi,%ecx
467aed:	e8 a8 1d fa ff       	call   0x40989a
467af2:	8b 4d f4             	mov    -0xc(%ebp),%ecx
467af5:	5e                   	pop    %esi
467af6:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
467afd:	c9                   	leave
467afe:	c3                   	ret
467aff:	56                   	push   %esi
467b00:	8b f1                	mov    %ecx,%esi
467b02:	83 7e 0c 00          	cmpl   $0x0,0xc(%esi)
467b06:	74 18                	je     0x467b20
467b08:	83 7e 04 00          	cmpl   $0x0,0x4(%esi)
467b0c:	75 16                	jne    0x467b24
467b0e:	68 28 03 00 00       	push   $0x328
467b13:	e8 3d 85 fd ff       	call   0x440055
467b18:	85 c0                	test   %eax,%eax
467b1a:	59                   	pop    %ecx
467b1b:	89 46 04             	mov    %eax,0x4(%esi)
467b1e:	75 04                	jne    0x467b24
467b20:	33 c0                	xor    %eax,%eax
467b22:	5e                   	pop    %esi
467b23:	c3                   	ret
467b24:	8b 46 04             	mov    0x4(%esi),%eax
467b27:	8b 4e 08             	mov    0x8(%esi),%ecx
467b2a:	50                   	push   %eax
467b2b:	ff 76 0c             	push   0xc(%esi)
467b2e:	89 4e 04             	mov    %ecx,0x4(%esi)
467b31:	89 46 08             	mov    %eax,0x8(%esi)
467b34:	ff 15 c8 09 4b 00    	call   *0x4b09c8
467b3a:	5e                   	pop    %esi
467b3b:	c3                   	ret
467b3c:	56                   	push   %esi
467b3d:	8b f1                	mov    %ecx,%esi
467b3f:	8b 46 0c             	mov    0xc(%esi),%eax
467b42:	85 c0                	test   %eax,%eax
467b44:	74 10                	je     0x467b56
467b46:	83 f8 ff             	cmp    $0xffffffff,%eax
467b49:	74 0b                	je     0x467b56
467b4b:	50                   	push   %eax
467b4c:	ff 15 c4 09 4b 00    	call   *0x4b09c4
467b52:	83 66 0c 00          	andl   $0x0,0xc(%esi)
467b56:	5e                   	pop    %esi
467b57:	c3                   	ret