426c44:	8d 71 20             	lea    0x20(%ecx),%esi
426c47:	72 02                	jb     0x426c4b
426c49:	8b 36                	mov    (%esi),%esi
426c4b:	83 79 1c 08          	cmpl   $0x8,0x1c(%ecx)
426c4f:	8d 79 08             	lea    0x8(%ecx),%edi
426c52:	72 02                	jb     0x426c56
426c54:	8b 3f                	mov    (%edi),%edi
426c56:	83 79 7c 08          	cmpl   $0x8,0x7c(%ecx)
426c5a:	8d 59 68             	lea    0x68(%ecx),%ebx
426c5d:	72 02                	jb     0x426c61
426c5f:	8b 1b                	mov    (%ebx),%ebx
426c61:	83 ec 08             	sub    $0x8,%esp
426c64:	8b 49 04             	mov    0x4(%ecx),%ecx
426c67:	ff 75 18             	push   0x18(%ebp)
426c6a:	ff 75 14             	push   0x14(%ebp)
426c6d:	ff 75 10             	push   0x10(%ebp)
426c70:	ff 75 0c             	push   0xc(%ebp)
426c73:	50                   	push   %eax
426c74:	52                   	push   %edx
426c75:	56                   	push   %esi
426c76:	57                   	push   %edi
426c77:	ff 75 08             	push   0x8(%ebp)
426c7a:	53                   	push   %ebx
426c7b:	e8 40 95 ff ff       	call   0x4201c0
426c80:	5f                   	pop    %edi
426c81:	5e                   	pop    %esi
426c82:	5b                   	pop    %ebx
426c83:	8b e5                	mov    %ebp,%esp
426c85:	5d                   	pop    %ebp
426c86:	c2 14 00             	ret    $0x14
426c89:	cc                   	int3
426c8a:	cc                   	int3
426c8b:	cc                   	int3
426c8c:	cc                   	int3
426c8d:	cc                   	int3
426c8e:	cc                   	int3
426c8f:	cc                   	int3
426c90:	53                   	push   %ebx
426c91:	56                   	push   %esi
426c92:	57                   	push   %edi
426c93:	6a 00                	push   $0x0
426c95:	6a 00                	push   $0x0
426c97:	8b d9                	mov    %ecx,%ebx
426c99:	ff 15 80 e0 49 00    	call   *0x49e080
426c9f:	8b f8                	mov    %eax,%edi
426ca1:	85 ff                	test   %edi,%edi
426ca3:	74 37                	je     0x426cdc
426ca5:	33 c9                	xor    %ecx,%ecx
426ca7:	8d 47 01             	lea    0x1(%edi),%eax
426caa:	ba 02 00 00 00       	mov    $0x2,%edx
426caf:	f7 e2                	mul    %edx
426cb1:	0f 90 c1             	seto   %cl
426cb4:	f7 d9                	neg    %ecx
426cb6:	0b c8                	or     %eax,%ecx
426cb8:	51                   	push   %ecx
426cb9:	e8 43 2a 05 00       	call   0x479701
426cbe:	8b f0                	mov    %eax,%esi
426cc0:	83 c4 04             	add    $0x4,%esp
426cc3:	85 f6                	test   %esi,%esi
426cc5:	74 15                	je     0x426cdc
426cc7:	56                   	push   %esi
426cc8:	57                   	push   %edi
426cc9:	ff 15 80 e0 49 00    	call   *0x49e080
426ccf:	85 c0                	test   %eax,%eax
426cd1:	75 0f                	jne    0x426ce2
426cd3:	56                   	push   %esi
426cd4:	e8 a9 29 05 00       	call   0x479682
426cd9:	83 c4 04             	add    $0x4,%esp
426cdc:	5f                   	pop    %edi
426cdd:	5e                   	pop    %esi
426cde:	32 c0                	xor    %al,%al
426ce0:	5b                   	pop    %ebx
426ce1:	c3                   	ret
426ce2:	8b ce                	mov    %esi,%ecx
426ce4:	8d 51 02             	lea    0x2(%ecx),%edx
426ce7:	66 8b 01             	mov    (%ecx),%ax
426cea:	83 c1 02             	add    $0x2,%ecx
426ced:	66 85 c0             	test   %ax,%ax
426cf0:	75 f5                	jne    0x426ce7
426cf2:	2b ca                	sub    %edx,%ecx
426cf4:	d1 f9                	sar    $1,%ecx
426cf6:	51                   	push   %ecx
426cf7:	56                   	push   %esi
426cf8:	8b cb                	mov    %ebx,%ecx
426cfa:	e8 01 c1 fd ff       	call   0x402e00
426cff:	56                   	push   %esi
426d00:	e8 7d 29 05 00       	call   0x479682
426d05:	83 c4 04             	add    $0x4,%esp
426d08:	b0 01                	mov    $0x1,%al
426d0a:	5f                   	pop    %edi
426d0b:	5e                   	pop    %esi
426d0c:	5b                   	pop    %ebx
426d0d:	c3                   	ret
426d0e:	cc                   	int3
426d0f:	cc                   	int3
426d10:	55                   	push   %ebp
426d11:	8b ec                	mov    %esp,%ebp
426d13:	6a ff                	push   $0xffffffff
426d15:	68 15 99 49 00       	push   $0x499915
426d1a:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
426d20:	50                   	push   %eax
426d21:	83 ec 0c             	sub    $0xc,%esp
426d24:	56                   	push   %esi
426d25:	a1 14 40 4c 00       	mov    0x4c4014,%eax
426d2a:	33 c5                	xor    %ebp,%eax
426d2c:	50                   	push   %eax
426d2d:	8d 45 f4             	lea    -0xc(%ebp),%eax
426d30:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
426d36:	8b f1                	mov    %ecx,%esi
426d38:	8d 55 ec             	lea    -0x14(%ebp),%edx
426d3b:	8d 4d f0             	lea    -0x10(%ebp),%ecx
426d3e:	e8 4d 18 01 00       	call   0x438590
426d43:	83 7d f0 20          	cmpl   $0x20,-0x10(%ebp)
426d47:	75 5b                	jne    0x426da4
426d49:	8b 35 94 8c 4c 00    	mov    0x4c8c94,%esi
426d4f:	85 f6                	test   %esi,%esi
426d51:	74 3a                	je     0x426d8d
426d53:	68 10 43 4b 00       	push   $0x4b4310
426d58:	68 60 ea 4a 00       	push   $0x4aea60
426d5d:	68 60 ea 4a 00       	push   $0x4aea60
426d62:	68 fc 42 4b 00       	push   $0x4b42fc
426d67:	68 10 0d 4b 00       	push   $0x4b0d10
426d6c:	6a 32                	push   $0x32
426d6e:	8b ce                	mov    %esi,%ecx
426d70:	ff 15 d4 e2 49 00    	call   *0x49e2d4
426d76:	ff d6                	call   *%esi
426d78:	83 c4 18             	add    $0x18,%esp
426d7b:	32 c0                	xor    %al,%al
426d7d:	8b 4d f4             	mov    -0xc(%ebp),%ecx
426d80:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
426d87:	59                   	pop    %ecx
426d88:	5e                   	pop    %esi
426d89:	8b e5                	mov    %ebp,%esp
426d8b:	5d                   	pop    %ebp
426d8c:	c3                   	ret
426d8d:	a1 98 8c 4c 00       	mov    0x4c8c98,%eax
426d92:	85 c0                	test   %eax,%eax
426d94:	0f 84 16 01 00 00    	je     0x426eb0
426d9a:	68 10 43 4b 00       	push   $0x4b4310
426d9f:	e9 ed 00 00 00       	jmp    0x426e91
426da4:	83 ec 18             	sub    $0x18,%esp
426da7:	8b cc                	mov    %esp,%ecx
426da9:	89 65 ec             	mov    %esp,-0x14(%ebp)
426dac:	6a 06                	push   $0x6
426dae:	68 78 43 4b 00       	push   $0x4b4378
426db3:	c7 01 00 00 00 00    	movl   $0x0,(%ecx)
426db9:	c7 41 10 00 00 00 00 	movl   $0x0,0x10(%ecx)
426dc0:	c7 41 14 00 00 00 00 	movl   $0x0,0x14(%ecx)
426dc7:	e8 94 b2 fd ff       	call   0x402060
426dcc:	83 ec 18             	sub    $0x18,%esp
426dcf:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
426dd6:	8b cc                	mov    %esp,%ecx
426dd8:	89 65 f0             	mov    %esp,-0x10(%ebp)
426ddb:	6a 0e                	push   $0xe
426ddd:	68 88 43 4b 00       	push   $0x4b4388
426de2:	c7 01 00 00 00 00    	movl   $0x0,(%ecx)
426de8:	c7 41 10 00 00 00 00 	movl   $0x0,0x10(%ecx)
426def:	c7 41 14 00 00 00 00 	movl   $0x0,0x14(%ecx)
426df6:	e8 65 b2 fd ff       	call   0x402060
426dfb:	83 ec 18             	sub    $0x18,%esp
426dfe:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
426e02:	8b cc                	mov    %esp,%ecx
426e04:	6a 3c                	push   $0x3c
426e06:	68 a8 43 4b 00       	push   $0x4b43a8
426e0b:	c7 01 00 00 00 00    	movl   $0x0,(%ecx)
426e11:	c7 41 10 00 00 00 00 	movl   $0x0,0x10(%ecx)
426e18:	c7 41 14 00 00 00 00 	movl   $0x0,0x14(%ecx)
426e1f:	e8 3c b2 fd ff       	call   0x402060
426e24:	32 d2                	xor    %dl,%dl
426e26:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
426e2d:	8b ce                	mov    %esi,%ecx
426e2f:	e8 7c 1e 01 00       	call   0x438cb0
426e34:	83 c4 48             	add    $0x48,%esp
426e37:	84 c0                	test   %al,%al
426e39:	0f 85 83 00 00 00    	jne    0x426ec2
426e3f:	8b 35 94 8c 4c 00    	mov    0x4c8c94,%esi
426e45:	85 f6                	test   %esi,%esi
426e47:	74 3a                	je     0x426e83
426e49:	68 28 44 4b 00       	push   $0x4b4428
426e4e:	68 60 ea 4a 00       	push   $0x4aea60
426e53:	68 60 ea 4a 00       	push   $0x4aea60
426e58:	68 fc 42 4b 00       	push   $0x4b42fc
426e5d:	68 10 0d 4b 00       	push   $0x4b0d10
426e62:	6a 32                	push   $0x32
426e64:	8b ce                	mov    %esi,%ecx
426e66:	ff 15 d4 e2 49 00    	call   *0x49e2d4
426e6c:	ff d6                	call   *%esi
426e6e:	83 c4 18             	add    $0x18,%esp
426e71:	32 c0                	xor    %al,%al
426e73:	8b 4d f4             	mov    -0xc(%ebp),%ecx
426e76:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
426e7d:	59                   	pop    %ecx
426e7e:	5e                   	pop    %esi
426e7f:	8b e5                	mov    %ebp,%esp
426e81:	5d                   	pop    %ebp
426e82:	c3                   	ret
426e83:	a1 98 8c 4c 00       	mov    0x4c8c98,%eax
426e88:	85 c0                	test   %eax,%eax
426e8a:	74 24                	je     0x426eb0
426e8c:	68 28 44 4b 00       	push   $0x4b4428
426e91:	8b 30                	mov    (%eax),%esi
426e93:	68 fc 42 4b 00       	push   $0x4b42fc
426e98:	68 60 ea 4a 00       	push   $0x4aea60
426e9d:	6a 32                	push   $0x32
426e9f:	8b 76 34             	mov    0x34(%esi),%esi
426ea2:	8b ce                	mov    %esi,%ecx
426ea4:	50                   	push   %eax
426ea5:	ff 15 d4 e2 49 00    	call   *0x49e2d4
426eab:	ff d6                	call   *%esi
426ead:	83 c4 14             	add    $0x14,%esp
426eb0:	32 c0                	xor    %al,%al
426eb2:	8b 4d f4             	mov    -0xc(%ebp),%ecx
426eb5:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
426ebc:	59                   	pop    %ecx
426ebd:	5e                   	pop    %esi
426ebe:	8b e5                	mov    %ebp,%esp
426ec0:	5d                   	pop    %ebp
426ec1:	c3                   	ret
426ec2:	6a 06                	push   $0x6
426ec4:	68 98 f2 4a 00       	push   $0x4af298
426ec9:	8b ce                	mov    %esi,%ecx
426ecb:	e8 40 c0 fd ff       	call   0x402f10
426ed0:	b0 01                	mov    $0x1,%al
426ed2:	8b 4d f4             	mov    -0xc(%ebp),%ecx
426ed5:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
426edc:	59                   	pop    %ecx
426edd:	5e                   	pop    %esi
426ede:	8b e5                	mov    %ebp,%esp
426ee0:	5d                   	pop    %ebp
426ee1:	c3                   	ret
426ee2:	cc                   	int3
426ee3:	cc                   	int3
426ee4:	cc                   	int3
426ee5:	cc                   	int3
426ee6:	cc                   	int3
426ee7:	cc                   	int3
426ee8:	cc                   	int3
426ee9:	cc                   	int3
426eea:	cc                   	int3
426eeb:	cc                   	int3
426eec:	cc                   	int3
426eed:	cc                   	int3
426eee:	cc                   	int3
426eef:	cc                   	int3
426ef0:	55                   	push   %ebp
426ef1:	8b ec                	mov    %esp,%ebp
426ef3:	6a ff                	push   $0xffffffff
426ef5:	68 15 99 49 00       	push   $0x499915
426efa:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
426f00:	50                   	push   %eax
426f01:	83 ec 0c             	sub    $0xc,%esp
426f04:	56                   	push   %esi
426f05:	a1 14 40 4c 00       	mov    0x4c4014,%eax
426f0a:	33 c5                	xor    %ebp,%eax
426f0c:	50                   	push   %eax
426f0d:	8d 45 f4             	lea    -0xc(%ebp),%eax
426f10:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
426f16:	8b f1                	mov    %ecx,%esi
426f18:	8d 55 ec             	lea    -0x14(%ebp),%edx
426f1b:	8d 4d f0             	lea    -0x10(%ebp),%ecx
426f1e:	e8 6d 16 01 00       	call   0x438590
426f23:	83 7d f0 20          	cmpl   $0x20,-0x10(%ebp)
426f27:	75 5b                	jne    0x426f84
426f29:	8b 35 94 8c 4c 00    	mov    0x4c8c94,%esi
426f2f:	85 f6                	test   %esi,%esi
426f31:	74 3a                	je     0x426f6d
426f33:	68 88 44 4b 00       	push   $0x4b4488
426f38:	68 60 ea 4a 00       	push   $0x4aea60
426f3d:	68 60 ea 4a 00       	push   $0x4aea60
426f42:	68 fc 42 4b 00       	push   $0x4b42fc
426f47:	68 10 0d 4b 00       	push   $0x4b0d10
426f4c:	6a 32                	push   $0x32
426f4e:	8b ce                	mov    %esi,%ecx
426f50:	ff 15 d4 e2 49 00    	call   *0x49e2d4
426f56:	ff d6                	call   *%esi
426f58:	83 c4 18             	add    $0x18,%esp
426f5b:	32 c0                	xor    %al,%al
426f5d:	8b 4d f4             	mov    -0xc(%ebp),%ecx
426f60:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
426f67:	59                   	pop    %ecx
426f68:	5e                   	pop    %esi
426f69:	8b e5                	mov    %ebp,%esp
426f6b:	5d                   	pop    %ebp
426f6c:	c3                   	ret
426f6d:	a1 98 8c 4c 00       	mov    0x4c8c98,%eax
426f72:	85 c0                	test   %eax,%eax
426f74:	0f 84 16 01 00 00    	je     0x427090
426f7a:	68 88 44 4b 00       	push   $0x4b4488
426f7f:	e9 ed 00 00 00       	jmp    0x427071
426f84:	83 ec 18             	sub    $0x18,%esp
426f87:	8b cc                	mov    %esp,%ecx
426f89:	89 65 ec             	mov    %esp,-0x14(%ebp)
426f8c:	6a 06                	push   $0x6
426f8e:	68 78 43 4b 00       	push   $0x4b4378
426f93:	c7 01 00 00 00 00    	movl   $0x0,(%ecx)
426f99:	c7 41 10 00 00 00 00 	movl   $0x0,0x10(%ecx)
426fa0:	c7 41 14 00 00 00 00 	movl   $0x0,0x14(%ecx)
426fa7:	e8 b4 b0 fd ff       	call   0x402060
426fac:	83 ec 18             	sub    $0x18,%esp
426faf:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
426fb6:	8b cc                	mov    %esp,%ecx
426fb8:	89 65 f0             	mov    %esp,-0x10(%ebp)
426fbb:	6a 0f                	push   $0xf
426fbd:	68 f0 44 4b 00       	push   $0x4b44f0
426fc2:	c7 01 00 00 00 00    	movl   $0x0,(%ecx)
426fc8:	c7 41 10 00 00 00 00 	movl   $0x0,0x10(%ecx)
426fcf:	c7 41 14 00 00 00 00 	movl   $0x0,0x14(%ecx)
426fd6:	e8 85 b0 fd ff       	call   0x402060
426fdb:	83 ec 18             	sub    $0x18,%esp
426fde:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
426fe2:	8b cc                	mov    %esp,%ecx
426fe4:	6a 3c                	push   $0x3c
426fe6:	68 a8 43 4b 00       	push   $0x4b43a8
426feb:	c7 01 00 00 00 00    	movl   $0x0,(%ecx)
426ff1:	c7 41 10 00 00 00 00 	movl   $0x0,0x10(%ecx)
426ff8:	c7 41 14 00 00 00 00 	movl   $0x0,0x14(%ecx)
426fff:	e8 5c b0 fd ff       	call   0x402060
427004:	32 d2                	xor    %dl,%dl
427006:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
42700d:	8b ce                	mov    %esi,%ecx
42700f:	e8 9c 1c 01 00       	call   0x438cb0
427014:	83 c4 48             	add    $0x48,%esp
427017:	84 c0                	test   %al,%al
427019:	0f 85 83 00 00 00    	jne    0x4270a2
42701f:	8b 35 94 8c 4c 00    	mov    0x4c8c94,%esi
427025:	85 f6                	test   %esi,%esi
427027:	74 3a                	je     0x427063
427029:	68 10 45 4b 00       	push   $0x4b4510
42702e:	68 60 ea 4a 00       	push   $0x4aea60
427033:	68 60 ea 4a 00       	push   $0x4aea60
427038:	68 fc 42 4b 00       	push   $0x4b42fc
42703d:	68 10 0d 4b 00       	push   $0x4b0d10
427042:	6a 32                	push   $0x32
427044:	8b ce                	mov    %esi,%ecx
427046:	ff 15 d4 e2 49 00    	call   *0x49e2d4
42704c:	ff d6                	call   *%esi
42704e:	83 c4 18             	add    $0x18,%esp
427051:	32 c0                	xor    %al,%al
427053:	8b 4d f4             	mov    -0xc(%ebp),%ecx
427056:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
42705d:	59                   	pop    %ecx
42705e:	5e                   	pop    %esi
42705f:	8b e5                	mov    %ebp,%esp
427061:	5d                   	pop    %ebp
427062:	c3                   	ret
427063:	a1 98 8c 4c 00       	mov    0x4c8c98,%eax
427068:	85 c0                	test   %eax,%eax
42706a:	74 24                	je     0x427090
42706c:	68 10 45 4b 00       	push   $0x4b4510
427071:	8b 30                	mov    (%eax),%esi