4186bf:	89 4d f0             	mov    %ecx,-0x10(%ebp)
4186c2:	89 4d ec             	mov    %ecx,-0x14(%ebp)
4186c5:	89 55 f8             	mov    %edx,-0x8(%ebp)
4186c8:	89 45 fc             	mov    %eax,-0x4(%ebp)
4186cb:	33 c0                	xor    %eax,%eax
4186cd:	55                   	push   %ebp
4186ce:	68 49 87 41 00       	push   $0x418749
4186d3:	64 ff 30             	push   %fs:(%eax)
4186d6:	64 89 20             	mov    %esp,%fs:(%eax)
4186d9:	c6 45 f7 00          	movb   $0x0,-0x9(%ebp)
4186dd:	8b 45 fc             	mov    -0x4(%ebp),%eax
4186e0:	8b 10                	mov    (%eax),%edx
4186e2:	ff 52 14             	call   *0x14(%edx)
4186e5:	8b d8                	mov    %eax,%ebx
4186e7:	8b 45 f8             	mov    -0x8(%ebp),%eax
4186ea:	8b 10                	mov    (%eax),%edx
4186ec:	ff 52 14             	call   *0x14(%edx)
4186ef:	3b d8                	cmp    %eax,%ebx
4186f1:	75 3b                	jne    0x41872e
4186f3:	8b f3                	mov    %ebx,%esi
4186f5:	4e                   	dec    %esi
4186f6:	85 f6                	test   %esi,%esi
4186f8:	7c 30                	jl     0x41872a
4186fa:	46                   	inc    %esi
4186fb:	33 db                	xor    %ebx,%ebx
4186fd:	8d 4d f0             	lea    -0x10(%ebp),%ecx
418700:	8b d3                	mov    %ebx,%edx
418702:	8b 45 fc             	mov    -0x4(%ebp),%eax
418705:	8b 38                	mov    (%eax),%edi
418707:	ff 57 0c             	call   *0xc(%edi)
41870a:	8b 45 f0             	mov    -0x10(%ebp),%eax
41870d:	50                   	push   %eax
41870e:	8d 4d ec             	lea    -0x14(%ebp),%ecx
418711:	8b d3                	mov    %ebx,%edx
418713:	8b 45 f8             	mov    -0x8(%ebp),%eax
418716:	8b 38                	mov    (%eax),%edi
418718:	ff 57 0c             	call   *0xc(%edi)
41871b:	8b 55 ec             	mov    -0x14(%ebp),%edx
41871e:	58                   	pop    %eax
41871f:	e8 0c c4 fe ff       	call   0x404b30
418724:	75 08                	jne    0x41872e
418726:	43                   	inc    %ebx
418727:	4e                   	dec    %esi
418728:	75 d3                	jne    0x4186fd
41872a:	c6 45 f7 01          	movb   $0x1,-0x9(%ebp)
41872e:	33 c0                	xor    %eax,%eax
418730:	5a                   	pop    %edx
418731:	59                   	pop    %ecx
418732:	59                   	pop    %ecx
418733:	64 89 10             	mov    %edx,%fs:(%eax)
418736:	68 50 87 41 00       	push   $0x418750
41873b:	8d 45 ec             	lea    -0x14(%ebp),%eax
41873e:	ba 02 00 00 00       	mov    $0x2,%edx
418743:	e8 fc bf fe ff       	call   0x404744
418748:	c3                   	ret
418749:	e9 3a b9 fe ff       	jmp    0x404088
41874e:	eb eb                	jmp    0x41873b
418750:	0f b6 45 f7          	movzbl -0x9(%ebp),%eax
418754:	5f                   	pop    %edi
418755:	5e                   	pop    %esi
418756:	5b                   	pop    %ebx
418757:	8b e5                	mov    %ebp,%esp
418759:	5d                   	pop    %ebp
41875a:	c3                   	ret
41875b:	90                   	nop
41875c:	8b 45 04             	mov    0x4(%ebp),%eax
41875f:	c3                   	ret
418760:	53                   	push   %ebx
418761:	56                   	push   %esi
418762:	83 c4 f8             	add    $0xfffffff8,%esp
418765:	8b f1                	mov    %ecx,%esi
418767:	8b da                	mov    %edx,%ebx
418769:	e8 ee ff ff ff       	call   0x41875c
41876e:	50                   	push   %eax
41876f:	89 74 24 04          	mov    %esi,0x4(%esp)
418773:	c6 44 24 08 00       	movb   $0x0,0x8(%esp)
418778:	8d 44 24 04          	lea    0x4(%esp),%eax
41877c:	50                   	push   %eax
41877d:	6a 00                	push   $0x0
41877f:	8b cb                	mov    %ebx,%ecx
418781:	b2 01                	mov    $0x1,%dl
418783:	a1 4c 56 41 00       	mov    0x41564c,%eax
418788:	e8 eb 3a ff ff       	call   0x40c278
41878d:	e9 d6 b9 fe ff       	jmp    0x404168
418792:	59                   	pop    %ecx
418793:	5a                   	pop    %edx
418794:	5e                   	pop    %esi
418795:	5b                   	pop    %ebx
418796:	c3                   	ret
418797:	90                   	nop
418798:	55                   	push   %ebp
418799:	8b ec                	mov    %esp,%ebp
41879b:	6a 00                	push   $0x0
41879d:	53                   	push   %ebx
41879e:	56                   	push   %esi
41879f:	57                   	push   %edi
4187a0:	8b f9                	mov    %ecx,%edi
4187a2:	8b f2                	mov    %edx,%esi
4187a4:	8b d8                	mov    %eax,%ebx
4187a6:	33 c0                	xor    %eax,%eax
4187a8:	55                   	push   %ebp
4187a9:	68 e0 87 41 00       	push   $0x4187e0
4187ae:	64 ff 30             	push   %fs:(%eax)
4187b1:	64 89 20             	mov    %esp,%fs:(%eax)
4187b4:	8d 55 fc             	lea    -0x4(%ebp),%edx
4187b7:	8b c6                	mov    %esi,%eax
4187b9:	e8 46 de fe ff       	call   0x406604
4187be:	8b 55 fc             	mov    -0x4(%ebp),%edx
4187c1:	8b cf                	mov    %edi,%ecx
4187c3:	8b c3                	mov    %ebx,%eax
4187c5:	e8 96 ff ff ff       	call   0x418760
4187ca:	33 c0                	xor    %eax,%eax
4187cc:	5a                   	pop    %edx
4187cd:	59                   	pop    %ecx
4187ce:	59                   	pop    %ecx
4187cf:	64 89 10             	mov    %edx,%fs:(%eax)
4187d2:	68 e7 87 41 00       	push   $0x4187e7
4187d7:	8d 45 fc             	lea    -0x4(%ebp),%eax
4187da:	e8 41 bf fe ff       	call   0x404720
4187df:	c3                   	ret
4187e0:	e9 a3 b8 fe ff       	jmp    0x404088
4187e5:	eb f0                	jmp    0x4187d7
4187e7:	5f                   	pop    %edi
4187e8:	5e                   	pop    %esi
4187e9:	5b                   	pop    %ebx
4187ea:	59                   	pop    %ecx
4187eb:	5d                   	pop    %ebp
4187ec:	c3                   	ret
4187ed:	8d 40 00             	lea    0x0(%eax),%eax
4187f0:	55                   	push   %ebp
4187f1:	8b ec                	mov    %esp,%ebp
4187f3:	83 c4 f0             	add    $0xfffffff0,%esp
4187f6:	53                   	push   %ebx
4187f7:	56                   	push   %esi
4187f8:	57                   	push   %edi
4187f9:	33 db                	xor    %ebx,%ebx
4187fb:	89 5d f0             	mov    %ebx,-0x10(%ebp)
4187fe:	89 5d fc             	mov    %ebx,-0x4(%ebp)
418801:	8b f1                	mov    %ecx,%esi
418803:	8b da                	mov    %edx,%ebx
418805:	89 45 f8             	mov    %eax,-0x8(%ebp)
418808:	33 c0                	xor    %eax,%eax
41880a:	55                   	push   %ebp
41880b:	68 cb 88 41 00       	push   $0x4188cb
418810:	64 ff 30             	push   %fs:(%eax)
418813:	64 89 20             	mov    %esp,%fs:(%eax)
418816:	8b 45 f8             	mov    -0x8(%ebp),%eax
418819:	e8 c6 fd ff ff       	call   0x4185e4
41881e:	33 c0                	xor    %eax,%eax
418820:	55                   	push   %ebp
418821:	68 a6 88 41 00       	push   $0x4188a6
418826:	64 ff 30             	push   %fs:(%eax)
418829:	64 89 20             	mov    %esp,%fs:(%eax)
41882c:	8d 4d fc             	lea    -0x4(%ebp),%ecx
41882f:	8b d3                	mov    %ebx,%edx
418831:	8b 45 f8             	mov    -0x8(%ebp),%eax
418834:	8b 38                	mov    (%eax),%edi
418836:	ff 57 0c             	call   *0xc(%edi)
418839:	8b d3                	mov    %ebx,%edx
41883b:	8b 45 f8             	mov    -0x8(%ebp),%eax
41883e:	8b 08                	mov    (%eax),%ecx
418840:	ff 51 18             	call   *0x18(%ecx)
418843:	89 45 f4             	mov    %eax,-0xc(%ebp)
418846:	8d 4d f0             	lea    -0x10(%ebp),%ecx
418849:	8b d6                	mov    %esi,%edx
41884b:	8b 45 f8             	mov    -0x8(%ebp),%eax
41884e:	8b 38                	mov    (%eax),%edi
418850:	ff 57 0c             	call   *0xc(%edi)
418853:	8b 4d f0             	mov    -0x10(%ebp),%ecx
418856:	8b d3                	mov    %ebx,%edx
418858:	8b 45 f8             	mov    -0x8(%ebp),%eax
41885b:	8b 38                	mov    (%eax),%edi
41885d:	ff 57 20             	call   *0x20(%edi)
418860:	8b d6                	mov    %esi,%edx
418862:	8b 45 f8             	mov    -0x8(%ebp),%eax
418865:	8b 08                	mov    (%eax),%ecx
418867:	ff 51 18             	call   *0x18(%ecx)
41886a:	8b c8                	mov    %eax,%ecx
41886c:	8b d3                	mov    %ebx,%edx
41886e:	8b 45 f8             	mov    -0x8(%ebp),%eax
418871:	8b 18                	mov    (%eax),%ebx
418873:	ff 53 24             	call   *0x24(%ebx)
418876:	8b 4d fc             	mov    -0x4(%ebp),%ecx
418879:	8b d6                	mov    %esi,%edx
41887b:	8b 45 f8             	mov    -0x8(%ebp),%eax
41887e:	8b 18                	mov    (%eax),%ebx
418880:	ff 53 20             	call   *0x20(%ebx)
418883:	8b 4d f4             	mov    -0xc(%ebp),%ecx
418886:	8b d6                	mov    %esi,%edx
418888:	8b 45 f8             	mov    -0x8(%ebp),%eax
41888b:	8b 18                	mov    (%eax),%ebx
41888d:	ff 53 24             	call   *0x24(%ebx)
418890:	33 c0                	xor    %eax,%eax
418892:	5a                   	pop    %edx
418893:	59                   	pop    %ecx
418894:	59                   	pop    %ecx
418895:	64 89 10             	mov    %edx,%fs:(%eax)
418898:	68 ad 88 41 00       	push   $0x4188ad
41889d:	8b 45 f8             	mov    -0x8(%ebp),%eax
4188a0:	e8 fb fd ff ff       	call   0x4186a0
4188a5:	c3                   	ret
4188a6:	e9 dd b7 fe ff       	jmp    0x404088
4188ab:	eb f0                	jmp    0x41889d
4188ad:	33 c0                	xor    %eax,%eax
4188af:	5a                   	pop    %edx
4188b0:	59                   	pop    %ecx
4188b1:	59                   	pop    %ecx
4188b2:	64 89 10             	mov    %edx,%fs:(%eax)
4188b5:	68 d2 88 41 00       	push   $0x4188d2
4188ba:	8d 45 f0             	lea    -0x10(%ebp),%eax
4188bd:	e8 5e be fe ff       	call   0x404720
4188c2:	8d 45 fc             	lea    -0x4(%ebp),%eax
4188c5:	e8 56 be fe ff       	call   0x404720
4188ca:	c3                   	ret
4188cb:	e9 b8 b7 fe ff       	jmp    0x404088
4188d0:	eb e8                	jmp    0x4188ba
4188d2:	5f                   	pop    %edi
4188d3:	5e                   	pop    %esi
4188d4:	5b                   	pop    %ebx
4188d5:	8b e5                	mov    %ebp,%esp
4188d7:	5d                   	pop    %ebp
4188d8:	c3                   	ret
4188d9:	8d 40 00             	lea    0x0(%eax),%eax
4188dc:	8b 10                	mov    (%eax),%edx
4188de:	ff 52 14             	call   *0x14(%edx)
4188e1:	c3                   	ret
4188e2:	8b c0                	mov    %eax,%eax
4188e4:	33 c0                	xor    %eax,%eax
4188e6:	c3                   	ret
4188e7:	90                   	nop
4188e8:	55                   	push   %ebp
4188e9:	8b ec                	mov    %esp,%ebp
4188eb:	6a 00                	push   $0x0
4188ed:	53                   	push   %ebx
4188ee:	8b d8                	mov    %eax,%ebx
4188f0:	33 c0                	xor    %eax,%eax
4188f2:	55                   	push   %ebp
4188f3:	68 2d 89 41 00       	push   $0x41892d
4188f8:	64 ff 30             	push   %fs:(%eax)
4188fb:	64 89 20             	mov    %esp,%fs:(%eax)
4188fe:	8d 55 fc             	lea    -0x4(%ebp),%edx
418901:	8b c3                	mov    %ebx,%eax
418903:	8b 08                	mov    (%eax),%ecx
418905:	ff 51 1c             	call   *0x1c(%ecx)
418908:	8b 45 fc             	mov    -0x4(%ebp),%eax
41890b:	e8 d4 c2 fe ff       	call   0x404be4
418910:	e8 fb 0a ff ff       	call   0x409410
418915:	8b d8                	mov    %eax,%ebx
418917:	33 c0                	xor    %eax,%eax
418919:	5a                   	pop    %edx
41891a:	59                   	pop    %ecx
41891b:	59                   	pop    %ecx
41891c:	64 89 10             	mov    %edx,%fs:(%eax)
41891f:	68 34 89 41 00       	push   $0x418934
418924:	8d 45 fc             	lea    -0x4(%ebp),%eax
418927:	e8 f4 bd fe ff       	call   0x404720
41892c:	c3                   	ret
41892d:	e9 56 b7 fe ff       	jmp    0x404088
418932:	eb f0                	jmp    0x418924
418934:	8b c3                	mov    %ebx,%eax
418936:	5b                   	pop    %ebx
418937:	59                   	pop    %ecx
418938:	5d                   	pop    %ebp
418939:	c3                   	ret
41893a:	8b c0                	mov    %eax,%eax
41893c:	55                   	push   %ebp
41893d:	8b ec                	mov    %esp,%ebp
41893f:	83 c4 d8             	add    $0xffffffd8,%esp
418942:	53                   	push   %ebx
418943:	56                   	push   %esi
418944:	33 c9                	xor    %ecx,%ecx
418946:	89 4d dc             	mov    %ecx,-0x24(%ebp)
418949:	89 4d fc             	mov    %ecx,-0x4(%ebp)
41894c:	89 4d f8             	mov    %ecx,-0x8(%ebp)
41894f:	89 55 f0             	mov    %edx,-0x10(%ebp)
418952:	89 45 f4             	mov    %eax,-0xc(%ebp)
418955:	33 c0                	xor    %eax,%eax
418957:	55                   	push   %ebp
418958:	68 65 8a 41 00       	push   $0x418a65
41895d:	64 ff 30             	push   %fs:(%eax)
418960:	64 89 20             	mov    %esp,%fs:(%eax)
418963:	8b 45 f4             	mov    -0xc(%ebp),%eax
418966:	8b 10                	mov    (%eax),%edx
418968:	ff 52 14             	call   *0x14(%edx)
41896b:	89 45 e4             	mov    %eax,-0x1c(%ebp)
41896e:	33 c0                	xor    %eax,%eax
418970:	89 45 e8             	mov    %eax,-0x18(%ebp)
418973:	8d 55 f8             	lea    -0x8(%ebp),%edx
418976:	8b 45 f4             	mov    -0xc(%ebp),%eax
418979:	e8 ba 08 00 00       	call   0x419238
41897e:	8b 75 e4             	mov    -0x1c(%ebp),%esi
418981:	4e                   	dec    %esi
418982:	85 f6                	test   %esi,%esi
418984:	7c 3f                	jl     0x4189c5
418986:	46                   	inc    %esi
418987:	c7 45 ec 00 00 00 00 	movl   $0x0,-0x14(%ebp)
41898e:	8d 4d dc             	lea    -0x24(%ebp),%ecx
418991:	8b 55 ec             	mov    -0x14(%ebp),%edx
418994:	8b 45 f4             	mov    -0xc(%ebp),%eax
418997:	8b 18                	mov    (%eax),%ebx
418999:	ff 53 0c             	call   *0xc(%ebx)
41899c:	8b 45 dc             	mov    -0x24(%ebp),%eax
41899f:	89 45 d8             	mov    %eax,-0x28(%ebp)
4189a2:	8b 45 d8             	mov    -0x28(%ebp),%eax
4189a5:	85 c0                	test   %eax,%eax
4189a7:	74 05                	je     0x4189ae
4189a9:	83 e8 04             	sub    $0x4,%eax
4189ac:	8b 00                	mov    (%eax),%eax
4189ae:	8b 55 f8             	mov    -0x8(%ebp),%edx
4189b1:	85 d2                	test   %edx,%edx
4189b3:	74 05                	je     0x4189ba
4189b5:	83 ea 04             	sub    $0x4,%edx
4189b8:	8b 12                	mov    (%edx),%edx
4189ba:	03 d0                	add    %eax,%edx
4189bc:	01 55 e8             	add    %edx,-0x18(%ebp)
4189bf:	ff 45 ec             	incl   -0x14(%ebp)
4189c2:	4e                   	dec    %esi
4189c3:	75 c9                	jne    0x41898e
4189c5:	8b 45 f0             	mov    -0x10(%ebp),%eax
4189c8:	8b 4d e8             	mov    -0x18(%ebp),%ecx
4189cb:	33 d2                	xor    %edx,%edx
4189cd:	e8 3e be fe ff       	call   0x404810
4189d2:	8b 45 f0             	mov    -0x10(%ebp),%eax
4189d5:	8b 00                	mov    (%eax),%eax
4189d7:	89 45 e0             	mov    %eax,-0x20(%ebp)
4189da:	8b 75 e4             	mov    -0x1c(%ebp),%esi
4189dd:	4e                   	dec    %esi
4189de:	85 f6                	test   %esi,%esi
4189e0:	7c 60                	jl     0x418a42
4189e2:	46                   	inc    %esi
4189e3:	c7 45 ec 00 00 00 00 	movl   $0x0,-0x14(%ebp)
4189ea:	8d 4d fc             	lea    -0x4(%ebp),%ecx
4189ed:	8b 55 ec             	mov    -0x14(%ebp),%edx
4189f0:	8b 45 f4             	mov    -0xc(%ebp),%eax
4189f3:	8b 18                	mov    (%eax),%ebx
4189f5:	ff 53 0c             	call   *0xc(%ebx)
4189f8:	8b 45 fc             	mov    -0x4(%ebp),%eax
4189fb:	85 c0                	test   %eax,%eax
4189fd:	74 05                	je     0x418a04
4189ff:	83 e8 04             	sub    $0x4,%eax
418a02:	8b 00                	mov    (%eax),%eax
418a04:	8b d8                	mov    %eax,%ebx
418a06:	85 db                	test   %ebx,%ebx
418a08:	74 10                	je     0x418a1a
418a0a:	8b 55 e0             	mov    -0x20(%ebp),%edx
418a0d:	8b 45 fc             	mov    -0x4(%ebp),%eax
418a10:	8b cb                	mov    %ebx,%ecx
418a12:	e8 c5 a4 fe ff       	call   0x402edc
418a17:	01 5d e0             	add    %ebx,-0x20(%ebp)
418a1a:	8b 45 f8             	mov    -0x8(%ebp),%eax