4bcf13:	c2 08 00             	ret    $0x8
4bcf16:	cc                   	int3
4bcf17:	cc                   	int3
4bcf18:	cc                   	int3
4bcf19:	cc                   	int3
4bcf1a:	cc                   	int3
4bcf1b:	cc                   	int3
4bcf1c:	cc                   	int3
4bcf1d:	cc                   	int3
4bcf1e:	cc                   	int3
4bcf1f:	cc                   	int3
4bcf20:	55                   	push   %ebp
4bcf21:	8b ec                	mov    %esp,%ebp
4bcf23:	6a ff                	push   $0xffffffff
4bcf25:	68 88 ab 65 00       	push   $0x65ab88
4bcf2a:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
4bcf30:	50                   	push   %eax
4bcf31:	83 ec 0c             	sub    $0xc,%esp
4bcf34:	53                   	push   %ebx
4bcf35:	56                   	push   %esi
4bcf36:	57                   	push   %edi
4bcf37:	a1 d4 89 72 00       	mov    0x7289d4,%eax
4bcf3c:	33 c5                	xor    %ebp,%eax
4bcf3e:	50                   	push   %eax
4bcf3f:	8d 45 f4             	lea    -0xc(%ebp),%eax
4bcf42:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
4bcf48:	8b 7d 10             	mov    0x10(%ebp),%edi
4bcf4b:	8b 75 08             	mov    0x8(%ebp),%esi
4bcf4e:	89 7d e8             	mov    %edi,-0x18(%ebp)
4bcf51:	89 7d ec             	mov    %edi,-0x14(%ebp)
4bcf54:	89 4d f0             	mov    %ecx,-0x10(%ebp)
4bcf57:	8b 5d 0c             	mov    0xc(%ebp),%ebx
4bcf5a:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
4bcf61:	3b f3                	cmp    %ebx,%esi
4bcf63:	74 53                	je     0x4bcfb8
4bcf65:	66 66 66 0f 1f 84 00 	data16 data16 nopw 0x0(%eax,%eax,1)
4bcf6c:	00 00 00 00
4bcf70:	6a 30                	push   $0x30
4bcf72:	c7 07 00 00 00 00    	movl   $0x0,(%edi)
4bcf78:	c7 47 04 00 00 00 00 	movl   $0x0,0x4(%edi)
4bcf7f:	e8 be 40 12 00       	call   0x5e1042
4bcf84:	8b c8                	mov    %eax,%ecx
4bcf86:	83 c4 04             	add    $0x4,%esp
4bcf89:	89 09                	mov    %ecx,(%ecx)
4bcf8b:	89 49 04             	mov    %ecx,0x4(%ecx)
4bcf8e:	89 49 08             	mov    %ecx,0x8(%ecx)
4bcf91:	66 c7 41 0c 01 01    	movw   $0x101,0xc(%ecx)
4bcf97:	89 0f                	mov    %ecx,(%edi)
4bcf99:	8b 06                	mov    (%esi),%eax
4bcf9b:	89 07                	mov    %eax,(%edi)
4bcf9d:	89 0e                	mov    %ecx,(%esi)
4bcf9f:	8b 57 04             	mov    0x4(%edi),%edx
4bcfa2:	8b 4e 04             	mov    0x4(%esi),%ecx
4bcfa5:	89 4f 04             	mov    %ecx,0x4(%edi)
4bcfa8:	83 c7 08             	add    $0x8,%edi
4bcfab:	89 56 04             	mov    %edx,0x4(%esi)
4bcfae:	83 c6 08             	add    $0x8,%esi
4bcfb1:	89 7d ec             	mov    %edi,-0x14(%ebp)
4bcfb4:	3b f3                	cmp    %ebx,%esi
4bcfb6:	75 b8                	jne    0x4bcf70
4bcfb8:	8b c7                	mov    %edi,%eax
4bcfba:	8b 4d f4             	mov    -0xc(%ebp),%ecx
4bcfbd:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
4bcfc4:	59                   	pop    %ecx
4bcfc5:	5f                   	pop    %edi
4bcfc6:	5e                   	pop    %esi
4bcfc7:	5b                   	pop    %ebx
4bcfc8:	8b e5                	mov    %ebp,%esp
4bcfca:	5d                   	pop    %ebp
4bcfcb:	c2 0c 00             	ret    $0xc
4bcfce:	cc                   	int3
4bcfcf:	cc                   	int3
4bcfd0:	53                   	push   %ebx
4bcfd1:	56                   	push   %esi
4bcfd2:	57                   	push   %edi
4bcfd3:	8b f9                	mov    %ecx,%edi
4bcfd5:	8b 5f 04             	mov    0x4(%edi),%ebx
4bcfd8:	8b 37                	mov    (%edi),%esi
4bcfda:	3b f3                	cmp    %ebx,%esi
4bcfdc:	74 2b                	je     0x4bd009
4bcfde:	66 90                	xchg   %ax,%ax
4bcfe0:	8b 06                	mov    (%esi),%eax
4bcfe2:	8b ce                	mov    %esi,%ecx
4bcfe4:	ff 70 04             	push   0x4(%eax)
4bcfe7:	56                   	push   %esi
4bcfe8:	e8 03 86 ff ff       	call   0x4b55f0
4bcfed:	6a 30                	push   $0x30
4bcfef:	ff 36                	push   (%esi)
4bcff1:	e8 7c 40 12 00       	call   0x5e1072
4bcff6:	83 c6 08             	add    $0x8,%esi
4bcff9:	83 c4 08             	add    $0x8,%esp
4bcffc:	3b f3                	cmp    %ebx,%esi
4bcffe:	75 e0                	jne    0x4bcfe0
4bd000:	8b 07                	mov    (%edi),%eax
4bd002:	89 47 04             	mov    %eax,0x4(%edi)
4bd005:	5f                   	pop    %edi
4bd006:	5e                   	pop    %esi
4bd007:	5b                   	pop    %ebx
4bd008:	c3                   	ret
4bd009:	89 77 04             	mov    %esi,0x4(%edi)
4bd00c:	5f                   	pop    %edi
4bd00d:	5e                   	pop    %esi
4bd00e:	5b                   	pop    %ebx
4bd00f:	c3                   	ret
4bd010:	55                   	push   %ebp
4bd011:	8b ec                	mov    %esp,%ebp
4bd013:	8b 45 0c             	mov    0xc(%ebp),%eax
4bd016:	8d 0c c5 00 00 00 00 	lea    0x0(,%eax,8),%ecx
4bd01d:	8b 45 08             	mov    0x8(%ebp),%eax
4bd020:	81 f9 00 10 00 00    	cmp    $0x1000,%ecx
4bd026:	72 12                	jb     0x4bd03a
4bd028:	8b 50 fc             	mov    -0x4(%eax),%edx
4bd02b:	83 c1 23             	add    $0x23,%ecx
4bd02e:	2b c2                	sub    %edx,%eax
4bd030:	83 c0 fc             	add    $0xfffffffc,%eax
4bd033:	83 f8 1f             	cmp    $0x1f,%eax
4bd036:	77 10                	ja     0x4bd048
4bd038:	8b c2                	mov    %edx,%eax
4bd03a:	51                   	push   %ecx
4bd03b:	50                   	push   %eax
4bd03c:	e8 31 40 12 00       	call   0x5e1072
4bd041:	83 c4 08             	add    $0x8,%esp
4bd044:	5d                   	pop    %ebp
4bd045:	c2 08 00             	ret    $0x8
4bd048:	e8 e2 fe 12 00       	call   0x5ecf2f
4bd04d:	cc                   	int3
4bd04e:	cc                   	int3
4bd04f:	cc                   	int3
4bd050:	55                   	push   %ebp
4bd051:	8b ec                	mov    %esp,%ebp
4bd053:	83 ec 14             	sub    $0x14,%esp
4bd056:	8b c1                	mov    %ecx,%eax
4bd058:	53                   	push   %ebx
4bd059:	89 45 f0             	mov    %eax,-0x10(%ebp)
4bd05c:	56                   	push   %esi
4bd05d:	8b 00                	mov    (%eax),%eax
4bd05f:	8b f0                	mov    %eax,%esi
4bd061:	57                   	push   %edi
4bd062:	8b d8                	mov    %eax,%ebx
4bd064:	89 45 f8             	mov    %eax,-0x8(%ebp)
4bd067:	89 75 f4             	mov    %esi,-0xc(%ebp)
4bd06a:	8b 78 04             	mov    0x4(%eax),%edi
4bd06d:	89 5d fc             	mov    %ebx,-0x4(%ebp)
4bd070:	80 7f 0d 00          	cmpb   $0x0,0xd(%edi)
4bd074:	0f 85 89 00 00 00    	jne    0x4bd103
4bd07a:	8b 45 08             	mov    0x8(%ebp),%eax
4bd07d:	8b 48 10             	mov    0x10(%eax),%ecx
4bd080:	89 4d f4             	mov    %ecx,-0xc(%ebp)
4bd083:	83 78 14 10          	cmpl   $0x10,0x14(%eax)
4bd087:	8d 5f 10             	lea    0x10(%edi),%ebx
4bd08a:	8b c8                	mov    %eax,%ecx
4bd08c:	72 02                	jb     0x4bd090
4bd08e:	8b 08                	mov    (%eax),%ecx
4bd090:	83 7b 14 10          	cmpl   $0x10,0x14(%ebx)
4bd094:	8b c3                	mov    %ebx,%eax
4bd096:	72 02                	jb     0x4bd09a
4bd098:	8b 03                	mov    (%ebx),%eax
4bd09a:	ff 75 f4             	push   -0xc(%ebp)
4bd09d:	8b 53 10             	mov    0x10(%ebx),%edx
4bd0a0:	51                   	push   %ecx
4bd0a1:	52                   	push   %edx
4bd0a2:	50                   	push   %eax
4bd0a3:	89 55 ec             	mov    %edx,-0x14(%ebp)
4bd0a6:	e8 95 a0 f8 ff       	call   0x447140
4bd0ab:	83 c4 10             	add    $0x10,%esp
4bd0ae:	85 c0                	test   %eax,%eax
4bd0b0:	79 05                	jns    0x4bd0b7
4bd0b2:	8b 7f 08             	mov    0x8(%edi),%edi
4bd0b5:	eb 3a                	jmp    0x4bd0f1
4bd0b7:	8b 75 fc             	mov    -0x4(%ebp),%esi
4bd0ba:	80 7e 0d 00          	cmpb   $0x0,0xd(%esi)
4bd0be:	74 2d                	je     0x4bd0ed
4bd0c0:	83 7b 14 10          	cmpl   $0x10,0x14(%ebx)
4bd0c4:	72 02                	jb     0x4bd0c8
4bd0c6:	8b 1b                	mov    (%ebx),%ebx
4bd0c8:	8b 45 08             	mov    0x8(%ebp),%eax
4bd0cb:	8b c8                	mov    %eax,%ecx
4bd0cd:	83 78 14 10          	cmpl   $0x10,0x14(%eax)
4bd0d1:	72 02                	jb     0x4bd0d5
4bd0d3:	8b 08                	mov    (%eax),%ecx
4bd0d5:	ff 75 ec             	push   -0x14(%ebp)
4bd0d8:	53                   	push   %ebx
4bd0d9:	ff 75 f4             	push   -0xc(%ebp)
4bd0dc:	51                   	push   %ecx
4bd0dd:	e8 5e a0 f8 ff       	call   0x447140
4bd0e2:	83 c4 10             	add    $0x10,%esp
4bd0e5:	85 c0                	test   %eax,%eax
4bd0e7:	0f 48 f7             	cmovs  %edi,%esi
4bd0ea:	89 75 fc             	mov    %esi,-0x4(%ebp)
4bd0ed:	8b f7                	mov    %edi,%esi
4bd0ef:	8b 3f                	mov    (%edi),%edi
4bd0f1:	80 7f 0d 00          	cmpb   $0x0,0xd(%edi)
4bd0f5:	8b 45 08             	mov    0x8(%ebp),%eax
4bd0f8:	74 89                	je     0x4bd083
4bd0fa:	8b 5d fc             	mov    -0x4(%ebp),%ebx
4bd0fd:	8b 45 f8             	mov    -0x8(%ebp),%eax
4bd100:	89 75 f4             	mov    %esi,-0xc(%ebp)
4bd103:	83 c0 04             	add    $0x4,%eax
4bd106:	80 7b 0d 00          	cmpb   $0x0,0xd(%ebx)
4bd10a:	0f 44 c3             	cmove  %ebx,%eax
4bd10d:	8b 38                	mov    (%eax),%edi
4bd10f:	80 7f 0d 00          	cmpb   $0x0,0xd(%edi)
4bd113:	75 47                	jne    0x4bd15c
4bd115:	8b 75 08             	mov    0x8(%ebp),%esi
4bd118:	0f 1f 84 00 00 00 00 	nopl   0x0(%eax,%eax,1)
4bd11f:	00
4bd120:	83 7f 24 10          	cmpl   $0x10,0x24(%edi)
4bd124:	8d 57 10             	lea    0x10(%edi),%edx
4bd127:	72 03                	jb     0x4bd12c
4bd129:	8b 57 10             	mov    0x10(%edi),%edx
4bd12c:	83 7e 14 10          	cmpl   $0x10,0x14(%esi)
4bd130:	8b ce                	mov    %esi,%ecx
4bd132:	72 02                	jb     0x4bd136
4bd134:	8b 0e                	mov    (%esi),%ecx
4bd136:	ff 77 20             	push   0x20(%edi)
4bd139:	52                   	push   %edx
4bd13a:	ff 76 10             	push   0x10(%esi)
4bd13d:	51                   	push   %ecx
4bd13e:	e8 fd 9f f8 ff       	call   0x447140
4bd143:	83 c4 10             	add    $0x10,%esp
4bd146:	85 c0                	test   %eax,%eax
4bd148:	79 06                	jns    0x4bd150
4bd14a:	8b df                	mov    %edi,%ebx
4bd14c:	8b 3f                	mov    (%edi),%edi
4bd14e:	eb 03                	jmp    0x4bd153
4bd150:	8b 7f 08             	mov    0x8(%edi),%edi
4bd153:	80 7f 0d 00          	cmpb   $0x0,0xd(%edi)
4bd157:	74 c7                	je     0x4bd120
4bd159:	8b 75 f4             	mov    -0xc(%ebp),%esi
4bd15c:	33 ff                	xor    %edi,%edi
4bd15e:	8b c6                	mov    %esi,%eax
4bd160:	89 7d f4             	mov    %edi,-0xc(%ebp)
4bd163:	3b f3                	cmp    %ebx,%esi
4bd165:	74 4c                	je     0x4bd1b3
4bd167:	8b 48 08             	mov    0x8(%eax),%ecx
4bd16a:	47                   	inc    %edi
4bd16b:	80 79 0d 00          	cmpb   $0x0,0xd(%ecx)
4bd16f:	74 23                	je     0x4bd194
4bd171:	8b 48 04             	mov    0x4(%eax),%ecx
4bd174:	80 79 0d 00          	cmpb   $0x0,0xd(%ecx)
4bd178:	75 16                	jne    0x4bd190
4bd17a:	66 0f 1f 44 00 00    	nopw   0x0(%eax,%eax,1)
4bd180:	3b 41 08             	cmp    0x8(%ecx),%eax
4bd183:	75 0b                	jne    0x4bd190
4bd185:	8b c1                	mov    %ecx,%eax
4bd187:	8b 49 04             	mov    0x4(%ecx),%ecx
4bd18a:	80 79 0d 00          	cmpb   $0x0,0xd(%ecx)
4bd18e:	74 f0                	je     0x4bd180
4bd190:	8b c1                	mov    %ecx,%eax
4bd192:	eb 18                	jmp    0x4bd1ac
4bd194:	8b c1                	mov    %ecx,%eax
4bd196:	8b 10                	mov    (%eax),%edx
4bd198:	80 7a 0d 00          	cmpb   $0x0,0xd(%edx)
4bd19c:	75 0e                	jne    0x4bd1ac
4bd19e:	66 90                	xchg   %ax,%ax
4bd1a0:	8b 0a                	mov    (%edx),%ecx
4bd1a2:	8b c2                	mov    %edx,%eax
4bd1a4:	8b d1                	mov    %ecx,%edx
4bd1a6:	80 79 0d 00          	cmpb   $0x0,0xd(%ecx)
4bd1aa:	74 f4                	je     0x4bd1a0
4bd1ac:	3b c3                	cmp    %ebx,%eax
4bd1ae:	75 b7                	jne    0x4bd167
4bd1b0:	89 7d f4             	mov    %edi,-0xc(%ebp)
4bd1b3:	8b 45 f8             	mov    -0x8(%ebp),%eax
4bd1b6:	89 75 08             	mov    %esi,0x8(%ebp)
4bd1b9:	3b 30                	cmp    (%eax),%esi
4bd1bb:	75 30                	jne    0x4bd1ed
4bd1bd:	80 7b 0d 00          	cmpb   $0x0,0xd(%ebx)
4bd1c1:	74 2a                	je     0x4bd1ed
4bd1c3:	8b 75 f0             	mov    -0x10(%ebp),%esi
4bd1c6:	8b d8                	mov    %eax,%ebx
4bd1c8:	8b ce                	mov    %esi,%ecx
4bd1ca:	ff 73 04             	push   0x4(%ebx)
4bd1cd:	56                   	push   %esi
4bd1ce:	e8 0d ef f9 ff       	call   0x45c0e0
4bd1d3:	89 5b 04             	mov    %ebx,0x4(%ebx)
4bd1d6:	89 1b                	mov    %ebx,(%ebx)
4bd1d8:	89 5b 08             	mov    %ebx,0x8(%ebx)
4bd1db:	c7 46 04 00 00 00 00 	movl   $0x0,0x4(%esi)
4bd1e2:	8b c7                	mov    %edi,%eax
4bd1e4:	5f                   	pop    %edi
4bd1e5:	5e                   	pop    %esi
4bd1e6:	5b                   	pop    %ebx
4bd1e7:	8b e5                	mov    %ebp,%esp
4bd1e9:	5d                   	pop    %ebp
4bd1ea:	c2 04 00             	ret    $0x4
4bd1ed:	3b f3                	cmp    %ebx,%esi
4bd1ef:	74 f1                	je     0x4bd1e2
4bd1f1:	8b 7d f0             	mov    -0x10(%ebp),%edi
4bd1f4:	8d 4d 08             	lea    0x8(%ebp),%ecx
4bd1f7:	e8 64 48 fd ff       	call   0x491a60
4bd1fc:	56                   	push   %esi
4bd1fd:	8b cf                	mov    %edi,%ecx
4bd1ff:	e8 dc 57 fd ff       	call   0x4929e0
4bd204:	8b f0                	mov    %eax,%esi
4bd206:	8d 4e 10             	lea    0x10(%esi),%ecx
4bd209:	51                   	push   %ecx
4bd20a:	57                   	push   %edi
4bd20b:	e8 d0 e8 fd ff       	call   0x49bae0
4bd210:	6a 40                	push   $0x40
4bd212:	56                   	push   %esi
4bd213:	e8 5a 3e 12 00       	call   0x5e1072
4bd218:	8b 75 08             	mov    0x8(%ebp),%esi
4bd21b:	83 c4 10             	add    $0x10,%esp
4bd21e:	3b f3                	cmp    %ebx,%esi
4bd220:	75 d2                	jne    0x4bd1f4
4bd222:	8b 45 f4             	mov    -0xc(%ebp),%eax
4bd225:	5f                   	pop    %edi
4bd226:	5e                   	pop    %esi
4bd227:	5b                   	pop    %ebx
4bd228:	8b e5                	mov    %ebp,%esp
4bd22a:	5d                   	pop    %ebp
4bd22b:	c2 04 00             	ret    $0x4
4bd22e:	cc                   	int3
4bd22f:	cc                   	int3
4bd230:	55                   	push   %ebp
4bd231:	8b ec                	mov    %esp,%ebp
4bd233:	51                   	push   %ecx
4bd234:	53                   	push   %ebx
4bd235:	57                   	push   %edi
4bd236:	8b 7d 08             	mov    0x8(%ebp),%edi
4bd239:	8b df                	mov    %edi,%ebx
4bd23b:	8d 53 02             	lea    0x2(%ebx),%edx
4bd23e:	66 90                	xchg   %ax,%ax
4bd240:	66 8b 03             	mov    (%ebx),%ax
4bd243:	83 c3 02             	add    $0x2,%ebx
4bd246:	66 85 c0             	test   %ax,%ax
4bd249:	75 f5                	jne    0x4bd240
4bd24b:	2b da                	sub    %edx,%ebx
4bd24d:	89 4d fc             	mov    %ecx,-0x4(%ebp)
4bd250:	d1 fb                	sar    $1,%ebx
4bd252:	8b d1                	mov    %ecx,%edx
4bd254:	83 79 14 08          	cmpl   $0x8,0x14(%ecx)
4bd258:	72 05                	jb     0x4bd25f
4bd25a:	8b 11                	mov    (%ecx),%edx
4bd25c:	89 55 fc             	mov    %edx,-0x4(%ebp)
4bd25f:	8b 49 10             	mov    0x10(%ecx),%ecx
4bd262:	3b d9                	cmp    %ecx,%ebx
4bd264:	77 7a                	ja     0x4bd2e0
4bd266:	8b 45 0c             	mov    0xc(%ebp),%eax
4bd269:	2b cb                	sub    %ebx,%ecx
4bd26b:	3b c1                	cmp    %ecx,%eax
4bd26d:	77 71                	ja     0x4bd2e0
4bd26f:	85 db                	test   %ebx,%ebx
4bd271:	74 2e                	je     0x4bd2a1
4bd273:	41                   	inc    %ecx
4bd274:	8d 04 42             	lea    (%edx,%eax,2),%eax
4bd277:	56                   	push   %esi
4bd278:	8d 0c 4a             	lea    (%edx,%ecx,2),%ecx
4bd27b:	89 4d 0c             	mov    %ecx,0xc(%ebp)