418865:	8b 08                	mov    (%eax),%ecx
418867:	ff 51 18             	call   *0x18(%ecx)
41886a:	8b c8                	mov    %eax,%ecx
41886c:	8b d3                	mov    %ebx,%edx
41886e:	8b 45 f8             	mov    -0x8(%ebp),%eax
418871:	8b 18                	mov    (%eax),%ebx
418873:	ff 53 24             	call   *0x24(%ebx)
418876:	8b 4d fc             	mov    -0x4(%ebp),%ecx
418879:	8b d6                	mov    %esi,%edx
41887b:	8b 45 f8             	mov    -0x8(%ebp),%eax
41887e:	8b 18                	mov    (%eax),%ebx
418880:	ff 53 20             	call   *0x20(%ebx)
418883:	8b 4d f4             	mov    -0xc(%ebp),%ecx
418886:	8b d6                	mov    %esi,%edx
418888:	8b 45 f8             	mov    -0x8(%ebp),%eax
41888b:	8b 18                	mov    (%eax),%ebx
41888d:	ff 53 24             	call   *0x24(%ebx)
418890:	33 c0                	xor    %eax,%eax
418892:	5a                   	pop    %edx
418893:	59                   	pop    %ecx
418894:	59                   	pop    %ecx
418895:	64 89 10             	mov    %edx,%fs:(%eax)
418898:	68 ad 88 41 00       	push   $0x4188ad
41889d:	8b 45 f8             	mov    -0x8(%ebp),%eax
4188a0:	e8 fb fd ff ff       	call   0x4186a0
4188a5:	c3                   	ret
4188a6:	e9 dd b7 fe ff       	jmp    0x404088
4188ab:	eb f0                	jmp    0x41889d
4188ad:	33 c0                	xor    %eax,%eax
4188af:	5a                   	pop    %edx
4188b0:	59                   	pop    %ecx
4188b1:	59                   	pop    %ecx
4188b2:	64 89 10             	mov    %edx,%fs:(%eax)
4188b5:	68 d2 88 41 00       	push   $0x4188d2
4188ba:	8d 45 f0             	lea    -0x10(%ebp),%eax
4188bd:	e8 5e be fe ff       	call   0x404720
4188c2:	8d 45 fc             	lea    -0x4(%ebp),%eax
4188c5:	e8 56 be fe ff       	call   0x404720
4188ca:	c3                   	ret
4188cb:	e9 b8 b7 fe ff       	jmp    0x404088
4188d0:	eb e8                	jmp    0x4188ba
4188d2:	5f                   	pop    %edi
4188d3:	5e                   	pop    %esi
4188d4:	5b                   	pop    %ebx
4188d5:	8b e5                	mov    %ebp,%esp
4188d7:	5d                   	pop    %ebp
4188d8:	c3                   	ret
4188d9:	8d 40 00             	lea    0x0(%eax),%eax
4188dc:	8b 10                	mov    (%eax),%edx
4188de:	ff 52 14             	call   *0x14(%edx)
4188e1:	c3                   	ret
4188e2:	8b c0                	mov    %eax,%eax
4188e4:	33 c0                	xor    %eax,%eax
4188e6:	c3                   	ret
4188e7:	90                   	nop
4188e8:	55                   	push   %ebp
4188e9:	8b ec                	mov    %esp,%ebp
4188eb:	6a 00                	push   $0x0
4188ed:	53                   	push   %ebx
4188ee:	8b d8                	mov    %eax,%ebx
4188f0:	33 c0                	xor    %eax,%eax
4188f2:	55                   	push   %ebp
4188f3:	68 2d 89 41 00       	push   $0x41892d
4188f8:	64 ff 30             	push   %fs:(%eax)
4188fb:	64 89 20             	mov    %esp,%fs:(%eax)
4188fe:	8d 55 fc             	lea    -0x4(%ebp),%edx
418901:	8b c3                	mov    %ebx,%eax
418903:	8b 08                	mov    (%eax),%ecx
418905:	ff 51 1c             	call   *0x1c(%ecx)
418908:	8b 45 fc             	mov    -0x4(%ebp),%eax
41890b:	e8 d4 c2 fe ff       	call   0x404be4
418910:	e8 fb 0a ff ff       	call   0x409410
418915:	8b d8                	mov    %eax,%ebx
418917:	33 c0                	xor    %eax,%eax
418919:	5a                   	pop    %edx
41891a:	59                   	pop    %ecx
41891b:	59                   	pop    %ecx
41891c:	64 89 10             	mov    %edx,%fs:(%eax)
41891f:	68 34 89 41 00       	push   $0x418934
418924:	8d 45 fc             	lea    -0x4(%ebp),%eax
418927:	e8 f4 bd fe ff       	call   0x404720
41892c:	c3                   	ret
41892d:	e9 56 b7 fe ff       	jmp    0x404088
418932:	eb f0                	jmp    0x418924
418934:	8b c3                	mov    %ebx,%eax
418936:	5b                   	pop    %ebx
418937:	59                   	pop    %ecx
418938:	5d                   	pop    %ebp
418939:	c3                   	ret
41893a:	8b c0                	mov    %eax,%eax
41893c:	55                   	push   %ebp
41893d:	8b ec                	mov    %esp,%ebp
41893f:	83 c4 d8             	add    $0xffffffd8,%esp
418942:	53                   	push   %ebx
418943:	56                   	push   %esi
418944:	33 c9                	xor    %ecx,%ecx
418946:	89 4d dc             	mov    %ecx,-0x24(%ebp)
418949:	89 4d fc             	mov    %ecx,-0x4(%ebp)
41894c:	89 4d f8             	mov    %ecx,-0x8(%ebp)
41894f:	89 55 f0             	mov    %edx,-0x10(%ebp)
418952:	89 45 f4             	mov    %eax,-0xc(%ebp)
418955:	33 c0                	xor    %eax,%eax
418957:	55                   	push   %ebp
418958:	68 65 8a 41 00       	push   $0x418a65
41895d:	64 ff 30             	push   %fs:(%eax)
418960:	64 89 20             	mov    %esp,%fs:(%eax)
418963:	8b 45 f4             	mov    -0xc(%ebp),%eax
418966:	8b 10                	mov    (%eax),%edx
418968:	ff 52 14             	call   *0x14(%edx)
41896b:	89 45 e4             	mov    %eax,-0x1c(%ebp)
41896e:	33 c0                	xor    %eax,%eax
418970:	89 45 e8             	mov    %eax,-0x18(%ebp)
418973:	8d 55 f8             	lea    -0x8(%ebp),%edx
418976:	8b 45 f4             	mov    -0xc(%ebp),%eax
418979:	e8 ba 08 00 00       	call   0x419238
41897e:	8b 75 e4             	mov    -0x1c(%ebp),%esi
418981:	4e                   	dec    %esi
418982:	85 f6                	test   %esi,%esi
418984:	7c 3f                	jl     0x4189c5
418986:	46                   	inc    %esi
418987:	c7 45 ec 00 00 00 00 	movl   $0x0,-0x14(%ebp)
41898e:	8d 4d dc             	lea    -0x24(%ebp),%ecx
418991:	8b 55 ec             	mov    -0x14(%ebp),%edx
418994:	8b 45 f4             	mov    -0xc(%ebp),%eax
418997:	8b 18                	mov    (%eax),%ebx
418999:	ff 53 0c             	call   *0xc(%ebx)
41899c:	8b 45 dc             	mov    -0x24(%ebp),%eax
41899f:	89 45 d8             	mov    %eax,-0x28(%ebp)
4189a2:	8b 45 d8             	mov    -0x28(%ebp),%eax
4189a5:	85 c0                	test   %eax,%eax
4189a7:	74 05                	je     0x4189ae
4189a9:	83 e8 04             	sub    $0x4,%eax
4189ac:	8b 00                	mov    (%eax),%eax
4189ae:	8b 55 f8             	mov    -0x8(%ebp),%edx
4189b1:	85 d2                	test   %edx,%edx
4189b3:	74 05                	je     0x4189ba
4189b5:	83 ea 04             	sub    $0x4,%edx
4189b8:	8b 12                	mov    (%edx),%edx
4189ba:	03 d0                	add    %eax,%edx
4189bc:	01 55 e8             	add    %edx,-0x18(%ebp)
4189bf:	ff 45 ec             	incl   -0x14(%ebp)
4189c2:	4e                   	dec    %esi
4189c3:	75 c9                	jne    0x41898e
4189c5:	8b 45 f0             	mov    -0x10(%ebp),%eax
4189c8:	8b 4d e8             	mov    -0x18(%ebp),%ecx
4189cb:	33 d2                	xor    %edx,%edx
4189cd:	e8 3e be fe ff       	call   0x404810
4189d2:	8b 45 f0             	mov    -0x10(%ebp),%eax
4189d5:	8b 00                	mov    (%eax),%eax
4189d7:	89 45 e0             	mov    %eax,-0x20(%ebp)
4189da:	8b 75 e4             	mov    -0x1c(%ebp),%esi
4189dd:	4e                   	dec    %esi
4189de:	85 f6                	test   %esi,%esi
4189e0:	7c 60                	jl     0x418a42
4189e2:	46                   	inc    %esi
4189e3:	c7 45 ec 00 00 00 00 	movl   $0x0,-0x14(%ebp)
4189ea:	8d 4d fc             	lea    -0x4(%ebp),%ecx
4189ed:	8b 55 ec             	mov    -0x14(%ebp),%edx
4189f0:	8b 45 f4             	mov    -0xc(%ebp),%eax
4189f3:	8b 18                	mov    (%eax),%ebx
4189f5:	ff 53 0c             	call   *0xc(%ebx)
4189f8:	8b 45 fc             	mov    -0x4(%ebp),%eax
4189fb:	85 c0                	test   %eax,%eax
4189fd:	74 05                	je     0x418a04
4189ff:	83 e8 04             	sub    $0x4,%eax
418a02:	8b 00                	mov    (%eax),%eax
418a04:	8b d8                	mov    %eax,%ebx
418a06:	85 db                	test   %ebx,%ebx
418a08:	74 10                	je     0x418a1a
418a0a:	8b 55 e0             	mov    -0x20(%ebp),%edx
418a0d:	8b 45 fc             	mov    -0x4(%ebp),%eax
418a10:	8b cb                	mov    %ebx,%ecx
418a12:	e8 c5 a4 fe ff       	call   0x402edc
418a17:	01 5d e0             	add    %ebx,-0x20(%ebp)
418a1a:	8b 45 f8             	mov    -0x8(%ebp),%eax
418a1d:	85 c0                	test   %eax,%eax
418a1f:	74 05                	je     0x418a26
418a21:	83 e8 04             	sub    $0x4,%eax
418a24:	8b 00                	mov    (%eax),%eax
418a26:	8b d8                	mov    %eax,%ebx
418a28:	85 db                	test   %ebx,%ebx
418a2a:	74 10                	je     0x418a3c
418a2c:	8b 55 e0             	mov    -0x20(%ebp),%edx
418a2f:	8b 45 f8             	mov    -0x8(%ebp),%eax
418a32:	8b cb                	mov    %ebx,%ecx
418a34:	e8 a3 a4 fe ff       	call   0x402edc
418a39:	01 5d e0             	add    %ebx,-0x20(%ebp)
418a3c:	ff 45 ec             	incl   -0x14(%ebp)
418a3f:	4e                   	dec    %esi
418a40:	75 a8                	jne    0x4189ea
418a42:	33 c0                	xor    %eax,%eax
418a44:	5a                   	pop    %edx
418a45:	59                   	pop    %ecx
418a46:	59                   	pop    %ecx
418a47:	64 89 10             	mov    %edx,%fs:(%eax)
418a4a:	68 6c 8a 41 00       	push   $0x418a6c
418a4f:	8d 45 dc             	lea    -0x24(%ebp),%eax
418a52:	e8 c9 bc fe ff       	call   0x404720
418a57:	8d 45 f8             	lea    -0x8(%ebp),%eax
418a5a:	ba 02 00 00 00       	mov    $0x2,%edx
418a5f:	e8 e0 bc fe ff       	call   0x404744
418a64:	c3                   	ret
418a65:	e9 1e b6 fe ff       	jmp    0x404088
418a6a:	eb e3                	jmp    0x418a4f
418a6c:	5e                   	pop    %esi
418a6d:	5b                   	pop    %ebx
418a6e:	8b e5                	mov    %ebp,%esp
418a70:	5d                   	pop    %ebp
418a71:	c3                   	ret
418a72:	8b c0                	mov    %eax,%eax
418a74:	55                   	push   %ebp
418a75:	8b ec                	mov    %esp,%ebp
418a77:	83 c4 f4             	add    $0xfffffff4,%esp
418a7a:	53                   	push   %ebx
418a7b:	56                   	push   %esi
418a7c:	57                   	push   %edi
418a7d:	33 c9                	xor    %ecx,%ecx
418a7f:	89 4d f4             	mov    %ecx,-0xc(%ebp)
418a82:	89 55 fc             	mov    %edx,-0x4(%ebp)
418a85:	8b d8                	mov    %eax,%ebx
418a87:	33 c0                	xor    %eax,%eax
418a89:	55                   	push   %ebp
418a8a:	68 ec 8a 41 00       	push   $0x418aec
418a8f:	64 ff 30             	push   %fs:(%eax)
418a92:	64 89 20             	mov    %esp,%fs:(%eax)
418a95:	8b c3                	mov    %ebx,%eax
418a97:	8b 10                	mov    (%eax),%edx
418a99:	ff 52 14             	call   *0x14(%edx)
418a9c:	8b f0                	mov    %eax,%esi
418a9e:	4e                   	dec    %esi
418a9f:	85 f6                	test   %esi,%esi
418aa1:	7c 2c                	jl     0x418acf
418aa3:	46                   	inc    %esi
418aa4:	c7 45 f8 00 00 00 00 	movl   $0x0,-0x8(%ebp)
418aab:	8d 4d f4             	lea    -0xc(%ebp),%ecx
418aae:	8b 55 f8             	mov    -0x8(%ebp),%edx
418ab1:	8b c3                	mov    %ebx,%eax
418ab3:	8b 38                	mov    (%eax),%edi
418ab5:	ff 57 0c             	call   *0xc(%edi)
418ab8:	8b 55 f4             	mov    -0xc(%ebp),%edx
418abb:	8b 4d fc             	mov    -0x4(%ebp),%ecx
418abe:	8b c3                	mov    %ebx,%eax
418ac0:	8b 38                	mov    (%eax),%edi
418ac2:	ff 57 34             	call   *0x34(%edi)
418ac5:	85 c0                	test   %eax,%eax
418ac7:	74 0d                	je     0x418ad6
418ac9:	ff 45 f8             	incl   -0x8(%ebp)
418acc:	4e                   	dec    %esi
418acd:	75 dc                	jne    0x418aab
418acf:	c7 45 f8 ff ff ff ff 	movl   $0xffffffff,-0x8(%ebp)
418ad6:	33 c0                	xor    %eax,%eax
418ad8:	5a                   	pop    %edx
418ad9:	59                   	pop    %ecx
418ada:	59                   	pop    %ecx
418adb:	64 89 10             	mov    %edx,%fs:(%eax)
418ade:	68 f3 8a 41 00       	push   $0x418af3
418ae3:	8d 45 f4             	lea    -0xc(%ebp),%eax
418ae6:	e8 35 bc fe ff       	call   0x404720
418aeb:	c3                   	ret
418aec:	e9 97 b5 fe ff       	jmp    0x404088
418af1:	eb f0                	jmp    0x418ae3
418af3:	8b 45 f8             	mov    -0x8(%ebp),%eax
418af6:	5f                   	pop    %edi
418af7:	5e                   	pop    %esi
418af8:	5b                   	pop    %ebx
418af9:	8b e5                	mov    %ebp,%esp
418afb:	5d                   	pop    %ebp
418afc:	c3                   	ret
418afd:	8d 40 00             	lea    0x0(%eax),%eax
418b00:	55                   	push   %ebp
418b01:	8b ec                	mov    %esp,%ebp
418b03:	83 c4 e8             	add    $0xffffffe8,%esp
418b06:	53                   	push   %ebx
418b07:	56                   	push   %esi
418b08:	33 c9                	xor    %ecx,%ecx
418b0a:	89 4d e8             	mov    %ecx,-0x18(%ebp)
418b0d:	89 4d ec             	mov    %ecx,-0x14(%ebp)
418b10:	89 4d fc             	mov    %ecx,-0x4(%ebp)
418b13:	89 55 f8             	mov    %edx,-0x8(%ebp)
418b16:	8b d8                	mov    %eax,%ebx
418b18:	33 c0                	xor    %eax,%eax
418b1a:	55                   	push   %ebp
418b1b:	68 c3 8b 41 00       	push   $0x418bc3
418b20:	64 ff 30             	push   %fs:(%eax)
418b23:	64 89 20             	mov    %esp,%fs:(%eax)
418b26:	8b c3                	mov    %ebx,%eax
418b28:	8b 10                	mov    (%eax),%edx
418b2a:	ff 52 14             	call   *0x14(%edx)
418b2d:	48                   	dec    %eax
418b2e:	85 c0                	test   %eax,%eax
418b30:	7c 67                	jl     0x418b99
418b32:	40                   	inc    %eax
418b33:	89 45 f0             	mov    %eax,-0x10(%ebp)
418b36:	c7 45 f4 00 00 00 00 	movl   $0x0,-0xc(%ebp)
418b3d:	8d 4d fc             	lea    -0x4(%ebp),%ecx
418b40:	8b 55 f4             	mov    -0xc(%ebp),%edx
418b43:	8b c3                	mov    %ebx,%eax
418b45:	8b 30                	mov    (%eax),%esi
418b47:	ff 56 0c             	call   *0xc(%esi)
418b4a:	8b c3                	mov    %ebx,%eax
418b4c:	e8 8b 07 00 00       	call   0x4192dc
418b51:	8b d0                	mov    %eax,%edx
418b53:	8d 45 ec             	lea    -0x14(%ebp),%eax
418b56:	e8 ad bd fe ff       	call   0x404908
418b5b:	8b 45 ec             	mov    -0x14(%ebp),%eax
418b5e:	8b 55 fc             	mov    -0x4(%ebp),%edx
418b61:	e8 aa 43 ff ff       	call   0x40cf10
418b66:	8b f0                	mov    %eax,%esi
418b68:	85 f6                	test   %esi,%esi
418b6a:	74 25                	je     0x418b91
418b6c:	8d 45 e8             	lea    -0x18(%ebp),%eax
418b6f:	50                   	push   %eax
418b70:	8b ce                	mov    %esi,%ecx
418b72:	49                   	dec    %ecx
418b73:	ba 01 00 00 00       	mov    $0x1,%edx
418b78:	8b 45 fc             	mov    -0x4(%ebp),%eax
418b7b:	e8 c4 c0 fe ff       	call   0x404c44
418b80:	8b 55 e8             	mov    -0x18(%ebp),%edx
418b83:	8b 4d f8             	mov    -0x8(%ebp),%ecx
418b86:	8b c3                	mov    %ebx,%eax
418b88:	8b 30                	mov    (%eax),%esi
418b8a:	ff 56 34             	call   *0x34(%esi)
418b8d:	85 c0                	test   %eax,%eax
418b8f:	74 0f                	je     0x418ba0
418b91:	ff 45 f4             	incl   -0xc(%ebp)
418b94:	ff 4d f0             	decl   -0x10(%ebp)
418b97:	75 a4                	jne    0x418b3d
418b99:	c7 45 f4 ff ff ff ff 	movl   $0xffffffff,-0xc(%ebp)
418ba0:	33 c0                	xor    %eax,%eax
418ba2:	5a                   	pop    %edx
418ba3:	59                   	pop    %ecx
418ba4:	59                   	pop    %ecx
418ba5:	64 89 10             	mov    %edx,%fs:(%eax)
418ba8:	68 ca 8b 41 00       	push   $0x418bca
418bad:	8d 45 e8             	lea    -0x18(%ebp),%eax
418bb0:	ba 02 00 00 00       	mov    $0x2,%edx
418bb5:	e8 8a bb fe ff       	call   0x404744
418bba:	8d 45 fc             	lea    -0x4(%ebp),%eax
418bbd:	e8 5e bb fe ff       	call   0x404720
418bc2:	c3                   	ret
418bc3:	e9 c0 b4 fe ff       	jmp    0x404088
418bc8:	eb e3                	jmp    0x418bad
418bca:	8b 45 f4             	mov    -0xc(%ebp),%eax
418bcd:	5e                   	pop    %esi
418bce:	5b                   	pop    %ebx
418bcf:	8b e5                	mov    %ebp,%esp
418bd1:	5d                   	pop    %ebp
418bd2:	c3                   	ret
418bd3:	90                   	nop
418bd4:	53                   	push   %ebx