40471b:	8b 54 24 04          	mov    0x4(%esp),%edx
40471f:	29 10                	sub    %edx,(%eax)
404721:	8b 49 1c             	mov    0x1c(%ecx),%ecx
404724:	8d 04 12             	lea    (%edx,%edx,1),%eax
404727:	01 01                	add    %eax,(%ecx)
404729:	c2 04 00             	ret    $0x4
40472c:	55                   	push   %ebp
40472d:	8b ec                	mov    %esp,%ebp
40472f:	51                   	push   %ecx
404730:	ff 71 30             	push   0x30(%ecx)
404733:	8b 4d 08             	mov    0x8(%ebp),%ecx
404736:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
40473a:	e8 9d e5 ff ff       	call   0x402cdc
40473f:	8b 45 08             	mov    0x8(%ebp),%eax
404742:	8b e5                	mov    %ebp,%esp
404744:	5d                   	pop    %ebp
404745:	c2 04 00             	ret    $0x4
404748:	e8 e1 04 00 00       	call   0x404c2e
40474d:	f7 d8                	neg    %eax
40474f:	1a c0                	sbb    %al,%al
404751:	fe c0                	inc    %al
404753:	c3                   	ret
404754:	8b 41 1c             	mov    0x1c(%ecx),%eax
404757:	8b 00                	mov    (%eax),%eax
404759:	c3                   	ret
40475a:	c2 04 00             	ret    $0x4
40475d:	56                   	push   %esi
40475e:	8b f1                	mov    %ecx,%esi
404760:	e8 a3 f4 ff ff       	call   0x403c08
404765:	8b 44 24 08          	mov    0x8(%esp),%eax
404769:	8b ce                	mov    %esi,%ecx
40476b:	83 66 3c 00          	andl   $0x0,0x3c(%esi)
40476f:	6a 20                	push   $0x20
404771:	89 46 38             	mov    %eax,0x38(%esi)
404774:	e8 b8 0a 00 00       	call   0x405231
404779:	83 7e 38 00          	cmpl   $0x0,0x38(%esi)
40477d:	66 89 46 40          	mov    %ax,0x40(%esi)
404781:	75 0b                	jne    0x40478e
404783:	6a 00                	push   $0x0
404785:	6a 04                	push   $0x4
404787:	8b ce                	mov    %esi,%ecx
404789:	e8 01 09 00 00       	call   0x40508f
40478e:	80 7c 24 0c 00       	cmpb   $0x0,0xc(%esp)
404793:	74 07                	je     0x40479c
404795:	56                   	push   %esi
404796:	e8 a7 19 00 00       	call   0x406142
40479b:	59                   	pop    %ecx
40479c:	5e                   	pop    %esi
40479d:	c2 08 00             	ret    $0x8
4047a0:	e9 43 dc ff ff       	jmp    0x4023e8
4047a5:	8b 01                	mov    (%ecx),%eax
4047a7:	ff 60 10             	jmp    *0x10(%eax)
4047aa:	8b 44 24 04          	mov    0x4(%esp),%eax
4047ae:	80 38 00             	cmpb   $0x0,(%eax)
4047b1:	75 03                	jne    0x4047b6
4047b3:	33 c0                	xor    %eax,%eax
4047b5:	c3                   	ret
4047b6:	8d 50 01             	lea    0x1(%eax),%edx
4047b9:	8a 08                	mov    (%eax),%cl
4047bb:	40                   	inc    %eax
4047bc:	84 c9                	test   %cl,%cl
4047be:	75 f9                	jne    0x4047b9
4047c0:	2b c2                	sub    %edx,%eax
4047c2:	c3                   	ret
4047c3:	8b 54 24 04          	mov    0x4(%esp),%edx
4047c7:	33 c9                	xor    %ecx,%ecx
4047c9:	66 39 0a             	cmp    %cx,(%edx)
4047cc:	74 16                	je     0x4047e4
4047ce:	56                   	push   %esi
4047cf:	8d 72 02             	lea    0x2(%edx),%esi
4047d2:	66 8b 02             	mov    (%edx),%ax
4047d5:	83 c2 02             	add    $0x2,%edx
4047d8:	66 3b c1             	cmp    %cx,%ax
4047db:	75 f5                	jne    0x4047d2
4047dd:	8b ca                	mov    %edx,%ecx
4047df:	2b ce                	sub    %esi,%ecx
4047e1:	d1 f9                	sar    $1,%ecx
4047e3:	5e                   	pop    %esi
4047e4:	8b c1                	mov    %ecx,%eax
4047e6:	c3                   	ret
4047e7:	56                   	push   %esi
4047e8:	57                   	push   %edi
4047e9:	8b f2                	mov    %edx,%esi
4047eb:	8b f9                	mov    %ecx,%edi
4047ed:	e8 ae ff ff ff       	call   0x4047a0
4047f2:	50                   	push   %eax
4047f3:	56                   	push   %esi
4047f4:	8b cf                	mov    %edi,%ecx
4047f6:	e8 d0 e3 ff ff       	call   0x402bcb
4047fb:	8b c7                	mov    %edi,%eax
4047fd:	5f                   	pop    %edi
4047fe:	5e                   	pop    %esi
4047ff:	c3                   	ret
404800:	e8 07 00 00 00       	call   0x40480c
404805:	c2 04 00             	ret    $0x4
404808:	83 c8 ff             	or     $0xffffffff,%eax
40480b:	c3                   	ret
40480c:	e9 f7 ff ff ff       	jmp    0x404808
404811:	51                   	push   %ecx
404812:	ff 34 24             	push   (%esp)
404815:	e8 0f f1 ff ff       	call   0x403929
40481a:	8b c8                	mov    %eax,%ecx
40481c:	e8 df ff ff ff       	call   0x404800
404821:	33 d2                	xor    %edx,%edx
404823:	42                   	inc    %edx
404824:	3b c2                	cmp    %edx,%eax
404826:	8d 48 ff             	lea    -0x1(%eax),%ecx
404829:	0f 46 ca             	cmovbe %edx,%ecx
40482c:	8b c1                	mov    %ecx,%eax
40482e:	59                   	pop    %ecx
40482f:	c3                   	ret
404830:	55                   	push   %ebp
404831:	8b ec                	mov    %esp,%ebp
404833:	51                   	push   %ecx
404834:	ff 75 0c             	push   0xc(%ebp)
404837:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
40483b:	e8 dd 18 00 00       	call   0x40611d
404840:	59                   	pop    %ecx
404841:	8b 4d 08             	mov    0x8(%ebp),%ecx
404844:	50                   	push   %eax
404845:	e8 3d e0 ff ff       	call   0x402887
40484a:	8b 45 08             	mov    0x8(%ebp),%eax
40484d:	8b e5                	mov    %ebp,%esp
40484f:	5d                   	pop    %ebp
404850:	c2 08 00             	ret    $0x8
404853:	55                   	push   %ebp
404854:	8b ec                	mov    %esp,%ebp
404856:	51                   	push   %ecx
404857:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
40485b:	83 7d 0c 01          	cmpl   $0x1,0xc(%ebp)
40485f:	75 0f                	jne    0x404870
404861:	8b 4d 08             	mov    0x8(%ebp),%ecx
404864:	68 0c 74 42 00       	push   $0x42740c
404869:	e8 19 e0 ff ff       	call   0x402887
40486e:	eb 0b                	jmp    0x40487b
404870:	ff 75 0c             	push   0xc(%ebp)
404873:	ff 75 08             	push   0x8(%ebp)
404876:	e8 b5 ff ff ff       	call   0x404830
40487b:	8b 45 08             	mov    0x8(%ebp),%eax
40487e:	8b e5                	mov    %ebp,%esp
404880:	5d                   	pop    %ebp
404881:	c2 08 00             	ret    $0x8
404884:	55                   	push   %ebp
404885:	8b ec                	mov    %esp,%ebp
404887:	51                   	push   %ecx
404888:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
40488c:	53                   	push   %ebx
40488d:	56                   	push   %esi
40488e:	57                   	push   %edi
40488f:	8b f1                	mov    %ecx,%esi
404891:	e8 ca f9 ff ff       	call   0x404260
404896:	8b f8                	mov    %eax,%edi
404898:	8b ce                	mov    %esi,%ecx
40489a:	8b 1f                	mov    (%edi),%ebx
40489c:	e8 7c 09 00 00       	call   0x40521d
4048a1:	50                   	push   %eax
4048a2:	ff 75 08             	push   0x8(%ebp)
4048a5:	8b cf                	mov    %edi,%ecx
4048a7:	ff 53 08             	call   *0x8(%ebx)
4048aa:	8b 45 08             	mov    0x8(%ebp),%eax
4048ad:	5f                   	pop    %edi
4048ae:	5e                   	pop    %esi
4048af:	5b                   	pop    %ebx
4048b0:	8b e5                	mov    %ebp,%esp
4048b2:	5d                   	pop    %ebp
4048b3:	c2 04 00             	ret    $0x4
4048b6:	55                   	push   %ebp
4048b7:	8b ec                	mov    %esp,%ebp
4048b9:	83 7d 10 00          	cmpl   $0x0,0x10(%ebp)
4048bd:	75 05                	jne    0x4048c4
4048bf:	8b 45 08             	mov    0x8(%ebp),%eax
4048c2:	5d                   	pop    %ebp
4048c3:	c3                   	ret
4048c4:	5d                   	pop    %ebp
4048c5:	e9 56 31 00 00       	jmp    0x407a20
4048ca:	b8 dc 73 42 00       	mov    $0x4273dc,%eax
4048cf:	c3                   	ret
4048d0:	b8 00 74 42 00       	mov    $0x427400,%eax
4048d5:	c3                   	ret
4048d6:	8b 44 24 04          	mov    0x4(%esp),%eax
4048da:	56                   	push   %esi
4048db:	0f b7 30             	movzwl (%eax),%esi
4048de:	e8 9f fc ff ff       	call   0x404582
4048e3:	66 3b f0             	cmp    %ax,%si
4048e6:	74 04                	je     0x4048ec
4048e8:	8b ce                	mov    %esi,%ecx
4048ea:	eb 0d                	jmp    0x4048f9
4048ec:	e8 91 fc ff ff       	call   0x404582
4048f1:	33 c9                	xor    %ecx,%ecx
4048f3:	66 85 c0             	test   %ax,%ax
4048f6:	0f 94 c1             	sete   %cl
4048f9:	66 8b c1             	mov    %cx,%ax
4048fc:	5e                   	pop    %esi
4048fd:	c3                   	ret
4048fe:	e8 7f fc ff ff       	call   0x404582
404903:	c2 04 00             	ret    $0x4
404906:	51                   	push   %ecx
404907:	57                   	push   %edi
404908:	8b f9                	mov    %ecx,%edi
40490a:	e8 73 fc ff ff       	call   0x404582
40490f:	f6 47 3c 02          	testb  $0x2,0x3c(%edi)
404913:	0f 85 e1 01 00 00    	jne    0x404afa
404919:	0f b7 c0             	movzwl %ax,%eax
40491c:	89 44 24 04          	mov    %eax,0x4(%esp)
404920:	8d 44 24 0c          	lea    0xc(%esp),%eax
404924:	50                   	push   %eax
404925:	8d 44 24 08          	lea    0x8(%esp),%eax
404929:	50                   	push   %eax
40492a:	e8 79 fc ff ff       	call   0x4045a8
40492f:	59                   	pop    %ecx
404930:	59                   	pop    %ecx
404931:	84 c0                	test   %al,%al
404933:	74 10                	je     0x404945
404935:	8d 44 24 0c          	lea    0xc(%esp),%eax
404939:	50                   	push   %eax
40493a:	e8 97 ff ff ff       	call   0x4048d6
40493f:	59                   	pop    %ecx
404940:	e9 b5 01 00 00       	jmp    0x404afa
404945:	f6 47 3c 08          	testb  $0x8,0x3c(%edi)
404949:	74 31                	je     0x40497c
40494b:	8b cf                	mov    %edi,%ecx
40494d:	e8 cd 02 00 00       	call   0x404c1f
404952:	85 c0                	test   %eax,%eax
404954:	74 26                	je     0x40497c
404956:	8b cf                	mov    %edi,%ecx
404958:	e8 c2 02 00 00       	call   0x404c1f
40495d:	3b 47 38             	cmp    0x38(%edi),%eax
404960:	73 1a                	jae    0x40497c
404962:	8b cf                	mov    %edi,%ecx
404964:	e8 1f fc ff ff       	call   0x404588
404969:	50                   	push   %eax
40496a:	ff 77 38             	push   0x38(%edi)
40496d:	8b cf                	mov    %edi,%ecx
40496f:	e8 64 02 00 00       	call   0x404bd8
404974:	50                   	push   %eax
404975:	8b cf                	mov    %edi,%ecx
404977:	e8 cf 06 00 00       	call   0x40504b
40497c:	56                   	push   %esi
40497d:	8b cf                	mov    %edi,%ecx
40497f:	e8 9b 02 00 00       	call   0x404c1f
404984:	85 c0                	test   %eax,%eax
404986:	74 35                	je     0x4049bd
404988:	8b cf                	mov    %edi,%ecx
40498a:	e8 f9 fb ff ff       	call   0x404588
40498f:	8b cf                	mov    %edi,%ecx
404991:	8b f0                	mov    %eax,%esi
404993:	e8 87 02 00 00       	call   0x404c1f
404998:	3b c6                	cmp    %esi,%eax
40499a:	73 21                	jae    0x4049bd
40499c:	8b cf                	mov    %edi,%ecx
40499e:	e8 5d f4 ff ff       	call   0x403e00
4049a3:	8b f0                	mov    %eax,%esi
4049a5:	8d 44 24 10          	lea    0x10(%esp),%eax
4049a9:	50                   	push   %eax
4049aa:	e8 6c 07 00 00       	call   0x40511b
4049af:	66 89 06             	mov    %ax,(%esi)
4049b2:	66 8b 44 24 14       	mov    0x14(%esp),%ax
4049b7:	59                   	pop    %ecx
4049b8:	e9 3c 01 00 00       	jmp    0x404af9
4049bd:	53                   	push   %ebx
4049be:	8b cf                	mov    %edi,%ecx
4049c0:	e8 5a 02 00 00       	call   0x404c1f
4049c5:	85 c0                	test   %eax,%eax
4049c7:	75 04                	jne    0x4049cd
4049c9:	33 db                	xor    %ebx,%ebx
4049cb:	eb 14                	jmp    0x4049e1
4049cd:	8b cf                	mov    %edi,%ecx
4049cf:	e8 b4 fb ff ff       	call   0x404588
4049d4:	8b cf                	mov    %edi,%ecx
4049d6:	8b d8                	mov    %eax,%ebx
4049d8:	e8 85 fb ff ff       	call   0x404562
4049dd:	2b d8                	sub    %eax,%ebx
4049df:	d1 fb                	sar    $1,%ebx
4049e1:	8b c3                	mov    %ebx,%eax
4049e3:	6a 20                	push   $0x20
4049e5:	d1 e8                	shr    $1,%eax
4049e7:	59                   	pop    %ecx
4049e8:	3b c1                	cmp    %ecx,%eax
4049ea:	72 06                	jb     0x4049f2
4049ec:	8b c8                	mov    %eax,%ecx
4049ee:	85 c9                	test   %ecx,%ecx
4049f0:	74 13                	je     0x404a05
4049f2:	b8 ff ff ff 7f       	mov    $0x7fffffff,%eax
4049f7:	2b c1                	sub    %ecx,%eax
4049f9:	3b c3                	cmp    %ebx,%eax
4049fb:	73 04                	jae    0x404a01
4049fd:	d1 e9                	shr    $1,%ecx
4049ff:	75 f1                	jne    0x4049f2
404a01:	85 c9                	test   %ecx,%ecx
404a03:	75 0a                	jne    0x404a0f
404a05:	e8 78 fb ff ff       	call   0x404582
404a0a:	e9 e9 00 00 00       	jmp    0x404af8
404a0f:	8d 04 19             	lea    (%ecx,%ebx,1),%eax
404a12:	55                   	push   %ebp
404a13:	8d 4f 40             	lea    0x40(%edi),%ecx
404a16:	89 44 24 10          	mov    %eax,0x10(%esp)
404a1a:	50                   	push   %eax
404a1b:	e8 ba f5 ff ff       	call   0x403fda
404a20:	8b cf                	mov    %edi,%ecx
404a22:	8b f0                	mov    %eax,%esi
404a24:	e8 39 fb ff ff       	call   0x404562
404a29:	8b e8                	mov    %eax,%ebp
404a2b:	85 db                	test   %ebx,%ebx
404a2d:	74 0f                	je     0x404a3e
404a2f:	53                   	push   %ebx
404a30:	55                   	push   %ebp
404a31:	56                   	push   %esi
404a32:	e8 e7 f8 ff ff       	call   0x40431e
404a37:	83 c4 0c             	add    $0xc,%esp
404a3a:	85 db                	test   %ebx,%ebx
404a3c:	75 27                	jne    0x404a65
404a3e:	8b 44 24 10          	mov    0x10(%esp),%eax
404a42:	8b cf                	mov    %edi,%ecx
404a44:	89 77 38             	mov    %esi,0x38(%edi)
404a47:	8d 04 46             	lea    (%esi,%eax,2),%eax
404a4a:	50                   	push   %eax
404a4b:	56                   	push   %esi
404a4c:	e8 1e 06 00 00       	call   0x40506f
404a51:	f6 47 3c 04          	testb  $0x4,0x3c(%edi)
404a55:	8b cf                	mov    %edi,%ecx
404a57:	74 05                	je     0x404a5e
404a59:	56                   	push   %esi
404a5a:	6a 00                	push   $0x0
404a5c:	eb 63                	jmp    0x404ac1
404a5e:	8d 46 02             	lea    0x2(%esi),%eax
404a61:	50                   	push   %eax
404a62:	56                   	push   %esi
404a63:	eb 5c                	jmp    0x404ac1
404a65:	8b 47 38             	mov    0x38(%edi),%eax
404a68:	8b cf                	mov    %edi,%ecx
404a6a:	2b c5                	sub    %ebp,%eax
404a6c:	d1 f8                	sar    $1,%eax
404a6e:	8d 04 46             	lea    (%esi,%eax,2),%eax
404a71:	89 47 38             	mov    %eax,0x38(%edi)
404a74:	8b 44 24 10          	mov    0x10(%esp),%eax
404a78:	8d 04 46             	lea    (%esi,%eax,2),%eax
404a7b:	50                   	push   %eax
404a7c:	e8 9e 01 00 00       	call   0x404c1f
404a81:	2b c5                	sub    %ebp,%eax
404a83:	8b cf                	mov    %edi,%ecx
404a85:	d1 f8                	sar    $1,%eax
404a87:	8d 04 46             	lea    (%esi,%eax,2),%eax
404a8a:	50                   	push   %eax
404a8b:	e8 48 01 00 00       	call   0x404bd8
404a90:	2b c5                	sub    %ebp,%eax
404a92:	8b cf                	mov    %edi,%ecx
404a94:	d1 f8                	sar    $1,%eax
404a96:	8d 04 46             	lea    (%esi,%eax,2),%eax
404a99:	50                   	push   %eax
404a9a:	e8 ac 05 00 00       	call   0x40504b