41ba6b:	56                   	push   %esi
41ba6c:	57                   	push   %edi
41ba6d:	8b 48 3c             	mov    0x3c(%eax),%ecx
41ba70:	03 c8                	add    %eax,%ecx
41ba72:	0f b7 41 14          	movzwl 0x14(%ecx),%eax
41ba76:	0f b7 59 06          	movzwl 0x6(%ecx),%ebx
41ba7a:	83 c0 18             	add    $0x18,%eax
41ba7d:	03 c1                	add    %ecx,%eax
41ba7f:	85 db                	test   %ebx,%ebx
41ba81:	74 1b                	je     0x41ba9e
41ba83:	8b 7d 0c             	mov    0xc(%ebp),%edi
41ba86:	8b 70 0c             	mov    0xc(%eax),%esi
41ba89:	3b fe                	cmp    %esi,%edi
41ba8b:	72 09                	jb     0x41ba96
41ba8d:	8b 48 08             	mov    0x8(%eax),%ecx
41ba90:	03 ce                	add    %esi,%ecx
41ba92:	3b f9                	cmp    %ecx,%edi
41ba94:	72 0a                	jb     0x41baa0
41ba96:	42                   	inc    %edx
41ba97:	83 c0 28             	add    $0x28,%eax
41ba9a:	3b d3                	cmp    %ebx,%edx
41ba9c:	72 e8                	jb     0x41ba86
41ba9e:	33 c0                	xor    %eax,%eax
41baa0:	5f                   	pop    %edi
41baa1:	5e                   	pop    %esi
41baa2:	5b                   	pop    %ebx
41baa3:	5d                   	pop    %ebp
41baa4:	c3                   	ret
41baa5:	cc                   	int3
41baa6:	cc                   	int3
41baa7:	cc                   	int3
41baa8:	cc                   	int3
41baa9:	cc                   	int3
41baaa:	cc                   	int3
41baab:	cc                   	int3
41baac:	cc                   	int3
41baad:	cc                   	int3
41baae:	cc                   	int3
41baaf:	cc                   	int3
41bab0:	8b ff                	mov    %edi,%edi
41bab2:	55                   	push   %ebp
41bab3:	8b ec                	mov    %esp,%ebp
41bab5:	6a fe                	push   $0xfffffffe
41bab7:	68 58 fe 41 00       	push   $0x41fe58
41babc:	68 c0 bc 41 00       	push   $0x41bcc0
41bac1:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
41bac7:	50                   	push   %eax
41bac8:	83 ec 08             	sub    $0x8,%esp
41bacb:	53                   	push   %ebx
41bacc:	56                   	push   %esi
41bacd:	57                   	push   %edi
41bace:	a1 e4 05 42 00       	mov    0x4205e4,%eax
41bad3:	31 45 f8             	xor    %eax,-0x8(%ebp)
41bad6:	33 c5                	xor    %ebp,%eax
41bad8:	50                   	push   %eax
41bad9:	8d 45 f0             	lea    -0x10(%ebp),%eax
41badc:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
41bae2:	89 65 e8             	mov    %esp,-0x18(%ebp)
41bae5:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
41baec:	68 00 00 40 00       	push   $0x400000
41baf1:	e8 7a 00 00 00       	call   0x41bb70
41baf6:	83 c4 04             	add    $0x4,%esp
41baf9:	85 c0                	test   %eax,%eax
41bafb:	74 54                	je     0x41bb51
41bafd:	8b 45 08             	mov    0x8(%ebp),%eax
41bb00:	2d 00 00 40 00       	sub    $0x400000,%eax
41bb05:	50                   	push   %eax
41bb06:	68 00 00 40 00       	push   $0x400000
41bb0b:	e8 50 ff ff ff       	call   0x41ba60
41bb10:	83 c4 08             	add    $0x8,%esp
41bb13:	85 c0                	test   %eax,%eax
41bb15:	74 3a                	je     0x41bb51
41bb17:	8b 40 24             	mov    0x24(%eax),%eax
41bb1a:	c1 e8 1f             	shr    $0x1f,%eax
41bb1d:	f7 d0                	not    %eax
41bb1f:	83 e0 01             	and    $0x1,%eax
41bb22:	c7 45 fc fe ff ff ff 	movl   $0xfffffffe,-0x4(%ebp)
41bb29:	8b 4d f0             	mov    -0x10(%ebp),%ecx
41bb2c:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
41bb33:	59                   	pop    %ecx
41bb34:	5f                   	pop    %edi
41bb35:	5e                   	pop    %esi
41bb36:	5b                   	pop    %ebx
41bb37:	8b e5                	mov    %ebp,%esp
41bb39:	5d                   	pop    %ebp
41bb3a:	c3                   	ret
41bb3b:	8b 45 ec             	mov    -0x14(%ebp),%eax
41bb3e:	8b 00                	mov    (%eax),%eax
41bb40:	33 c9                	xor    %ecx,%ecx
41bb42:	81 38 05 00 00 c0    	cmpl   $0xc0000005,(%eax)
41bb48:	0f 94 c1             	sete   %cl
41bb4b:	8b c1                	mov    %ecx,%eax
41bb4d:	c3                   	ret
41bb4e:	8b 65 e8             	mov    -0x18(%ebp),%esp
41bb51:	c7 45 fc fe ff ff ff 	movl   $0xfffffffe,-0x4(%ebp)
41bb58:	33 c0                	xor    %eax,%eax
41bb5a:	8b 4d f0             	mov    -0x10(%ebp),%ecx
41bb5d:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
41bb64:	59                   	pop    %ecx
41bb65:	5f                   	pop    %edi
41bb66:	5e                   	pop    %esi
41bb67:	5b                   	pop    %ebx
41bb68:	8b e5                	mov    %ebp,%esp
41bb6a:	5d                   	pop    %ebp
41bb6b:	c3                   	ret
41bb6c:	cc                   	int3
41bb6d:	cc                   	int3
41bb6e:	cc                   	int3
41bb6f:	cc                   	int3
41bb70:	8b ff                	mov    %edi,%edi
41bb72:	55                   	push   %ebp
41bb73:	8b ec                	mov    %esp,%ebp
41bb75:	8b 4d 08             	mov    0x8(%ebp),%ecx
41bb78:	b8 4d 5a 00 00       	mov    $0x5a4d,%eax
41bb7d:	66 39 01             	cmp    %ax,(%ecx)
41bb80:	75 1f                	jne    0x41bba1
41bb82:	8b 41 3c             	mov    0x3c(%ecx),%eax
41bb85:	03 c1                	add    %ecx,%eax
41bb87:	81 38 50 45 00 00    	cmpl   $0x4550,(%eax)
41bb8d:	75 12                	jne    0x41bba1
41bb8f:	b9 0b 01 00 00       	mov    $0x10b,%ecx
41bb94:	66 39 48 18          	cmp    %cx,0x18(%eax)
41bb98:	75 07                	jne    0x41bba1
41bb9a:	b8 01 00 00 00       	mov    $0x1,%eax
41bb9f:	5d                   	pop    %ebp
41bba0:	c3                   	ret
41bba1:	33 c0                	xor    %eax,%eax
41bba3:	5d                   	pop    %ebp
41bba4:	c3                   	ret
41bba5:	8b ff                	mov    %edi,%edi
41bba7:	55                   	push   %ebp
41bba8:	8b ec                	mov    %esp,%ebp
41bbaa:	83 ec 14             	sub    $0x14,%esp
41bbad:	83 65 f4 00          	andl   $0x0,-0xc(%ebp)
41bbb1:	83 65 f8 00          	andl   $0x0,-0x8(%ebp)
41bbb5:	a1 e4 05 42 00       	mov    0x4205e4,%eax
41bbba:	56                   	push   %esi
41bbbb:	57                   	push   %edi
41bbbc:	bf 4e e6 40 bb       	mov    $0xbb40e64e,%edi
41bbc1:	be 00 00 ff ff       	mov    $0xffff0000,%esi
41bbc6:	3b c7                	cmp    %edi,%eax
41bbc8:	74 04                	je     0x41bbce
41bbca:	85 c6                	test   %eax,%esi
41bbcc:	75 64                	jne    0x41bc32
41bbce:	8d 45 f4             	lea    -0xc(%ebp),%eax
41bbd1:	50                   	push   %eax
41bbd2:	ff 15 c0 30 42 00    	call   *0x4230c0
41bbd8:	8b 45 f8             	mov    -0x8(%ebp),%eax
41bbdb:	33 45 f4             	xor    -0xc(%ebp),%eax
41bbde:	89 45 fc             	mov    %eax,-0x4(%ebp)
41bbe1:	ff 15 b8 30 42 00    	call   *0x4230b8
41bbe7:	31 45 fc             	xor    %eax,-0x4(%ebp)
41bbea:	ff 15 bc 30 42 00    	call   *0x4230bc
41bbf0:	31 45 fc             	xor    %eax,-0x4(%ebp)
41bbf3:	ff 15 c4 30 42 00    	call   *0x4230c4
41bbf9:	33 45 fc             	xor    -0x4(%ebp),%eax
41bbfc:	8d 4d fc             	lea    -0x4(%ebp),%ecx
41bbff:	33 c1                	xor    %ecx,%eax
41bc01:	89 45 fc             	mov    %eax,-0x4(%ebp)
41bc04:	8d 45 ec             	lea    -0x14(%ebp),%eax
41bc07:	50                   	push   %eax
41bc08:	ff 15 b4 30 42 00    	call   *0x4230b4
41bc0e:	8b 45 f0             	mov    -0x10(%ebp),%eax
41bc11:	33 45 ec             	xor    -0x14(%ebp),%eax
41bc14:	33 45 fc             	xor    -0x4(%ebp),%eax
41bc17:	8b c8                	mov    %eax,%ecx
41bc19:	3b c7                	cmp    %edi,%eax
41bc1b:	74 08                	je     0x41bc25
41bc1d:	85 35 e4 05 42 00    	test   %esi,0x4205e4
41bc23:	75 07                	jne    0x41bc2c
41bc25:	b8 4f e6 40 bb       	mov    $0xbb40e64f,%eax
41bc2a:	8b c8                	mov    %eax,%ecx
41bc2c:	89 0d e4 05 42 00    	mov    %ecx,0x4205e4
41bc32:	f7 d0                	not    %eax
41bc34:	5f                   	pop    %edi
41bc35:	a3 e8 05 42 00       	mov    %eax,0x4205e8
41bc3a:	5e                   	pop    %esi
41bc3b:	c9                   	leave
41bc3c:	c3                   	ret
41bc3d:	68 00 00 03 00       	push   $0x30000
41bc42:	68 00 00 01 00       	push   $0x10000
41bc47:	ff 15 e8 34 42 00    	call   *0x4234e8
41bc4d:	59                   	pop    %ecx
41bc4e:	59                   	pop    %ecx
41bc4f:	c3                   	ret
41bc50:	ff 25 08 35 42 00    	jmp    *0x423508
41bc56:	cc                   	int3
41bc57:	cc                   	int3
41bc58:	68 c0 bc 41 00       	push   $0x41bcc0
41bc5d:	64 ff 35 00 00 00 00 	push   %fs:0x0
41bc64:	8b 44 24 10          	mov    0x10(%esp),%eax
41bc68:	89 6c 24 10          	mov    %ebp,0x10(%esp)
41bc6c:	8d 6c 24 10          	lea    0x10(%esp),%ebp
41bc70:	2b e0                	sub    %eax,%esp
41bc72:	53                   	push   %ebx
41bc73:	56                   	push   %esi
41bc74:	57                   	push   %edi
41bc75:	a1 e4 05 42 00       	mov    0x4205e4,%eax
41bc7a:	31 45 fc             	xor    %eax,-0x4(%ebp)
41bc7d:	33 c5                	xor    %ebp,%eax
41bc7f:	50                   	push   %eax
41bc80:	89 65 e8             	mov    %esp,-0x18(%ebp)
41bc83:	ff 75 f8             	push   -0x8(%ebp)
41bc86:	8b 45 fc             	mov    -0x4(%ebp),%eax
41bc89:	c7 45 fc fe ff ff ff 	movl   $0xfffffffe,-0x4(%ebp)
41bc90:	89 45 f8             	mov    %eax,-0x8(%ebp)
41bc93:	8d 45 f0             	lea    -0x10(%ebp),%eax
41bc96:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
41bc9c:	c3                   	ret
41bc9d:	8b 4d f0             	mov    -0x10(%ebp),%ecx
41bca0:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
41bca7:	59                   	pop    %ecx
41bca8:	5f                   	pop    %edi
41bca9:	5f                   	pop    %edi
41bcaa:	5e                   	pop    %esi
41bcab:	5b                   	pop    %ebx
41bcac:	8b e5                	mov    %ebp,%esp
41bcae:	5d                   	pop    %ebp
41bcaf:	51                   	push   %ecx
41bcb0:	c3                   	ret
41bcb1:	cc                   	int3
41bcb2:	cc                   	int3
41bcb3:	cc                   	int3
41bcb4:	cc                   	int3
41bcb5:	cc                   	int3
41bcb6:	cc                   	int3
41bcb7:	cc                   	int3
41bcb8:	cc                   	int3
41bcb9:	cc                   	int3
41bcba:	cc                   	int3
41bcbb:	cc                   	int3
41bcbc:	cc                   	int3
41bcbd:	cc                   	int3
41bcbe:	cc                   	int3
41bcbf:	cc                   	int3
41bcc0:	8b ff                	mov    %edi,%edi
41bcc2:	55                   	push   %ebp
41bcc3:	8b ec                	mov    %esp,%ebp
41bcc5:	ff 75 14             	push   0x14(%ebp)
41bcc8:	ff 75 10             	push   0x10(%ebp)
41bccb:	ff 75 0c             	push   0xc(%ebp)
41bcce:	ff 75 08             	push   0x8(%ebp)
41bcd1:	68 20 b6 41 00       	push   $0x41b620
41bcd6:	68 e4 05 42 00       	push   $0x4205e4
41bcdb:	e8 17 00 00 00       	call   0x41bcf7
41bce0:	83 c4 18             	add    $0x18,%esp
41bce3:	5d                   	pop    %ebp
41bce4:	c3                   	ret
41bce5:	ff 25 00 35 42 00    	jmp    *0x423500
41bceb:	ff 25 fc 34 42 00    	jmp    *0x4234fc
41bcf1:	ff 25 f8 34 42 00    	jmp    *0x4234f8
41bcf7:	ff 25 e4 34 42 00    	jmp    *0x4234e4
41bcfd:	8b ff                	mov    %edi,%edi
41bcff:	55                   	push   %ebp
41bd00:	8b ec                	mov    %esp,%ebp
41bd02:	e8 5f 06 00 00       	call   0x41c366
41bd07:	8a 4d 08             	mov    0x8(%ebp),%cl
41bd0a:	88 48 14             	mov    %cl,0x14(%eax)
41bd0d:	8b 4d 0c             	mov    0xc(%ebp),%ecx
41bd10:	89 88 40 20 00 00    	mov    %ecx,0x2040(%eax)
41bd16:	33 c0                	xor    %eax,%eax
41bd18:	40                   	inc    %eax
41bd19:	5d                   	pop    %ebp
41bd1a:	c2 08 00             	ret    $0x8
41bd1d:	8b ff                	mov    %edi,%edi
41bd1f:	55                   	push   %ebp
41bd20:	8b ec                	mov    %esp,%ebp
41bd22:	5d                   	pop    %ebp
41bd23:	e9 be 06 00 00       	jmp    0x41c3e6
41bd28:	cc                   	int3
41bd29:	cc                   	int3
41bd2a:	cc                   	int3
41bd2b:	cc                   	int3
41bd2c:	cc                   	int3
41bd2d:	cc                   	int3
41bd2e:	cc                   	int3
41bd2f:	cc                   	int3
41bd30:	ff 25 34 32 42 00    	jmp    *0x423234
41bd36:	cc                   	int3
41bd37:	cc                   	int3
41bd38:	cc                   	int3
41bd39:	cc                   	int3
41bd3a:	cc                   	int3
41bd3b:	cc                   	int3
41bd3c:	cc                   	int3
41bd3d:	cc                   	int3
41bd3e:	cc                   	int3
41bd3f:	cc                   	int3
41bd40:	ff 25 4c 32 42 00    	jmp    *0x42324c
41bd46:	cc                   	int3
41bd47:	cc                   	int3
41bd48:	cc                   	int3
41bd49:	cc                   	int3
41bd4a:	cc                   	int3
41bd4b:	cc                   	int3
41bd4c:	cc                   	int3
41bd4d:	cc                   	int3
41bd4e:	cc                   	int3
41bd4f:	cc                   	int3
41bd50:	ff 25 50 32 42 00    	jmp    *0x423250
41bd56:	cc                   	int3
41bd57:	cc                   	int3
41bd58:	cc                   	int3
41bd59:	cc                   	int3
41bd5a:	cc                   	int3
41bd5b:	cc                   	int3
41bd5c:	cc                   	int3
41bd5d:	cc                   	int3
41bd5e:	cc                   	int3
41bd5f:	cc                   	int3
41bd60:	ff 25 54 32 42 00    	jmp    *0x423254
41bd66:	cc                   	int3
41bd67:	cc                   	int3
41bd68:	cc                   	int3
41bd69:	cc                   	int3
41bd6a:	cc                   	int3
41bd6b:	cc                   	int3
41bd6c:	cc                   	int3
41bd6d:	cc                   	int3
41bd6e:	cc                   	int3
41bd6f:	cc                   	int3
41bd70:	ff 25 58 32 42 00    	jmp    *0x423258
41bd76:	cc                   	int3
41bd77:	cc                   	int3
41bd78:	cc                   	int3
41bd79:	cc                   	int3
41bd7a:	cc                   	int3
41bd7b:	cc                   	int3
41bd7c:	cc                   	int3
41bd7d:	cc                   	int3
41bd7e:	cc                   	int3
41bd7f:	cc                   	int3
41bd80:	ff 25 5c 32 42 00    	jmp    *0x42325c
41bd86:	cc                   	int3
41bd87:	cc                   	int3
41bd88:	cc                   	int3
41bd89:	cc                   	int3
41bd8a:	cc                   	int3
41bd8b:	cc                   	int3
41bd8c:	cc                   	int3
41bd8d:	cc                   	int3
41bd8e:	cc                   	int3
41bd8f:	cc                   	int3
41bd90:	ff 25 60 32 42 00    	jmp    *0x423260
41bd96:	cc                   	int3
41bd97:	cc                   	int3
41bd98:	cc                   	int3
41bd99:	cc                   	int3
41bd9a:	cc                   	int3
41bd9b:	cc                   	int3