a36f35:	cc                   	int3
a36f36:	cc                   	int3
a36f37:	cc                   	int3
a36f38:	cc                   	int3
a36f39:	cc                   	int3
a36f3a:	cc                   	int3
a36f3b:	cc                   	int3
a36f3c:	cc                   	int3
a36f3d:	cc                   	int3
a36f3e:	cc                   	int3
a36f3f:	cc                   	int3
a36f40:	cc                   	int3
a36f41:	cc                   	int3
a36f42:	cc                   	int3
a36f43:	cc                   	int3
a36f44:	cc                   	int3
a36f45:	cc                   	int3
a36f46:	cc                   	int3
a36f47:	cc                   	int3
a36f48:	cc                   	int3
a36f49:	cc                   	int3
a36f4a:	68 80 00 00 00       	push   $0x80
a36f4f:	b8 e1 9b bb 00       	mov    $0xbb9be1,%eax
a36f54:	e8 0c b1 9f ff       	call   0x432065
a36f59:	8b d9                	mov    %ecx,%ebx
a36f5b:	8b 7d 08             	mov    0x8(%ebp),%edi
a36f5e:	33 f6                	xor    %esi,%esi
a36f60:	89 7d c8             	mov    %edi,-0x38(%ebp)
a36f63:	39 b3 bc 00 00 00    	cmp    %esi,0xbc(%ebx)
a36f69:	0f 84 f1 04 00 00    	je     0xa37460
a36f6f:	39 b3 c8 00 00 00    	cmp    %esi,0xc8(%ebx)
a36f75:	0f 84 e5 04 00 00    	je     0xa37460
a36f7b:	8d 45 c0             	lea    -0x40(%ebp),%eax
a36f7e:	8b cf                	mov    %edi,%ecx
a36f80:	50                   	push   %eax
a36f81:	e8 36 ec 9e ff       	call   0x425bbc
a36f86:	89 75 a4             	mov    %esi,-0x5c(%ebp)
a36f89:	c7 45 a0 a4 a7 c3 00 	movl   $0xc3a7a4,-0x60(%ebp)
a36f90:	6a 06                	push   $0x6
a36f92:	89 75 fc             	mov    %esi,-0x4(%ebp)
a36f95:	ff 15 fc 3c d8 00    	call   *0xd83cfc
a36f9b:	50                   	push   %eax
a36f9c:	6a 02                	push   $0x2
a36f9e:	56                   	push   %esi
a36f9f:	ff 15 68 31 d8 00    	call   *0xd83168
a36fa5:	50                   	push   %eax
a36fa6:	8d 4d a0             	lea    -0x60(%ebp),%ecx
a36fa9:	e8 c4 f5 9d ff       	call   0x416572
a36fae:	89 75 ac             	mov    %esi,-0x54(%ebp)
a36fb1:	c7 45 a8 a4 a7 c3 00 	movl   $0xc3a7a4,-0x58(%ebp)
a36fb8:	6a 10                	push   $0x10
a36fba:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
a36fbe:	ff 15 fc 3c d8 00    	call   *0xd83cfc
a36fc4:	50                   	push   %eax
a36fc5:	6a 03                	push   $0x3
a36fc7:	56                   	push   %esi
a36fc8:	ff 15 68 31 d8 00    	call   *0xd83168
a36fce:	50                   	push   %eax
a36fcf:	8d 4d a8             	lea    -0x58(%ebp),%ecx
a36fd2:	e8 9b f5 9d ff       	call   0x416572
a36fd7:	8b 83 64 01 00 00    	mov    0x164(%ebx),%eax
a36fdd:	89 75 cc             	mov    %esi,-0x34(%ebp)
a36fe0:	c7 40 10 01 00 00 00 	movl   $0x1,0x10(%eax)
a36fe7:	39 b3 48 01 00 00    	cmp    %esi,0x148(%ebx)
a36fed:	0f 86 42 04 00 00    	jbe    0xa37435
a36ff3:	8b 45 c4             	mov    -0x3c(%ebp),%eax
a36ff6:	8d 8b c4 00 00 00    	lea    0xc4(%ebx),%ecx
a36ffc:	89 45 b8             	mov    %eax,-0x48(%ebp)
a36fff:	8b 45 c0             	mov    -0x40(%ebp),%eax
a37002:	89 75 b0             	mov    %esi,-0x50(%ebp)
a37005:	89 45 bc             	mov    %eax,-0x44(%ebp)
a37008:	8b 01                	mov    (%ecx),%eax
a3700a:	8b 70 1c             	mov    0x1c(%eax),%esi
a3700d:	8b ce                	mov    %esi,%ecx
a3700f:	e8 51 56 9f ff       	call   0x42c665
a37014:	8d 8b c4 00 00 00    	lea    0xc4(%ebx),%ecx
a3701a:	ff d6                	call   *%esi
a3701c:	89 45 9c             	mov    %eax,-0x64(%ebp)
a3701f:	85 ff                	test   %edi,%edi
a37021:	75 04                	jne    0xa37027
a37023:	33 c9                	xor    %ecx,%ecx
a37025:	eb 03                	jmp    0xa3702a
a37027:	8b 4f 04             	mov    0x4(%edi),%ecx
a3702a:	8b bb c0 00 00 00    	mov    0xc0(%ebx),%edi
a37030:	51                   	push   %ecx
a37031:	8b 07                	mov    (%edi),%eax
a37033:	8b 70 10             	mov    0x10(%eax),%esi
a37036:	8b ce                	mov    %esi,%ecx
a37038:	e8 28 56 9f ff       	call   0x42c665
a3703d:	8b cf                	mov    %edi,%ecx
a3703f:	ff d6                	call   *%esi
a37041:	8b 83 64 01 00 00    	mov    0x164(%ebx),%eax
a37047:	8b 8b 44 01 00 00    	mov    0x144(%ebx),%ecx
a3704d:	8b 7d cc             	mov    -0x34(%ebp),%edi
a37050:	03 cf                	add    %edi,%ecx
a37052:	89 48 14             	mov    %ecx,0x14(%eax)
a37055:	8b 83 44 01 00 00    	mov    0x144(%ebx),%eax
a3705b:	8d 0c 38             	lea    (%eax,%edi,1),%ecx
a3705e:	3b c8                	cmp    %eax,%ecx
a37060:	72 3d                	jb     0xa3709f
a37062:	3b cf                	cmp    %edi,%ecx
a37064:	72 39                	jb     0xa3709f
a37066:	8b 93 64 01 00 00    	mov    0x164(%ebx),%edx
a3706c:	8b 02                	mov    (%edx),%eax
a3706e:	8b 80 a8 00 00 00    	mov    0xa8(%eax),%eax
a37074:	0f b7 40 1e          	movzwl 0x1e(%eax),%eax
a37078:	3b c8                	cmp    %eax,%ecx
a3707a:	77 23                	ja     0xa3709f
a3707c:	8b bb bc 00 00 00    	mov    0xbc(%ebx),%edi
a37082:	52                   	push   %edx
a37083:	ff b3 c0 00 00 00    	push   0xc0(%ebx)
a37089:	8b 07                	mov    (%edi),%eax
a3708b:	8b b0 88 01 00 00    	mov    0x188(%eax),%esi
a37091:	8b ce                	mov    %esi,%ecx
a37093:	e8 cd 55 9f ff       	call   0x42c665
a37098:	8b cf                	mov    %edi,%ecx
a3709a:	ff d6                	call   *%esi
a3709c:	8b 7d cc             	mov    -0x34(%ebp),%edi
a3709f:	8b 83 c0 00 00 00    	mov    0xc0(%ebx),%eax
a370a5:	6a 0a                	push   $0xa
a370a7:	ff 70 08             	push   0x8(%eax)
a370aa:	ff 15 30 33 d8 00    	call   *0xd83330
a370b0:	8b 8b c0 00 00 00    	mov    0xc0(%ebx),%ecx
a370b6:	8b f0                	mov    %eax,%esi
a370b8:	6a 08                	push   $0x8
a370ba:	ff 71 08             	push   0x8(%ecx)
a370bd:	ff 15 30 33 d8 00    	call   *0xd83330
a370c3:	56                   	push   %esi
a370c4:	50                   	push   %eax
a370c5:	8b 83 64 01 00 00    	mov    0x164(%ebx),%eax
a370cb:	6a 00                	push   $0x0
a370cd:	6a 00                	push   $0x0
a370cf:	83 c0 24             	add    $0x24,%eax
a370d2:	50                   	push   %eax
a370d3:	ff 15 f4 3e d8 00    	call   *0xd83ef4
a370d9:	8b 83 64 01 00 00    	mov    0x164(%ebx),%eax
a370df:	6a 02                	push   $0x2
a370e1:	83 c0 24             	add    $0x24,%eax
a370e4:	50                   	push   %eax
a370e5:	8b 83 c0 00 00 00    	mov    0xc0(%ebx),%eax
a370eb:	ff 70 08             	push   0x8(%eax)
a370ee:	ff 15 4c 33 d8 00    	call   *0xd8334c
a370f4:	8b 4d c8             	mov    -0x38(%ebp),%ecx
a370f7:	8b 01                	mov    (%ecx),%eax
a370f9:	8b 70 1c             	mov    0x1c(%eax),%esi
a370fc:	8b ce                	mov    %esi,%ecx
a370fe:	e8 62 55 9f ff       	call   0x42c665
a37103:	8b 4d c8             	mov    -0x38(%ebp),%ecx
a37106:	ff d6                	call   *%esi
a37108:	8b 83 e0 00 00 00    	mov    0xe0(%ebx),%eax
a3710e:	03 45 b0             	add    -0x50(%ebp),%eax
a37111:	89 45 b4             	mov    %eax,-0x4c(%ebp)
a37114:	83 78 18 00          	cmpl   $0x0,0x18(%eax)
a37118:	0f 85 97 00 00 00    	jne    0xa371b5
a3711e:	8b 03                	mov    (%ebx),%eax
a37120:	57                   	push   %edi
a37121:	8b b0 bc 01 00 00    	mov    0x1bc(%eax),%esi
a37127:	8b ce                	mov    %esi,%ecx
a37129:	e8 37 55 9f ff       	call   0x42c665
a3712e:	8b cb                	mov    %ebx,%ecx
a37130:	ff d6                	call   *%esi
a37132:	33 ff                	xor    %edi,%edi
a37134:	39 bb 3c 01 00 00    	cmp    %edi,0x13c(%ebx)
a3713a:	74 79                	je     0xa371b5
a3713c:	8d 45 94             	lea    -0x6c(%ebp),%eax
a3713f:	8b cb                	mov    %ebx,%ecx
a37141:	50                   	push   %eax
a37142:	e8 62 d5 9e ff       	call   0x4246a9
a37147:	8b 30                	mov    (%eax),%esi
a37149:	8b 40 04             	mov    0x4(%eax),%eax
a3714c:	f7 de                	neg    %esi
a3714e:	f7 d8                	neg    %eax
a37150:	89 75 bc             	mov    %esi,-0x44(%ebp)
a37153:	89 45 b8             	mov    %eax,-0x48(%ebp)
a37156:	39 bb b0 00 00 00    	cmp    %edi,0xb0(%ebx)
a3715c:	74 57                	je     0xa371b5
a3715e:	8d 45 e0             	lea    -0x20(%ebp),%eax
a37161:	89 7d e0             	mov    %edi,-0x20(%ebp)
a37164:	50                   	push   %eax
a37165:	ff 73 20             	push   0x20(%ebx)
a37168:	89 7d e4             	mov    %edi,-0x1c(%ebp)
a3716b:	89 7d e8             	mov    %edi,-0x18(%ebp)
a3716e:	89 7d ec             	mov    %edi,-0x14(%ebp)
a37171:	ff 15 54 40 d8 00    	call   *0xd84054
a37177:	8b 45 e8             	mov    -0x18(%ebp),%eax
a3717a:	8b c8                	mov    %eax,%ecx
a3717c:	2b 4d e0             	sub    -0x20(%ebp),%ecx
a3717f:	8b 93 98 00 00 00    	mov    0x98(%ebx),%edx
a37185:	3b d1                	cmp    %ecx,%edx
a37187:	7d 0d                	jge    0xa37196
a37189:	2b 45 e0             	sub    -0x20(%ebp),%eax
a3718c:	2b c2                	sub    %edx,%eax
a3718e:	99                   	cltd
a3718f:	2b c2                	sub    %edx,%eax
a37191:	d1 f8                	sar    $1,%eax
a37193:	89 45 bc             	mov    %eax,-0x44(%ebp)
a37196:	8b 45 ec             	mov    -0x14(%ebp),%eax
a37199:	8b c8                	mov    %eax,%ecx
a3719b:	2b 4d e4             	sub    -0x1c(%ebp),%ecx
a3719e:	8b 93 9c 00 00 00    	mov    0x9c(%ebx),%edx
a371a4:	3b d1                	cmp    %ecx,%edx
a371a6:	7d 0d                	jge    0xa371b5
a371a8:	2b 45 e4             	sub    -0x1c(%ebp),%eax
a371ab:	2b c2                	sub    %edx,%eax
a371ad:	99                   	cltd
a371ae:	2b c2                	sub    %edx,%eax
a371b0:	d1 f8                	sar    $1,%eax
a371b2:	89 45 b8             	mov    %eax,-0x48(%ebp)
a371b5:	8b 7d c8             	mov    -0x38(%ebp),%edi
a371b8:	6a 01                	push   $0x1
a371ba:	8b 0f                	mov    (%edi),%ecx
a371bc:	8b 71 34             	mov    0x34(%ecx),%esi
a371bf:	8b ce                	mov    %esi,%ecx
a371c1:	e8 9f 54 9f ff       	call   0x42c665
a371c6:	8b cf                	mov    %edi,%ecx
a371c8:	ff d6                	call   *%esi
a371ca:	ff 75 b8             	push   -0x48(%ebp)
a371cd:	8d 45 8c             	lea    -0x74(%ebp),%eax
a371d0:	8b cf                	mov    %edi,%ecx
a371d2:	ff 75 bc             	push   -0x44(%ebp)
a371d5:	50                   	push   %eax
a371d6:	e8 b7 bf 9d ff       	call   0x413192
a371db:	6a 00                	push   $0x0
a371dd:	6a 00                	push   $0x0
a371df:	8d 45 84             	lea    -0x7c(%ebp),%eax
a371e2:	8b cf                	mov    %edi,%ecx
a371e4:	50                   	push   %eax
a371e5:	e8 d4 59 a0 ff       	call   0x43cbbe
a371ea:	8b 07                	mov    (%edi),%eax
a371ec:	6a 05                	push   $0x5
a371ee:	8b 70 24             	mov    0x24(%eax),%esi
a371f1:	8b ce                	mov    %esi,%ecx
a371f3:	e8 6d 54 9f ff       	call   0x42c665
a371f8:	8b cf                	mov    %edi,%ecx
a371fa:	ff d6                	call   *%esi
a371fc:	8d 45 a0             	lea    -0x60(%ebp),%eax
a371ff:	8b cf                	mov    %edi,%ecx
a37201:	50                   	push   %eax
a37202:	e8 25 f7 9e ff       	call   0x42692c
a37207:	8b 75 b4             	mov    -0x4c(%ebp),%esi
a3720a:	8b cf                	mov    %edi,%ecx
a3720c:	56                   	push   %esi
a3720d:	e8 09 b2 9f ff       	call   0x43241b
a37212:	8d 45 a8             	lea    -0x58(%ebp),%eax
a37215:	8b cf                	mov    %edi,%ecx
a37217:	50                   	push   %eax
a37218:	e8 0f f7 9e ff       	call   0x42692c
a3721d:	8b 46 04             	mov    0x4(%esi),%eax
a37220:	8b cf                	mov    %edi,%ecx
a37222:	83 c0 03             	add    $0x3,%eax
a37225:	50                   	push   %eax
a37226:	8b 46 08             	mov    0x8(%esi),%eax
a37229:	40                   	inc    %eax
a3722a:	50                   	push   %eax
a3722b:	8d 85 7c ff ff ff    	lea    -0x84(%ebp),%eax
a37231:	50                   	push   %eax
a37232:	e8 a5 f1 9e ff       	call   0x4263dc
a37237:	8b 46 0c             	mov    0xc(%esi),%eax
a3723a:	8b cf                	mov    %edi,%ecx
a3723c:	40                   	inc    %eax
a3723d:	50                   	push   %eax
a3723e:	8b 46 08             	mov    0x8(%esi),%eax
a37241:	40                   	inc    %eax
a37242:	50                   	push   %eax
a37243:	e8 96 d8 9c ff       	call   0x404ade
a37248:	8b 46 0c             	mov    0xc(%esi),%eax
a3724b:	8b cf                	mov    %edi,%ecx
a3724d:	40                   	inc    %eax
a3724e:	50                   	push   %eax
a3724f:	8b 06                	mov    (%esi),%eax
a37251:	83 c0 03             	add    $0x3,%eax
a37254:	50                   	push   %eax
a37255:	8d 85 74 ff ff ff    	lea    -0x8c(%ebp),%eax
a3725b:	50                   	push   %eax
a3725c:	e8 7b f1 9e ff       	call   0x4263dc
a37261:	8b 46 0c             	mov    0xc(%esi),%eax
a37264:	8b cf                	mov    %edi,%ecx
a37266:	40                   	inc    %eax
a37267:	50                   	push   %eax
a37268:	8b 46 08             	mov    0x8(%esi),%eax
a3726b:	40                   	inc    %eax
a3726c:	50                   	push   %eax
a3726d:	e8 6c d8 9c ff       	call   0x404ade
a37272:	8d 7d d0             	lea    -0x30(%ebp),%edi
a37275:	a5                   	movsl  %ds:(%esi),%es:(%edi)
a37276:	a5                   	movsl  %ds:(%esi),%es:(%edi)
a37277:	a5                   	movsl  %ds:(%esi),%es:(%edi)
a37278:	a5                   	movsl  %ds:(%esi),%es:(%edi)
a37279:	ff 45 d0             	incl   -0x30(%ebp)
a3727c:	ff 45 d4             	incl   -0x2c(%ebp)
a3727f:	83 6d d8 02          	subl   $0x2,-0x28(%ebp)
a37283:	83 6d dc 02          	subl   $0x2,-0x24(%ebp)
a37287:	6a 00                	push   $0x0
a37289:	ff 15 98 31 d8 00    	call   *0xd83198
a3728f:	8b 7d c8             	mov    -0x38(%ebp),%edi
a37292:	50                   	push   %eax
a37293:	8d 45 d0             	lea    -0x30(%ebp),%eax
a37296:	50                   	push   %eax
a37297:	ff 77 04             	push   0x4(%edi)
a3729a:	ff 15 c8 3d d8 00    	call   *0xd83dc8
a372a0:	8b 07                	mov    (%edi),%eax
a372a2:	6a ff                	push   $0xffffffff
a372a4:	8b 70 20             	mov    0x20(%eax),%esi
a372a7:	8b ce                	mov    %esi,%ecx
a372a9:	e8 b7 53 9f ff       	call   0x42c665
a372ae:	8b cf                	mov    %edi,%ecx
a372b0:	ff d6                	call   *%esi
a372b2:	8b 83 64 01 00 00    	mov    0x164(%ebx),%eax
a372b8:	83 78 10 00          	cmpl   $0x0,0x10(%eax)
a372bc:	0f 84 27 01 00 00    	je     0xa373e9
a372c2:	8b 00                	mov    (%eax),%eax
a372c4:	8b b3 44 01 00 00    	mov    0x144(%ebx),%esi
a372ca:	8b 55 cc             	mov    -0x34(%ebp),%edx
a372cd:	8b 80 a8 00 00 00    	mov    0xa8(%eax),%eax
a372d3:	0f b7 48 1e          	movzwl 0x1e(%eax),%ecx
a372d7:	8d 04 16             	lea    (%esi,%edx,1),%eax
a372da:	3b c1                	cmp    %ecx,%eax
a372dc:	0f 87 07 01 00 00    	ja     0xa373e9
a372e2:	8b 03                	mov    (%ebx),%eax
a372e4:	42                   	inc    %edx
a372e5:	52                   	push   %edx
a372e6:	56                   	push   %esi
a372e7:	89 55 cc             	mov    %edx,-0x34(%ebp)
a372ea:	8b b0 c0 01 00 00    	mov    0x1c0(%eax),%esi
a372f0:	8b ce                	mov    %esi,%ecx
a372f2:	e8 6e 53 9f ff       	call   0x42c665
a372f7:	8b cb                	mov    %ebx,%ecx
a372f9:	ff d6                	call   *%esi
a372fb:	8b 45 b4             	mov    -0x4c(%ebp),%eax
a372fe:	8b 8b c0 00 00 00    	mov    0xc0(%ebx),%ecx
a37304:	ff 70 1c             	push   0x1c(%eax)
a37307:	ff 70 18             	push   0x18(%eax)
a3730a:	e8 9a 7a 9d ff       	call   0x40eda9
a3730f:	8b bb c0 00 00 00    	mov    0xc0(%ebx),%edi
a37315:	8d 45 c0             	lea    -0x40(%ebp),%eax
a37318:	33 c9                	xor    %ecx,%ecx
a3731a:	50                   	push   %eax
a3731b:	89 4d c0             	mov    %ecx,-0x40(%ebp)
a3731e:	89 4d c4             	mov    %ecx,-0x3c(%ebp)
a37321:	8b 37                	mov    (%edi),%esi
a37323:	51                   	push   %ecx
a37324:	51                   	push   %ecx
a37325:	6a 0d                	push   $0xd
a37327:	8b 4e 74             	mov    0x74(%esi),%ecx
a3732a:	e8 36 53 9f ff       	call   0x42c665
a3732f:	8b cf                	mov    %edi,%ecx
a37331:	ff 56 74             	call   *0x74(%esi)
a37334:	8b 8b c0 00 00 00    	mov    0xc0(%ebx),%ecx
a3733a:	8d 45 c0             	lea    -0x40(%ebp),%eax
a3733d:	50                   	push   %eax