4018b8:	cc                   	int3
4018b9:	cc                   	int3
4018ba:	cc                   	int3
4018bb:	cc                   	int3
4018bc:	cc                   	int3
4018bd:	cc                   	int3
4018be:	cc                   	int3
4018bf:	cc                   	int3
4018c0:	8b c1                	mov    %ecx,%eax
4018c2:	c3                   	ret
4018c3:	cc                   	int3
4018c4:	cc                   	int3
4018c5:	cc                   	int3
4018c6:	cc                   	int3
4018c7:	cc                   	int3
4018c8:	cc                   	int3
4018c9:	cc                   	int3
4018ca:	cc                   	int3
4018cb:	cc                   	int3
4018cc:	cc                   	int3
4018cd:	cc                   	int3
4018ce:	cc                   	int3
4018cf:	cc                   	int3
4018d0:	55                   	push   %ebp
4018d1:	8b ec                	mov    %esp,%ebp
4018d3:	f6 45 08 01          	testb  $0x1,0x8(%ebp)
4018d7:	56                   	push   %esi
4018d8:	8b f1                	mov    %ecx,%esi
4018da:	c7 06 80 0c 42 00    	movl   $0x420c80,(%esi)
4018e0:	74 0b                	je     0x4018ed
4018e2:	6a 1c                	push   $0x1c
4018e4:	56                   	push   %esi
4018e5:	e8 0d 19 00 00       	call   0x4031f7
4018ea:	83 c4 08             	add    $0x8,%esp
4018ed:	8b c6                	mov    %esi,%eax
4018ef:	5e                   	pop    %esi
4018f0:	5d                   	pop    %ebp
4018f1:	c2 04 00             	ret    $0x4
4018f4:	cc                   	int3
4018f5:	cc                   	int3
4018f6:	cc                   	int3
4018f7:	cc                   	int3
4018f8:	cc                   	int3
4018f9:	cc                   	int3
4018fa:	cc                   	int3
4018fb:	cc                   	int3
4018fc:	cc                   	int3
4018fd:	cc                   	int3
4018fe:	cc                   	int3
4018ff:	cc                   	int3
401900:	55                   	push   %ebp
401901:	8b ec                	mov    %esp,%ebp
401903:	6a ff                	push   $0xffffffff
401905:	68 88 a0 41 00       	push   $0x41a088
40190a:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
401910:	50                   	push   %eax
401911:	83 ec 1c             	sub    $0x1c,%esp
401914:	53                   	push   %ebx
401915:	56                   	push   %esi
401916:	57                   	push   %edi
401917:	a1 0c 30 42 00       	mov    0x42300c,%eax
40191c:	33 c5                	xor    %ebp,%eax
40191e:	50                   	push   %eax
40191f:	8d 45 f4             	lea    -0xc(%ebp),%eax
401922:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
401928:	8b f1                	mov    %ecx,%esi
40192a:	89 75 e8             	mov    %esi,-0x18(%ebp)
40192d:	56                   	push   %esi
40192e:	8d 4d f0             	lea    -0x10(%ebp),%ecx
401931:	33 ff                	xor    %edi,%edi
401933:	e8 88 09 00 00       	call   0x4022c0
401938:	89 7d fc             	mov    %edi,-0x4(%ebp)
40193b:	83 cb ff             	or     $0xffffffff,%ebx
40193e:	8b 45 f0             	mov    -0x10(%ebp),%eax
401941:	39 78 f4             	cmp    %edi,-0xc(%eax)
401944:	0f 84 d4 02 00 00    	je     0x401c1e
40194a:	6a 5c                	push   $0x5c
40194c:	50                   	push   %eax
40194d:	e8 c2 2a 00 00       	call   0x404414
401952:	8b c8                	mov    %eax,%ecx
401954:	83 c4 08             	add    $0x8,%esp
401957:	85 c9                	test   %ecx,%ecx
401959:	0f 84 97 00 00 00    	je     0x4019f6
40195f:	8b 45 f0             	mov    -0x10(%ebp),%eax
401962:	2b c8                	sub    %eax,%ecx
401964:	d1 f9                	sar    $1,%ecx
401966:	3b cb                	cmp    %ebx,%ecx
401968:	0f 84 88 00 00 00    	je     0x4019f6
40196e:	8b 40 f4             	mov    -0xc(%eax),%eax
401971:	2b c1                	sub    %ecx,%eax
401973:	8d 4d f0             	lea    -0x10(%ebp),%ecx
401976:	48                   	dec    %eax
401977:	50                   	push   %eax
401978:	8d 45 ec             	lea    -0x14(%ebp),%eax
40197b:	50                   	push   %eax
40197c:	e8 5f 07 00 00       	call   0x4020e0
401981:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
401985:	8b 10                	mov    (%eax),%edx
401987:	8b 75 f0             	mov    -0x10(%ebp),%esi
40198a:	83 c6 f0             	add    $0xfffffff0,%esi
40198d:	8d 4a f0             	lea    -0x10(%edx),%ecx
401990:	3b ce                	cmp    %esi,%ecx
401992:	74 41                	je     0x4019d5
401994:	83 7e 0c 00          	cmpl   $0x0,0xc(%esi)
401998:	8d 7e 0c             	lea    0xc(%esi),%edi
40199b:	7c 2c                	jl     0x4019c9
40199d:	8b 01                	mov    (%ecx),%eax
40199f:	3b 06                	cmp    (%esi),%eax
4019a1:	75 26                	jne    0x4019c9
4019a3:	e8 f8 09 00 00       	call   0x4023a0
4019a8:	89 45 e4             	mov    %eax,-0x1c(%ebp)
4019ab:	8b c3                	mov    %ebx,%eax
4019ad:	f0 0f c1 07          	lock xadd %eax,(%edi)
4019b1:	48                   	dec    %eax
4019b2:	85 c0                	test   %eax,%eax
4019b4:	7f 08                	jg     0x4019be
4019b6:	8b 0e                	mov    (%esi),%ecx
4019b8:	56                   	push   %esi
4019b9:	8b 01                	mov    (%ecx),%eax
4019bb:	ff 50 04             	call   *0x4(%eax)
4019be:	8b 45 e4             	mov    -0x1c(%ebp),%eax
4019c1:	83 c0 10             	add    $0x10,%eax
4019c4:	89 45 f0             	mov    %eax,-0x10(%ebp)
4019c7:	eb 0c                	jmp    0x4019d5
4019c9:	ff 72 f4             	push   -0xc(%edx)
4019cc:	8d 4d f0             	lea    -0x10(%ebp),%ecx
4019cf:	52                   	push   %edx
4019d0:	e8 2b 0a 00 00       	call   0x402400
4019d5:	c6 45 fc 00          	movb   $0x0,-0x4(%ebp)
4019d9:	8b c3                	mov    %ebx,%eax
4019db:	8b 55 ec             	mov    -0x14(%ebp),%edx
4019de:	83 c2 f0             	add    $0xfffffff0,%edx
4019e1:	f0 0f c1 42 0c       	lock xadd %eax,0xc(%edx)
4019e6:	48                   	dec    %eax
4019e7:	85 c0                	test   %eax,%eax
4019e9:	7f 08                	jg     0x4019f3
4019eb:	8b 0a                	mov    (%edx),%ecx
4019ed:	52                   	push   %edx
4019ee:	8b 01                	mov    (%ecx),%eax
4019f0:	ff 50 04             	call   *0x4(%eax)
4019f3:	8b 75 e8             	mov    -0x18(%ebp),%esi
4019f6:	6a 1c                	push   $0x1c
4019f8:	68 14 0e 42 00       	push   $0x420e14
4019fd:	b9 48 47 42 00       	mov    $0x424748,%ecx
401a02:	e8 f9 09 00 00       	call   0x402400
401a07:	e8 74 fc ff ff       	call   0x401680
401a0c:	8b c8                	mov    %eax,%ecx
401a0e:	85 c9                	test   %ecx,%ecx
401a10:	75 0a                	jne    0x401a1c
401a12:	68 05 40 00 80       	push   $0x80004005
401a17:	e8 a4 f9 ff ff       	call   0x4013c0
401a1c:	8b 01                	mov    (%ecx),%eax
401a1e:	ff 50 0c             	call   *0xc(%eax)
401a21:	83 c0 10             	add    $0x10,%eax
401a24:	89 45 ec             	mov    %eax,-0x14(%ebp)
401a27:	c6 45 fc 06          	movb   $0x6,-0x4(%ebp)
401a2b:	85 f6                	test   %esi,%esi
401a2d:	75 04                	jne    0x401a33
401a2f:	33 c9                	xor    %ecx,%ecx
401a31:	eb 1c                	jmp    0x401a4f
401a33:	8b ce                	mov    %esi,%ecx
401a35:	8d 51 02             	lea    0x2(%ecx),%edx
401a38:	0f 1f 84 00 00 00 00 	nopl   0x0(%eax,%eax,1)
401a3f:	00
401a40:	66 8b 01             	mov    (%ecx),%ax
401a43:	83 c1 02             	add    $0x2,%ecx
401a46:	66 85 c0             	test   %ax,%ax
401a49:	75 f5                	jne    0x401a40
401a4b:	2b ca                	sub    %edx,%ecx
401a4d:	d1 f9                	sar    $1,%ecx
401a4f:	51                   	push   %ecx
401a50:	56                   	push   %esi
401a51:	8d 4d ec             	lea    -0x14(%ebp),%ecx
401a54:	e8 a7 09 00 00       	call   0x402400
401a59:	8d 45 ec             	lea    -0x14(%ebp),%eax
401a5c:	bf 01 00 00 00       	mov    $0x1,%edi
401a61:	50                   	push   %eax
401a62:	8d 4d d8             	lea    -0x28(%ebp),%ecx
401a65:	89 7d e8             	mov    %edi,-0x18(%ebp)
401a68:	e8 53 04 00 00       	call   0x401ec0
401a6d:	c6 45 fc 07          	movb   $0x7,-0x4(%ebp)
401a71:	8b d0                	mov    %eax,%edx
401a73:	8d 4d dc             	lea    -0x24(%ebp),%ecx
401a76:	e8 55 05 00 00       	call   0x401fd0
401a7b:	83 c4 04             	add    $0x4,%esp
401a7e:	c6 45 fc 08          	movb   $0x8,-0x4(%ebp)
401a82:	8b 10                	mov    (%eax),%edx
401a84:	8b 75 ec             	mov    -0x14(%ebp),%esi
401a87:	8d 42 f0             	lea    -0x10(%edx),%eax
401a8a:	8d 4e f0             	lea    -0x10(%esi),%ecx
401a8d:	89 45 e4             	mov    %eax,-0x1c(%ebp)
401a90:	89 4d e0             	mov    %ecx,-0x20(%ebp)
401a93:	3b c1                	cmp    %ecx,%eax
401a95:	74 4a                	je     0x401ae1
401a97:	83 79 0c 00          	cmpl   $0x0,0xc(%ecx)
401a9b:	8d 71 0c             	lea    0xc(%ecx),%esi
401a9e:	7c 32                	jl     0x401ad2
401aa0:	8b 00                	mov    (%eax),%eax
401aa2:	3b 01                	cmp    (%ecx),%eax
401aa4:	75 2c                	jne    0x401ad2
401aa6:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
401aa9:	e8 f2 08 00 00       	call   0x4023a0
401aae:	89 45 e4             	mov    %eax,-0x1c(%ebp)
401ab1:	8b c3                	mov    %ebx,%eax
401ab3:	f0 0f c1 06          	lock xadd %eax,(%esi)
401ab7:	48                   	dec    %eax
401ab8:	85 c0                	test   %eax,%eax
401aba:	7f 0b                	jg     0x401ac7
401abc:	8b 55 e0             	mov    -0x20(%ebp),%edx
401abf:	52                   	push   %edx
401ac0:	8b 0a                	mov    (%edx),%ecx
401ac2:	8b 01                	mov    (%ecx),%eax
401ac4:	ff 50 04             	call   *0x4(%eax)
401ac7:	8b 75 e4             	mov    -0x1c(%ebp),%esi
401aca:	83 c6 10             	add    $0x10,%esi
401acd:	89 75 ec             	mov    %esi,-0x14(%ebp)
401ad0:	eb 0f                	jmp    0x401ae1
401ad2:	ff 72 f4             	push   -0xc(%edx)
401ad5:	8d 4d ec             	lea    -0x14(%ebp),%ecx
401ad8:	52                   	push   %edx
401ad9:	e8 22 09 00 00       	call   0x402400
401ade:	8b 75 ec             	mov    -0x14(%ebp),%esi
401ae1:	c6 45 fc 07          	movb   $0x7,-0x4(%ebp)
401ae5:	8b c3                	mov    %ebx,%eax
401ae7:	8b 55 dc             	mov    -0x24(%ebp),%edx
401aea:	83 c2 f0             	add    $0xfffffff0,%edx
401aed:	f0 0f c1 42 0c       	lock xadd %eax,0xc(%edx)
401af2:	48                   	dec    %eax
401af3:	85 c0                	test   %eax,%eax
401af5:	7f 08                	jg     0x401aff
401af7:	8b 0a                	mov    (%edx),%ecx
401af9:	52                   	push   %edx
401afa:	8b 01                	mov    (%ecx),%eax
401afc:	ff 50 04             	call   *0x4(%eax)
401aff:	c6 45 fc 06          	movb   $0x6,-0x4(%ebp)
401b03:	8b c3                	mov    %ebx,%eax
401b05:	8b 55 d8             	mov    -0x28(%ebp),%edx
401b08:	83 c2 f0             	add    $0xfffffff0,%edx
401b0b:	f0 0f c1 42 0c       	lock xadd %eax,0xc(%edx)
401b10:	48                   	dec    %eax
401b11:	85 c0                	test   %eax,%eax
401b13:	7f 08                	jg     0x401b1d
401b15:	8b 0a                	mov    (%edx),%ecx
401b17:	52                   	push   %edx
401b18:	8b 01                	mov    (%ecx),%eax
401b1a:	ff 50 04             	call   *0x4(%eax)
401b1d:	68 3f 00 0f 00       	push   $0xf003f
401b22:	6a 00                	push   $0x0
401b24:	6a 00                	push   $0x0
401b26:	ff 15 00 b0 41 00    	call   *0x41b000
401b2c:	8b c8                	mov    %eax,%ecx
401b2e:	89 4d e4             	mov    %ecx,-0x1c(%ebp)
401b31:	85 c9                	test   %ecx,%ecx
401b33:	0f 84 b6 00 00 00    	je     0x401bef
401b39:	a1 48 47 42 00       	mov    0x424748,%eax
401b3e:	6a 00                	push   $0x0
401b40:	6a 00                	push   $0x0
401b42:	6a 00                	push   $0x0
401b44:	6a 00                	push   $0x0
401b46:	6a 00                	push   $0x0
401b48:	56                   	push   %esi
401b49:	6a 01                	push   $0x1
401b4b:	6a 02                	push   $0x2
401b4d:	6a 10                	push   $0x10
401b4f:	68 ff 01 0f 00       	push   $0xf01ff
401b54:	50                   	push   %eax
401b55:	50                   	push   %eax
401b56:	51                   	push   %ecx
401b57:	ff 15 04 b0 41 00    	call   *0x41b004
401b5d:	89 45 d8             	mov    %eax,-0x28(%ebp)
401b60:	ff 15 48 b0 41 00    	call   *0x41b048
401b66:	8b f8                	mov    %eax,%edi
401b68:	57                   	push   %edi
401b69:	68 24 0b 42 00       	push   $0x420b24
401b6e:	e8 fd 0f 00 00       	call   0x402b70
401b73:	83 c4 08             	add    $0x8,%esp
401b76:	81 ff 31 04 00 00    	cmp    $0x431,%edi
401b7c:	75 39                	jne    0x401bb7
401b7e:	68 ff 01 0f 00       	push   $0xf01ff
401b83:	ff 35 48 47 42 00    	push   0x424748
401b89:	ff 75 e4             	push   -0x1c(%ebp)
401b8c:	ff 15 08 b0 41 00    	call   *0x41b008
401b92:	8b f8                	mov    %eax,%edi
401b94:	85 ff                	test   %edi,%edi
401b96:	74 2d                	je     0x401bc5
401b98:	6a 00                	push   $0x0
401b9a:	6a 00                	push   $0x0
401b9c:	6a 00                	push   $0x0
401b9e:	6a 00                	push   $0x0
401ba0:	6a 00                	push   $0x0
401ba2:	6a 00                	push   $0x0
401ba4:	56                   	push   %esi
401ba5:	6a 01                	push   $0x1
401ba7:	6a 02                	push   $0x2
401ba9:	6a 10                	push   $0x10
401bab:	57                   	push   %edi
401bac:	ff 15 0c b0 41 00    	call   *0x41b00c
401bb2:	89 45 e8             	mov    %eax,-0x18(%ebp)
401bb5:	eb 06                	jmp    0x401bbd
401bb7:	8b 7d d8             	mov    -0x28(%ebp),%edi
401bba:	8b 45 e8             	mov    -0x18(%ebp),%eax
401bbd:	85 ff                	test   %edi,%edi
401bbf:	75 04                	jne    0x401bc5
401bc1:	85 c0                	test   %eax,%eax
401bc3:	74 17                	je     0x401bdc
401bc5:	8d 45 d8             	lea    -0x28(%ebp),%eax
401bc8:	c7 45 d8 38 0d 42 00 	movl   $0x420d38,-0x28(%ebp)
401bcf:	50                   	push   %eax
401bd0:	6a 01                	push   $0x1
401bd2:	57                   	push   %edi
401bd3:	ff 15 10 b0 41 00    	call   *0x41b010
401bd9:	89 45 e8             	mov    %eax,-0x18(%ebp)
401bdc:	57                   	push   %edi
401bdd:	8b 3d 14 b0 41 00    	mov    0x41b014,%edi
401be3:	ff d7                	call   *%edi
401be5:	ff 75 e4             	push   -0x1c(%ebp)
401be8:	ff d7                	call   *%edi
401bea:	8b 7d e8             	mov    -0x18(%ebp),%edi
401bed:	eb 14                	jmp    0x401c03
401bef:	ff 15 48 b0 41 00    	call   *0x41b048
401bf5:	50                   	push   %eax
401bf6:	68 5c 0b 42 00       	push   $0x420b5c
401bfb:	e8 70 0f 00 00       	call   0x402b70
401c00:	83 c4 08             	add    $0x8,%esp
401c03:	c6 45 fc 00          	movb   $0x0,-0x4(%ebp)
401c07:	83 c6 f0             	add    $0xfffffff0,%esi
401c0a:	8b c3                	mov    %ebx,%eax
401c0c:	f0 0f c1 46 0c       	lock xadd %eax,0xc(%esi)
401c11:	48                   	dec    %eax
401c12:	85 c0                	test   %eax,%eax
401c14:	7f 08                	jg     0x401c1e
401c16:	8b 0e                	mov    (%esi),%ecx
401c18:	56                   	push   %esi
401c19:	8b 01                	mov    (%ecx),%eax
401c1b:	ff 50 04             	call   *0x4(%eax)
401c1e:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
401c25:	8b 55 f0             	mov    -0x10(%ebp),%edx
401c28:	83 c2 f0             	add    $0xfffffff0,%edx
401c2b:	f0 0f c1 5a 0c       	lock xadd %ebx,0xc(%edx)
401c30:	4b                   	dec    %ebx
401c31:	85 db                	test   %ebx,%ebx
401c33:	7f 08                	jg     0x401c3d
401c35:	8b 0a                	mov    (%edx),%ecx
401c37:	52                   	push   %edx
401c38:	8b 01                	mov    (%ecx),%eax
401c3a:	ff 50 04             	call   *0x4(%eax)
401c3d:	8b c7                	mov    %edi,%eax
401c3f:	8b 4d f4             	mov    -0xc(%ebp),%ecx
401c42:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
401c49:	59                   	pop    %ecx