401809:	0f b7 04 24          	movzwl (%esp),%eax
40180d:	83 c4 08             	add    $0x8,%esp
401810:	c2 04 00             	ret    $0x4
401813:	cc                   	int3
401814:	cc                   	int3
401815:	cc                   	int3
401816:	cc                   	int3
401817:	cc                   	int3
401818:	cc                   	int3
401819:	cc                   	int3
40181a:	cc                   	int3
40181b:	cc                   	int3
40181c:	cc                   	int3
40181d:	cc                   	int3
40181e:	cc                   	int3
40181f:	cc                   	int3
401820:	8b 44 24 08          	mov    0x8(%esp),%eax
401824:	8b 54 24 04          	mov    0x4(%esp),%edx
401828:	56                   	push   %esi
401829:	8b 31                	mov    (%ecx),%esi
40182b:	57                   	push   %edi
40182c:	8b f8                	mov    %eax,%edi
40182e:	2b fa                	sub    %edx,%edi
401830:	57                   	push   %edi
401831:	8b 7c 24 18          	mov    0x18(%esp),%edi
401835:	57                   	push   %edi
401836:	50                   	push   %eax
401837:	8b 46 2c             	mov    0x2c(%esi),%eax
40183a:	52                   	push   %edx
40183b:	ff d0                	call   *%eax
40183d:	5f                   	pop    %edi
40183e:	5e                   	pop    %esi
40183f:	c2 0c 00             	ret    $0xc
401842:	cc                   	int3
401843:	cc                   	int3
401844:	cc                   	int3
401845:	cc                   	int3
401846:	cc                   	int3
401847:	cc                   	int3
401848:	cc                   	int3
401849:	cc                   	int3
40184a:	cc                   	int3
40184b:	cc                   	int3
40184c:	cc                   	int3
40184d:	cc                   	int3
40184e:	cc                   	int3
40184f:	cc                   	int3
401850:	53                   	push   %ebx
401851:	8b 5c 24 0c          	mov    0xc(%esp),%ebx
401855:	56                   	push   %esi
401856:	8b 74 24 0c          	mov    0xc(%esp),%esi
40185a:	8b c3                	mov    %ebx,%eax
40185c:	2b c6                	sub    %esi,%eax
40185e:	57                   	push   %edi
40185f:	8b f9                	mov    %ecx,%edi
401861:	39 44 24 1c          	cmp    %eax,0x1c(%esp)
401865:	73 05                	jae    0x40186c
401867:	e8 df 39 00 00       	call   0x40524b
40186c:	3b f3                	cmp    %ebx,%esi
40186e:	74 4a                	je     0x4018ba
401870:	55                   	push   %ebp
401871:	8d 6f 18             	lea    0x18(%edi),%ebp
401874:	8b 7c 24 1c          	mov    0x1c(%esp),%edi
401878:	8a 0e                	mov    (%esi),%cl
40187a:	55                   	push   %ebp
40187b:	8d 54 24 24          	lea    0x24(%esp),%edx
40187f:	52                   	push   %edx
401880:	6a 01                	push   $0x1
401882:	8d 44 24 24          	lea    0x24(%esp),%eax
401886:	88 4c 24 24          	mov    %cl,0x24(%esp)
40188a:	50                   	push   %eax
40188b:	8d 4c 24 24          	lea    0x24(%esp),%ecx
40188f:	51                   	push   %ecx
401890:	c7 44 24 34 00 00 00 	movl   $0x0,0x34(%esp)
401897:	00
401898:	e8 c7 31 00 00       	call   0x404a64
40189d:	83 c4 14             	add    $0x14,%esp
4018a0:	85 c0                	test   %eax,%eax
4018a2:	b8 ff ff 00 00       	mov    $0xffff,%eax
4018a7:	7c 05                	jl     0x4018ae
4018a9:	0f b7 44 24 14       	movzwl 0x14(%esp),%eax
4018ae:	66 89 07             	mov    %ax,(%edi)
4018b1:	46                   	inc    %esi
4018b2:	83 c7 02             	add    $0x2,%edi
4018b5:	3b f3                	cmp    %ebx,%esi
4018b7:	75 bf                	jne    0x401878
4018b9:	5d                   	pop    %ebp
4018ba:	5f                   	pop    %edi
4018bb:	8b c6                	mov    %esi,%eax
4018bd:	5e                   	pop    %esi
4018be:	5b                   	pop    %ebx
4018bf:	c2 10 00             	ret    $0x10
4018c2:	cc                   	int3
4018c3:	cc                   	int3
4018c4:	cc                   	int3
4018c5:	cc                   	int3
4018c6:	cc                   	int3
4018c7:	cc                   	int3
4018c8:	cc                   	int3
4018c9:	cc                   	int3
4018ca:	cc                   	int3
4018cb:	cc                   	int3
4018cc:	cc                   	int3
4018cd:	cc                   	int3
4018ce:	cc                   	int3
4018cf:	cc                   	int3
4018d0:	83 ec 0c             	sub    $0xc,%esp
4018d3:	83 c1 18             	add    $0x18,%ecx
4018d6:	51                   	push   %ecx
4018d7:	8b 4c 24 14          	mov    0x14(%esp),%ecx
4018db:	8d 44 24 04          	lea    0x4(%esp),%eax
4018df:	50                   	push   %eax
4018e0:	51                   	push   %ecx
4018e1:	8d 54 24 10          	lea    0x10(%esp),%edx
4018e5:	52                   	push   %edx
4018e6:	c7 44 24 10 00 00 00 	movl   $0x0,0x10(%esp)
4018ed:	00
4018ee:	e8 11 29 00 00       	call   0x404204
4018f3:	83 c4 10             	add    $0x10,%esp
4018f6:	83 f8 01             	cmp    $0x1,%eax
4018f9:	8a 44 24 14          	mov    0x14(%esp),%al
4018fd:	75 04                	jne    0x401903
4018ff:	8a 44 24 04          	mov    0x4(%esp),%al
401903:	83 c4 0c             	add    $0xc,%esp
401906:	c2 08 00             	ret    $0x8
401909:	cc                   	int3
40190a:	cc                   	int3
40190b:	cc                   	int3
40190c:	cc                   	int3
40190d:	cc                   	int3
40190e:	cc                   	int3
40190f:	cc                   	int3
401910:	8b 44 24 08          	mov    0x8(%esp),%eax
401914:	8b 54 24 04          	mov    0x4(%esp),%edx
401918:	56                   	push   %esi
401919:	8b 31                	mov    (%ecx),%esi
40191b:	57                   	push   %edi
40191c:	8b f8                	mov    %eax,%edi
40191e:	2b fa                	sub    %edx,%edi
401920:	d1 ff                	sar    $1,%edi
401922:	57                   	push   %edi
401923:	8b 7c 24 1c          	mov    0x1c(%esp),%edi
401927:	57                   	push   %edi
401928:	8b 7c 24 1c          	mov    0x1c(%esp),%edi
40192c:	57                   	push   %edi
40192d:	50                   	push   %eax
40192e:	8b 46 38             	mov    0x38(%esi),%eax
401931:	52                   	push   %edx
401932:	ff d0                	call   *%eax
401934:	5f                   	pop    %edi
401935:	5e                   	pop    %esi
401936:	c2 10 00             	ret    $0x10
401939:	cc                   	int3
40193a:	cc                   	int3
40193b:	cc                   	int3
40193c:	cc                   	int3
40193d:	cc                   	int3
40193e:	cc                   	int3
40193f:	cc                   	int3
401940:	83 ec 08             	sub    $0x8,%esp
401943:	55                   	push   %ebp
401944:	8b 6c 24 14          	mov    0x14(%esp),%ebp
401948:	56                   	push   %esi
401949:	8b 74 24 14          	mov    0x14(%esp),%esi
40194d:	8b c5                	mov    %ebp,%eax
40194f:	2b c6                	sub    %esi,%eax
401951:	d1 f8                	sar    $1,%eax
401953:	57                   	push   %edi
401954:	8b f9                	mov    %ecx,%edi
401956:	39 44 24 28          	cmp    %eax,0x28(%esp)
40195a:	73 05                	jae    0x401961
40195c:	e8 ea 38 00 00       	call   0x40524b
401961:	3b f5                	cmp    %ebp,%esi
401963:	74 42                	je     0x4019a7
401965:	53                   	push   %ebx
401966:	8d 5f 18             	lea    0x18(%edi),%ebx
401969:	8b 7c 24 28          	mov    0x28(%esp),%edi
40196d:	8d 49 00             	lea    0x0(%ecx),%ecx
401970:	0f b7 06             	movzwl (%esi),%eax
401973:	53                   	push   %ebx
401974:	8d 4c 24 24          	lea    0x24(%esp),%ecx
401978:	51                   	push   %ecx
401979:	50                   	push   %eax
40197a:	8d 54 24 1c          	lea    0x1c(%esp),%edx
40197e:	52                   	push   %edx
40197f:	c7 44 24 30 00 00 00 	movl   $0x0,0x30(%esp)
401986:	00
401987:	e8 78 28 00 00       	call   0x404204
40198c:	83 c4 10             	add    $0x10,%esp
40198f:	83 f8 01             	cmp    $0x1,%eax
401992:	8a 44 24 24          	mov    0x24(%esp),%al
401996:	75 04                	jne    0x40199c
401998:	8a 44 24 10          	mov    0x10(%esp),%al
40199c:	88 07                	mov    %al,(%edi)
40199e:	83 c6 02             	add    $0x2,%esi
4019a1:	47                   	inc    %edi
4019a2:	3b f5                	cmp    %ebp,%esi
4019a4:	75 ca                	jne    0x401970
4019a6:	5b                   	pop    %ebx
4019a7:	5f                   	pop    %edi
4019a8:	8b c6                	mov    %esi,%eax
4019aa:	5e                   	pop    %esi
4019ab:	5d                   	pop    %ebp
4019ac:	83 c4 08             	add    $0x8,%esp
4019af:	c2 14 00             	ret    $0x14
4019b2:	cc                   	int3
4019b3:	cc                   	int3
4019b4:	cc                   	int3
4019b5:	cc                   	int3
4019b6:	cc                   	int3
4019b7:	cc                   	int3
4019b8:	cc                   	int3
4019b9:	cc                   	int3
4019ba:	cc                   	int3
4019bb:	cc                   	int3
4019bc:	cc                   	int3
4019bd:	cc                   	int3
4019be:	cc                   	int3
4019bf:	cc                   	int3
4019c0:	6a ff                	push   $0xffffffff
4019c2:	68 98 98 41 00       	push   $0x419898
4019c7:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
4019cd:	50                   	push   %eax
4019ce:	64 89 25 00 00 00 00 	mov    %esp,%fs:0x0
4019d5:	51                   	push   %ecx
4019d6:	56                   	push   %esi
4019d7:	8b f1                	mov    %ecx,%esi
4019d9:	89 74 24 04          	mov    %esi,0x4(%esp)
4019dd:	c7 06 04 8b 42 00    	movl   $0x428b04,(%esi)
4019e3:	c7 44 24 10 00 00 00 	movl   $0x0,0x10(%esp)
4019ea:	00
4019eb:	83 7e 14 00          	cmpl   $0x0,0x14(%esi)
4019ef:	74 0c                	je     0x4019fd
4019f1:	8b 46 10             	mov    0x10(%esi),%eax
4019f4:	50                   	push   %eax
4019f5:	e8 26 36 00 00       	call   0x405020
4019fa:	83 c4 04             	add    $0x4,%esp
4019fd:	f6 44 24 18 01       	testb  $0x1,0x18(%esp)
401a02:	c7 06 14 a2 41 00    	movl   $0x41a214,(%esi)
401a08:	74 09                	je     0x401a13
401a0a:	56                   	push   %esi
401a0b:	e8 26 39 00 00       	call   0x405336
401a10:	83 c4 04             	add    $0x4,%esp
401a13:	8b 4c 24 08          	mov    0x8(%esp),%ecx
401a17:	8b c6                	mov    %esi,%eax
401a19:	5e                   	pop    %esi
401a1a:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
401a21:	83 c4 10             	add    $0x10,%esp
401a24:	c2 04 00             	ret    $0x4
401a27:	cc                   	int3
401a28:	cc                   	int3
401a29:	cc                   	int3
401a2a:	cc                   	int3
401a2b:	cc                   	int3
401a2c:	cc                   	int3
401a2d:	cc                   	int3
401a2e:	cc                   	int3
401a2f:	cc                   	int3
401a30:	56                   	push   %esi
401a31:	8b f1                	mov    %ecx,%esi
401a33:	c7 06 f4 8a 42 00    	movl   $0x428af4,(%esi)
401a39:	83 7e 24 10          	cmpl   $0x10,0x24(%esi)
401a3d:	72 0c                	jb     0x401a4b
401a3f:	8b 46 10             	mov    0x10(%esi),%eax
401a42:	50                   	push   %eax
401a43:	e8 ee 38 00 00       	call   0x405336
401a48:	83 c4 04             	add    $0x4,%esp
401a4b:	33 c0                	xor    %eax,%eax
401a4d:	c7 46 24 0f 00 00 00 	movl   $0xf,0x24(%esi)
401a54:	89 46 20             	mov    %eax,0x20(%esi)
401a57:	88 46 10             	mov    %al,0x10(%esi)
401a5a:	8b ce                	mov    %esi,%ecx
401a5c:	5e                   	pop    %esi
401a5d:	e9 0d 35 00 00       	jmp    0x404f6f
401a62:	cc                   	int3
401a63:	cc                   	int3
401a64:	cc                   	int3
401a65:	cc                   	int3
401a66:	cc                   	int3
401a67:	cc                   	int3
401a68:	cc                   	int3
401a69:	cc                   	int3
401a6a:	cc                   	int3
401a6b:	cc                   	int3
401a6c:	cc                   	int3
401a6d:	cc                   	int3
401a6e:	cc                   	int3
401a6f:	cc                   	int3
401a70:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
401a76:	6a ff                	push   $0xffffffff
401a78:	68 f6 99 41 00       	push   $0x4199f6
401a7d:	50                   	push   %eax
401a7e:	64 89 25 00 00 00 00 	mov    %esp,%fs:0x0
401a85:	8b 41 0c             	mov    0xc(%ecx),%eax
401a88:	23 41 08             	and    0x8(%ecx),%eax
401a8b:	81 ec 8c 00 00 00    	sub    $0x8c,%esp
401a91:	53                   	push   %ebx
401a92:	a8 04                	test   $0x4,%al
401a94:	0f 84 81 00 00 00    	je     0x401b1b
401a9a:	6a 14                	push   $0x14
401a9c:	33 db                	xor    %ebx,%ebx
401a9e:	68 bc df 41 00       	push   $0x41dfbc
401aa3:	8d 4c 24 38          	lea    0x38(%esp),%ecx
401aa7:	c7 44 24 50 0f 00 00 	movl   $0xf,0x50(%esp)
401aae:	00
401aaf:	89 5c 24 4c          	mov    %ebx,0x4c(%esp)
401ab3:	88 5c 24 3c          	mov    %bl,0x3c(%esp)
401ab7:	e8 54 19 00 00       	call   0x403410
401abc:	8d 4c 24 08          	lea    0x8(%esp),%ecx
401ac0:	89 9c 24 98 00 00 00 	mov    %ebx,0x98(%esp)
401ac7:	e8 c5 33 00 00       	call   0x404e91
401acc:	6a ff                	push   $0xffffffff
401ace:	c6 84 24 9c 00 00 00 	movb   $0x1,0x9c(%esp)
401ad5:	01
401ad6:	53                   	push   %ebx
401ad7:	8d 44 24 38          	lea    0x38(%esp),%eax
401adb:	50                   	push   %eax
401adc:	8d 4c 24 20          	lea    0x20(%esp),%ecx
401ae0:	c7 44 24 14 f4 8a 42 	movl   $0x428af4,0x14(%esp)
401ae7:	00
401ae8:	c7 44 24 38 0f 00 00 	movl   $0xf,0x38(%esp)
401aef:	00
401af0:	89 5c 24 34          	mov    %ebx,0x34(%esp)
401af4:	88 5c 24 24          	mov    %bl,0x24(%esp)
401af8:	e8 33 16 00 00       	call   0x403130
401afd:	68 d4 9b 42 00       	push   $0x429bd4
401b02:	8d 4c 24 0c          	lea    0xc(%esp),%ecx
401b06:	88 9c 24 9c 00 00 00 	mov    %bl,0x9c(%esp)
401b0d:	51                   	push   %ecx
401b0e:	c7 44 24 10 44 8b 42 	movl   $0x428b44,0x10(%esp)
401b15:	00
401b16:	e8 97 4b 00 00       	call   0x4066b2
401b1b:	a8 02                	test   $0x2,%al
401b1d:	74 74                	je     0x401b93
401b1f:	68 d4 df 41 00       	push   $0x41dfd4
401b24:	8d 4c 24 34          	lea    0x34(%esp),%ecx
401b28:	e8 83 08 00 00       	call   0x4023b0
401b2d:	8d 4c 24 08          	lea    0x8(%esp),%ecx
401b31:	c7 84 24 98 00 00 00 	movl   $0x2,0x98(%esp)
401b38:	02 00 00 00
401b3c:	e8 50 33 00 00       	call   0x404e91
401b41:	33 db                	xor    %ebx,%ebx
401b43:	6a ff                	push   $0xffffffff
401b45:	c6 84 24 9c 00 00 00 	movb   $0x3,0x9c(%esp)
401b4c:	03
401b4d:	53                   	push   %ebx
401b4e:	8d 54 24 38          	lea    0x38(%esp),%edx
401b52:	52                   	push   %edx
401b53:	8d 4c 24 20          	lea    0x20(%esp),%ecx
401b57:	c7 44 24 14 f4 8a 42 	movl   $0x428af4,0x14(%esp)