b0feb1:	4f                   	dec    %edi
b0feb2:	75 16                	jne    0xb0feca
b0feb4:	85 f6                	test   %esi,%esi
b0feb6:	74 12                	je     0xb0feca
b0feb8:	e8 61 ab 90 ff       	call   0x41aa1e
b0febd:	68 f8 00 00 00       	push   $0xf8
b0fec2:	56                   	push   %esi
b0fec3:	e8 d4 1f 8f ff       	call   0x401e9c
b0fec8:	59                   	pop    %ecx
b0fec9:	59                   	pop    %ecx
b0feca:	8b c7                	mov    %edi,%eax
b0fecc:	5f                   	pop    %edi
b0fecd:	5e                   	pop    %esi
b0fece:	c3                   	ret
b0fecf:	cc                   	int3
b0fed0:	cc                   	int3
b0fed1:	cc                   	int3
b0fed2:	cc                   	int3
b0fed3:	cc                   	int3
b0fed4:	cc                   	int3
b0fed5:	cc                   	int3
b0fed6:	cc                   	int3
b0fed7:	cc                   	int3
b0fed8:	cc                   	int3
b0fed9:	cc                   	int3
b0feda:	55                   	push   %ebp
b0fedb:	8b ec                	mov    %esp,%ebp
b0fedd:	83 ec 18             	sub    $0x18,%esp
b0fee0:	8d 45 fc             	lea    -0x4(%ebp),%eax
b0fee3:	53                   	push   %ebx
b0fee4:	57                   	push   %edi
b0fee5:	50                   	push   %eax
b0fee6:	33 c0                	xor    %eax,%eax
b0fee8:	32 db                	xor    %bl,%bl
b0feea:	38 45 0c             	cmp    %al,0xc(%ebp)
b0feed:	8b f9                	mov    %ecx,%edi
b0feef:	0f 94 c0             	sete   %al
b0fef2:	48                   	dec    %eax
b0fef3:	50                   	push   %eax
b0fef4:	ff b7 d8 00 00 00    	push   0xd8(%edi)
b0fefa:	e8 6f a5 91 ff       	call   0x42a46e
b0feff:	83 c4 0c             	add    $0xc,%esp
b0ff02:	85 c0                	test   %eax,%eax
b0ff04:	75 0c                	jne    0xb0ff12
b0ff06:	ff 15 d4 36 d8 00    	call   *0xd836d4
b0ff0c:	85 c0                	test   %eax,%eax
b0ff0e:	7e 46                	jle    0xb0ff56
b0ff10:	eb 3c                	jmp    0xb0ff4e
b0ff12:	56                   	push   %esi
b0ff13:	8b 75 fc             	mov    -0x4(%ebp),%esi
b0ff16:	eb 27                	jmp    0xb0ff3f
b0ff18:	56                   	push   %esi
b0ff19:	e8 48 6c 91 ff       	call   0x426b66
b0ff1e:	56                   	push   %esi
b0ff1f:	89 45 f8             	mov    %eax,-0x8(%ebp)
b0ff22:	e8 34 ae 91 ff       	call   0x42ad5b
b0ff27:	8b f0                	mov    %eax,%esi
b0ff29:	8b 45 f8             	mov    -0x8(%ebp),%eax
b0ff2c:	59                   	pop    %ecx
b0ff2d:	59                   	pop    %ecx
b0ff2e:	3b 45 08             	cmp    0x8(%ebp),%eax
b0ff31:	75 04                	jne    0xb0ff37
b0ff33:	b3 01                	mov    $0x1,%bl
b0ff35:	eb 08                	jmp    0xb0ff3f
b0ff37:	50                   	push   %eax
b0ff38:	8b cf                	mov    %edi,%ecx
b0ff3a:	e8 84 dd 90 ff       	call   0x41dcc3
b0ff3f:	85 f6                	test   %esi,%esi
b0ff41:	75 d5                	jne    0xb0ff18
b0ff43:	5e                   	pop    %esi
b0ff44:	5f                   	pop    %edi
b0ff45:	8a c3                	mov    %bl,%al
b0ff47:	5b                   	pop    %ebx
b0ff48:	8b e5                	mov    %ebp,%esp
b0ff4a:	5d                   	pop    %ebp
b0ff4b:	c2 08 00             	ret    $0x8
b0ff4e:	0f b7 c0             	movzwl %ax,%eax
b0ff51:	0d 00 00 07 80       	or     $0x80070000,%eax
b0ff56:	50                   	push   %eax
b0ff57:	8d 4d e8             	lea    -0x18(%ebp),%ecx
b0ff5a:	e8 2f 27 90 ff       	call   0x41268e
b0ff5f:	68 9c ca d4 00       	push   $0xd4ca9c
b0ff64:	8d 45 e8             	lea    -0x18(%ebp),%eax
b0ff67:	50                   	push   %eax
b0ff68:	e8 22 da 90 ff       	call   0x41d98f
b0ff6d:	cc                   	int3
b0ff6e:	cc                   	int3
b0ff6f:	cc                   	int3
b0ff70:	cc                   	int3
b0ff71:	cc                   	int3
b0ff72:	cc                   	int3
b0ff73:	cc                   	int3
b0ff74:	cc                   	int3
b0ff75:	cc                   	int3
b0ff76:	cc                   	int3
b0ff77:	cc                   	int3
b0ff78:	cc                   	int3
b0ff79:	cc                   	int3
b0ff7a:	cc                   	int3
b0ff7b:	cc                   	int3
b0ff7c:	cc                   	int3
b0ff7d:	cc                   	int3
b0ff7e:	cc                   	int3
b0ff7f:	cc                   	int3
b0ff80:	cc                   	int3
b0ff81:	cc                   	int3
b0ff82:	cc                   	int3
b0ff83:	cc                   	int3
b0ff84:	cc                   	int3
b0ff85:	cc                   	int3
b0ff86:	cc                   	int3
b0ff87:	cc                   	int3
b0ff88:	cc                   	int3
b0ff89:	cc                   	int3
b0ff8a:	cc                   	int3
b0ff8b:	cc                   	int3
b0ff8c:	cc                   	int3
b0ff8d:	cc                   	int3
b0ff8e:	cc                   	int3
b0ff8f:	cc                   	int3
b0ff90:	cc                   	int3
b0ff91:	cc                   	int3
b0ff92:	cc                   	int3
b0ff93:	55                   	push   %ebp
b0ff94:	8b ec                	mov    %esp,%ebp
b0ff96:	83 ec 0c             	sub    $0xc,%esp
b0ff99:	56                   	push   %esi
b0ff9a:	57                   	push   %edi
b0ff9b:	8b 7d 08             	mov    0x8(%ebp),%edi
b0ff9e:	85 ff                	test   %edi,%edi
b0ffa0:	74 28                	je     0xb0ffca
b0ffa2:	8b 07                	mov    (%edi),%eax
b0ffa4:	8b 70 08             	mov    0x8(%eax),%esi
b0ffa7:	8b ce                	mov    %esi,%ecx
b0ffa9:	e8 b7 c6 91 ff       	call   0x42c665
b0ffae:	8b cf                	mov    %edi,%ecx
b0ffb0:	ff d6                	call   *%esi
b0ffb2:	5f                   	pop    %edi
b0ffb3:	5e                   	pop    %esi
b0ffb4:	85 c0                	test   %eax,%eax
b0ffb6:	74 05                	je     0xb0ffbd
b0ffb8:	8d 48 fc             	lea    -0x4(%eax),%ecx
b0ffbb:	eb 02                	jmp    0xb0ffbf
b0ffbd:	33 c9                	xor    %ecx,%ecx
b0ffbf:	e8 fd d2 92 ff       	call   0x43d2c1
b0ffc4:	8b e5                	mov    %ebp,%esp
b0ffc6:	5d                   	pop    %ebp
b0ffc7:	c2 04 00             	ret    $0x4
b0ffca:	68 04 bc c8 00       	push   $0xc8bc04
b0ffcf:	8d 4d f4             	lea    -0xc(%ebp),%ecx
b0ffd2:	e8 bc 74 92 ff       	call   0x437493
b0ffd7:	68 c0 f3 d1 00       	push   $0xd1f3c0
b0ffdc:	8d 45 f4             	lea    -0xc(%ebp),%eax
b0ffdf:	50                   	push   %eax
b0ffe0:	e8 aa d9 90 ff       	call   0x41d98f
b0ffe5:	cc                   	int3
b0ffe6:	cc                   	int3
b0ffe7:	cc                   	int3
b0ffe8:	cc                   	int3
b0ffe9:	cc                   	int3
b0ffea:	cc                   	int3
b0ffeb:	cc                   	int3
b0ffec:	cc                   	int3
b0ffed:	cc                   	int3
b0ffee:	cc                   	int3
b0ffef:	cc                   	int3
b0fff0:	cc                   	int3
b0fff1:	cc                   	int3
b0fff2:	cc                   	int3
b0fff3:	cc                   	int3
b0fff4:	cc                   	int3
b0fff5:	cc                   	int3
b0fff6:	cc                   	int3
b0fff7:	cc                   	int3
b0fff8:	cc                   	int3
b0fff9:	cc                   	int3
b0fffa:	55                   	push   %ebp
b0fffb:	8b ec                	mov    %esp,%ebp
b0fffd:	8b 45 08             	mov    0x8(%ebp),%eax
b10000:	83 ec 10             	sub    $0x10,%esp
b10003:	56                   	push   %esi
b10004:	8b f1                	mov    %ecx,%esi
b10006:	89 46 04             	mov    %eax,0x4(%esi)
b10009:	33 c0                	xor    %eax,%eax
b1000b:	50                   	push   %eax
b1000c:	50                   	push   %eax
b1000d:	50                   	push   %eax
b1000e:	50                   	push   %eax
b1000f:	ff 15 90 37 d8 00    	call   *0xd83790
b10015:	89 06                	mov    %eax,(%esi)
b10017:	85 c0                	test   %eax,%eax
b10019:	75 0c                	jne    0xb10027
b1001b:	ff 15 d4 36 d8 00    	call   *0xd836d4
b10021:	85 c0                	test   %eax,%eax
b10023:	7e 13                	jle    0xb10038
b10025:	eb 09                	jmp    0xb10030
b10027:	8b c6                	mov    %esi,%eax
b10029:	5e                   	pop    %esi
b1002a:	8b e5                	mov    %ebp,%esp
b1002c:	5d                   	pop    %ebp
b1002d:	c2 04 00             	ret    $0x4
b10030:	0f b7 c0             	movzwl %ax,%eax
b10033:	0d 00 00 07 80       	or     $0x80070000,%eax
b10038:	50                   	push   %eax
b10039:	8d 4d f0             	lea    -0x10(%ebp),%ecx
b1003c:	e8 4d 26 90 ff       	call   0x41268e
b10041:	68 9c ca d4 00       	push   $0xd4ca9c
b10046:	8d 45 f0             	lea    -0x10(%ebp),%eax
b10049:	50                   	push   %eax
b1004a:	e8 40 d9 90 ff       	call   0x41d98f
b1004f:	cc                   	int3
b10050:	cc                   	int3
b10051:	cc                   	int3
b10052:	cc                   	int3
b10053:	cc                   	int3
b10054:	cc                   	int3
b10055:	cc                   	int3
b10056:	cc                   	int3
b10057:	cc                   	int3
b10058:	cc                   	int3
b10059:	cc                   	int3
b1005a:	cc                   	int3
b1005b:	cc                   	int3
b1005c:	cc                   	int3
b1005d:	cc                   	int3
b1005e:	cc                   	int3
b1005f:	cc                   	int3
b10060:	cc                   	int3
b10061:	cc                   	int3
b10062:	cc                   	int3
b10063:	cc                   	int3
b10064:	cc                   	int3
b10065:	53                   	push   %ebx
b10066:	8b d9                	mov    %ecx,%ebx
b10068:	e8 dc 87 91 ff       	call   0x428849
b1006d:	50                   	push   %eax
b1006e:	e8 f3 6a 91 ff       	call   0x426b66
b10073:	89 03                	mov    %eax,(%ebx)
b10075:	59                   	pop    %ecx
b10076:	85 c0                	test   %eax,%eax
b10078:	74 17                	je     0xb10091
b1007a:	56                   	push   %esi
b1007b:	57                   	push   %edi
b1007c:	8d 78 04             	lea    0x4(%eax),%edi
b1007f:	8b 07                	mov    (%edi),%eax
b10081:	8b 70 10             	mov    0x10(%eax),%esi
b10084:	8b ce                	mov    %esi,%ecx
b10086:	e8 da c5 91 ff       	call   0x42c665
b1008b:	8b cf                	mov    %edi,%ecx
b1008d:	ff d6                	call   *%esi
b1008f:	5f                   	pop    %edi
b10090:	5e                   	pop    %esi
b10091:	8b c3                	mov    %ebx,%eax
b10093:	5b                   	pop    %ebx
b10094:	c3                   	ret
b10095:	cc                   	int3
b10096:	cc                   	int3
b10097:	cc                   	int3
b10098:	cc                   	int3
b10099:	cc                   	int3
b1009a:	cc                   	int3
b1009b:	cc                   	int3
b1009c:	cc                   	int3
b1009d:	cc                   	int3
b1009e:	cc                   	int3
b1009f:	cc                   	int3
b100a0:	cc                   	int3
b100a1:	6a 14                	push   $0x14
b100a3:	b8 69 fe bb 00       	mov    $0xbbfe69,%eax
b100a8:	e8 de a1 8f ff       	call   0x40a28b
b100ad:	8b f9                	mov    %ecx,%edi
b100af:	89 7d f0             	mov    %edi,-0x10(%ebp)
b100b2:	c7 07 e8 c7 c8 00    	movl   $0xc8c7e8,(%edi)
b100b8:	c7 47 04 b0 c7 c8 00 	movl   $0xc8c7b0,0x4(%edi)
b100bf:	8b 4d 08             	mov    0x8(%ebp),%ecx
b100c2:	33 db                	xor    %ebx,%ebx
b100c4:	ff 75 10             	push   0x10(%ebp)
b100c7:	89 5d fc             	mov    %ebx,-0x4(%ebp)
b100ca:	ff 75 0c             	push   0xc(%ebp)
b100cd:	8d 41 08             	lea    0x8(%ecx),%eax
b100d0:	f7 d9                	neg    %ecx
b100d2:	1b c9                	sbb    %ecx,%ecx
b100d4:	23 c8                	and    %eax,%ecx
b100d6:	51                   	push   %ecx
b100d7:	8d 4f 08             	lea    0x8(%edi),%ecx
b100da:	e8 b2 3a 91 ff       	call   0x423b91
b100df:	33 c0                	xor    %eax,%eax
b100e1:	c7 07 0c ca c8 00    	movl   $0xc8ca0c,(%edi)
b100e7:	40                   	inc    %eax
b100e8:	c7 47 04 24 ca c8 00 	movl   $0xc8ca24,0x4(%edi)
b100ef:	88 45 fc             	mov    %al,-0x4(%ebp)
b100f2:	c7 47 08 34 ca c8 00 	movl   $0xc8ca34,0x8(%edi)
b100f9:	89 5f 58             	mov    %ebx,0x58(%edi)
b100fc:	89 5f 5c             	mov    %ebx,0x5c(%edi)
b100ff:	89 5f 64             	mov    %ebx,0x64(%edi)
b10102:	89 5f 68             	mov    %ebx,0x68(%edi)
b10105:	88 47 74             	mov    %al,0x74(%edi)
b10108:	66 89 5f 75          	mov    %bx,0x75(%edi)
b1010c:	88 5f 77             	mov    %bl,0x77(%edi)
b1010f:	f0 0f c1 05 e0 01 d6 	lock xadd %eax,0xd601e0
b10116:	00
b10117:	40                   	inc    %eax
b10118:	53                   	push   %ebx
b10119:	53                   	push   %ebx
b1011a:	53                   	push   %ebx
b1011b:	53                   	push   %ebx
b1011c:	89 47 70             	mov    %eax,0x70(%edi)
b1011f:	ff 15 90 37 d8 00    	call   *0xd83790
b10125:	89 47 60             	mov    %eax,0x60(%edi)
b10128:	85 c0                	test   %eax,%eax
b1012a:	75 29                	jne    0xb10155
b1012c:	ff 15 d4 36 d8 00    	call   *0xd836d4
b10132:	85 c0                	test   %eax,%eax
b10134:	7e 08                	jle    0xb1013e
b10136:	0f b7 c0             	movzwl %ax,%eax
b10139:	0d 00 00 07 80       	or     $0x80070000,%eax
b1013e:	50                   	push   %eax
b1013f:	8d 4d e0             	lea    -0x20(%ebp),%ecx
b10142:	e8 47 25 90 ff       	call   0x41268e
b10147:	68 9c ca d4 00       	push   $0xd4ca9c
b1014c:	8d 45 e0             	lea    -0x20(%ebp),%eax
b1014f:	50                   	push   %eax
b10150:	e8 3a d8 90 ff       	call   0x41d98f
b10155:	53                   	push   %ebx
b10156:	53                   	push   %ebx
b10157:	53                   	push   %ebx
b10158:	53                   	push   %ebx
b10159:	ff 15 90 37 d8 00    	call   *0xd83790
b1015f:	89 47 5c             	mov    %eax,0x5c(%edi)
b10162:	85 c0                	test   %eax,%eax
b10164:	75 0c                	jne    0xb10172
b10166:	ff 15 d4 36 d8 00    	call   *0xd836d4
b1016c:	85 c0                	test   %eax,%eax
b1016e:	7e ce                	jle    0xb1013e
b10170:	eb c4                	jmp    0xb10136
b10172:	8b cf                	mov    %edi,%ecx
b10174:	e8 63 67 91 ff       	call   0x4268dc
b10179:	8b c7                	mov    %edi,%eax
b1017b:	e8 97 e2 8f ff       	call   0x40e417
b10180:	c2 0c 00             	ret    $0xc
b10183:	cc                   	int3
b10184:	cc                   	int3
b10185:	cc                   	int3
b10186:	cc                   	int3
b10187:	cc                   	int3
b10188:	cc                   	int3
b10189:	cc                   	int3
b1018a:	cc                   	int3
b1018b:	cc                   	int3
b1018c:	cc                   	int3