408d75:	57                   	push   %edi
408d76:	ff 75 20             	push   0x20(%ebp)
408d79:	ff 75 ec             	push   -0x14(%ebp)
408d7c:	e8 14 77 00 00       	call   0x410495
408d81:	8b f0                	mov    %eax,%esi
408d83:	89 75 f0             	mov    %esi,-0x10(%ebp)
408d86:	83 c4 18             	add    $0x18,%esp
408d89:	f7 de                	neg    %esi
408d8b:	1b f6                	sbb    %esi,%esi
408d8d:	23 75 f8             	and    -0x8(%ebp),%esi
408d90:	57                   	push   %edi
408d91:	e8 13 fc ff ff       	call   0x4089a9
408d96:	59                   	pop    %ecx
408d97:	eb 1a                	jmp    0x408db3
408d99:	ff 75 1c             	push   0x1c(%ebp)
408d9c:	ff 75 18             	push   0x18(%ebp)
408d9f:	ff 75 14             	push   0x14(%ebp)
408da2:	ff 75 10             	push   0x10(%ebp)
408da5:	ff 75 0c             	push   0xc(%ebp)
408da8:	ff 75 08             	push   0x8(%ebp)
408dab:	ff 15 d8 70 41 00    	call   *0x4170d8
408db1:	8b f0                	mov    %eax,%esi
408db3:	39 5d f4             	cmp    %ebx,-0xc(%ebp)
408db6:	74 09                	je     0x408dc1
408db8:	ff 75 f4             	push   -0xc(%ebp)
408dbb:	e8 93 d6 ff ff       	call   0x406453
408dc0:	59                   	pop    %ecx
408dc1:	8b 45 f0             	mov    -0x10(%ebp),%eax
408dc4:	3b c3                	cmp    %ebx,%eax
408dc6:	74 0c                	je     0x408dd4
408dc8:	39 45 18             	cmp    %eax,0x18(%ebp)
408dcb:	74 07                	je     0x408dd4
408dcd:	50                   	push   %eax
408dce:	e8 80 d6 ff ff       	call   0x406453
408dd3:	59                   	pop    %ecx
408dd4:	8b c6                	mov    %esi,%eax
408dd6:	8d 65 e0             	lea    -0x20(%ebp),%esp
408dd9:	5f                   	pop    %edi
408dda:	5e                   	pop    %esi
408ddb:	5b                   	pop    %ebx
408ddc:	8b 4d fc             	mov    -0x4(%ebp),%ecx
408ddf:	33 cd                	xor    %ebp,%ecx
408de1:	e8 4f d1 ff ff       	call   0x405f35
408de6:	c9                   	leave
408de7:	c3                   	ret
408de8:	55                   	push   %ebp
408de9:	8b ec                	mov    %esp,%ebp
408deb:	83 ec 10             	sub    $0x10,%esp
408dee:	ff 75 08             	push   0x8(%ebp)
408df1:	8d 4d f0             	lea    -0x10(%ebp),%ecx
408df4:	e8 cb fb ff ff       	call   0x4089c4
408df9:	ff 75 28             	push   0x28(%ebp)
408dfc:	8d 4d f0             	lea    -0x10(%ebp),%ecx
408dff:	ff 75 24             	push   0x24(%ebp)
408e02:	ff 75 20             	push   0x20(%ebp)
408e05:	ff 75 1c             	push   0x1c(%ebp)
408e08:	ff 75 18             	push   0x18(%ebp)
408e0b:	ff 75 14             	push   0x14(%ebp)
408e0e:	ff 75 10             	push   0x10(%ebp)
408e11:	ff 75 0c             	push   0xc(%ebp)
408e14:	e8 2d fc ff ff       	call   0x408a46
408e19:	83 c4 20             	add    $0x20,%esp
408e1c:	80 7d fc 00          	cmpb   $0x0,-0x4(%ebp)
408e20:	74 07                	je     0x408e29
408e22:	8b 4d f8             	mov    -0x8(%ebp),%ecx
408e25:	83 61 70 fd          	andl   $0xfffffffd,0x70(%ecx)
408e29:	c9                   	leave
408e2a:	c3                   	ret
408e2b:	e8 1c 37 00 00       	call   0x40c54c
408e30:	8b c8                	mov    %eax,%ecx
408e32:	8b 41 6c             	mov    0x6c(%ecx),%eax
408e35:	3b 05 20 d2 41 00    	cmp    0x41d220,%eax
408e3b:	74 10                	je     0x408e4d
408e3d:	8b 15 38 d1 41 00    	mov    0x41d138,%edx
408e43:	85 51 70             	test   %edx,0x70(%ecx)
408e46:	75 05                	jne    0x408e4d
408e48:	e8 a5 08 00 00       	call   0x4096f2
408e4d:	8b 80 c8 00 00 00    	mov    0xc8(%eax),%eax
408e53:	c3                   	ret
408e54:	55                   	push   %ebp
408e55:	8b ec                	mov    %esp,%ebp
408e57:	83 ec 10             	sub    $0x10,%esp
408e5a:	ff 75 0c             	push   0xc(%ebp)
408e5d:	8d 4d f0             	lea    -0x10(%ebp),%ecx
408e60:	e8 5f fb ff ff       	call   0x4089c4
408e65:	8b 45 f0             	mov    -0x10(%ebp),%eax
408e68:	83 b8 ac 00 00 00 01 	cmpl   $0x1,0xac(%eax)
408e6f:	7e 13                	jle    0x408e84
408e71:	8d 45 f0             	lea    -0x10(%ebp),%eax
408e74:	50                   	push   %eax
408e75:	6a 04                	push   $0x4
408e77:	ff 75 08             	push   0x8(%ebp)
408e7a:	e8 fd 77 00 00       	call   0x41067c
408e7f:	83 c4 0c             	add    $0xc,%esp
408e82:	eb 10                	jmp    0x408e94
408e84:	8b 80 c8 00 00 00    	mov    0xc8(%eax),%eax
408e8a:	8b 4d 08             	mov    0x8(%ebp),%ecx
408e8d:	0f b6 04 48          	movzbl (%eax,%ecx,2),%eax
408e91:	83 e0 04             	and    $0x4,%eax
408e94:	80 7d fc 00          	cmpb   $0x0,-0x4(%ebp)
408e98:	74 07                	je     0x408ea1
408e9a:	8b 4d f8             	mov    -0x8(%ebp),%ecx
408e9d:	83 61 70 fd          	andl   $0xfffffffd,0x70(%ecx)
408ea1:	c9                   	leave
408ea2:	c3                   	ret
408ea3:	83 3d 04 da 41 00 00 	cmpl   $0x0,0x41da04
408eaa:	75 12                	jne    0x408ebe
408eac:	8b 44 24 04          	mov    0x4(%esp),%eax
408eb0:	8b 0d 10 d2 41 00    	mov    0x41d210,%ecx
408eb6:	0f b6 04 41          	movzbl (%ecx,%eax,2),%eax
408eba:	83 e0 04             	and    $0x4,%eax
408ebd:	c3                   	ret
408ebe:	6a 00                	push   $0x0
408ec0:	ff 74 24 08          	push   0x8(%esp)
408ec4:	e8 8b ff ff ff       	call   0x408e54
408ec9:	59                   	pop    %ecx
408eca:	59                   	pop    %ecx
408ecb:	c3                   	ret
408ecc:	55                   	push   %ebp
408ecd:	8b ec                	mov    %esp,%ebp
408ecf:	83 ec 48             	sub    $0x48,%esp
408ed2:	a1 20 c5 41 00       	mov    0x41c520,%eax
408ed7:	33 c5                	xor    %ebp,%eax
408ed9:	89 45 fc             	mov    %eax,-0x4(%ebp)
408edc:	53                   	push   %ebx
408edd:	33 db                	xor    %ebx,%ebx
408edf:	56                   	push   %esi
408ee0:	8b 75 08             	mov    0x8(%ebp),%esi
408ee3:	39 5e 14             	cmp    %ebx,0x14(%esi)
408ee6:	57                   	push   %edi
408ee7:	89 5d d4             	mov    %ebx,-0x2c(%ebp)
408eea:	89 5d dc             	mov    %ebx,-0x24(%ebp)
408eed:	89 5d e4             	mov    %ebx,-0x1c(%ebp)
408ef0:	89 5d d8             	mov    %ebx,-0x28(%ebp)
408ef3:	89 5d e0             	mov    %ebx,-0x20(%ebp)
408ef6:	89 75 b8             	mov    %esi,-0x48(%ebp)
408ef9:	89 5d bc             	mov    %ebx,-0x44(%ebp)
408efc:	0f 84 0b 03 00 00    	je     0x40920d
408f02:	8d 46 04             	lea    0x4(%esi),%eax
408f05:	39 18                	cmp    %ebx,(%eax)
408f07:	75 20                	jne    0x408f29
408f09:	50                   	push   %eax
408f0a:	0f b7 46 30          	movzwl 0x30(%esi),%eax
408f0e:	68 04 10 00 00       	push   $0x1004
408f13:	50                   	push   %eax
408f14:	8d 45 b8             	lea    -0x48(%ebp),%eax
408f17:	53                   	push   %ebx
408f18:	50                   	push   %eax
408f19:	e8 0c 7a 00 00       	call   0x41092a
408f1e:	83 c4 14             	add    $0x14,%esp
408f21:	85 c0                	test   %eax,%eax
408f23:	0f 85 bc 02 00 00    	jne    0x4091e5
408f29:	6a 04                	push   $0x4
408f2b:	e8 bc 03 00 00       	call   0x4092ec
408f30:	6a 02                	push   $0x2
408f32:	bf 80 01 00 00       	mov    $0x180,%edi
408f37:	57                   	push   %edi
408f38:	89 45 d4             	mov    %eax,-0x2c(%ebp)
408f3b:	e8 ec 03 00 00       	call   0x40932c
408f40:	6a 01                	push   $0x1
408f42:	57                   	push   %edi
408f43:	89 45 dc             	mov    %eax,-0x24(%ebp)
408f46:	e8 e1 03 00 00       	call   0x40932c
408f4b:	6a 01                	push   $0x1
408f4d:	57                   	push   %edi
408f4e:	89 45 e4             	mov    %eax,-0x1c(%ebp)
408f51:	e8 d6 03 00 00       	call   0x40932c
408f56:	6a 01                	push   $0x1
408f58:	68 01 01 00 00       	push   $0x101
408f5d:	89 45 d8             	mov    %eax,-0x28(%ebp)
408f60:	e8 c7 03 00 00       	call   0x40932c
408f65:	83 c4 24             	add    $0x24,%esp
408f68:	39 5d d4             	cmp    %ebx,-0x2c(%ebp)
408f6b:	89 45 e0             	mov    %eax,-0x20(%ebp)
408f6e:	0f 84 71 02 00 00    	je     0x4091e5
408f74:	39 5d dc             	cmp    %ebx,-0x24(%ebp)
408f77:	0f 84 68 02 00 00    	je     0x4091e5
408f7d:	3b c3                	cmp    %ebx,%eax
408f7f:	0f 84 60 02 00 00    	je     0x4091e5
408f85:	39 5d e4             	cmp    %ebx,-0x1c(%ebp)
408f88:	0f 84 57 02 00 00    	je     0x4091e5
408f8e:	39 5d d8             	cmp    %ebx,-0x28(%ebp)
408f91:	0f 84 4e 02 00 00    	je     0x4091e5
408f97:	8b 45 d4             	mov    -0x2c(%ebp),%eax
408f9a:	89 18                	mov    %ebx,(%eax)
408f9c:	33 c0                	xor    %eax,%eax
408f9e:	8b 4d e0             	mov    -0x20(%ebp),%ecx
408fa1:	88 04 08             	mov    %al,(%eax,%ecx,1)
408fa4:	40                   	inc    %eax
408fa5:	3d 00 01 00 00       	cmp    $0x100,%eax
408faa:	7c f2                	jl     0x408f9e
408fac:	8d 45 e8             	lea    -0x18(%ebp),%eax
408faf:	50                   	push   %eax
408fb0:	ff 76 04             	push   0x4(%esi)
408fb3:	ff 15 e0 70 41 00    	call   *0x4170e0
408fb9:	85 c0                	test   %eax,%eax
408fbb:	0f 84 24 02 00 00    	je     0x4091e5
408fc1:	83 7d e8 05          	cmpl   $0x5,-0x18(%ebp)
408fc5:	0f 87 1a 02 00 00    	ja     0x4091e5
408fcb:	0f b7 45 e8          	movzwl -0x18(%ebp),%eax
408fcf:	83 f8 01             	cmp    $0x1,%eax
408fd2:	89 45 d0             	mov    %eax,-0x30(%ebp)
408fd5:	7e 2d                	jle    0x409004
408fd7:	38 5d ee             	cmp    %bl,-0x12(%ebp)
408fda:	74 28                	je     0x409004
408fdc:	8d 45 ef             	lea    -0x11(%ebp),%eax
408fdf:	8a 08                	mov    (%eax),%cl
408fe1:	3a cb                	cmp    %bl,%cl
408fe3:	74 1f                	je     0x409004
408fe5:	0f b6 78 ff          	movzbl -0x1(%eax),%edi
408fe9:	0f b6 c9             	movzbl %cl,%ecx
408fec:	eb 0b                	jmp    0x408ff9
408fee:	8b 4d e0             	mov    -0x20(%ebp),%ecx
408ff1:	c6 04 0f 20          	movb   $0x20,(%edi,%ecx,1)
408ff5:	0f b6 08             	movzbl (%eax),%ecx
408ff8:	47                   	inc    %edi
408ff9:	3b f9                	cmp    %ecx,%edi
408ffb:	7e f1                	jle    0x408fee
408ffd:	40                   	inc    %eax
408ffe:	40                   	inc    %eax
408fff:	38 58 ff             	cmp    %bl,-0x1(%eax)
409002:	75 db                	jne    0x408fdf
409004:	8b 45 dc             	mov    -0x24(%ebp),%eax
409007:	53                   	push   %ebx
409008:	53                   	push   %ebx
409009:	ff 76 04             	push   0x4(%esi)
40900c:	05 00 01 00 00       	add    $0x100,%eax
409011:	50                   	push   %eax
409012:	68 00 01 00 00       	push   $0x100
409017:	ff 75 e0             	push   -0x20(%ebp)
40901a:	89 45 c4             	mov    %eax,-0x3c(%ebp)
40901d:	6a 01                	push   $0x1
40901f:	53                   	push   %ebx
409020:	e8 c5 78 00 00       	call   0x4108ea
409025:	83 c4 20             	add    $0x20,%esp
409028:	85 c0                	test   %eax,%eax
40902a:	0f 84 b5 01 00 00    	je     0x4091e5
409030:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
409033:	8b 45 e0             	mov    -0x20(%ebp),%eax
409036:	53                   	push   %ebx
409037:	ff 76 04             	push   0x4(%esi)
40903a:	bf ff 00 00 00       	mov    $0xff,%edi
40903f:	57                   	push   %edi
409040:	81 c1 81 00 00 00    	add    $0x81,%ecx
409046:	51                   	push   %ecx
409047:	57                   	push   %edi
409048:	40                   	inc    %eax
409049:	50                   	push   %eax
40904a:	68 00 01 00 00       	push   $0x100
40904f:	ff 76 14             	push   0x14(%esi)
409052:	53                   	push   %ebx
409053:	e8 90 fd ff ff       	call   0x408de8
409058:	83 c4 24             	add    $0x24,%esp
40905b:	85 c0                	test   %eax,%eax
40905d:	0f 84 82 01 00 00    	je     0x4091e5
409063:	8b 45 d8             	mov    -0x28(%ebp),%eax
409066:	53                   	push   %ebx
409067:	ff 76 04             	push   0x4(%esi)
40906a:	05 81 00 00 00       	add    $0x81,%eax
40906f:	57                   	push   %edi
409070:	50                   	push   %eax
409071:	8b 45 e0             	mov    -0x20(%ebp),%eax
409074:	57                   	push   %edi
409075:	40                   	inc    %eax
409076:	50                   	push   %eax
409077:	68 00 02 00 00       	push   $0x200
40907c:	ff 76 14             	push   0x14(%esi)
40907f:	53                   	push   %ebx
409080:	e8 63 fd ff ff       	call   0x408de8
409085:	83 c4 24             	add    $0x24,%esp
409088:	85 c0                	test   %eax,%eax
40908a:	0f 84 55 01 00 00    	je     0x4091e5
409090:	83 7d d0 01          	cmpl   $0x1,-0x30(%ebp)
409094:	8b 45 dc             	mov    -0x24(%ebp),%eax
409097:	8b 7d e4             	mov    -0x1c(%ebp),%edi
40909a:	8b 55 d8             	mov    -0x28(%ebp),%edx
40909d:	8d 88 fe 00 00 00    	lea    0xfe(%eax),%ecx
4090a3:	66 89 19             	mov    %bx,(%ecx)
4090a6:	89 4d c8             	mov    %ecx,-0x38(%ebp)
4090a9:	8d 8f 80 00 00 00    	lea    0x80(%edi),%ecx
4090af:	88 5f 7f             	mov    %bl,0x7f(%edi)
4090b2:	88 5a 7f             	mov    %bl,0x7f(%edx)
4090b5:	88 19                	mov    %bl,(%ecx)
4090b7:	89 4d c0             	mov    %ecx,-0x40(%ebp)
4090ba:	8d 8a 80 00 00 00    	lea    0x80(%edx),%ecx
4090c0:	89 4d cc             	mov    %ecx,-0x34(%ebp)
4090c3:	88 19                	mov    %bl,(%ecx)
4090c5:	7e 4a                	jle    0x409111
4090c7:	38 5d ee             	cmp    %bl,-0x12(%ebp)
4090ca:	74 45                	je     0x409111
4090cc:	8d 4d ef             	lea    -0x11(%ebp),%ecx
4090cf:	89 4d e4             	mov    %ecx,-0x1c(%ebp)
4090d2:	8a 11                	mov    (%ecx),%dl
4090d4:	3a d3                	cmp    %bl,%dl
4090d6:	74 39                	je     0x409111
4090d8:	0f b6 49 ff          	movzbl -0x1(%ecx),%ecx
4090dc:	0f b6 d2             	movzbl %dl,%edx
4090df:	3b ca                	cmp    %edx,%ecx
4090e1:	7f 21                	jg     0x409104
4090e3:	8d 94 48 00 01 00 00 	lea    0x100(%eax,%ecx,2),%edx
4090ea:	eb 03                	jmp    0x4090ef
4090ec:	8b 55 dc             	mov    -0x24(%ebp),%edx
4090ef:	66 c7 02 00 80       	movw   $0x8000,(%edx)
4090f4:	41                   	inc    %ecx
4090f5:	42                   	inc    %edx
4090f6:	42                   	inc    %edx
4090f7:	89 55 dc             	mov    %edx,-0x24(%ebp)
4090fa:	8b 55 e4             	mov    -0x1c(%ebp),%edx
4090fd:	0f b6 12             	movzbl (%edx),%edx
409100:	3b ca                	cmp    %edx,%ecx
409102:	7e e8                	jle    0x4090ec
409104:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
409107:	41                   	inc    %ecx
409108:	41                   	inc    %ecx
409109:	38 59 ff             	cmp    %bl,-0x1(%ecx)
40910c:	89 4d e4             	mov    %ecx,-0x1c(%ebp)
40910f:	75 c1                	jne    0x4090d2
409111:	68 fe 00 00 00       	push   $0xfe
409116:	8d 88 00 02 00 00    	lea    0x200(%eax),%ecx
40911c:	51                   	push   %ecx
40911d:	50                   	push   %eax
40911e:	e8 ad ca ff ff       	call   0x405bd0
409123:	6a 7f                	push   $0x7f
409125:	8d 87 00 01 00 00    	lea    0x100(%edi),%eax
40912b:	50                   	push   %eax
40912c:	57                   	push   %edi
40912d:	e8 9e ca ff ff       	call   0x405bd0
409132:	8b 45 d8             	mov    -0x28(%ebp),%eax
409135:	6a 7f                	push   $0x7f
409137:	8d 88 00 01 00 00    	lea    0x100(%eax),%ecx
40913d:	51                   	push   %ecx
40913e:	50                   	push   %eax
40913f:	e8 8c ca ff ff       	call   0x405bd0
409144:	8b 86 c0 00 00 00    	mov    0xc0(%esi),%eax
40914a:	83 c4 24             	add    $0x24,%esp
40914d:	3b c3                	cmp    %ebx,%eax
40914f:	74 4b                	je     0x40919c
409151:	50                   	push   %eax
409152:	ff 15 98 70 41 00    	call   *0x417098
409158:	85 c0                	test   %eax,%eax
40915a:	75 40                	jne    0x40919c
40915c:	8b 86 c4 00 00 00    	mov    0xc4(%esi),%eax
409162:	2d fe 00 00 00       	sub    $0xfe,%eax
409167:	50                   	push   %eax
409168:	e8 e6 d2 ff ff       	call   0x406453
40916d:	8b 86 cc 00 00 00    	mov    0xcc(%esi),%eax
409173:	bf 80 00 00 00       	mov    $0x80,%edi
409178:	2b c7                	sub    %edi,%eax
40917a:	50                   	push   %eax
40917b:	e8 d3 d2 ff ff       	call   0x406453