406dc7:	45                   	inc    %ebp
406dc8:	44                   	inc    %esp
406dc9:	00 00                	add    %al,(%eax)
406dcb:	00 6d 65             	add    %ch,0x65(%ebp)
406dce:	67 61                	addr16 popa
406dd0:	6c                   	insb   (%dx),%es:(%edi)
406dd1:	61                   	popa
406dd2:	65 6d                	gs insl (%dx),%es:(%edi)
406dd4:	61                   	popa
406dd5:	00 00                	add    %al,(%eax)
406dd7:	00 cc                	add    %cl,%ah
406dd9:	cc                   	int3
406dda:	cc                   	int3
406ddb:	cc                   	int3
406ddc:	cc                   	int3
406ddd:	cc                   	int3
406dde:	cc                   	int3
406ddf:	cc                   	int3
406de0:	e9 e9 e9 e9 cc       	jmp    0xcd2a57ce
406de5:	cc                   	int3
406de6:	cc                   	int3
406de7:	cc                   	int3
406de8:	cc                   	int3
406de9:	cc                   	int3
406dea:	cc                   	int3
406deb:	cc                   	int3
406dec:	cc                   	int3
406ded:	cc                   	int3
406dee:	cc                   	int3
406def:	cc                   	int3
406df0:	55                   	push   %ebp
406df1:	8b ec                	mov    %esp,%ebp
406df3:	83 ec 0c             	sub    $0xc,%esp
406df6:	68 26 13 40 00       	push   $0x401326
406dfb:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
406e01:	50                   	push   %eax
406e02:	64 89 25 00 00 00 00 	mov    %esp,%fs:0x0
406e09:	81 ec f4 00 00 00    	sub    $0xf4,%esp
406e0f:	53                   	push   %ebx
406e10:	56                   	push   %esi
406e11:	57                   	push   %edi
406e12:	89 65 f4             	mov    %esp,-0xc(%ebp)
406e15:	c7 45 f8 e0 11 40 00 	movl   $0x4011e0,-0x8(%ebp)
406e1c:	8b 75 08             	mov    0x8(%ebp),%esi
406e1f:	8b c6                	mov    %esi,%eax
406e21:	83 e0 01             	and    $0x1,%eax
406e24:	89 45 fc             	mov    %eax,-0x4(%ebp)
406e27:	83 e6 fe             	and    $0xfffffffe,%esi
406e2a:	8b 0e                	mov    (%esi),%ecx
406e2c:	56                   	push   %esi
406e2d:	89 75 08             	mov    %esi,0x8(%ebp)
406e30:	ff 51 04             	call   *0x4(%ecx)
406e33:	33 db                	xor    %ebx,%ebx
406e35:	68 4c 60 40 00       	push   $0x40604c
406e3a:	89 5d c0             	mov    %ebx,-0x40(%ebp)
406e3d:	89 5d bc             	mov    %ebx,-0x44(%ebp)
406e40:	89 5d b8             	mov    %ebx,-0x48(%ebp)
406e43:	89 5d a8             	mov    %ebx,-0x58(%ebp)
406e46:	89 5d 98             	mov    %ebx,-0x68(%ebp)
406e49:	89 5d 88             	mov    %ebx,-0x78(%ebp)
406e4c:	89 9d 78 ff ff ff    	mov    %ebx,-0x88(%ebp)
406e52:	89 9d 68 ff ff ff    	mov    %ebx,-0x98(%ebp)
406e58:	88 9d 34 ff ff ff    	mov    %bl,-0xcc(%ebp)
406e5e:	89 9d 30 ff ff ff    	mov    %ebx,-0xd0(%ebp)
406e64:	89 9d 2c ff ff ff    	mov    %ebx,-0xd4(%ebp)
406e6a:	89 9d 28 ff ff ff    	mov    %ebx,-0xd8(%ebp)
406e70:	89 9d 20 ff ff ff    	mov    %ebx,-0xe0(%ebp)
406e76:	89 9d 24 ff ff ff    	mov    %ebx,-0xdc(%ebp)
406e7c:	89 9d 18 ff ff ff    	mov    %ebx,-0xe8(%ebp)
406e82:	89 9d 1c ff ff ff    	mov    %ebx,-0xe4(%ebp)
406e88:	89 9d 10 ff ff ff    	mov    %ebx,-0xf0(%ebp)
406e8e:	89 9d 14 ff ff ff    	mov    %ebx,-0xec(%ebp)
406e94:	ff 15 44 10 40 00    	call   *0x401044
406e9a:	8b d0                	mov    %eax,%edx
406e9c:	8d 4d c0             	lea    -0x40(%ebp),%ecx
406e9f:	ff 15 b0 11 40 00    	call   *0x4011b0
406ea5:	50                   	push   %eax
406ea6:	68 54 60 40 00       	push   $0x406054
406eab:	ff 15 d4 10 40 00    	call   *0x4010d4
406eb1:	8b f8                	mov    %eax,%edi
406eb3:	f7 df                	neg    %edi
406eb5:	1b ff                	sbb    %edi,%edi
406eb7:	f7 df                	neg    %edi
406eb9:	8d 4d c0             	lea    -0x40(%ebp),%ecx
406ebc:	f7 df                	neg    %edi
406ebe:	ff 15 cc 11 40 00    	call   *0x4011cc
406ec4:	66 3b fb             	cmp    %bx,%di
406ec7:	74 26                	je     0x406eef
406ec9:	8b 16                	mov    (%esi),%edx
406ecb:	68 b2 14 00 00       	push   $0x14b2
406ed0:	56                   	push   %esi
406ed1:	ff 92 54 02 00 00    	call   *0x254(%edx)
406ed7:	db e2                	fnclex
406ed9:	3b c3                	cmp    %ebx,%eax
406edb:	7d 12                	jge    0x406eef
406edd:	68 54 02 00 00       	push   $0x254
406ee2:	68 ec 5e 40 00       	push   $0x405eec
406ee7:	56                   	push   %esi
406ee8:	50                   	push   %eax
406ee9:	ff 15 58 10 40 00    	call   *0x401058
406eef:	8d 45 a8             	lea    -0x58(%ebp),%eax
406ef2:	50                   	push   %eax
406ef3:	8d 4d 98             	lea    -0x68(%ebp),%ecx
406ef6:	51                   	push   %ecx
406ef7:	c7 45 b0 4b 00 00 00 	movl   $0x4b,-0x50(%ebp)
406efe:	c7 45 a8 02 00 00 00 	movl   $0x2,-0x58(%ebp)
406f05:	ff 15 68 11 40 00    	call   *0x401168
406f0b:	8b 3d 4c 10 40 00    	mov    0x40104c,%edi
406f11:	68 5c 60 40 00       	push   $0x40605c
406f16:	68 64 60 40 00       	push   $0x406064
406f1b:	ff d7                	call   *%edi
406f1d:	8d 55 98             	lea    -0x68(%ebp),%edx
406f20:	89 45 90             	mov    %eax,-0x70(%ebp)
406f23:	52                   	push   %edx
406f24:	8d 45 88             	lea    -0x78(%ebp),%eax
406f27:	50                   	push   %eax
406f28:	c7 45 88 08 80 00 00 	movl   $0x8008,-0x78(%ebp)
406f2f:	ff 15 88 11 40 00    	call   *0x401188
406f35:	8d 4d 88             	lea    -0x78(%ebp),%ecx
406f38:	51                   	push   %ecx
406f39:	8d 55 98             	lea    -0x68(%ebp),%edx
406f3c:	66 89 85 0c ff ff ff 	mov    %ax,-0xf4(%ebp)
406f43:	52                   	push   %edx
406f44:	8d 45 a8             	lea    -0x58(%ebp),%eax
406f47:	50                   	push   %eax
406f48:	6a 03                	push   $0x3
406f4a:	ff 15 28 10 40 00    	call   *0x401028
406f50:	83 c4 10             	add    $0x10,%esp
406f53:	66 39 9d 0c ff ff ff 	cmp    %bx,-0xf4(%ebp)
406f5a:	74 06                	je     0x406f62
406f5c:	ff 15 2c 10 40 00    	call   *0x40102c
406f62:	53                   	push   %ebx
406f63:	6a ff                	push   $0xffffffff
406f65:	68 78 60 40 00       	push   $0x406078
406f6a:	68 6c 60 40 00       	push   $0x40606c
406f6f:	68 78 60 40 00       	push   $0x406078
406f74:	ff d7                	call   *%edi
406f76:	8b d0                	mov    %eax,%edx
406f78:	8d 4d c0             	lea    -0x40(%ebp),%ecx
406f7b:	ff 15 b0 11 40 00    	call   *0x4011b0
406f81:	50                   	push   %eax
406f82:	ff 15 b4 10 40 00    	call   *0x4010b4
406f88:	33 c9                	xor    %ecx,%ecx
406f8a:	83 f8 03             	cmp    $0x3,%eax
406f8d:	0f 95 c1             	setne  %cl
406f90:	f7 d9                	neg    %ecx
406f92:	66 8b f9             	mov    %cx,%di
406f95:	8d 4d c0             	lea    -0x40(%ebp),%ecx
406f98:	ff 15 cc 11 40 00    	call   *0x4011cc
406f9e:	66 3b fb             	cmp    %bx,%di
406fa1:	74 7a                	je     0x40701d
406fa3:	b9 0a 00 00 00       	mov    $0xa,%ecx
406fa8:	b8 04 00 02 80       	mov    $0x80020004,%eax
406fad:	89 8d 78 ff ff ff    	mov    %ecx,-0x88(%ebp)
406fb3:	89 4d 88             	mov    %ecx,-0x78(%ebp)
406fb6:	89 4d 98             	mov    %ecx,-0x68(%ebp)
406fb9:	8d 95 68 ff ff ff    	lea    -0x98(%ebp),%edx
406fbf:	8d 4d a8             	lea    -0x58(%ebp),%ecx
406fc2:	89 45 80             	mov    %eax,-0x80(%ebp)
406fc5:	89 45 90             	mov    %eax,-0x70(%ebp)
406fc8:	89 45 a0             	mov    %eax,-0x60(%ebp)
406fcb:	c7 85 70 ff ff ff 80 	movl   $0x406080,-0x90(%ebp)
406fd2:	60 40 00
406fd5:	c7 85 68 ff ff ff 08 	movl   $0x8,-0x98(%ebp)
406fdc:	00 00 00
406fdf:	ff 15 98 11 40 00    	call   *0x401198
406fe5:	8d 95 78 ff ff ff    	lea    -0x88(%ebp),%edx
406feb:	52                   	push   %edx
406fec:	8d 45 88             	lea    -0x78(%ebp),%eax
406fef:	50                   	push   %eax
406ff0:	8d 4d 98             	lea    -0x68(%ebp),%ecx
406ff3:	51                   	push   %ecx
406ff4:	53                   	push   %ebx
406ff5:	8d 55 a8             	lea    -0x58(%ebp),%edx
406ff8:	52                   	push   %edx
406ff9:	ff 15 80 10 40 00    	call   *0x401080
406fff:	8d 85 78 ff ff ff    	lea    -0x88(%ebp),%eax
407005:	50                   	push   %eax
407006:	8d 4d 88             	lea    -0x78(%ebp),%ecx
407009:	51                   	push   %ecx
40700a:	8d 55 98             	lea    -0x68(%ebp),%edx
40700d:	52                   	push   %edx
40700e:	8d 45 a8             	lea    -0x58(%ebp),%eax
407011:	50                   	push   %eax
407012:	6a 04                	push   $0x4
407014:	ff 15 28 10 40 00    	call   *0x401028
40701a:	83 c4 14             	add    $0x14,%esp
40701d:	39 1d 38 b3 40 00    	cmp    %ebx,0x40b338
407023:	75 10                	jne    0x407035
407025:	68 38 b3 40 00       	push   $0x40b338
40702a:	68 c4 60 40 00       	push   $0x4060c4
40702f:	ff 15 4c 11 40 00    	call   *0x40114c
407035:	8b 3d 38 b3 40 00    	mov    0x40b338,%edi
40703b:	8b 0f                	mov    (%edi),%ecx
40703d:	8d 55 b8             	lea    -0x48(%ebp),%edx
407040:	52                   	push   %edx
407041:	57                   	push   %edi
407042:	ff 51 14             	call   *0x14(%ecx)
407045:	db e2                	fnclex
407047:	3b c3                	cmp    %ebx,%eax
407049:	7d 0f                	jge    0x40705a
40704b:	6a 14                	push   $0x14
40704d:	68 b4 60 40 00       	push   $0x4060b4
407052:	57                   	push   %edi
407053:	50                   	push   %eax
407054:	ff 15 58 10 40 00    	call   *0x401058
40705a:	8b 45 b8             	mov    -0x48(%ebp),%eax
40705d:	83 ec 10             	sub    $0x10,%esp
407060:	8b fc                	mov    %esp,%edi
407062:	b9 0a 00 00 00       	mov    $0xa,%ecx
407067:	89 0f                	mov    %ecx,(%edi)
407069:	89 8d 68 ff ff ff    	mov    %ecx,-0x98(%ebp)
40706f:	8b 8d 6c ff ff ff    	mov    -0x94(%ebp),%ecx
407075:	89 4f 04             	mov    %ecx,0x4(%edi)
407078:	c7 85 70 ff ff ff 04 	movl   $0x80020004,-0x90(%ebp)
40707f:	00 02 80
407082:	8b 8d 70 ff ff ff    	mov    -0x90(%ebp),%ecx
407088:	8b 10                	mov    (%eax),%edx
40708a:	89 4f 08             	mov    %ecx,0x8(%edi)
40708d:	8b 8d 74 ff ff ff    	mov    -0x8c(%ebp),%ecx
407093:	68 94 60 40 00       	push   $0x406094
407098:	50                   	push   %eax
407099:	89 85 04 ff ff ff    	mov    %eax,-0xfc(%ebp)
40709f:	89 4f 0c             	mov    %ecx,0xc(%edi)
4070a2:	ff 92 3c 01 00 00    	call   *0x13c(%edx)
4070a8:	db e2                	fnclex
4070aa:	3b c3                	cmp    %ebx,%eax
4070ac:	7d 18                	jge    0x4070c6
4070ae:	8b 95 04 ff ff ff    	mov    -0xfc(%ebp),%edx
4070b4:	68 3c 01 00 00       	push   $0x13c
4070b9:	68 d4 60 40 00       	push   $0x4060d4
4070be:	52                   	push   %edx
4070bf:	50                   	push   %eax
4070c0:	ff 15 58 10 40 00    	call   *0x401058
4070c6:	8d 4d b8             	lea    -0x48(%ebp),%ecx
4070c9:	ff 15 d0 11 40 00    	call   *0x4011d0
4070cf:	6a 01                	push   $0x1
4070d1:	ff 15 c0 10 40 00    	call   *0x4010c0
4070d7:	8b d0                	mov    %eax,%edx
4070d9:	8d 4d c0             	lea    -0x40(%ebp),%ecx
4070dc:	ff 15 b0 11 40 00    	call   *0x4011b0
4070e2:	50                   	push   %eax
4070e3:	68 e8 60 40 00       	push   $0x4060e8
4070e8:	ff 15 d4 10 40 00    	call   *0x4010d4
4070ee:	8b f8                	mov    %eax,%edi
4070f0:	f7 df                	neg    %edi
4070f2:	1b ff                	sbb    %edi,%edi
4070f4:	f7 df                	neg    %edi
4070f6:	8d 4d c0             	lea    -0x40(%ebp),%ecx
4070f9:	f7 df                	neg    %edi
4070fb:	ff 15 cc 11 40 00    	call   *0x4011cc
407101:	66 3b fb             	cmp    %bx,%di
407104:	74 26                	je     0x40712c
407106:	8b 06                	mov    (%esi),%eax
407108:	68 11 03 00 00       	push   $0x311
40710d:	56                   	push   %esi
40710e:	ff 90 5c 01 00 00    	call   *0x15c(%eax)
407114:	db e2                	fnclex
407116:	3b c3                	cmp    %ebx,%eax
407118:	7d 12                	jge    0x40712c
40711a:	68 5c 01 00 00       	push   $0x15c
40711f:	68 ec 5e 40 00       	push   $0x405eec
407124:	56                   	push   %esi
407125:	50                   	push   %eax
407126:	ff 15 58 10 40 00    	call   *0x401058
40712c:	39 1d 38 b3 40 00    	cmp    %ebx,0x40b338
407132:	75 10                	jne    0x407144
407134:	68 38 b3 40 00       	push   $0x40b338
407139:	68 c4 60 40 00       	push   $0x4060c4
40713e:	ff 15 4c 11 40 00    	call   *0x40114c
407144:	8b 3d 38 b3 40 00    	mov    0x40b338,%edi
40714a:	8b 0f                	mov    (%edi),%ecx
40714c:	8d 55 b8             	lea    -0x48(%ebp),%edx
40714f:	52                   	push   %edx
407150:	57                   	push   %edi
407151:	ff 51 14             	call   *0x14(%ecx)
407154:	db e2                	fnclex
407156:	3b c3                	cmp    %ebx,%eax
407158:	7d 0f                	jge    0x407169
40715a:	6a 14                	push   $0x14
40715c:	68 b4 60 40 00       	push   $0x4060b4
407161:	57                   	push   %edi
407162:	50                   	push   %eax
407163:	ff 15 58 10 40 00    	call   *0x401058
407169:	8b 45 b8             	mov    -0x48(%ebp),%eax
40716c:	8b 08                	mov    (%eax),%ecx
40716e:	8d 95 34 ff ff ff    	lea    -0xcc(%ebp),%edx
407174:	52                   	push   %edx
407175:	50                   	push   %eax
407176:	8b f8                	mov    %eax,%edi
407178:	ff 91 40 01 00 00    	call   *0x140(%ecx)
40717e:	db e2                	fnclex
407180:	3b c3                	cmp    %ebx,%eax
407182:	7d 12                	jge    0x407196
407184:	68 40 01 00 00       	push   $0x140
407189:	68 d4 60 40 00       	push   $0x4060d4
40718e:	57                   	push   %edi
40718f:	50                   	push   %eax
407190:	ff 15 58 10 40 00    	call   *0x401058
407196:	8d 4d b8             	lea    -0x48(%ebp),%ecx
407199:	ff 15 d0 11 40 00    	call   *0x4011d0
40719f:	8b 3e                	mov    (%esi),%edi
4071a1:	8d 85 18 ff ff ff    	lea    -0xe8(%ebp),%eax
4071a7:	50                   	push   %eax
4071a8:	b9 15 00 00 00       	mov    $0x15,%ecx
4071ad:	c7 85 20 ff ff ff 00 	movl   $0x92c00000,-0xe0(%ebp)
4071b4:	00 c0 92
4071b7:	c7 85 24 ff ff ff e1 	movl   $0x4202a0e1,-0xdc(%ebp)
4071be:	a0 02 42
4071c1:	ff 15 18 11 40 00    	call   *0x401118
4071c7:	8d 8d 20 ff ff ff    	lea    -0xe0(%ebp),%ecx
4071cd:	50                   	push   %eax
4071ce:	51                   	push   %ecx
4071cf:	56                   	push   %esi
4071d0:	ff 97 f8 06 00 00    	call   *0x6f8(%edi)
4071d6:	3b c3                	cmp    %ebx,%eax
4071d8:	7d 12                	jge    0x4071ec
4071da:	68 f8 06 00 00       	push   $0x6f8
4071df:	68 1c 5f 40 00       	push   $0x405f1c
4071e4:	56                   	push   %esi
4071e5:	50                   	push   %eax
4071e6:	ff 15 58 10 40 00    	call   *0x401058
4071ec:	b9 bd 00 00 00       	mov    $0xbd,%ecx
4071f1:	ff 15 18 11 40 00    	call   *0x401118
4071f7:	8b 16                	mov    (%esi),%edx
4071f9:	88 85 34 ff ff ff    	mov    %al,-0xcc(%ebp)
4071ff:	8d 85 34 ff ff ff    	lea    -0xcc(%ebp),%eax
407205:	50                   	push   %eax
407206:	56                   	push   %esi
407207:	ff 92 fc 06 00 00    	call   *0x6fc(%edx)
40720d:	3b c3                	cmp    %ebx,%eax
40720f:	7d 12                	jge    0x407223
407211:	68 fc 06 00 00       	push   $0x6fc
407216:	68 1c 5f 40 00       	push   $0x405f1c
40721b:	56                   	push   %esi
40721c:	50                   	push   %eax
40721d:	ff 15 58 10 40 00    	call   *0x401058
407223:	8b 0e                	mov    (%esi),%ecx
407225:	8d 95 28 ff ff ff    	lea    -0xd8(%ebp),%edx
40722b:	52                   	push   %edx
40722c:	68 0c 61 40 00       	push   $0x40610c
407231:	68 cc 40 7e 00       	push   $0x7e40cc
407236:	8d 85 30 ff ff ff    	lea    -0xd0(%ebp),%eax
40723c:	50                   	push   %eax
40723d:	68 be 49 00 00       	push   $0x49be
407242:	8d 95 34 ff ff ff    	lea    -0xcc(%ebp),%edx
407248:	52                   	push   %edx
407249:	68 f0 60 40 00       	push   $0x4060f0
40724e:	56                   	push   %esi
40724f:	c7 85 30 ff ff ff f4 	movl   $0x5ef4,-0xd0(%ebp)