411007:	52                   	push   %edx
411008:	6a ff                	push   $0xffffffff
41100a:	e8 b1 15 ff ff       	call   0x4025c0
41100f:	8b 80 a0 00 00 00    	mov    0xa0(%eax),%eax
411015:	ff d0                	call   *%eax
411017:	8b 4d f0             	mov    -0x10(%ebp),%ecx
41101a:	51                   	push   %ecx
41101b:	e8 a0 15 ff ff       	call   0x4025c0
411020:	8b 90 b8 00 00 00    	mov    0xb8(%eax),%edx
411026:	ff d2                	call   *%edx
411028:	8b 45 e8             	mov    -0x18(%ebp),%eax
41102b:	8b e5                	mov    %ebp,%esp
41102d:	5d                   	pop    %ebp
41102e:	c3                   	ret
41102f:	cc                   	int3
411030:	55                   	push   %ebp
411031:	8b ec                	mov    %esp,%ebp
411033:	81 ec 9c 03 00 00    	sub    $0x39c,%esp
411039:	56                   	push   %esi
41103a:	c7 45 f8 00 00 00 00 	movl   $0x0,-0x8(%ebp)
411041:	83 7d 08 00          	cmpl   $0x0,0x8(%ebp)
411045:	74 06                	je     0x41104d
411047:	83 7d 0c 00          	cmpl   $0x0,0xc(%ebp)
41104b:	75 08                	jne    0x411055
41104d:	8b 45 f8             	mov    -0x8(%ebp),%eax
411050:	e9 2e 02 00 00       	jmp    0x411283
411055:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
41105c:	c7 45 f4 00 00 00 00 	movl   $0x0,-0xc(%ebp)
411063:	8d 45 f4             	lea    -0xc(%ebp),%eax
411066:	50                   	push   %eax
411067:	8b 4d 08             	mov    0x8(%ebp),%ecx
41106a:	51                   	push   %ecx
41106b:	e8 e0 65 ff ff       	call   0x407650
411070:	83 c4 08             	add    $0x8,%esp
411073:	85 c0                	test   %eax,%eax
411075:	74 4d                	je     0x4110c4
411077:	8b 55 08             	mov    0x8(%ebp),%edx
41107a:	52                   	push   %edx
41107b:	e8 e0 59 ff ff       	call   0x406a60
411080:	83 c4 04             	add    $0x4,%esp
411083:	8b f0                	mov    %eax,%esi
411085:	8b 45 f4             	mov    -0xc(%ebp),%eax
411088:	50                   	push   %eax
411089:	e8 d2 59 ff ff       	call   0x406a60
41108e:	83 c4 04             	add    $0x4,%esp
411091:	2b f0                	sub    %eax,%esi
411093:	83 ee 01             	sub    $0x1,%esi
411096:	89 75 f0             	mov    %esi,-0x10(%ebp)
411099:	8b 4d f0             	mov    -0x10(%ebp),%ecx
41109c:	51                   	push   %ecx
41109d:	e8 5e 59 ff ff       	call   0x406a00
4110a2:	83 c4 04             	add    $0x4,%esp
4110a5:	89 45 ec             	mov    %eax,-0x14(%ebp)
4110a8:	83 7d ec 00          	cmpl   $0x0,-0x14(%ebp)
4110ac:	74 16                	je     0x4110c4
4110ae:	8b 55 f0             	mov    -0x10(%ebp),%edx
4110b1:	d1 e2                	shl    $1,%edx
4110b3:	52                   	push   %edx
4110b4:	8b 45 08             	mov    0x8(%ebp),%eax
4110b7:	50                   	push   %eax
4110b8:	8b 4d ec             	mov    -0x14(%ebp),%ecx
4110bb:	51                   	push   %ecx
4110bc:	e8 df 58 ff ff       	call   0x4069a0
4110c1:	83 c4 0c             	add    $0xc,%esp
4110c4:	6a 44                	push   $0x44
4110c6:	6a 00                	push   $0x0
4110c8:	8d 95 30 ff ff ff    	lea    -0xd0(%ebp),%edx
4110ce:	52                   	push   %edx
4110cf:	e8 ac 58 ff ff       	call   0x406980
4110d4:	83 c4 0c             	add    $0xc,%esp
4110d7:	6a 10                	push   $0x10
4110d9:	6a 00                	push   $0x0
4110db:	8d 45 d8             	lea    -0x28(%ebp),%eax
4110de:	50                   	push   %eax
4110df:	e8 9c 58 ff ff       	call   0x406980
4110e4:	83 c4 0c             	add    $0xc,%esp
4110e7:	8d 4d d8             	lea    -0x28(%ebp),%ecx
4110ea:	51                   	push   %ecx
4110eb:	8d 95 30 ff ff ff    	lea    -0xd0(%ebp),%edx
4110f1:	52                   	push   %edx
4110f2:	8b 45 fc             	mov    -0x4(%ebp),%eax
4110f5:	50                   	push   %eax
4110f6:	6a 00                	push   $0x0
4110f8:	68 22 00 00 04       	push   $0x4000022
4110fd:	6a 00                	push   $0x0
4110ff:	6a 00                	push   $0x0
411101:	6a 00                	push   $0x0
411103:	6a 00                	push   $0x0
411105:	8b 4d 08             	mov    0x8(%ebp),%ecx
411108:	51                   	push   %ecx
411109:	e8 b2 14 ff ff       	call   0x4025c0
41110e:	8b 90 10 01 00 00    	mov    0x110(%eax),%edx
411114:	ff d2                	call   *%edx
411116:	85 c0                	test   %eax,%eax
411118:	0f 84 50 01 00 00    	je     0x41126e
41111e:	b8 01 00 00 00       	mov    $0x1,%eax
411123:	85 c0                	test   %eax,%eax
411125:	0f 84 1d 01 00 00    	je     0x411248
41112b:	6a 60                	push   $0x60
41112d:	6a 00                	push   $0x0
41112f:	8d 8d 74 ff ff ff    	lea    -0x8c(%ebp),%ecx
411135:	51                   	push   %ecx
411136:	e8 45 58 ff ff       	call   0x406980
41113b:	83 c4 0c             	add    $0xc,%esp
41113e:	c7 45 d4 00 00 00 00 	movl   $0x0,-0x2c(%ebp)
411145:	6a ff                	push   $0xffffffff
411147:	8d 95 74 ff ff ff    	lea    -0x8c(%ebp),%edx
41114d:	52                   	push   %edx
41114e:	e8 6d 14 ff ff       	call   0x4025c0
411153:	8b 80 70 01 00 00    	mov    0x170(%eax),%eax
411159:	ff d0                	call   *%eax
41115b:	85 c0                	test   %eax,%eax
41115d:	0f 84 de 00 00 00    	je     0x411241
411163:	83 bd 74 ff ff ff 03 	cmpl   $0x3,-0x8c(%ebp)
41116a:	0f 85 af 00 00 00    	jne    0x41121f
411170:	c7 45 e8 00 00 00 00 	movl   $0x0,-0x18(%ebp)
411177:	8d 4d e8             	lea    -0x18(%ebp),%ecx
41117a:	51                   	push   %ecx
41117b:	8b 55 0c             	mov    0xc(%ebp),%edx
41117e:	52                   	push   %edx
41117f:	8b 45 d8             	mov    -0x28(%ebp),%eax
411182:	50                   	push   %eax
411183:	e8 f8 fc ff ff       	call   0x410e80
411188:	83 c4 0c             	add    $0xc,%esp
41118b:	85 c0                	test   %eax,%eax
41118d:	74 6e                	je     0x4111fd
41118f:	c7 85 64 fc ff ff 3f 	movl   $0x1003f,-0x39c(%ebp)
411196:	00 01 00
411199:	8d 8d 64 fc ff ff    	lea    -0x39c(%ebp),%ecx
41119f:	51                   	push   %ecx
4111a0:	8b 55 dc             	mov    -0x24(%ebp),%edx
4111a3:	52                   	push   %edx
4111a4:	e8 17 14 ff ff       	call   0x4025c0
4111a9:	8b 80 a4 00 00 00    	mov    0xa4(%eax),%eax
4111af:	ff d0                	call   *%eax
4111b1:	85 c0                	test   %eax,%eax
4111b3:	7c 48                	jl     0x4111fd
4111b5:	8b 4d e8             	mov    -0x18(%ebp),%ecx
4111b8:	89 8d 1c fd ff ff    	mov    %ecx,-0x2e4(%ebp)
4111be:	8d 95 64 fc ff ff    	lea    -0x39c(%ebp),%edx
4111c4:	52                   	push   %edx
4111c5:	8b 45 dc             	mov    -0x24(%ebp),%eax
4111c8:	50                   	push   %eax
4111c9:	e8 f2 13 ff ff       	call   0x4025c0
4111ce:	8b 88 a8 00 00 00    	mov    0xa8(%eax),%ecx
4111d4:	ff d1                	call   *%ecx
4111d6:	85 c0                	test   %eax,%eax
4111d8:	7c 23                	jl     0x4111fd
4111da:	c7 45 f8 01 00 00 00 	movl   $0x1,-0x8(%ebp)
4111e1:	83 7d 10 00          	cmpl   $0x0,0x10(%ebp)
4111e5:	74 08                	je     0x4111ef
4111e7:	8b 55 10             	mov    0x10(%ebp),%edx
4111ea:	8b 45 d8             	mov    -0x28(%ebp),%eax
4111ed:	89 02                	mov    %eax,(%edx)
4111ef:	83 7d 14 00          	cmpl   $0x0,0x14(%ebp)
4111f3:	74 08                	je     0x4111fd
4111f5:	8b 4d 14             	mov    0x14(%ebp),%ecx
4111f8:	8b 55 e0             	mov    -0x20(%ebp),%edx
4111fb:	89 11                	mov    %edx,(%ecx)
4111fd:	68 01 00 01 80       	push   $0x80010001
411202:	8b 85 7c ff ff ff    	mov    -0x84(%ebp),%eax
411208:	50                   	push   %eax
411209:	8b 8d 78 ff ff ff    	mov    -0x88(%ebp),%ecx
41120f:	51                   	push   %ecx
411210:	e8 ab 13 ff ff       	call   0x4025c0
411215:	8b 90 74 01 00 00    	mov    0x174(%eax),%edx
41121b:	ff d2                	call   *%edx
41121d:	eb 29                	jmp    0x411248
41121f:	68 02 00 01 00       	push   $0x10002
411224:	8b 85 7c ff ff ff    	mov    -0x84(%ebp),%eax
41122a:	50                   	push   %eax
41122b:	8b 8d 78 ff ff ff    	mov    -0x88(%ebp),%ecx
411231:	51                   	push   %ecx
411232:	e8 89 13 ff ff       	call   0x4025c0
411237:	8b 90 74 01 00 00    	mov    0x174(%eax),%edx
41123d:	ff d2                	call   *%edx
41123f:	eb 02                	jmp    0x411243
411241:	eb 05                	jmp    0x411248
411243:	e9 d6 fe ff ff       	jmp    0x41111e
411248:	e8 33 29 ff ff       	call   0x403b80
41124d:	83 38 05             	cmpl   $0x5,(%eax)
411250:	72 1c                	jb     0x41126e
411252:	e8 29 29 ff ff       	call   0x403b80
411257:	83 78 04 00          	cmpl   $0x0,0x4(%eax)
41125b:	74 11                	je     0x41126e
41125d:	8b 45 e0             	mov    -0x20(%ebp),%eax
411260:	50                   	push   %eax
411261:	e8 5a 13 ff ff       	call   0x4025c0
411266:	8b 88 78 01 00 00    	mov    0x178(%eax),%ecx
41126c:	ff d1                	call   *%ecx
41126e:	83 7d fc 00          	cmpl   $0x0,-0x4(%ebp)
411272:	74 0c                	je     0x411280
411274:	8b 55 fc             	mov    -0x4(%ebp),%edx
411277:	52                   	push   %edx
411278:	e8 33 56 ff ff       	call   0x4068b0
41127d:	83 c4 04             	add    $0x4,%esp
411280:	8b 45 f8             	mov    -0x8(%ebp),%eax
411283:	5e                   	pop    %esi
411284:	8b e5                	mov    %ebp,%esp
411286:	5d                   	pop    %ebp
411287:	c3                   	ret
411288:	cc                   	int3
411289:	cc                   	int3
41128a:	cc                   	int3
41128b:	cc                   	int3
41128c:	cc                   	int3
41128d:	cc                   	int3
41128e:	cc                   	int3
41128f:	cc                   	int3
411290:	55                   	push   %ebp
411291:	8b ec                	mov    %esp,%ebp
411293:	83 ec 70             	sub    $0x70,%esp
411296:	56                   	push   %esi
411297:	c7 45 f8 00 00 00 00 	movl   $0x0,-0x8(%ebp)
41129e:	83 7d 08 00          	cmpl   $0x0,0x8(%ebp)
4112a2:	74 06                	je     0x4112aa
4112a4:	83 7d 0c 00          	cmpl   $0x0,0xc(%ebp)
4112a8:	75 08                	jne    0x4112b2
4112aa:	8b 45 f8             	mov    -0x8(%ebp),%eax
4112ad:	e9 4a 01 00 00       	jmp    0x4113fc
4112b2:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
4112b9:	c7 45 f4 00 00 00 00 	movl   $0x0,-0xc(%ebp)
4112c0:	8d 45 f4             	lea    -0xc(%ebp),%eax
4112c3:	50                   	push   %eax
4112c4:	8b 4d 08             	mov    0x8(%ebp),%ecx
4112c7:	51                   	push   %ecx
4112c8:	e8 83 63 ff ff       	call   0x407650
4112cd:	83 c4 08             	add    $0x8,%esp
4112d0:	85 c0                	test   %eax,%eax
4112d2:	74 4d                	je     0x411321
4112d4:	8b 55 08             	mov    0x8(%ebp),%edx
4112d7:	52                   	push   %edx
4112d8:	e8 83 57 ff ff       	call   0x406a60
4112dd:	83 c4 04             	add    $0x4,%esp
4112e0:	8b f0                	mov    %eax,%esi
4112e2:	8b 45 f4             	mov    -0xc(%ebp),%eax
4112e5:	50                   	push   %eax
4112e6:	e8 75 57 ff ff       	call   0x406a60
4112eb:	83 c4 04             	add    $0x4,%esp
4112ee:	2b f0                	sub    %eax,%esi
4112f0:	83 ee 01             	sub    $0x1,%esi
4112f3:	89 75 f0             	mov    %esi,-0x10(%ebp)
4112f6:	8b 4d f0             	mov    -0x10(%ebp),%ecx
4112f9:	51                   	push   %ecx
4112fa:	e8 01 57 ff ff       	call   0x406a00
4112ff:	83 c4 04             	add    $0x4,%esp
411302:	89 45 ec             	mov    %eax,-0x14(%ebp)
411305:	83 7d ec 00          	cmpl   $0x0,-0x14(%ebp)
411309:	74 16                	je     0x411321
41130b:	8b 55 f0             	mov    -0x10(%ebp),%edx
41130e:	d1 e2                	shl    $1,%edx
411310:	52                   	push   %edx
411311:	8b 45 08             	mov    0x8(%ebp),%eax
411314:	50                   	push   %eax
411315:	8b 4d ec             	mov    -0x14(%ebp),%ecx
411318:	51                   	push   %ecx
411319:	e8 82 56 ff ff       	call   0x4069a0
41131e:	83 c4 0c             	add    $0xc,%esp
411321:	6a 44                	push   $0x44
411323:	6a 00                	push   $0x0
411325:	8d 55 90             	lea    -0x70(%ebp),%edx
411328:	52                   	push   %edx
411329:	e8 52 56 ff ff       	call   0x406980
41132e:	83 c4 0c             	add    $0xc,%esp
411331:	6a 10                	push   $0x10
411333:	6a 00                	push   $0x0
411335:	8d 45 d4             	lea    -0x2c(%ebp),%eax
411338:	50                   	push   %eax
411339:	e8 42 56 ff ff       	call   0x406980
41133e:	83 c4 0c             	add    $0xc,%esp
411341:	8d 4d d4             	lea    -0x2c(%ebp),%ecx
411344:	51                   	push   %ecx
411345:	8d 55 90             	lea    -0x70(%ebp),%edx
411348:	52                   	push   %edx
411349:	8b 45 fc             	mov    -0x4(%ebp),%eax
41134c:	50                   	push   %eax
41134d:	6a 00                	push   $0x0
41134f:	6a 04                	push   $0x4
411351:	6a 00                	push   $0x0
411353:	6a 00                	push   $0x0
411355:	6a 00                	push   $0x0
411357:	6a 00                	push   $0x0
411359:	8b 4d 08             	mov    0x8(%ebp),%ecx
41135c:	51                   	push   %ecx
41135d:	e8 5e 12 ff ff       	call   0x4025c0
411362:	8b 90 10 01 00 00    	mov    0x110(%eax),%edx
411368:	ff d2                	call   *%edx
41136a:	85 c0                	test   %eax,%eax
41136c:	74 79                	je     0x4113e7
41136e:	c7 45 e8 00 00 00 00 	movl   $0x0,-0x18(%ebp)
411375:	8d 45 e8             	lea    -0x18(%ebp),%eax
411378:	50                   	push   %eax
411379:	8b 4d 0c             	mov    0xc(%ebp),%ecx
41137c:	51                   	push   %ecx
41137d:	8b 55 d4             	mov    -0x2c(%ebp),%edx
411380:	52                   	push   %edx
411381:	e8 fa fa ff ff       	call   0x410e80
411386:	83 c4 0c             	add    $0xc,%esp
411389:	85 c0                	test   %eax,%eax
41138b:	74 5a                	je     0x4113e7
41138d:	6a 00                	push   $0x0
41138f:	6a 00                	push   $0x0
411391:	6a 00                	push   $0x0
411393:	8b 45 e8             	mov    -0x18(%ebp),%eax
411396:	50                   	push   %eax
411397:	8b 4d d8             	mov    -0x28(%ebp),%ecx
41139a:	51                   	push   %ecx
41139b:	e8 20 12 ff ff       	call   0x4025c0
4113a0:	8b 90 b4 00 00 00    	mov    0xb4(%eax),%edx
4113a6:	ff d2                	call   *%edx
4113a8:	89 45 e4             	mov    %eax,-0x1c(%ebp)
4113ab:	83 7d e4 00          	cmpl   $0x0,-0x1c(%ebp)
4113af:	7c 36                	jl     0x4113e7
4113b1:	6a 00                	push   $0x0
4113b3:	8b 45 d8             	mov    -0x28(%ebp),%eax
4113b6:	50                   	push   %eax
4113b7:	e8 04 12 ff ff       	call   0x4025c0
4113bc:	8b 88 ac 00 00 00    	mov    0xac(%eax),%ecx
4113c2:	ff d1                	call   *%ecx
4113c4:	c7 45 f8 01 00 00 00 	movl   $0x1,-0x8(%ebp)
4113cb:	83 7d 10 00          	cmpl   $0x0,0x10(%ebp)
4113cf:	74 08                	je     0x4113d9
4113d1:	8b 55 10             	mov    0x10(%ebp),%edx
4113d4:	8b 45 d4             	mov    -0x2c(%ebp),%eax
4113d7:	89 02                	mov    %eax,(%edx)
4113d9:	83 7d 14 00          	cmpl   $0x0,0x14(%ebp)
4113dd:	74 08                	je     0x4113e7
4113df:	8b 4d 14             	mov    0x14(%ebp),%ecx
4113e2:	8b 55 dc             	mov    -0x24(%ebp),%edx
4113e5:	89 11                	mov    %edx,(%ecx)
4113e7:	83 7d fc 00          	cmpl   $0x0,-0x4(%ebp)
4113eb:	74 0c                	je     0x4113f9
4113ed:	8b 45 fc             	mov    -0x4(%ebp),%eax
4113f0:	50                   	push   %eax
4113f1:	e8 ba 54 ff ff       	call   0x4068b0
4113f6:	83 c4 04             	add    $0x4,%esp
4113f9:	8b 45 f8             	mov    -0x8(%ebp),%eax
4113fc:	5e                   	pop    %esi
4113fd:	8b e5                	mov    %ebp,%esp
4113ff:	5d                   	pop    %ebp
411400:	c3                   	ret
411401:	cc                   	int3
411402:	cc                   	int3
411403:	cc                   	int3
411404:	cc                   	int3
411405:	cc                   	int3
411406:	cc                   	int3
411407:	cc                   	int3
411408:	cc                   	int3
411409:	cc                   	int3