40b817:	8b 35 f8 99 83 02    	mov    0x28399f8,%esi
40b81d:	85 f6                	test   %esi,%esi
40b81f:	74 20                	je     0x40b841
40b821:	6b c6 18             	imul   $0x18,%esi,%eax
40b824:	57                   	push   %edi
40b825:	8d b8 c8 99 83 02    	lea    0x28399c8(%eax),%edi
40b82b:	57                   	push   %edi
40b82c:	ff 15 40 71 42 00    	call   *0x427140
40b832:	ff 0d f8 99 83 02    	decl   0x28399f8
40b838:	83 ef 18             	sub    $0x18,%edi
40b83b:	83 ee 01             	sub    $0x1,%esi
40b83e:	75 eb                	jne    0x40b82b
40b840:	5f                   	pop    %edi
40b841:	b0 01                	mov    $0x1,%al
40b843:	5e                   	pop    %esi
40b844:	c3                   	ret
40b845:	cc                   	int3
40b846:	cc                   	int3
40b847:	cc                   	int3
40b848:	cc                   	int3
40b849:	cc                   	int3
40b84a:	cc                   	int3
40b84b:	cc                   	int3
40b84c:	cc                   	int3
40b84d:	cc                   	int3
40b84e:	cc                   	int3
40b84f:	cc                   	int3
40b850:	53                   	push   %ebx
40b851:	56                   	push   %esi
40b852:	57                   	push   %edi
40b853:	8b 54 24 10          	mov    0x10(%esp),%edx
40b857:	8b 44 24 14          	mov    0x14(%esp),%eax
40b85b:	8b 4c 24 18          	mov    0x18(%esp),%ecx
40b85f:	55                   	push   %ebp
40b860:	52                   	push   %edx
40b861:	50                   	push   %eax
40b862:	51                   	push   %ecx
40b863:	51                   	push   %ecx
40b864:	68 e0 b8 40 00       	push   $0x40b8e0
40b869:	64 ff 35 00 00 00 00 	push   %fs:0x0
40b870:	a1 28 ba 43 00       	mov    0x43ba28,%eax
40b875:	33 c4                	xor    %esp,%eax
40b877:	89 44 24 08          	mov    %eax,0x8(%esp)
40b87b:	64 89 25 00 00 00 00 	mov    %esp,%fs:0x0
40b882:	8b 44 24 30          	mov    0x30(%esp),%eax
40b886:	8b 58 08             	mov    0x8(%eax),%ebx
40b889:	8b 4c 24 2c          	mov    0x2c(%esp),%ecx
40b88d:	33 19                	xor    (%ecx),%ebx
40b88f:	8b 70 0c             	mov    0xc(%eax),%esi
40b892:	83 fe fe             	cmp    $0xfffffffe,%esi
40b895:	74 3b                	je     0x40b8d2
40b897:	8b 54 24 34          	mov    0x34(%esp),%edx
40b89b:	83 fa fe             	cmp    $0xfffffffe,%edx
40b89e:	74 04                	je     0x40b8a4
40b8a0:	3b f2                	cmp    %edx,%esi
40b8a2:	76 2e                	jbe    0x40b8d2
40b8a4:	8d 34 76             	lea    (%esi,%esi,2),%esi
40b8a7:	8d 5c b3 10          	lea    0x10(%ebx,%esi,4),%ebx
40b8ab:	8b 0b                	mov    (%ebx),%ecx
40b8ad:	89 48 0c             	mov    %ecx,0xc(%eax)
40b8b0:	83 7b 04 00          	cmpl   $0x0,0x4(%ebx)
40b8b4:	75 cc                	jne    0x40b882
40b8b6:	68 01 01 00 00       	push   $0x101
40b8bb:	8b 43 08             	mov    0x8(%ebx),%eax
40b8be:	e8 02 02 00 00       	call   0x40bac5
40b8c3:	b9 01 00 00 00       	mov    $0x1,%ecx
40b8c8:	8b 43 08             	mov    0x8(%ebx),%eax
40b8cb:	e8 14 02 00 00       	call   0x40bae4
40b8d0:	eb b0                	jmp    0x40b882
40b8d2:	64 8f 05 00 00 00 00 	pop    %fs:0x0
40b8d9:	83 c4 18             	add    $0x18,%esp
40b8dc:	5f                   	pop    %edi
40b8dd:	5e                   	pop    %esi
40b8de:	5b                   	pop    %ebx
40b8df:	c3                   	ret
40b8e0:	8b 4c 24 04          	mov    0x4(%esp),%ecx
40b8e4:	f7 41 04 06 00 00 00 	testl  $0x6,0x4(%ecx)
40b8eb:	b8 01 00 00 00       	mov    $0x1,%eax
40b8f0:	74 33                	je     0x40b925
40b8f2:	8b 44 24 08          	mov    0x8(%esp),%eax
40b8f6:	8b 48 08             	mov    0x8(%eax),%ecx
40b8f9:	33 c8                	xor    %eax,%ecx
40b8fb:	e8 60 b7 ff ff       	call   0x407060
40b900:	55                   	push   %ebp
40b901:	8b 68 18             	mov    0x18(%eax),%ebp
40b904:	ff 70 0c             	push   0xc(%eax)
40b907:	ff 70 10             	push   0x10(%eax)
40b90a:	ff 70 14             	push   0x14(%eax)
40b90d:	e8 3e ff ff ff       	call   0x40b850
40b912:	83 c4 0c             	add    $0xc,%esp
40b915:	5d                   	pop    %ebp
40b916:	8b 44 24 08          	mov    0x8(%esp),%eax
40b91a:	8b 54 24 10          	mov    0x10(%esp),%edx
40b91e:	89 02                	mov    %eax,(%edx)
40b920:	b8 03 00 00 00       	mov    $0x3,%eax
40b925:	c3                   	ret
40b926:	55                   	push   %ebp
40b927:	ff 74 24 08          	push   0x8(%esp)
40b92b:	e8 8d fe ff ff       	call   0x40b7bd
40b930:	83 c4 04             	add    $0x4,%esp
40b933:	8b 4c 24 08          	mov    0x8(%esp),%ecx
40b937:	8b 29                	mov    (%ecx),%ebp
40b939:	ff 71 1c             	push   0x1c(%ecx)
40b93c:	ff 71 18             	push   0x18(%ecx)
40b93f:	ff 71 28             	push   0x28(%ecx)
40b942:	e8 09 ff ff ff       	call   0x40b850
40b947:	83 c4 0c             	add    $0xc,%esp
40b94a:	5d                   	pop    %ebp
40b94b:	c2 04 00             	ret    $0x4
40b94e:	55                   	push   %ebp
40b94f:	56                   	push   %esi
40b950:	57                   	push   %edi
40b951:	53                   	push   %ebx
40b952:	8b ea                	mov    %edx,%ebp
40b954:	33 c0                	xor    %eax,%eax
40b956:	33 db                	xor    %ebx,%ebx
40b958:	33 d2                	xor    %edx,%edx
40b95a:	33 f6                	xor    %esi,%esi
40b95c:	33 ff                	xor    %edi,%edi
40b95e:	ff d1                	call   *%ecx
40b960:	5b                   	pop    %ebx
40b961:	5f                   	pop    %edi
40b962:	5e                   	pop    %esi
40b963:	5d                   	pop    %ebp
40b964:	c3                   	ret
40b965:	8b ea                	mov    %edx,%ebp
40b967:	8b f1                	mov    %ecx,%esi
40b969:	8b c1                	mov    %ecx,%eax
40b96b:	6a 01                	push   $0x1
40b96d:	e8 53 01 00 00       	call   0x40bac5
40b972:	33 c0                	xor    %eax,%eax
40b974:	33 db                	xor    %ebx,%ebx
40b976:	33 c9                	xor    %ecx,%ecx
40b978:	33 d2                	xor    %edx,%edx
40b97a:	33 ff                	xor    %edi,%edi
40b97c:	ff e6                	jmp    *%esi
40b97e:	55                   	push   %ebp
40b97f:	8b ec                	mov    %esp,%ebp
40b981:	53                   	push   %ebx
40b982:	56                   	push   %esi
40b983:	57                   	push   %edi
40b984:	6a 00                	push   $0x0
40b986:	52                   	push   %edx
40b987:	68 92 b9 40 00       	push   $0x40b992
40b98c:	51                   	push   %ecx
40b98d:	e8 46 a8 01 00       	call   0x4261d8
40b992:	5f                   	pop    %edi
40b993:	5e                   	pop    %esi
40b994:	5b                   	pop    %ebx
40b995:	5d                   	pop    %ebp
40b996:	c3                   	ret
40b997:	55                   	push   %ebp
40b998:	8b 6c 24 08          	mov    0x8(%esp),%ebp
40b99c:	52                   	push   %edx
40b99d:	51                   	push   %ecx
40b99e:	ff 74 24 14          	push   0x14(%esp)
40b9a2:	e8 a9 fe ff ff       	call   0x40b850
40b9a7:	83 c4 0c             	add    $0xc,%esp
40b9aa:	5d                   	pop    %ebp
40b9ab:	c2 08 00             	ret    $0x8
40b9ae:	cc                   	int3
40b9af:	cc                   	int3
40b9b0:	55                   	push   %ebp
40b9b1:	8b ec                	mov    %esp,%ebp
40b9b3:	53                   	push   %ebx
40b9b4:	56                   	push   %esi
40b9b5:	57                   	push   %edi
40b9b6:	55                   	push   %ebp
40b9b7:	6a 00                	push   $0x0
40b9b9:	6a 00                	push   $0x0
40b9bb:	68 c8 b9 40 00       	push   $0x40b9c8
40b9c0:	ff 75 08             	push   0x8(%ebp)
40b9c3:	e8 10 a8 01 00       	call   0x4261d8
40b9c8:	5d                   	pop    %ebp
40b9c9:	5f                   	pop    %edi
40b9ca:	5e                   	pop    %esi
40b9cb:	5b                   	pop    %ebx
40b9cc:	8b e5                	mov    %ebp,%esp
40b9ce:	5d                   	pop    %ebp
40b9cf:	c3                   	ret
40b9d0:	8b 4c 24 04          	mov    0x4(%esp),%ecx
40b9d4:	f7 41 04 06 00 00 00 	testl  $0x6,0x4(%ecx)
40b9db:	b8 01 00 00 00       	mov    $0x1,%eax
40b9e0:	74 32                	je     0x40ba14
40b9e2:	8b 44 24 14          	mov    0x14(%esp),%eax
40b9e6:	8b 48 fc             	mov    -0x4(%eax),%ecx
40b9e9:	33 c8                	xor    %eax,%ecx
40b9eb:	e8 70 b6 ff ff       	call   0x407060
40b9f0:	55                   	push   %ebp
40b9f1:	8b 68 10             	mov    0x10(%eax),%ebp
40b9f4:	8b 50 28             	mov    0x28(%eax),%edx
40b9f7:	52                   	push   %edx
40b9f8:	8b 50 24             	mov    0x24(%eax),%edx
40b9fb:	52                   	push   %edx
40b9fc:	e8 14 00 00 00       	call   0x40ba15
40ba01:	83 c4 08             	add    $0x8,%esp
40ba04:	5d                   	pop    %ebp
40ba05:	8b 44 24 08          	mov    0x8(%esp),%eax
40ba09:	8b 54 24 10          	mov    0x10(%esp),%edx
40ba0d:	89 02                	mov    %eax,(%edx)
40ba0f:	b8 03 00 00 00       	mov    $0x3,%eax
40ba14:	c3                   	ret
40ba15:	53                   	push   %ebx
40ba16:	56                   	push   %esi
40ba17:	57                   	push   %edi
40ba18:	8b 44 24 10          	mov    0x10(%esp),%eax
40ba1c:	55                   	push   %ebp
40ba1d:	50                   	push   %eax
40ba1e:	6a fe                	push   $0xfffffffe
40ba20:	68 d0 b9 40 00       	push   $0x40b9d0
40ba25:	64 ff 35 00 00 00 00 	push   %fs:0x0
40ba2c:	a1 28 ba 43 00       	mov    0x43ba28,%eax
40ba31:	33 c4                	xor    %esp,%eax
40ba33:	50                   	push   %eax
40ba34:	8d 44 24 04          	lea    0x4(%esp),%eax
40ba38:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
40ba3e:	8b 44 24 28          	mov    0x28(%esp),%eax
40ba42:	8b 58 08             	mov    0x8(%eax),%ebx
40ba45:	8b 70 0c             	mov    0xc(%eax),%esi
40ba48:	83 fe ff             	cmp    $0xffffffff,%esi
40ba4b:	74 3a                	je     0x40ba87
40ba4d:	83 7c 24 2c ff       	cmpl   $0xffffffff,0x2c(%esp)
40ba52:	74 06                	je     0x40ba5a
40ba54:	3b 74 24 2c          	cmp    0x2c(%esp),%esi
40ba58:	76 2d                	jbe    0x40ba87
40ba5a:	8d 34 76             	lea    (%esi,%esi,2),%esi
40ba5d:	8b 0c b3             	mov    (%ebx,%esi,4),%ecx
40ba60:	89 4c 24 0c          	mov    %ecx,0xc(%esp)
40ba64:	89 48 0c             	mov    %ecx,0xc(%eax)
40ba67:	83 7c b3 04 00       	cmpl   $0x0,0x4(%ebx,%esi,4)
40ba6c:	75 17                	jne    0x40ba85
40ba6e:	68 01 01 00 00       	push   $0x101
40ba73:	8b 44 b3 08          	mov    0x8(%ebx,%esi,4),%eax
40ba77:	e8 49 00 00 00       	call   0x40bac5
40ba7c:	8b 44 b3 08          	mov    0x8(%ebx,%esi,4),%eax
40ba80:	e8 5f 00 00 00       	call   0x40bae4
40ba85:	eb b7                	jmp    0x40ba3e
40ba87:	8b 4c 24 04          	mov    0x4(%esp),%ecx
40ba8b:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
40ba92:	83 c4 18             	add    $0x18,%esp
40ba95:	5f                   	pop    %edi
40ba96:	5e                   	pop    %esi
40ba97:	5b                   	pop    %ebx
40ba98:	c3                   	ret
40ba99:	33 c0                	xor    %eax,%eax
40ba9b:	64 8b 0d 00 00 00 00 	mov    %fs:0x0,%ecx
40baa2:	81 79 04 d0 b9 40 00 	cmpl   $0x40b9d0,0x4(%ecx)
40baa9:	75 10                	jne    0x40babb
40baab:	8b 51 0c             	mov    0xc(%ecx),%edx
40baae:	8b 52 0c             	mov    0xc(%edx),%edx
40bab1:	39 51 08             	cmp    %edx,0x8(%ecx)
40bab4:	75 05                	jne    0x40babb
40bab6:	b8 01 00 00 00       	mov    $0x1,%eax
40babb:	c3                   	ret
40babc:	53                   	push   %ebx
40babd:	51                   	push   %ecx
40babe:	bb 60 ba 43 00       	mov    $0x43ba60,%ebx
40bac3:	eb 0b                	jmp    0x40bad0
40bac5:	53                   	push   %ebx
40bac6:	51                   	push   %ecx
40bac7:	bb 60 ba 43 00       	mov    $0x43ba60,%ebx
40bacc:	8b 4c 24 0c          	mov    0xc(%esp),%ecx
40bad0:	89 4b 08             	mov    %ecx,0x8(%ebx)
40bad3:	89 43 04             	mov    %eax,0x4(%ebx)
40bad6:	89 6b 0c             	mov    %ebp,0xc(%ebx)
40bad9:	55                   	push   %ebp
40bada:	51                   	push   %ecx
40badb:	50                   	push   %eax
40badc:	58                   	pop    %eax
40badd:	59                   	pop    %ecx
40bade:	5d                   	pop    %ebp
40badf:	59                   	pop    %ecx
40bae0:	5b                   	pop    %ebx
40bae1:	c2 04 00             	ret    $0x4
40bae4:	ff d0                	call   *%eax
40bae6:	c3                   	ret
40bae7:	8b ff                	mov    %edi,%edi
40bae9:	55                   	push   %ebp
40baea:	8b ec                	mov    %esp,%ebp
40baec:	8d 41 04             	lea    0x4(%ecx),%eax
40baef:	8b d0                	mov    %eax,%edx
40baf1:	2b d1                	sub    %ecx,%edx
40baf3:	83 c2 03             	add    $0x3,%edx
40baf6:	56                   	push   %esi
40baf7:	33 f6                	xor    %esi,%esi
40baf9:	c1 ea 02             	shr    $0x2,%edx
40bafc:	3b c1                	cmp    %ecx,%eax
40bafe:	1b c0                	sbb    %eax,%eax
40bb00:	f7 d0                	not    %eax
40bb02:	23 c2                	and    %edx,%eax
40bb04:	74 0d                	je     0x40bb13
40bb06:	8b 55 08             	mov    0x8(%ebp),%edx
40bb09:	46                   	inc    %esi
40bb0a:	89 11                	mov    %edx,(%ecx)
40bb0c:	8d 49 04             	lea    0x4(%ecx),%ecx
40bb0f:	3b f0                	cmp    %eax,%esi
40bb11:	75 f6                	jne    0x40bb09
40bb13:	5e                   	pop    %esi
40bb14:	5d                   	pop    %ebp
40bb15:	c2 04 00             	ret    $0x4
40bb18:	8b ff                	mov    %edi,%edi
40bb1a:	55                   	push   %ebp
40bb1b:	8b ec                	mov    %esp,%ebp
40bb1d:	81 ec 28 03 00 00    	sub    $0x328,%esp
40bb23:	a1 28 ba 43 00       	mov    0x43ba28,%eax
40bb28:	33 c5                	xor    %ebp,%eax
40bb2a:	89 45 fc             	mov    %eax,-0x4(%ebp)
40bb2d:	83 7d 08 ff          	cmpl   $0xffffffff,0x8(%ebp)
40bb31:	57                   	push   %edi
40bb32:	74 09                	je     0x40bb3d
40bb34:	ff 75 08             	push   0x8(%ebp)
40bb37:	e8 d3 ba ff ff       	call   0x40760f
40bb3c:	59                   	pop    %ecx
40bb3d:	6a 50                	push   $0x50
40bb3f:	8d 85 e0 fc ff ff    	lea    -0x320(%ebp),%eax
40bb45:	6a 00                	push   $0x0
40bb47:	50                   	push   %eax
40bb48:	e8 93 ce ff ff       	call   0x4089e0
40bb4d:	68 cc 02 00 00       	push   $0x2cc
40bb52:	8d 85 30 fd ff ff    	lea    -0x2d0(%ebp),%eax
40bb58:	6a 00                	push   $0x0
40bb5a:	50                   	push   %eax
40bb5b:	e8 80 ce ff ff       	call   0x4089e0
40bb60:	8d 85 e0 fc ff ff    	lea    -0x320(%ebp),%eax
40bb66:	83 c4 18             	add    $0x18,%esp
40bb69:	89 85 d8 fc ff ff    	mov    %eax,-0x328(%ebp)
40bb6f:	8d 85 30 fd ff ff    	lea    -0x2d0(%ebp),%eax
40bb75:	89 85 dc fc ff ff    	mov    %eax,-0x324(%ebp)
40bb7b:	89 85 e0 fd ff ff    	mov    %eax,-0x220(%ebp)
40bb81:	89 8d dc fd ff ff    	mov    %ecx,-0x224(%ebp)
40bb87:	89 95 d8 fd ff ff    	mov    %edx,-0x228(%ebp)
40bb8d:	89 9d d4 fd ff ff    	mov    %ebx,-0x22c(%ebp)
40bb93:	89 b5 d0 fd ff ff    	mov    %esi,-0x230(%ebp)
40bb99:	89 bd cc fd ff ff    	mov    %edi,-0x234(%ebp)
40bb9f:	66 8c 95 f8 fd ff ff 	data16 mov %ss,-0x208(%ebp)
40bba6:	66 8c 8d ec fd ff ff 	data16 mov %cs,-0x214(%ebp)
40bbad:	66 8c 9d c8 fd ff ff 	data16 mov %ds,-0x238(%ebp)
40bbb4:	66 8c 85 c4 fd ff ff 	data16 mov %es,-0x23c(%ebp)
40bbbb:	66 8c a5 c0 fd ff ff 	data16 mov %fs,-0x240(%ebp)
40bbc2:	66 8c ad bc fd ff ff 	data16 mov %gs,-0x244(%ebp)
40bbc9:	9c                   	pushf
40bbca:	8f 85 f0 fd ff ff    	pop    -0x210(%ebp)
40bbd0:	8b 45 04             	mov    0x4(%ebp),%eax
40bbd3:	89 85 e8 fd ff ff    	mov    %eax,-0x218(%ebp)
40bbd9:	8d 45 04             	lea    0x4(%ebp),%eax
40bbdc:	89 85 f4 fd ff ff    	mov    %eax,-0x20c(%ebp)
40bbe2:	c7 85 30 fd ff ff 01 	movl   $0x10001,-0x2d0(%ebp)
40bbe9:	00 01 00
40bbec:	8b 40 fc             	mov    -0x4(%eax),%eax
40bbef:	89 85 e4 fd ff ff    	mov    %eax,-0x21c(%ebp)