404e68:	0f 82 83 00 00 00    	jb     0x404ef1
404e6e:	8b de                	mov    %esi,%ebx
404e70:	2b df                	sub    %edi,%ebx
404e72:	8d 43 04             	lea    0x4(%ebx),%eax
404e75:	83 f8 04             	cmp    $0x4,%eax
404e78:	72 77                	jb     0x404ef1
404e7a:	57                   	push   %edi
404e7b:	e8 ff 25 00 00       	call   0x40747f
404e80:	8b f8                	mov    %eax,%edi
404e82:	8d 43 04             	lea    0x4(%ebx),%eax
404e85:	59                   	pop    %ecx
404e86:	3b f8                	cmp    %eax,%edi
404e88:	73 48                	jae    0x404ed2
404e8a:	b8 00 08 00 00       	mov    $0x800,%eax
404e8f:	3b f8                	cmp    %eax,%edi
404e91:	73 02                	jae    0x404e95
404e93:	8b c7                	mov    %edi,%eax
404e95:	03 c7                	add    %edi,%eax
404e97:	3b c7                	cmp    %edi,%eax
404e99:	72 0f                	jb     0x404eaa
404e9b:	50                   	push   %eax
404e9c:	ff 75 fc             	push   -0x4(%ebp)
404e9f:	e8 88 0a 00 00       	call   0x40592c
404ea4:	59                   	pop    %ecx
404ea5:	59                   	pop    %ecx
404ea6:	85 c0                	test   %eax,%eax
404ea8:	75 16                	jne    0x404ec0
404eaa:	8d 47 10             	lea    0x10(%edi),%eax
404ead:	3b c7                	cmp    %edi,%eax
404eaf:	72 40                	jb     0x404ef1
404eb1:	50                   	push   %eax
404eb2:	ff 75 fc             	push   -0x4(%ebp)
404eb5:	e8 72 0a 00 00       	call   0x40592c
404eba:	59                   	pop    %ecx
404ebb:	59                   	pop    %ecx
404ebc:	85 c0                	test   %eax,%eax
404ebe:	74 31                	je     0x404ef1
404ec0:	c1 fb 02             	sar    $0x2,%ebx
404ec3:	50                   	push   %eax
404ec4:	8d 34 98             	lea    (%eax,%ebx,4),%esi
404ec7:	e8 d8 e7 ff ff       	call   0x4036a4
404ecc:	59                   	pop    %ecx
404ecd:	a3 08 0c 89 00       	mov    %eax,0x890c08
404ed2:	ff 75 08             	push   0x8(%ebp)
404ed5:	e8 ca e7 ff ff       	call   0x4036a4
404eda:	89 06                	mov    %eax,(%esi)
404edc:	83 c6 04             	add    $0x4,%esi
404edf:	56                   	push   %esi
404ee0:	e8 bf e7 ff ff       	call   0x4036a4
404ee5:	59                   	pop    %ecx
404ee6:	a3 04 0c 89 00       	mov    %eax,0x890c04
404eeb:	8b 45 08             	mov    0x8(%ebp),%eax
404eee:	59                   	pop    %ecx
404eef:	eb 02                	jmp    0x404ef3
404ef1:	33 c0                	xor    %eax,%eax
404ef3:	5f                   	pop    %edi
404ef4:	5e                   	pop    %esi
404ef5:	5b                   	pop    %ebx
404ef6:	c9                   	leave
404ef7:	c3                   	ret
404ef8:	8b ff                	mov    %edi,%edi
404efa:	56                   	push   %esi
404efb:	6a 04                	push   $0x4
404efd:	6a 20                	push   $0x20
404eff:	e8 dc 09 00 00       	call   0x4058e0
404f04:	8b f0                	mov    %eax,%esi
404f06:	56                   	push   %esi
404f07:	e8 98 e7 ff ff       	call   0x4036a4
404f0c:	83 c4 0c             	add    $0xc,%esp
404f0f:	a3 08 0c 89 00       	mov    %eax,0x890c08
404f14:	a3 04 0c 89 00       	mov    %eax,0x890c04
404f19:	85 f6                	test   %esi,%esi
404f1b:	75 05                	jne    0x404f22
404f1d:	6a 18                	push   $0x18
404f1f:	58                   	pop    %eax
404f20:	5e                   	pop    %esi
404f21:	c3                   	ret
404f22:	83 26 00             	andl   $0x0,(%esi)
404f25:	33 c0                	xor    %eax,%eax
404f27:	5e                   	pop    %esi
404f28:	c3                   	ret
404f29:	6a 0c                	push   $0xc
404f2b:	68 f8 a5 40 00       	push   $0x40a5f8
404f30:	e8 3f ed ff ff       	call   0x403c74
404f35:	e8 69 db ff ff       	call   0x402aa3
404f3a:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
404f3e:	ff 75 08             	push   0x8(%ebp)
404f41:	e8 f8 fe ff ff       	call   0x404e3e
404f46:	59                   	pop    %ecx
404f47:	89 45 e4             	mov    %eax,-0x1c(%ebp)
404f4a:	c7 45 fc fe ff ff ff 	movl   $0xfffffffe,-0x4(%ebp)
404f51:	e8 09 00 00 00       	call   0x404f5f
404f56:	8b 45 e4             	mov    -0x1c(%ebp),%eax
404f59:	e8 5b ed ff ff       	call   0x403cb9
404f5e:	c3                   	ret
404f5f:	e8 48 db ff ff       	call   0x402aac
404f64:	c3                   	ret
404f65:	8b ff                	mov    %edi,%edi
404f67:	55                   	push   %ebp
404f68:	8b ec                	mov    %esp,%ebp
404f6a:	ff 75 08             	push   0x8(%ebp)
404f6d:	e8 b7 ff ff ff       	call   0x404f29
404f72:	f7 d8                	neg    %eax
404f74:	1b c0                	sbb    %eax,%eax
404f76:	f7 d8                	neg    %eax
404f78:	59                   	pop    %ecx
404f79:	48                   	dec    %eax
404f7a:	5d                   	pop    %ebp
404f7b:	c3                   	ret
404f7c:	8b ff                	mov    %edi,%edi
404f7e:	56                   	push   %esi
404f7f:	57                   	push   %edi
404f80:	33 ff                	xor    %edi,%edi
404f82:	8d b7 d0 b9 40 00    	lea    0x40b9d0(%edi),%esi
404f88:	ff 36                	push   (%esi)
404f8a:	e8 15 e7 ff ff       	call   0x4036a4
404f8f:	83 c7 04             	add    $0x4,%edi
404f92:	59                   	pop    %ecx
404f93:	89 06                	mov    %eax,(%esi)
404f95:	83 ff 28             	cmp    $0x28,%edi
404f98:	72 e8                	jb     0x404f82
404f9a:	5f                   	pop    %edi
404f9b:	5e                   	pop    %esi
404f9c:	c3                   	ret
404f9d:	cc                   	int3
404f9e:	cc                   	int3
404f9f:	cc                   	int3
404fa0:	8b ff                	mov    %edi,%edi
404fa2:	55                   	push   %ebp
404fa3:	8b ec                	mov    %esp,%ebp
404fa5:	8b 4d 08             	mov    0x8(%ebp),%ecx
404fa8:	b8 4d 5a 00 00       	mov    $0x5a4d,%eax
404fad:	66 39 01             	cmp    %ax,(%ecx)
404fb0:	74 04                	je     0x404fb6
404fb2:	33 c0                	xor    %eax,%eax
404fb4:	5d                   	pop    %ebp
404fb5:	c3                   	ret
404fb6:	8b 41 3c             	mov    0x3c(%ecx),%eax
404fb9:	03 c1                	add    %ecx,%eax
404fbb:	81 38 50 45 00 00    	cmpl   $0x4550,(%eax)
404fc1:	75 ef                	jne    0x404fb2
404fc3:	33 d2                	xor    %edx,%edx
404fc5:	b9 0b 01 00 00       	mov    $0x10b,%ecx
404fca:	66 39 48 18          	cmp    %cx,0x18(%eax)
404fce:	0f 94 c2             	sete   %dl
404fd1:	8b c2                	mov    %edx,%eax
404fd3:	5d                   	pop    %ebp
404fd4:	c3                   	ret
404fd5:	cc                   	int3
404fd6:	cc                   	int3
404fd7:	cc                   	int3
404fd8:	cc                   	int3
404fd9:	cc                   	int3
404fda:	cc                   	int3
404fdb:	cc                   	int3
404fdc:	cc                   	int3
404fdd:	cc                   	int3
404fde:	cc                   	int3
404fdf:	cc                   	int3
404fe0:	8b ff                	mov    %edi,%edi
404fe2:	55                   	push   %ebp
404fe3:	8b ec                	mov    %esp,%ebp
404fe5:	8b 45 08             	mov    0x8(%ebp),%eax
404fe8:	8b 48 3c             	mov    0x3c(%eax),%ecx
404feb:	03 c8                	add    %eax,%ecx
404fed:	0f b7 41 14          	movzwl 0x14(%ecx),%eax
404ff1:	53                   	push   %ebx
404ff2:	56                   	push   %esi
404ff3:	0f b7 71 06          	movzwl 0x6(%ecx),%esi
404ff7:	33 d2                	xor    %edx,%edx
404ff9:	57                   	push   %edi
404ffa:	8d 44 08 18          	lea    0x18(%eax,%ecx,1),%eax
404ffe:	85 f6                	test   %esi,%esi
405000:	76 1b                	jbe    0x40501d
405002:	8b 7d 0c             	mov    0xc(%ebp),%edi
405005:	8b 48 0c             	mov    0xc(%eax),%ecx
405008:	3b f9                	cmp    %ecx,%edi
40500a:	72 09                	jb     0x405015
40500c:	8b 58 08             	mov    0x8(%eax),%ebx
40500f:	03 d9                	add    %ecx,%ebx
405011:	3b fb                	cmp    %ebx,%edi
405013:	72 0a                	jb     0x40501f
405015:	42                   	inc    %edx
405016:	83 c0 28             	add    $0x28,%eax
405019:	3b d6                	cmp    %esi,%edx
40501b:	72 e8                	jb     0x405005
40501d:	33 c0                	xor    %eax,%eax
40501f:	5f                   	pop    %edi
405020:	5e                   	pop    %esi
405021:	5b                   	pop    %ebx
405022:	5d                   	pop    %ebp
405023:	c3                   	ret
405024:	cc                   	int3
405025:	cc                   	int3
405026:	cc                   	int3
405027:	cc                   	int3
405028:	cc                   	int3
405029:	cc                   	int3
40502a:	cc                   	int3
40502b:	cc                   	int3
40502c:	cc                   	int3
40502d:	cc                   	int3
40502e:	cc                   	int3
40502f:	cc                   	int3
405030:	8b ff                	mov    %edi,%edi
405032:	55                   	push   %ebp
405033:	8b ec                	mov    %esp,%ebp
405035:	6a fe                	push   $0xfffffffe
405037:	68 18 a6 40 00       	push   $0x40a618
40503c:	68 d0 3c 40 00       	push   $0x403cd0
405041:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
405047:	50                   	push   %eax
405048:	83 ec 08             	sub    $0x8,%esp
40504b:	53                   	push   %ebx
40504c:	56                   	push   %esi
40504d:	57                   	push   %edi
40504e:	a1 04 b0 40 00       	mov    0x40b004,%eax
405053:	31 45 f8             	xor    %eax,-0x8(%ebp)
405056:	33 c5                	xor    %ebp,%eax
405058:	50                   	push   %eax
405059:	8d 45 f0             	lea    -0x10(%ebp),%eax
40505c:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
405062:	89 65 e8             	mov    %esp,-0x18(%ebp)
405065:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
40506c:	68 00 00 40 00       	push   $0x400000
405071:	e8 2a ff ff ff       	call   0x404fa0
405076:	83 c4 04             	add    $0x4,%esp
405079:	85 c0                	test   %eax,%eax
40507b:	74 55                	je     0x4050d2
40507d:	8b 45 08             	mov    0x8(%ebp),%eax
405080:	2d 00 00 40 00       	sub    $0x400000,%eax
405085:	50                   	push   %eax
405086:	68 00 00 40 00       	push   $0x400000
40508b:	e8 50 ff ff ff       	call   0x404fe0
405090:	83 c4 08             	add    $0x8,%esp
405093:	85 c0                	test   %eax,%eax
405095:	74 3b                	je     0x4050d2
405097:	8b 40 24             	mov    0x24(%eax),%eax
40509a:	c1 e8 1f             	shr    $0x1f,%eax
40509d:	f7 d0                	not    %eax
40509f:	83 e0 01             	and    $0x1,%eax
4050a2:	c7 45 fc fe ff ff ff 	movl   $0xfffffffe,-0x4(%ebp)
4050a9:	8b 4d f0             	mov    -0x10(%ebp),%ecx
4050ac:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
4050b3:	59                   	pop    %ecx
4050b4:	5f                   	pop    %edi
4050b5:	5e                   	pop    %esi
4050b6:	5b                   	pop    %ebx
4050b7:	8b e5                	mov    %ebp,%esp
4050b9:	5d                   	pop    %ebp
4050ba:	c3                   	ret
4050bb:	8b 45 ec             	mov    -0x14(%ebp),%eax
4050be:	8b 08                	mov    (%eax),%ecx
4050c0:	8b 01                	mov    (%ecx),%eax
4050c2:	33 d2                	xor    %edx,%edx
4050c4:	3d 05 00 00 c0       	cmp    $0xc0000005,%eax
4050c9:	0f 94 c2             	sete   %dl
4050cc:	8b c2                	mov    %edx,%eax
4050ce:	c3                   	ret
4050cf:	8b 65 e8             	mov    -0x18(%ebp),%esp
4050d2:	c7 45 fc fe ff ff ff 	movl   $0xfffffffe,-0x4(%ebp)
4050d9:	33 c0                	xor    %eax,%eax
4050db:	8b 4d f0             	mov    -0x10(%ebp),%ecx
4050de:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
4050e5:	59                   	pop    %ecx
4050e6:	5f                   	pop    %edi
4050e7:	5e                   	pop    %esi
4050e8:	5b                   	pop    %ebx
4050e9:	8b e5                	mov    %ebp,%esp
4050eb:	5d                   	pop    %ebp
4050ec:	c3                   	ret
4050ed:	8b ff                	mov    %edi,%edi
4050ef:	55                   	push   %ebp
4050f0:	8b ec                	mov    %esp,%ebp
4050f2:	8b 45 08             	mov    0x8(%ebp),%eax
4050f5:	a3 78 cf 45 00       	mov    %eax,0x45cf78
4050fa:	a3 7c cf 45 00       	mov    %eax,0x45cf7c
4050ff:	a3 80 cf 45 00       	mov    %eax,0x45cf80
405104:	a3 84 cf 45 00       	mov    %eax,0x45cf84
405109:	5d                   	pop    %ebp
40510a:	c3                   	ret
40510b:	8b ff                	mov    %edi,%edi
40510d:	55                   	push   %ebp
40510e:	8b ec                	mov    %esp,%ebp
405110:	8b 45 08             	mov    0x8(%ebp),%eax
405113:	8b 0d d4 b0 40 00    	mov    0x40b0d4,%ecx
405119:	56                   	push   %esi
40511a:	39 50 04             	cmp    %edx,0x4(%eax)
40511d:	74 0f                	je     0x40512e
40511f:	8b f1                	mov    %ecx,%esi
405121:	6b f6 0c             	imul   $0xc,%esi,%esi
405124:	03 75 08             	add    0x8(%ebp),%esi
405127:	83 c0 0c             	add    $0xc,%eax
40512a:	3b c6                	cmp    %esi,%eax
40512c:	72 ec                	jb     0x40511a
40512e:	6b c9 0c             	imul   $0xc,%ecx,%ecx
405131:	03 4d 08             	add    0x8(%ebp),%ecx
405134:	5e                   	pop    %esi
405135:	3b c1                	cmp    %ecx,%eax
405137:	73 05                	jae    0x40513e
405139:	39 50 04             	cmp    %edx,0x4(%eax)
40513c:	74 02                	je     0x405140
40513e:	33 c0                	xor    %eax,%eax
405140:	5d                   	pop    %ebp
405141:	c3                   	ret
405142:	ff 35 80 cf 45 00    	push   0x45cf80
405148:	e8 d2 e5 ff ff       	call   0x40371f
40514d:	59                   	pop    %ecx
40514e:	c3                   	ret
40514f:	6a 20                	push   $0x20
405151:	68 38 a6 40 00       	push   $0x40a638
405156:	e8 19 eb ff ff       	call   0x403c74
40515b:	33 ff                	xor    %edi,%edi
40515d:	89 7d e4             	mov    %edi,-0x1c(%ebp)
405160:	89 7d d8             	mov    %edi,-0x28(%ebp)
405163:	8b 5d 08             	mov    0x8(%ebp),%ebx
405166:	83 fb 0b             	cmp    $0xb,%ebx
405169:	7f 4c                	jg     0x4051b7
40516b:	74 15                	je     0x405182
40516d:	8b c3                	mov    %ebx,%eax
40516f:	6a 02                	push   $0x2
405171:	59                   	pop    %ecx
405172:	2b c1                	sub    %ecx,%eax
405174:	74 22                	je     0x405198
405176:	2b c1                	sub    %ecx,%eax
405178:	74 08                	je     0x405182
40517a:	2b c1                	sub    %ecx,%eax
40517c:	74 64                	je     0x4051e2
40517e:	2b c1                	sub    %ecx,%eax
405180:	75 44                	jne    0x4051c6
405182:	e8 6b e7 ff ff       	call   0x4038f2
405187:	8b f8                	mov    %eax,%edi
405189:	89 7d d8             	mov    %edi,-0x28(%ebp)
40518c:	85 ff                	test   %edi,%edi
40518e:	75 14                	jne    0x4051a4
405190:	83 c8 ff             	or     $0xffffffff,%eax
405193:	e9 61 01 00 00       	jmp    0x4052f9
405198:	be 78 cf 45 00       	mov    $0x45cf78,%esi
40519d:	a1 78 cf 45 00       	mov    0x45cf78,%eax
4051a2:	eb 60                	jmp    0x405204
4051a4:	ff 77 5c             	push   0x5c(%edi)
4051a7:	8b d3                	mov    %ebx,%edx
4051a9:	e8 5d ff ff ff       	call   0x40510b
4051ae:	8b f0                	mov    %eax,%esi
4051b0:	83 c6 08             	add    $0x8,%esi
4051b3:	8b 06                	mov    (%esi),%eax
4051b5:	eb 5a                	jmp    0x405211
4051b7:	8b c3                	mov    %ebx,%eax
4051b9:	83 e8 0f             	sub    $0xf,%eax
4051bc:	74 3c                	je     0x4051fa