405fe6:	74 30                	je     0x406018
405fe8:	57                   	push   %edi
405fe9:	8b 7d 08             	mov    0x8(%ebp),%edi
405fec:	0f b7 07             	movzwl (%edi),%eax
405fef:	66 85 c0             	test   %ax,%ax
405ff2:	74 23                	je     0x406017
405ff4:	66 89 04 71          	mov    %ax,(%ecx,%esi,2)
405ff8:	6a 27                	push   $0x27
405ffa:	58                   	pop    %eax
405ffb:	66 39 07             	cmp    %ax,(%edi)
405ffe:	75 0f                	jne    0x40600f
406000:	8d 43 fe             	lea    -0x2(%ebx),%eax
406003:	3b f0                	cmp    %eax,%esi
406005:	73 08                	jae    0x40600f
406007:	46                   	inc    %esi
406008:	6a 27                	push   $0x27
40600a:	58                   	pop    %eax
40600b:	66 89 04 71          	mov    %ax,(%ecx,%esi,2)
40600f:	83 c7 02             	add    $0x2,%edi
406012:	46                   	inc    %esi
406013:	3b f2                	cmp    %edx,%esi
406015:	72 d5                	jb     0x405fec
406017:	5f                   	pop    %edi
406018:	33 c0                	xor    %eax,%eax
40601a:	66 89 04 71          	mov    %ax,(%ecx,%esi,2)
40601e:	5e                   	pop    %esi
40601f:	5b                   	pop    %ebx
406020:	5d                   	pop    %ebp
406021:	c2 04 00             	ret    $0x4
406024:	8b ff                	mov    %edi,%edi
406026:	55                   	push   %ebp
406027:	8b ec                	mov    %esp,%ebp
406029:	56                   	push   %esi
40602a:	8b f1                	mov    %ecx,%esi
40602c:	8b 4d 08             	mov    0x8(%ebp),%ecx
40602f:	e8 25 00 00 00       	call   0x406059
406034:	8d 04 45 02 00 00 00 	lea    0x2(,%eax,2),%eax
40603b:	50                   	push   %eax
40603c:	ff 75 08             	push   0x8(%ebp)
40603f:	68 14 04 00 00       	push   $0x414
406044:	56                   	push   %esi
406045:	ff 15 ec f1 40 00    	call   *0x40f1ec
40604b:	83 c4 10             	add    $0x10,%esp
40604e:	f7 d8                	neg    %eax
406050:	1a c0                	sbb    %al,%al
406052:	fe c0                	inc    %al
406054:	5e                   	pop    %esi
406055:	5d                   	pop    %ebp
406056:	c2 04 00             	ret    $0x4
406059:	85 c9                	test   %ecx,%ecx
40605b:	75 03                	jne    0x406060
40605d:	33 c0                	xor    %eax,%eax
40605f:	c3                   	ret
406060:	8d 51 02             	lea    0x2(%ecx),%edx
406063:	66 8b 01             	mov    (%ecx),%ax
406066:	83 c1 02             	add    $0x2,%ecx
406069:	66 85 c0             	test   %ax,%ax
40606c:	75 f5                	jne    0x406063
40606e:	2b ca                	sub    %edx,%ecx
406070:	d1 f9                	sar    $1,%ecx
406072:	8b c1                	mov    %ecx,%eax
406074:	c3                   	ret
406075:	8b ff                	mov    %edi,%edi
406077:	56                   	push   %esi
406078:	8b f1                	mov    %ecx,%esi
40607a:	ff 36                	push   (%esi)
40607c:	ff 15 fc f1 40 00    	call   *0x40f1fc
406082:	83 26 00             	andl   $0x0,(%esi)
406085:	59                   	pop    %ecx
406086:	5e                   	pop    %esi
406087:	c3                   	ret
406088:	8b ff                	mov    %edi,%edi
40608a:	55                   	push   %ebp
40608b:	8b ec                	mov    %esp,%ebp
40608d:	56                   	push   %esi
40608e:	8b f1                	mov    %ecx,%esi
406090:	6a 04                	push   $0x4
406092:	8b 46 08             	mov    0x8(%esi),%eax
406095:	40                   	inc    %eax
406096:	50                   	push   %eax
406097:	ff 36                	push   (%esi)
406099:	ff 15 44 15 40 00    	call   *0x401544
40609f:	83 c4 0c             	add    $0xc,%esp
4060a2:	85 c0                	test   %eax,%eax
4060a4:	74 48                	je     0x4060ee
4060a6:	89 06                	mov    %eax,(%esi)
4060a8:	8b 46 08             	mov    0x8(%esi),%eax
4060ab:	6a 04                	push   $0x4
4060ad:	40                   	inc    %eax
4060ae:	50                   	push   %eax
4060af:	ff 76 04             	push   0x4(%esi)
4060b2:	ff 15 44 15 40 00    	call   *0x401544
4060b8:	83 c4 0c             	add    $0xc,%esp
4060bb:	85 c0                	test   %eax,%eax
4060bd:	74 2f                	je     0x4060ee
4060bf:	8b 56 08             	mov    0x8(%esi),%edx
4060c2:	8b 0e                	mov    (%esi),%ecx
4060c4:	c1 e2 02             	shl    $0x2,%edx
4060c7:	89 46 04             	mov    %eax,0x4(%esi)
4060ca:	03 ca                	add    %edx,%ecx
4060cc:	74 0a                	je     0x4060d8
4060ce:	8b 45 08             	mov    0x8(%ebp),%eax
4060d1:	8b 00                	mov    (%eax),%eax
4060d3:	89 01                	mov    %eax,(%ecx)
4060d5:	8b 46 04             	mov    0x4(%esi),%eax
4060d8:	8d 0c 02             	lea    (%edx,%eax,1),%ecx
4060db:	85 c9                	test   %ecx,%ecx
4060dd:	74 07                	je     0x4060e6
4060df:	8b 45 0c             	mov    0xc(%ebp),%eax
4060e2:	8b 00                	mov    (%eax),%eax
4060e4:	89 01                	mov    %eax,(%ecx)
4060e6:	ff 46 08             	incl   0x8(%esi)
4060e9:	33 c0                	xor    %eax,%eax
4060eb:	40                   	inc    %eax
4060ec:	eb 02                	jmp    0x4060f0
4060ee:	33 c0                	xor    %eax,%eax
4060f0:	5e                   	pop    %esi
4060f1:	5d                   	pop    %ebp
4060f2:	c2 08 00             	ret    $0x8
4060f5:	6a 24                	push   $0x24
4060f7:	b8 67 a5 40 00       	mov    $0x40a567,%eax
4060fc:	e8 36 3d 00 00       	call   0x409e37
406101:	89 4d d0             	mov    %ecx,-0x30(%ebp)
406104:	8b 45 08             	mov    0x8(%ebp),%eax
406107:	85 c0                	test   %eax,%eax
406109:	0f 84 42 01 00 00    	je     0x406251
40610f:	83 7d 0c 00          	cmpl   $0x0,0xc(%ebp)
406113:	0f 84 38 01 00 00    	je     0x406251
406119:	8b c8                	mov    %eax,%ecx
40611b:	33 f6                	xor    %esi,%esi
40611d:	8b de                	mov    %esi,%ebx
40611f:	6a 02                	push   $0x2
406121:	89 5d e0             	mov    %ebx,-0x20(%ebp)
406124:	8d 51 02             	lea    0x2(%ecx),%edx
406127:	5f                   	pop    %edi
406128:	66 8b 01             	mov    (%ecx),%ax
40612b:	03 cf                	add    %edi,%ecx
40612d:	66 3b c6             	cmp    %si,%ax
406130:	75 f6                	jne    0x406128
406132:	2b ca                	sub    %edx,%ecx
406134:	89 75 ec             	mov    %esi,-0x14(%ebp)
406137:	d1 f9                	sar    $1,%ecx
406139:	89 75 fc             	mov    %esi,-0x4(%ebp)
40613c:	8d 04 4d 02 00 00 00 	lea    0x2(,%ecx,2),%eax
406143:	33 c9                	xor    %ecx,%ecx
406145:	89 45 d8             	mov    %eax,-0x28(%ebp)
406148:	f7 e7                	mul    %edi
40614a:	0f 90 c1             	seto   %cl
40614d:	f7 d9                	neg    %ecx
40614f:	0b c8                	or     %eax,%ecx
406151:	51                   	push   %ecx
406152:	e8 f2 2b 00 00       	call   0x408d49
406157:	59                   	pop    %ecx
406158:	89 45 ec             	mov    %eax,-0x14(%ebp)
40615b:	eb 10                	jmp    0x40616d
40615d:	b8 63 61 40 00       	mov    $0x406163,%eax
406162:	c3                   	ret
406163:	8b 45 ec             	mov    -0x14(%ebp),%eax
406166:	33 f6                	xor    %esi,%esi
406168:	6a 02                	push   $0x2
40616a:	5f                   	pop    %edi
40616b:	8b de                	mov    %esi,%ebx
40616d:	89 45 e4             	mov    %eax,-0x1c(%ebp)
406170:	8b 4d 0c             	mov    0xc(%ebp),%ecx
406173:	89 7d fc             	mov    %edi,-0x4(%ebp)
406176:	8b f8                	mov    %eax,%edi
406178:	89 7d dc             	mov    %edi,-0x24(%ebp)
40617b:	e8 d9 fe ff ff       	call   0x406059
406180:	33 c9                	xor    %ecx,%ecx
406182:	89 75 e8             	mov    %esi,-0x18(%ebp)
406185:	6a 02                	push   $0x2
406187:	5a                   	pop    %edx
406188:	8d 04 45 02 00 00 00 	lea    0x2(,%eax,2),%eax
40618f:	c6 45 fc 03          	movb   $0x3,-0x4(%ebp)
406193:	89 45 d4             	mov    %eax,-0x2c(%ebp)
406196:	f7 e2                	mul    %edx
406198:	0f 90 c1             	seto   %cl
40619b:	f7 d9                	neg    %ecx
40619d:	0b c8                	or     %eax,%ecx
40619f:	51                   	push   %ecx
4061a0:	e8 a4 2b 00 00       	call   0x408d49
4061a5:	8b f0                	mov    %eax,%esi
4061a7:	c7 45 fc 02 00 00 00 	movl   $0x2,-0x4(%ebp)
4061ae:	59                   	pop    %ecx
4061af:	89 75 e8             	mov    %esi,-0x18(%ebp)
4061b2:	8b c7                	mov    %edi,%eax
4061b4:	eb 19                	jmp    0x4061cf
4061b6:	b8 bc 61 40 00       	mov    $0x4061bc,%eax
4061bb:	c3                   	ret
4061bc:	c7 45 fc 02 00 00 00 	movl   $0x2,-0x4(%ebp)
4061c3:	8b 5d e0             	mov    -0x20(%ebp),%ebx
4061c6:	8b 45 ec             	mov    -0x14(%ebp),%eax
4061c9:	8b 7d dc             	mov    -0x24(%ebp),%edi
4061cc:	8b 75 e8             	mov    -0x18(%ebp),%esi
4061cf:	c6 45 fc 05          	movb   $0x5,-0x4(%ebp)
4061d3:	89 75 e0             	mov    %esi,-0x20(%ebp)
4061d6:	85 c0                	test   %eax,%eax
4061d8:	74 51                	je     0x40622b
4061da:	85 f6                	test   %esi,%esi
4061dc:	74 4d                	je     0x40622b
4061de:	8b 4d d8             	mov    -0x28(%ebp),%ecx
4061e1:	51                   	push   %ecx
4061e2:	ff 75 08             	push   0x8(%ebp)
4061e5:	51                   	push   %ecx
4061e6:	50                   	push   %eax
4061e7:	ff 15 ec f1 40 00    	call   *0x40f1ec
4061ed:	83 c4 10             	add    $0x10,%esp
4061f0:	8b c8                	mov    %eax,%ecx
4061f2:	e8 72 09 00 00       	call   0x406b69
4061f7:	8b 45 d4             	mov    -0x2c(%ebp),%eax
4061fa:	50                   	push   %eax
4061fb:	ff 75 0c             	push   0xc(%ebp)
4061fe:	50                   	push   %eax
4061ff:	56                   	push   %esi
406200:	ff 15 ec f1 40 00    	call   *0x40f1ec
406206:	83 c4 10             	add    $0x10,%esp
406209:	8b c8                	mov    %eax,%ecx
40620b:	e8 59 09 00 00       	call   0x406b69
406210:	8b 4d d0             	mov    -0x30(%ebp),%ecx
406213:	8d 45 e8             	lea    -0x18(%ebp),%eax
406216:	50                   	push   %eax
406217:	8d 45 ec             	lea    -0x14(%ebp),%eax
40621a:	50                   	push   %eax
40621b:	e8 68 fe ff ff       	call   0x406088
406220:	85 c0                	test   %eax,%eax
406222:	75 0c                	jne    0x406230
406224:	bb 0e 00 07 80       	mov    $0x8007000e,%ebx
406229:	eb 0d                	jmp    0x406238
40622b:	bb 0e 00 07 80       	mov    $0x8007000e,%ebx
406230:	85 db                	test   %ebx,%ebx
406232:	78 04                	js     0x406238
406234:	33 ff                	xor    %edi,%edi
406236:	33 f6                	xor    %esi,%esi
406238:	56                   	push   %esi
406239:	ff 15 fc f1 40 00    	call   *0x40f1fc
40623f:	57                   	push   %edi
406240:	ff 15 fc f1 40 00    	call   *0x40f1fc
406246:	f7 d3                	not    %ebx
406248:	59                   	pop    %ecx
406249:	c1 eb 1f             	shr    $0x1f,%ebx
40624c:	59                   	pop    %ecx
40624d:	8b c3                	mov    %ebx,%eax
40624f:	eb 02                	jmp    0x406253
406251:	33 c0                	xor    %eax,%eax
406253:	e8 44 3b 00 00       	call   0x409d9c
406258:	c2 08 00             	ret    $0x8
40625b:	cc                   	int3
40625c:	cc                   	int3
40625d:	cc                   	int3
40625e:	cc                   	int3
40625f:	cc                   	int3
406260:	6a 04                	push   $0x4
406262:	b8 8a a5 40 00       	mov    $0x40a58a,%eax
406267:	e8 62 3b 00 00       	call   0x409dce
40626c:	83 7d 0c 00          	cmpl   $0x0,0xc(%ebp)
406270:	74 39                	je     0x4062ab
406272:	83 7d 10 00          	cmpl   $0x0,0x10(%ebp)
406276:	74 33                	je     0x4062ab
406278:	83 65 f0 00          	andl   $0x0,-0x10(%ebp)
40627c:	ff 75 10             	push   0x10(%ebp)
40627f:	8b 4d 08             	mov    0x8(%ebp),%ecx
406282:	ff 75 0c             	push   0xc(%ebp)
406285:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
406289:	8d 49 04             	lea    0x4(%ecx),%ecx
40628c:	e8 64 fe ff ff       	call   0x4060f5
406291:	f7 d8                	neg    %eax
406293:	8d 4d f0             	lea    -0x10(%ebp),%ecx
406296:	1b f6                	sbb    %esi,%esi
406298:	81 e6 f2 ff f8 7f    	and    $0x7ff8fff2,%esi
40629e:	e8 e9 03 00 00       	call   0x40668c
4062a3:	8d 86 0e 00 07 80    	lea    -0x7ff8fff2(%esi),%eax
4062a9:	eb 05                	jmp    0x4062b0
4062ab:	b8 57 00 07 80       	mov    $0x80070057,%eax
4062b0:	e8 e7 3a 00 00       	call   0x409d9c
4062b5:	c2 0c 00             	ret    $0xc
4062b8:	ff 31                	push   (%ecx)
4062ba:	ff 15 f0 f1 40 00    	call   *0x40f1f0
4062c0:	59                   	pop    %ecx
4062c1:	c3                   	ret
4062c2:	8d 41 04             	lea    0x4(%ecx),%eax
4062c5:	39 01                	cmp    %eax,(%ecx)
4062c7:	0f 85 eb ff ff ff    	jne    0x4062b8
4062cd:	c3                   	ret
4062ce:	8b ff                	mov    %edi,%edi
4062d0:	55                   	push   %ebp
4062d1:	8b ec                	mov    %esp,%ebp
4062d3:	56                   	push   %esi
4062d4:	ff 75 08             	push   0x8(%ebp)
4062d7:	8b f1                	mov    %ecx,%esi
4062d9:	ff 15 f4 f1 40 00    	call   *0x40f1f4
4062df:	59                   	pop    %ecx
4062e0:	85 c0                	test   %eax,%eax
4062e2:	74 07                	je     0x4062eb
4062e4:	89 06                	mov    %eax,(%esi)
4062e6:	5e                   	pop    %esi
4062e7:	5d                   	pop    %ebp
4062e8:	c2 04 00             	ret    $0x4
4062eb:	b9 0e 00 07 80       	mov    $0x8007000e,%ecx
4062f0:	e8 57 08 00 00       	call   0x406b4c
4062f5:	cc                   	int3
4062f6:	ff 15 7c f0 40 00    	call   *0x40f07c
4062fc:	85 c0                	test   %eax,%eax
4062fe:	7e 08                	jle    0x406308
406300:	0f b7 c0             	movzwl %ax,%eax
406303:	0d 00 00 07 80       	or     $0x80070000,%eax
406308:	c3                   	ret
406309:	ff 71 08             	push   0x8(%ecx)
40630c:	ff 15 28 f1 40 00    	call   *0x40f128
406312:	c3                   	ret
406313:	6a 00                	push   $0x0
406315:	6a 00                	push   $0x0
406317:	6a 01                	push   $0x1
406319:	51                   	push   %ecx
40631a:	ff 15 c0 f0 40 00    	call   *0x40f0c0
406320:	c3                   	ret
406321:	8b ff                	mov    %edi,%edi
406323:	55                   	push   %ebp
406324:	8b ec                	mov    %esp,%ebp
406326:	53                   	push   %ebx
406327:	56                   	push   %esi
406328:	57                   	push   %edi
406329:	8b f9                	mov    %ecx,%edi
40632b:	33 db                	xor    %ebx,%ebx
40632d:	8b f3                	mov    %ebx,%esi
40632f:	39 5f 0c             	cmp    %ebx,0xc(%edi)
406332:	7e 19                	jle    0x40634d
406334:	8b 47 04             	mov    0x4(%edi),%eax
406337:	ff 75 08             	push   0x8(%ebp)
40633a:	ff 34 b0             	push   (%eax,%esi,4)
40633d:	ff 15 8c f0 40 00    	call   *0x40f08c
406343:	85 c0                	test   %eax,%eax
406345:	74 09                	je     0x406350
406347:	46                   	inc    %esi
406348:	3b 77 0c             	cmp    0xc(%edi),%esi
40634b:	7c e7                	jl     0x406334
40634d:	83 ce ff             	or     $0xffffffff,%esi
406350:	83 fe ff             	cmp    $0xffffffff,%esi
406353:	74 0f                	je     0x406364
406355:	85 f6                	test   %esi,%esi
406357:	78 14                	js     0x40636d
406359:	3b 77 0c             	cmp    0xc(%edi),%esi
40635c:	7d 0f                	jge    0x40636d
40635e:	8b 47 08             	mov    0x8(%edi),%eax
406361:	8b 1c b0             	mov    (%eax,%esi,4),%ebx
406364:	5f                   	pop    %edi
406365:	5e                   	pop    %esi
406366:	8b c3                	mov    %ebx,%eax
406368:	5b                   	pop    %ebx
406369:	5d                   	pop    %ebp
40636a:	c2 04 00             	ret    $0x4