408b29:	8b 5d f0             	mov    -0x10(%ebp),%ebx
408b2c:	a1 10 60 42 00       	mov    0x426010,%eax
408b31:	83 c8 02             	or     $0x2,%eax
408b34:	c7 05 64 69 42 00 01 	movl   $0x1,0x426964
408b3b:	00 00 00
408b3e:	a3 10 60 42 00       	mov    %eax,0x426010
408b43:	f7 c1 00 00 10 00    	test   $0x100000,%ecx
408b49:	0f 84 93 00 00 00    	je     0x408be2
408b4f:	83 c8 04             	or     $0x4,%eax
408b52:	c7 05 64 69 42 00 02 	movl   $0x2,0x426964
408b59:	00 00 00
408b5c:	a3 10 60 42 00       	mov    %eax,0x426010
408b61:	f7 c1 00 00 00 08    	test   $0x8000000,%ecx
408b67:	74 79                	je     0x408be2
408b69:	f7 c1 00 00 00 10    	test   $0x10000000,%ecx
408b6f:	74 71                	je     0x408be2
408b71:	33 c9                	xor    %ecx,%ecx
408b73:	0f 01 d0             	xgetbv
408b76:	89 45 ec             	mov    %eax,-0x14(%ebp)
408b79:	89 55 f0             	mov    %edx,-0x10(%ebp)
408b7c:	8b 45 ec             	mov    -0x14(%ebp),%eax
408b7f:	8b 4d f0             	mov    -0x10(%ebp),%ecx
408b82:	6a 06                	push   $0x6
408b84:	5e                   	pop    %esi
408b85:	23 c6                	and    %esi,%eax
408b87:	3b c6                	cmp    %esi,%eax
408b89:	75 57                	jne    0x408be2
408b8b:	a1 10 60 42 00       	mov    0x426010,%eax
408b90:	83 c8 08             	or     $0x8,%eax
408b93:	c7 05 64 69 42 00 03 	movl   $0x3,0x426964
408b9a:	00 00 00
408b9d:	a3 10 60 42 00       	mov    %eax,0x426010
408ba2:	f6 c3 20             	test   $0x20,%bl
408ba5:	74 3b                	je     0x408be2
408ba7:	83 c8 20             	or     $0x20,%eax
408baa:	c7 05 64 69 42 00 05 	movl   $0x5,0x426964
408bb1:	00 00 00
408bb4:	a3 10 60 42 00       	mov    %eax,0x426010
408bb9:	b8 00 00 03 d0       	mov    $0xd0030000,%eax
408bbe:	23 d8                	and    %eax,%ebx
408bc0:	3b d8                	cmp    %eax,%ebx
408bc2:	75 1e                	jne    0x408be2
408bc4:	8b 45 ec             	mov    -0x14(%ebp),%eax
408bc7:	ba e0 00 00 00       	mov    $0xe0,%edx
408bcc:	8b 4d f0             	mov    -0x10(%ebp),%ecx
408bcf:	23 c2                	and    %edx,%eax
408bd1:	3b c2                	cmp    %edx,%eax
408bd3:	75 0d                	jne    0x408be2
408bd5:	83 0d 10 60 42 00 40 	orl    $0x40,0x426010
408bdc:	89 35 64 69 42 00    	mov    %esi,0x426964
408be2:	5f                   	pop    %edi
408be3:	5e                   	pop    %esi
408be4:	5b                   	pop    %ebx
408be5:	33 c0                	xor    %eax,%eax
408be7:	c9                   	leave
408be8:	c3                   	ret
408be9:	33 c0                	xor    %eax,%eax
408beb:	39 05 18 74 42 00    	cmp    %eax,0x427418
408bf1:	0f 95 c0             	setne  %al
408bf4:	c3                   	ret
408bf5:	3b 0d 18 60 42 00    	cmp    0x426018,%ecx
408bfb:	75 01                	jne    0x408bfe
408bfd:	c3                   	ret
408bfe:	e9 28 00 00 00       	jmp    0x408c2b
408c03:	55                   	push   %ebp
408c04:	8b ec                	mov    %esp,%ebp
408c06:	6a 00                	push   $0x0
408c08:	ff 15 64 c1 41 00    	call   *0x41c164
408c0e:	ff 75 08             	push   0x8(%ebp)
408c11:	ff 15 68 c1 41 00    	call   *0x41c168
408c17:	68 09 04 00 c0       	push   $0xc0000409
408c1c:	ff 15 54 c1 41 00    	call   *0x41c154
408c22:	50                   	push   %eax
408c23:	ff 15 50 c1 41 00    	call   *0x41c150
408c29:	5d                   	pop    %ebp
408c2a:	c3                   	ret
408c2b:	55                   	push   %ebp
408c2c:	8b ec                	mov    %esp,%ebp
408c2e:	81 ec 24 03 00 00    	sub    $0x324,%esp
408c34:	6a 17                	push   $0x17
408c36:	ff 15 5c c1 41 00    	call   *0x41c15c
408c3c:	85 c0                	test   %eax,%eax
408c3e:	74 05                	je     0x408c45
408c40:	6a 02                	push   $0x2
408c42:	59                   	pop    %ecx
408c43:	cd 29                	int    $0x29
408c45:	a3 70 6a 42 00       	mov    %eax,0x426a70
408c4a:	89 0d 6c 6a 42 00    	mov    %ecx,0x426a6c
408c50:	89 15 68 6a 42 00    	mov    %edx,0x426a68
408c56:	89 1d 64 6a 42 00    	mov    %ebx,0x426a64
408c5c:	89 35 60 6a 42 00    	mov    %esi,0x426a60
408c62:	89 3d 5c 6a 42 00    	mov    %edi,0x426a5c
408c68:	66 8c 15 88 6a 42 00 	data16 mov %ss,0x426a88
408c6f:	66 8c 0d 7c 6a 42 00 	data16 mov %cs,0x426a7c
408c76:	66 8c 1d 58 6a 42 00 	data16 mov %ds,0x426a58
408c7d:	66 8c 05 54 6a 42 00 	data16 mov %es,0x426a54
408c84:	66 8c 25 50 6a 42 00 	data16 mov %fs,0x426a50
408c8b:	66 8c 2d 4c 6a 42 00 	data16 mov %gs,0x426a4c
408c92:	9c                   	pushf
408c93:	8f 05 80 6a 42 00    	pop    0x426a80
408c99:	8b 45 00             	mov    0x0(%ebp),%eax
408c9c:	a3 74 6a 42 00       	mov    %eax,0x426a74
408ca1:	8b 45 04             	mov    0x4(%ebp),%eax
408ca4:	a3 78 6a 42 00       	mov    %eax,0x426a78
408ca9:	8d 45 08             	lea    0x8(%ebp),%eax
408cac:	a3 84 6a 42 00       	mov    %eax,0x426a84
408cb1:	8b 85 dc fc ff ff    	mov    -0x324(%ebp),%eax
408cb7:	c7 05 c0 69 42 00 01 	movl   $0x10001,0x4269c0
408cbe:	00 01 00
408cc1:	a1 78 6a 42 00       	mov    0x426a78,%eax
408cc6:	a3 7c 69 42 00       	mov    %eax,0x42697c
408ccb:	c7 05 70 69 42 00 09 	movl   $0xc0000409,0x426970
408cd2:	04 00 c0
408cd5:	c7 05 74 69 42 00 01 	movl   $0x1,0x426974
408cdc:	00 00 00
408cdf:	c7 05 80 69 42 00 01 	movl   $0x1,0x426980
408ce6:	00 00 00
408ce9:	6a 04                	push   $0x4
408ceb:	58                   	pop    %eax
408cec:	6b c0 00             	imul   $0x0,%eax,%eax
408cef:	c7 80 84 69 42 00 02 	movl   $0x2,0x426984(%eax)
408cf6:	00 00 00
408cf9:	6a 04                	push   $0x4
408cfb:	58                   	pop    %eax
408cfc:	6b c0 00             	imul   $0x0,%eax,%eax
408cff:	8b 0d 18 60 42 00    	mov    0x426018,%ecx
408d05:	89 4c 05 f8          	mov    %ecx,-0x8(%ebp,%eax,1)
408d09:	6a 04                	push   $0x4
408d0b:	58                   	pop    %eax
408d0c:	c1 e0 00             	shl    $0x0,%eax
408d0f:	8b 0d 14 60 42 00    	mov    0x426014,%ecx
408d15:	89 4c 05 f8          	mov    %ecx,-0x8(%ebp,%eax,1)
408d19:	68 d0 c4 41 00       	push   $0x41c4d0
408d1e:	e8 e0 fe ff ff       	call   0x408c03
408d23:	c9                   	leave
408d24:	c3                   	ret
408d25:	cc                   	int3
408d26:	cc                   	int3
408d27:	cc                   	int3
408d28:	cc                   	int3
408d29:	cc                   	int3
408d2a:	cc                   	int3
408d2b:	cc                   	int3
408d2c:	cc                   	int3
408d2d:	cc                   	int3
408d2e:	cc                   	int3
408d2f:	cc                   	int3
408d30:	55                   	push   %ebp
408d31:	8b ec                	mov    %esp,%ebp
408d33:	56                   	push   %esi
408d34:	8b 75 08             	mov    0x8(%ebp),%esi
408d37:	57                   	push   %edi
408d38:	8b 7d 0c             	mov    0xc(%ebp),%edi
408d3b:	8b 06                	mov    (%esi),%eax
408d3d:	83 f8 fe             	cmp    $0xfffffffe,%eax
408d40:	74 0d                	je     0x408d4f
408d42:	8b 4e 04             	mov    0x4(%esi),%ecx
408d45:	03 cf                	add    %edi,%ecx
408d47:	33 0c 38             	xor    (%eax,%edi,1),%ecx
408d4a:	e8 a6 fe ff ff       	call   0x408bf5
408d4f:	8b 46 08             	mov    0x8(%esi),%eax
408d52:	8b 4e 0c             	mov    0xc(%esi),%ecx
408d55:	03 cf                	add    %edi,%ecx
408d57:	33 0c 38             	xor    (%eax,%edi,1),%ecx
408d5a:	5f                   	pop    %edi
408d5b:	5e                   	pop    %esi
408d5c:	5d                   	pop    %ebp
408d5d:	e9 93 fe ff ff       	jmp    0x408bf5
408d62:	cc                   	int3
408d63:	cc                   	int3
408d64:	cc                   	int3
408d65:	cc                   	int3
408d66:	cc                   	int3
408d67:	cc                   	int3
408d68:	cc                   	int3
408d69:	cc                   	int3
408d6a:	cc                   	int3
408d6b:	cc                   	int3
408d6c:	cc                   	int3
408d6d:	cc                   	int3
408d6e:	cc                   	int3
408d6f:	cc                   	int3
408d70:	55                   	push   %ebp
408d71:	8b ec                	mov    %esp,%ebp
408d73:	83 ec 1c             	sub    $0x1c,%esp
408d76:	53                   	push   %ebx
408d77:	8b 5d 08             	mov    0x8(%ebp),%ebx
408d7a:	56                   	push   %esi
408d7b:	57                   	push   %edi
408d7c:	c6 45 ff 00          	movb   $0x0,-0x1(%ebp)
408d80:	ff 33                	push   (%ebx)
408d82:	c7 45 f4 01 00 00 00 	movl   $0x1,-0xc(%ebp)
408d89:	e8 52 30 01 00       	call   0x41bde0
408d8e:	89 03                	mov    %eax,(%ebx)
408d90:	8b 5d 0c             	mov    0xc(%ebp),%ebx
408d93:	8b 43 08             	mov    0x8(%ebx),%eax
408d96:	8d 73 10             	lea    0x10(%ebx),%esi
408d99:	33 05 18 60 42 00    	xor    0x426018,%eax
408d9f:	56                   	push   %esi
408da0:	50                   	push   %eax
408da1:	89 75 f0             	mov    %esi,-0x10(%ebp)
408da4:	89 45 f8             	mov    %eax,-0x8(%ebp)
408da7:	e8 84 ff ff ff       	call   0x408d30
408dac:	ff 75 10             	push   0x10(%ebp)
408daf:	e8 23 06 00 00       	call   0x4093d7
408db4:	8b 45 08             	mov    0x8(%ebp),%eax
408db7:	83 c4 10             	add    $0x10,%esp
408dba:	8b 7b 0c             	mov    0xc(%ebx),%edi
408dbd:	f6 40 04 66          	testb  $0x66,0x4(%eax)
408dc1:	75 5a                	jne    0x408e1d
408dc3:	89 45 e4             	mov    %eax,-0x1c(%ebp)
408dc6:	8b 45 10             	mov    0x10(%ebp),%eax
408dc9:	89 45 e8             	mov    %eax,-0x18(%ebp)
408dcc:	8d 45 e4             	lea    -0x1c(%ebp),%eax
408dcf:	89 43 fc             	mov    %eax,-0x4(%ebx)
408dd2:	83 ff fe             	cmp    $0xfffffffe,%edi
408dd5:	74 69                	je     0x408e40
408dd7:	8b 4d f8             	mov    -0x8(%ebp),%ecx
408dda:	8d 47 02             	lea    0x2(%edi),%eax
408ddd:	8d 04 47             	lea    (%edi,%eax,2),%eax
408de0:	8b 1c 81             	mov    (%ecx,%eax,4),%ebx
408de3:	8d 04 81             	lea    (%ecx,%eax,4),%eax
408de6:	8b 48 04             	mov    0x4(%eax),%ecx
408de9:	89 45 ec             	mov    %eax,-0x14(%ebp)
408dec:	85 c9                	test   %ecx,%ecx
408dee:	74 14                	je     0x408e04
408df0:	8b d6                	mov    %esi,%edx
408df2:	e8 69 05 00 00       	call   0x409360
408df7:	b1 01                	mov    $0x1,%cl
408df9:	88 4d ff             	mov    %cl,-0x1(%ebp)
408dfc:	85 c0                	test   %eax,%eax
408dfe:	78 14                	js     0x408e14
408e00:	7f 48                	jg     0x408e4a
408e02:	eb 03                	jmp    0x408e07
408e04:	8a 4d ff             	mov    -0x1(%ebp),%cl
408e07:	8b fb                	mov    %ebx,%edi
408e09:	83 fb fe             	cmp    $0xfffffffe,%ebx
408e0c:	75 c9                	jne    0x408dd7
408e0e:	84 c9                	test   %cl,%cl
408e10:	74 2e                	je     0x408e40
408e12:	eb 20                	jmp    0x408e34
408e14:	c7 45 f4 00 00 00 00 	movl   $0x0,-0xc(%ebp)
408e1b:	eb 17                	jmp    0x408e34
408e1d:	83 ff fe             	cmp    $0xfffffffe,%edi
408e20:	74 1e                	je     0x408e40
408e22:	68 18 60 42 00       	push   $0x426018
408e27:	56                   	push   %esi
408e28:	ba fe ff ff ff       	mov    $0xfffffffe,%edx
408e2d:	8b cb                	mov    %ebx,%ecx
408e2f:	e8 8c 05 00 00       	call   0x4093c0
408e34:	56                   	push   %esi
408e35:	ff 75 f8             	push   -0x8(%ebp)
408e38:	e8 f3 fe ff ff       	call   0x408d30
408e3d:	83 c4 08             	add    $0x8,%esp
408e40:	8b 45 f4             	mov    -0xc(%ebp),%eax
408e43:	5f                   	pop    %edi
408e44:	5e                   	pop    %esi
408e45:	5b                   	pop    %ebx
408e46:	8b e5                	mov    %ebp,%esp
408e48:	5d                   	pop    %ebp
408e49:	c3                   	ret
408e4a:	8b 45 08             	mov    0x8(%ebp),%eax
408e4d:	0f ae e8             	lfence
408e50:	81 38 63 73 6d e0    	cmpl   $0xe06d7363,(%eax)
408e56:	75 38                	jne    0x408e90
408e58:	83 3d d8 c4 41 00 00 	cmpl   $0x0,0x41c4d8
408e5f:	74 2f                	je     0x408e90
408e61:	68 d8 c4 41 00       	push   $0x41c4d8
408e66:	e8 c5 01 01 00       	call   0x419030
408e6b:	83 c4 04             	add    $0x4,%esp
408e6e:	85 c0                	test   %eax,%eax
408e70:	74 1b                	je     0x408e8d
408e72:	8b 35 d8 c4 41 00    	mov    0x41c4d8,%esi
408e78:	8b ce                	mov    %esi,%ecx
408e7a:	6a 01                	push   $0x1
408e7c:	ff 75 08             	push   0x8(%ebp)
408e7f:	ff 15 50 c2 41 00    	call   *0x41c250
408e85:	ff d6                	call   *%esi
408e87:	8b 75 f0             	mov    -0x10(%ebp),%esi
408e8a:	83 c4 08             	add    $0x8,%esp
408e8d:	8b 45 08             	mov    0x8(%ebp),%eax
408e90:	8b 4d 0c             	mov    0xc(%ebp),%ecx
408e93:	8b d0                	mov    %eax,%edx
408e95:	e8 06 05 00 00       	call   0x4093a0
408e9a:	8b 45 0c             	mov    0xc(%ebp),%eax
408e9d:	39 78 0c             	cmp    %edi,0xc(%eax)
408ea0:	74 12                	je     0x408eb4
408ea2:	68 18 60 42 00       	push   $0x426018
408ea7:	56                   	push   %esi
408ea8:	8b d7                	mov    %edi,%edx
408eaa:	8b c8                	mov    %eax,%ecx
408eac:	e8 0f 05 00 00       	call   0x4093c0
408eb1:	8b 45 0c             	mov    0xc(%ebp),%eax
408eb4:	56                   	push   %esi
408eb5:	ff 75 f8             	push   -0x8(%ebp)
408eb8:	89 58 0c             	mov    %ebx,0xc(%eax)
408ebb:	e8 70 fe ff ff       	call   0x408d30
408ec0:	8b 4d ec             	mov    -0x14(%ebp),%ecx
408ec3:	83 c4 08             	add    $0x8,%esp
408ec6:	8b d6                	mov    %esi,%edx
408ec8:	8b 49 08             	mov    0x8(%ecx),%ecx
408ecb:	e8 b0 04 00 00       	call   0x409380
408ed0:	cc                   	int3
408ed1:	e8 44 06 00 00       	call   0x40951a
408ed6:	84 c0                	test   %al,%al
408ed8:	75 03                	jne    0x408edd
408eda:	32 c0                	xor    %al,%al
408edc:	c3                   	ret
408edd:	e8 ea 05 00 00       	call   0x4094cc
408ee2:	84 c0                	test   %al,%al
408ee4:	75 07                	jne    0x408eed
408ee6:	e8 6b 06 00 00       	call   0x409556
408eeb:	eb ed                	jmp    0x408eda
408eed:	b0 01                	mov    $0x1,%al
408eef:	c3                   	ret
408ef0:	55                   	push   %ebp
408ef1:	8b ec                	mov    %esp,%ebp
408ef3:	80 7d 08 00          	cmpb   $0x0,0x8(%ebp)
408ef7:	75 0a                	jne    0x408f03
408ef9:	e8 01 06 00 00       	call   0x4094ff
408efe:	e8 53 06 00 00       	call   0x409556
408f03:	b0 01                	mov    $0x1,%al
408f05:	5d                   	pop    %ebp
408f06:	c3                   	ret
408f07:	55                   	push   %ebp
408f08:	8b ec                	mov    %esp,%ebp
408f0a:	8b 45 08             	mov    0x8(%ebp),%eax
408f0d:	8b 4d 0c             	mov    0xc(%ebp),%ecx
408f10:	3b c1                	cmp    %ecx,%eax
408f12:	75 04                	jne    0x408f18
408f14:	33 c0                	xor    %eax,%eax
408f16:	5d                   	pop    %ebp
408f17:	c3                   	ret
408f18:	83 c1 05             	add    $0x5,%ecx
408f1b:	83 c0 05             	add    $0x5,%eax
408f1e:	8a 10                	mov    (%eax),%dl
408f20:	3a 11                	cmp    (%ecx),%dl
408f22:	75 18                	jne    0x408f3c
408f24:	84 d2                	test   %dl,%dl
408f26:	74 ec                	je     0x408f14
408f28:	8a 50 01             	mov    0x1(%eax),%dl
408f2b:	3a 51 01             	cmp    0x1(%ecx),%dl
408f2e:	75 0c                	jne    0x408f3c
408f30:	83 c0 02             	add    $0x2,%eax
408f33:	83 c1 02             	add    $0x2,%ecx
408f36:	84 d2                	test   %dl,%dl
408f38:	75 e4                	jne    0x408f1e
408f3a:	eb d8                	jmp    0x408f14
408f3c:	1b c0                	sbb    %eax,%eax
408f3e:	83 c8 01             	or     $0x1,%eax