40636d:	b9 8c 00 00 c0       	mov    $0xc000008c,%ecx
406372:	e8 9c ff ff ff       	call   0x406313
406377:	cc                   	int3
406378:	8b ff                	mov    %edi,%edi
40637a:	55                   	push   %ebp
40637b:	8b ec                	mov    %esp,%ebp
40637d:	53                   	push   %ebx
40637e:	56                   	push   %esi
40637f:	57                   	push   %edi
406380:	8b f9                	mov    %ecx,%edi
406382:	8b 4d 0c             	mov    0xc(%ebp),%ecx
406385:	8b 17                	mov    (%edi),%edx
406387:	8d 41 01             	lea    0x1(%ecx),%eax
40638a:	03 c2                	add    %edx,%eax
40638c:	3b c2                	cmp    %edx,%eax
40638e:	0f 8e 8c 00 00 00    	jle    0x406420
406394:	3b c1                	cmp    %ecx,%eax
406396:	0f 8e 84 00 00 00    	jle    0x406420
40639c:	8b 77 04             	mov    0x4(%edi),%esi
40639f:	3b c6                	cmp    %esi,%eax
4063a1:	7c 36                	jl     0x4063d9
4063a3:	81 fe ff ff ff 3f    	cmp    $0x3fffffff,%esi
4063a9:	7f 75                	jg     0x406420
4063ab:	03 f6                	add    %esi,%esi
4063ad:	3b c6                	cmp    %esi,%eax
4063af:	7d f2                	jge    0x4063a3
4063b1:	6a 02                	push   $0x2
4063b3:	8b c6                	mov    %esi,%eax
4063b5:	59                   	pop    %ecx
4063b6:	f7 e1                	mul    %ecx
4063b8:	85 d2                	test   %edx,%edx
4063ba:	77 64                	ja     0x406420
4063bc:	72 05                	jb     0x4063c3
4063be:	83 f8 ff             	cmp    $0xffffffff,%eax
4063c1:	77 5d                	ja     0x406420
4063c3:	50                   	push   %eax
4063c4:	ff 77 08             	push   0x8(%edi)
4063c7:	ff 15 2c f1 40 00    	call   *0x40f12c
4063cd:	85 c0                	test   %eax,%eax
4063cf:	74 4f                	je     0x406420
4063d1:	8b 17                	mov    (%edi),%edx
4063d3:	89 47 08             	mov    %eax,0x8(%edi)
4063d6:	89 77 04             	mov    %esi,0x4(%edi)
4063d9:	85 d2                	test   %edx,%edx
4063db:	78 43                	js     0x406420
4063dd:	3b d6                	cmp    %esi,%edx
4063df:	7d 3f                	jge    0x406420
4063e1:	8b de                	mov    %esi,%ebx
4063e3:	2b da                	sub    %edx,%ebx
4063e5:	3b de                	cmp    %esi,%ebx
4063e7:	7f 37                	jg     0x406420
4063e9:	8b 47 08             	mov    0x8(%edi),%eax
4063ec:	8b 75 0c             	mov    0xc(%ebp),%esi
4063ef:	8d 0c 50             	lea    (%eax,%edx,2),%ecx
4063f2:	8d 04 36             	lea    (%esi,%esi,1),%eax
4063f5:	50                   	push   %eax
4063f6:	ff 75 08             	push   0x8(%ebp)
4063f9:	8d 04 1b             	lea    (%ebx,%ebx,1),%eax
4063fc:	50                   	push   %eax
4063fd:	51                   	push   %ecx
4063fe:	ff 15 ec f1 40 00    	call   *0x40f1ec
406404:	83 c4 10             	add    $0x10,%esp
406407:	8b c8                	mov    %eax,%ecx
406409:	e8 5b 07 00 00       	call   0x406b69
40640e:	01 37                	add    %esi,(%edi)
406410:	33 d2                	xor    %edx,%edx
406412:	8b 47 08             	mov    0x8(%edi),%eax
406415:	8b 0f                	mov    (%edi),%ecx
406417:	66 89 14 48          	mov    %dx,(%eax,%ecx,2)
40641b:	33 c0                	xor    %eax,%eax
40641d:	40                   	inc    %eax
40641e:	eb 02                	jmp    0x406422
406420:	33 c0                	xor    %eax,%eax
406422:	5f                   	pop    %edi
406423:	5e                   	pop    %esi
406424:	5b                   	pop    %ebx
406425:	5d                   	pop    %ebp
406426:	c2 08 00             	ret    $0x8
406429:	6a 5c                	push   $0x5c
40642b:	b8 b5 a5 40 00       	mov    $0x40a5b5,%eax
406430:	e8 cc 39 00 00       	call   0x409e01
406435:	8b f9                	mov    %ecx,%edi
406437:	8b 75 08             	mov    0x8(%ebp),%esi
40643a:	8b 45 0c             	mov    0xc(%ebp),%eax
40643d:	89 45 98             	mov    %eax,-0x68(%ebp)
406440:	85 f6                	test   %esi,%esi
406442:	0f 84 96 01 00 00    	je     0x4065de
406448:	85 c0                	test   %eax,%eax
40644a:	0f 84 8e 01 00 00    	je     0x4065de
406450:	8b ce                	mov    %esi,%ecx
406452:	33 db                	xor    %ebx,%ebx
406454:	89 18                	mov    %ebx,(%eax)
406456:	8d 51 02             	lea    0x2(%ecx),%edx
406459:	66 8b 01             	mov    (%ecx),%ax
40645c:	83 c1 02             	add    $0x2,%ecx
40645f:	66 3b c3             	cmp    %bx,%ax
406462:	75 f5                	jne    0x406459
406464:	2b ca                	sub    %edx,%ecx
406466:	d1 f9                	sar    $1,%ecx
406468:	8d 04 09             	lea    (%ecx,%ecx,1),%eax
40646b:	83 f8 64             	cmp    $0x64,%eax
40646e:	7d 05                	jge    0x406475
406470:	b8 e8 03 00 00       	mov    $0x3e8,%eax
406475:	6a 02                	push   $0x2
406477:	59                   	pop    %ecx
406478:	89 45 a8             	mov    %eax,-0x58(%ebp)
40647b:	f7 e1                	mul    %ecx
40647d:	89 5d a4             	mov    %ebx,-0x5c(%ebp)
406480:	3b d3                	cmp    %ebx,%edx
406482:	77 1c                	ja     0x4064a0
406484:	72 05                	jb     0x40648b
406486:	83 f8 ff             	cmp    $0xffffffff,%eax
406489:	77 15                	ja     0x4064a0
40648b:	50                   	push   %eax
40648c:	ff 15 0c f1 40 00    	call   *0x40f10c
406492:	89 45 ac             	mov    %eax,-0x54(%ebp)
406495:	85 c0                	test   %eax,%eax
406497:	74 0c                	je     0x4064a5
406499:	33 c9                	xor    %ecx,%ecx
40649b:	66 89 08             	mov    %cx,(%eax)
40649e:	eb 05                	jmp    0x4064a5
4064a0:	8b c3                	mov    %ebx,%eax
4064a2:	89 5d ac             	mov    %ebx,-0x54(%ebp)
4064a5:	89 5d fc             	mov    %ebx,-0x4(%ebp)
4064a8:	85 c0                	test   %eax,%eax
4064aa:	75 0a                	jne    0x4064b6
4064ac:	bb 0e 00 07 80       	mov    $0x8007000e,%ebx
4064b1:	e9 1b 01 00 00       	jmp    0x4065d1
4064b6:	89 37                	mov    %esi,(%edi)
4064b8:	0f b7 06             	movzwl (%esi),%eax
4064bb:	8b c8                	mov    %eax,%ecx
4064bd:	66 85 c0             	test   %ax,%ax
4064c0:	0f 84 00 01 00 00    	je     0x4065c6
4064c6:	6a 25                	push   $0x25
4064c8:	59                   	pop    %ecx
4064c9:	66 3b c1             	cmp    %cx,%ax
4064cc:	0f 85 ba 00 00 00    	jne    0x40658c
4064d2:	56                   	push   %esi
4064d3:	ff 15 f8 f0 40 00    	call   *0x40f0f8
4064d9:	6a 25                	push   $0x25
4064db:	5a                   	pop    %edx
4064dc:	89 07                	mov    %eax,(%edi)
4064de:	66 39 10             	cmp    %dx,(%eax)
4064e1:	75 08                	jne    0x4064eb
4064e3:	6a 01                	push   $0x1
4064e5:	50                   	push   %eax
4064e6:	e9 a4 00 00 00       	jmp    0x40658f
4064eb:	8b c8                	mov    %eax,%ecx
4064ed:	e8 f9 00 00 00       	call   0x4065eb
4064f2:	89 45 9c             	mov    %eax,-0x64(%ebp)
4064f5:	85 c0                	test   %eax,%eax
4064f7:	0f 84 c2 00 00 00    	je     0x4065bf
4064fd:	8b c8                	mov    %eax,%ecx
4064ff:	2b 0f                	sub    (%edi),%ecx
406501:	d1 f9                	sar    $1,%ecx
406503:	83 f9 1f             	cmp    $0x1f,%ecx
406506:	0f 8f ac 00 00 00    	jg     0x4065b8
40650c:	51                   	push   %ecx
40650d:	ff 37                	push   (%edi)
40650f:	8d 45 b0             	lea    -0x50(%ebp),%eax
406512:	6a 20                	push   $0x20
406514:	50                   	push   %eax
406515:	ff 15 f8 f1 40 00    	call   *0x40f1f8
40651b:	83 c4 10             	add    $0x10,%esp
40651e:	8b c8                	mov    %eax,%ecx
406520:	e8 44 06 00 00       	call   0x406b69
406525:	8b 4f 04             	mov    0x4(%edi),%ecx
406528:	8d 45 b0             	lea    -0x50(%ebp),%eax
40652b:	50                   	push   %eax
40652c:	e8 f0 fd ff ff       	call   0x406321
406531:	8b d0                	mov    %eax,%edx
406533:	85 d2                	test   %edx,%edx
406535:	0f 84 84 00 00 00    	je     0x4065bf
40653b:	89 5d a0             	mov    %ebx,-0x60(%ebp)
40653e:	8b ca                	mov    %edx,%ecx
406540:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
406544:	8d 71 02             	lea    0x2(%ecx),%esi
406547:	66 8b 01             	mov    (%ecx),%ax
40654a:	83 c1 02             	add    $0x2,%ecx
40654d:	66 3b c3             	cmp    %bx,%ax
406550:	75 f5                	jne    0x406547
406552:	2b ce                	sub    %esi,%ecx
406554:	d1 f9                	sar    $1,%ecx
406556:	51                   	push   %ecx
406557:	52                   	push   %edx
406558:	8d 4d a4             	lea    -0x5c(%ebp),%ecx
40655b:	e8 18 fe ff ff       	call   0x406378
406560:	8d 4d a0             	lea    -0x60(%ebp),%ecx
406563:	88 5d fc             	mov    %bl,-0x4(%ebp)
406566:	8b f0                	mov    %eax,%esi
406568:	e8 1f 01 00 00       	call   0x40668c
40656d:	85 f6                	test   %esi,%esi
40656f:	0f 84 37 ff ff ff    	je     0x4064ac
406575:	8b 75 9c             	mov    -0x64(%ebp),%esi
406578:	39 37                	cmp    %esi,(%edi)
40657a:	74 23                	je     0x40659f
40657c:	ff 37                	push   (%edi)
40657e:	ff 15 f8 f0 40 00    	call   *0x40f0f8
406584:	89 07                	mov    %eax,(%edi)
406586:	3b c6                	cmp    %esi,%eax
406588:	75 f2                	jne    0x40657c
40658a:	eb 13                	jmp    0x40659f
40658c:	6a 01                	push   $0x1
40658e:	56                   	push   %esi
40658f:	8d 4d a4             	lea    -0x5c(%ebp),%ecx
406592:	e8 e1 fd ff ff       	call   0x406378
406597:	85 c0                	test   %eax,%eax
406599:	0f 84 0d ff ff ff    	je     0x4064ac
40659f:	ff 37                	push   (%edi)
4065a1:	ff 15 f8 f0 40 00    	call   *0x40f0f8
4065a7:	8b f0                	mov    %eax,%esi
4065a9:	89 37                	mov    %esi,(%edi)
4065ab:	0f b7 0e             	movzwl (%esi),%ecx
4065ae:	8b c1                	mov    %ecx,%eax
4065b0:	66 85 c9             	test   %cx,%cx
4065b3:	e9 08 ff ff ff       	jmp    0x4064c0
4065b8:	bb 05 40 00 80       	mov    $0x80004005,%ebx
4065bd:	eb 12                	jmp    0x4065d1
4065bf:	bb 09 00 02 80       	mov    $0x80020009,%ebx
4065c4:	eb 0b                	jmp    0x4065d1
4065c6:	8b 45 98             	mov    -0x68(%ebp),%eax
4065c9:	8b 4d ac             	mov    -0x54(%ebp),%ecx
4065cc:	89 5d ac             	mov    %ebx,-0x54(%ebp)
4065cf:	89 08                	mov    %ecx,(%eax)
4065d1:	ff 75 ac             	push   -0x54(%ebp)
4065d4:	ff 15 28 f1 40 00    	call   *0x40f128
4065da:	8b c3                	mov    %ebx,%eax
4065dc:	eb 05                	jmp    0x4065e3
4065de:	b8 03 40 00 80       	mov    $0x80004003,%eax
4065e3:	e8 c8 37 00 00       	call   0x409db0
4065e8:	c2 08 00             	ret    $0x8
4065eb:	8b ff                	mov    %edi,%edi
4065ed:	56                   	push   %esi
4065ee:	33 f6                	xor    %esi,%esi
4065f0:	57                   	push   %edi
4065f1:	66 8b fa             	mov    %dx,%di
4065f4:	85 c9                	test   %ecx,%ecx
4065f6:	75 04                	jne    0x4065fc
4065f8:	33 c0                	xor    %eax,%eax
4065fa:	eb 28                	jmp    0x406624
4065fc:	0f b7 01             	movzwl (%ecx),%eax
4065ff:	66 85 c0             	test   %ax,%ax
406602:	74 1e                	je     0x406622
406604:	8b d0                	mov    %eax,%edx
406606:	66 3b d7             	cmp    %di,%dx
406609:	74 15                	je     0x406620
40660b:	51                   	push   %ecx
40660c:	ff 15 f8 f0 40 00    	call   *0x40f0f8
406612:	8b c8                	mov    %eax,%ecx
406614:	0f b7 01             	movzwl (%ecx),%eax
406617:	8b d0                	mov    %eax,%edx
406619:	66 85 c0             	test   %ax,%ax
40661c:	75 e8                	jne    0x406606
40661e:	eb 02                	jmp    0x406622
406620:	8b f1                	mov    %ecx,%esi
406622:	8b c6                	mov    %esi,%eax
406624:	5f                   	pop    %edi
406625:	5e                   	pop    %esi
406626:	c3                   	ret
406627:	8b ff                	mov    %edi,%edi
406629:	55                   	push   %ebp
40662a:	8b ec                	mov    %esp,%ebp
40662c:	51                   	push   %ecx
40662d:	51                   	push   %ecx
40662e:	8b 55 0c             	mov    0xc(%ebp),%edx
406631:	53                   	push   %ebx
406632:	8b d9                	mov    %ecx,%ebx
406634:	56                   	push   %esi
406635:	57                   	push   %edi
406636:	85 d2                	test   %edx,%edx
406638:	74 47                	je     0x406681
40663a:	33 c0                	xor    %eax,%eax
40663c:	8b fa                	mov    %edx,%edi
40663e:	89 45 fc             	mov    %eax,-0x4(%ebp)
406641:	8b f0                	mov    %eax,%esi
406643:	8b cf                	mov    %edi,%ecx
406645:	8d 41 02             	lea    0x2(%ecx),%eax
406648:	89 45 f8             	mov    %eax,-0x8(%ebp)
40664b:	66 8b 01             	mov    (%ecx),%ax
40664e:	83 c1 02             	add    $0x2,%ecx
406651:	66 3b 45 fc          	cmp    -0x4(%ebp),%ax
406655:	75 f4                	jne    0x40664b
406657:	2b 4d f8             	sub    -0x8(%ebp),%ecx
40665a:	d1 f9                	sar    $1,%ecx
40665c:	41                   	inc    %ecx
40665d:	8d 3c 4f             	lea    (%edi,%ecx,2),%edi
406660:	8d 34 4e             	lea    (%esi,%ecx,2),%esi
406663:	83 f9 01             	cmp    $0x1,%ecx
406666:	75 db                	jne    0x406643
406668:	56                   	push   %esi
406669:	52                   	push   %edx
40666a:	6a 07                	push   $0x7
40666c:	33 c0                	xor    %eax,%eax
40666e:	50                   	push   %eax
40666f:	ff 75 08             	push   0x8(%ebp)
406672:	ff 33                	push   (%ebx)
406674:	ff 15 10 f0 40 00    	call   *0x40f010
40667a:	5f                   	pop    %edi
40667b:	5e                   	pop    %esi
40667c:	5b                   	pop    %ebx
40667d:	c9                   	leave
40667e:	c2 08 00             	ret    $0x8
406681:	b9 05 40 00 80       	mov    $0x80004005,%ecx
406686:	e8 c1 04 00 00       	call   0x406b4c
40668b:	cc                   	int3
40668c:	8b ff                	mov    %edi,%edi
40668e:	56                   	push   %esi
40668f:	8b f1                	mov    %ecx,%esi
406691:	eb 0e                	jmp    0x4066a1
406693:	8b 16                	mov    (%esi),%edx
406695:	52                   	push   %edx
406696:	8b 02                	mov    (%edx),%eax
406698:	89 06                	mov    %eax,(%esi)
40669a:	ff 15 f0 f1 40 00    	call   *0x40f1f0
4066a0:	59                   	pop    %ecx
4066a1:	83 3e 00             	cmpl   $0x0,(%esi)
4066a4:	75 ed                	jne    0x406693
4066a6:	5e                   	pop    %esi
4066a7:	c3                   	ret
4066a8:	8b ff                	mov    %edi,%edi
4066aa:	55                   	push   %ebp
4066ab:	8b ec                	mov    %esp,%ebp
4066ad:	6a ff                	push   $0xffffffff
4066af:	68 f0 a5 40 00       	push   $0x40a5f0
4066b4:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
4066ba:	50                   	push   %eax
4066bb:	51                   	push   %ecx
4066bc:	b8 28 21 00 00       	mov    $0x2128,%eax
4066c1:	e8 ea 3c 00 00       	call   0x40a3b0
4066c6:	a1 e4 c1 40 00       	mov    0x40c1e4,%eax
4066cb:	33 c5                	xor    %ebp,%eax
4066cd:	89 45 ec             	mov    %eax,-0x14(%ebp)
4066d0:	53                   	push   %ebx
4066d1:	56                   	push   %esi
4066d2:	57                   	push   %edi
4066d3:	50                   	push   %eax
4066d4:	8d 45 f4             	lea    -0xc(%ebp),%eax
4066d7:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
4066dd:	89 65 f0             	mov    %esp,-0x10(%ebp)
4066e0:	8b f9                	mov    %ecx,%edi
4066e2:	89 bd d0 de ff ff    	mov    %edi,-0x2130(%ebp)
4066e8:	8b 45 08             	mov    0x8(%ebp),%eax
4066eb:	89 85 dc de ff ff    	mov    %eax,-0x2124(%ebp)
4066f1:	8b 45 0c             	mov    0xc(%ebp),%eax
4066f4:	89 85 e0 de ff ff    	mov    %eax,-0x2120(%ebp)
4066fa:	8b 45 10             	mov    0x10(%ebp),%eax
4066fd:	89 85 c8 de ff ff    	mov    %eax,-0x2138(%ebp)
406703:	8d 85 ec df ff ff    	lea    -0x2014(%ebp),%eax
406709:	50                   	push   %eax
40670a:	89 bd d8 de ff ff    	mov    %edi,-0x2128(%ebp)