407fd7:	8b f8                	mov    %eax,%edi
407fd9:	b8 00 80 00 00       	mov    $0x8000,%eax
407fde:	66 89 07             	mov    %ax,(%edi)
407fe1:	0f b6 01             	movzbl (%ecx),%eax
407fe4:	42                   	inc    %edx
407fe5:	8d 7f 02             	lea    0x2(%edi),%edi
407fe8:	3b d0                	cmp    %eax,%edx
407fea:	7e ed                	jle    0x407fd9
407fec:	8b 7d e0             	mov    -0x20(%ebp),%edi
407fef:	83 c1 02             	add    $0x2,%ecx
407ff2:	38 59 ff             	cmp    %bl,-0x1(%ecx)
407ff5:	75 c3                	jne    0x407fba
407ff7:	68 fe 00 00 00       	push   $0xfe
407ffc:	8d 87 00 02 00 00    	lea    0x200(%edi),%eax
408002:	50                   	push   %eax
408003:	57                   	push   %edi
408004:	e8 97 d6 ff ff       	call   0x4056a0
408009:	8b 4d dc             	mov    -0x24(%ebp),%ecx
40800c:	6a 7f                	push   $0x7f
40800e:	8d 81 00 01 00 00    	lea    0x100(%ecx),%eax
408014:	50                   	push   %eax
408015:	51                   	push   %ecx
408016:	e8 85 d6 ff ff       	call   0x4056a0
40801b:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
40801e:	6a 7f                	push   $0x7f
408020:	8d 81 00 01 00 00    	lea    0x100(%ecx),%eax
408026:	50                   	push   %eax
408027:	51                   	push   %ecx
408028:	e8 73 d6 ff ff       	call   0x4056a0
40802d:	8b 86 88 00 00 00    	mov    0x88(%esi),%eax
408033:	83 c4 24             	add    $0x24,%esp
408036:	85 c0                	test   %eax,%eax
408038:	74 48                	je     0x408082
40803a:	50                   	push   %eax
40803b:	ff 15 54 90 41 00    	call   *0x419054
408041:	85 c0                	test   %eax,%eax
408043:	75 3d                	jne    0x408082
408045:	8b 86 8c 00 00 00    	mov    0x8c(%esi),%eax
40804b:	2d fe 00 00 00       	sub    $0xfe,%eax
408050:	50                   	push   %eax
408051:	e8 c2 d0 ff ff       	call   0x405118
408056:	8b 86 94 00 00 00    	mov    0x94(%esi),%eax
40805c:	83 c0 80             	add    $0xffffff80,%eax
40805f:	50                   	push   %eax
408060:	e8 b3 d0 ff ff       	call   0x405118
408065:	8b 86 98 00 00 00    	mov    0x98(%esi),%eax
40806b:	83 c0 80             	add    $0xffffff80,%eax
40806e:	50                   	push   %eax
40806f:	e8 a4 d0 ff ff       	call   0x405118
408074:	ff b6 88 00 00 00    	push   0x88(%esi)
40807a:	e8 99 d0 ff ff       	call   0x405118
40807f:	83 c4 10             	add    $0x10,%esp
408082:	8b 45 d4             	mov    -0x2c(%ebp),%eax
408085:	c7 00 01 00 00 00    	movl   $0x1,(%eax)
40808b:	89 86 88 00 00 00    	mov    %eax,0x88(%esi)
408091:	8d 87 00 01 00 00    	lea    0x100(%edi),%eax
408097:	89 86 90 00 00 00    	mov    %eax,0x90(%esi)
40809d:	8d 87 fe 00 00 00    	lea    0xfe(%edi),%eax
4080a3:	89 86 8c 00 00 00    	mov    %eax,0x8c(%esi)
4080a9:	8b 45 c4             	mov    -0x3c(%ebp),%eax
4080ac:	89 86 94 00 00 00    	mov    %eax,0x94(%esi)
4080b2:	8b 45 c8             	mov    -0x38(%ebp),%eax
4080b5:	89 86 98 00 00 00    	mov    %eax,0x98(%esi)
4080bb:	8b 45 d0             	mov    -0x30(%ebp),%eax
4080be:	89 46 74             	mov    %eax,0x74(%esi)
4080c1:	eb 26                	jmp    0x4080e9
4080c3:	ff 75 d4             	push   -0x2c(%ebp)
4080c6:	e8 4d d0 ff ff       	call   0x405118
4080cb:	ff 75 e0             	push   -0x20(%ebp)
4080ce:	e8 45 d0 ff ff       	call   0x405118
4080d3:	ff 75 dc             	push   -0x24(%ebp)
4080d6:	e8 3d d0 ff ff       	call   0x405118
4080db:	ff 75 e4             	push   -0x1c(%ebp)
4080de:	e8 35 d0 ff ff       	call   0x405118
4080e3:	33 db                	xor    %ebx,%ebx
4080e5:	83 c4 10             	add    $0x10,%esp
4080e8:	43                   	inc    %ebx
4080e9:	ff 75 d8             	push   -0x28(%ebp)
4080ec:	e8 27 d0 ff ff       	call   0x405118
4080f1:	59                   	pop    %ecx
4080f2:	8b c3                	mov    %ebx,%eax
4080f4:	5f                   	pop    %edi
4080f5:	eb 44                	jmp    0x40813b
4080f7:	8b 86 88 00 00 00    	mov    0x88(%esi),%eax
4080fd:	85 c0                	test   %eax,%eax
4080ff:	74 07                	je     0x408108
408101:	50                   	push   %eax
408102:	ff 15 54 90 41 00    	call   *0x419054
408108:	89 9e 88 00 00 00    	mov    %ebx,0x88(%esi)
40810e:	89 9e 8c 00 00 00    	mov    %ebx,0x8c(%esi)
408114:	c7 86 90 00 00 00 40 	movl   $0x41a440,0x90(%esi)
40811b:	a4 41 00
40811e:	c7 86 94 00 00 00 c8 	movl   $0x41a8c8,0x94(%esi)
408125:	a8 41 00
408128:	c7 86 98 00 00 00 48 	movl   $0x41aa48,0x98(%esi)
40812f:	aa 41 00
408132:	c7 46 74 01 00 00 00 	movl   $0x1,0x74(%esi)
408139:	33 c0                	xor    %eax,%eax
40813b:	8b 4d fc             	mov    -0x4(%ebp),%ecx
40813e:	5e                   	pop    %esi
40813f:	33 cd                	xor    %ebp,%ecx
408141:	5b                   	pop    %ebx
408142:	e8 f2 c5 ff ff       	call   0x404739
408147:	c9                   	leave
408148:	c3                   	ret
408149:	e8 a0 42 00 00       	call   0x40c3ee
40814e:	85 c0                	test   %eax,%eax
408150:	75 06                	jne    0x408158
408152:	b8 5c 07 42 00       	mov    $0x42075c,%eax
408157:	c3                   	ret
408158:	83 c0 0c             	add    $0xc,%eax
40815b:	c3                   	ret
40815c:	55                   	push   %ebp
40815d:	8b ec                	mov    %esp,%ebp
40815f:	56                   	push   %esi
408160:	e8 e4 ff ff ff       	call   0x408149
408165:	8b 4d 08             	mov    0x8(%ebp),%ecx
408168:	51                   	push   %ecx
408169:	89 08                	mov    %ecx,(%eax)
40816b:	e8 20 00 00 00       	call   0x408190
408170:	59                   	pop    %ecx
408171:	8b f0                	mov    %eax,%esi
408173:	e8 05 00 00 00       	call   0x40817d
408178:	89 30                	mov    %esi,(%eax)
40817a:	5e                   	pop    %esi
40817b:	5d                   	pop    %ebp
40817c:	c3                   	ret
40817d:	e8 6c 42 00 00       	call   0x40c3ee
408182:	85 c0                	test   %eax,%eax
408184:	75 06                	jne    0x40818c
408186:	b8 58 07 42 00       	mov    $0x420758,%eax
40818b:	c3                   	ret
40818c:	83 c0 08             	add    $0x8,%eax
40818f:	c3                   	ret
408190:	55                   	push   %ebp
408191:	8b ec                	mov    %esp,%ebp
408193:	8b 4d 08             	mov    0x8(%ebp),%ecx
408196:	33 c0                	xor    %eax,%eax
408198:	3b 0c c5 f0 05 42 00 	cmp    0x4205f0(,%eax,8),%ecx
40819f:	74 27                	je     0x4081c8
4081a1:	40                   	inc    %eax
4081a2:	83 f8 2d             	cmp    $0x2d,%eax
4081a5:	72 f1                	jb     0x408198
4081a7:	8d 41 ed             	lea    -0x13(%ecx),%eax
4081aa:	83 f8 11             	cmp    $0x11,%eax
4081ad:	77 05                	ja     0x4081b4
4081af:	6a 0d                	push   $0xd
4081b1:	58                   	pop    %eax
4081b2:	5d                   	pop    %ebp
4081b3:	c3                   	ret
4081b4:	8d 81 44 ff ff ff    	lea    -0xbc(%ecx),%eax
4081ba:	6a 0e                	push   $0xe
4081bc:	59                   	pop    %ecx
4081bd:	3b c8                	cmp    %eax,%ecx
4081bf:	1b c0                	sbb    %eax,%eax
4081c1:	23 c1                	and    %ecx,%eax
4081c3:	83 c0 08             	add    $0x8,%eax
4081c6:	5d                   	pop    %ebp
4081c7:	c3                   	ret
4081c8:	8b 04 c5 f4 05 42 00 	mov    0x4205f4(,%eax,8),%eax
4081cf:	5d                   	pop    %ebp
4081d0:	c3                   	ret
4081d1:	55                   	push   %ebp
4081d2:	8b ec                	mov    %esp,%ebp
4081d4:	83 ec 10             	sub    $0x10,%esp
4081d7:	56                   	push   %esi
4081d8:	ff 75 08             	push   0x8(%ebp)
4081db:	8d 4d f0             	lea    -0x10(%ebp),%ecx
4081de:	e8 1a d0 ff ff       	call   0x4051fd
4081e3:	0f b6 75 0c          	movzbl 0xc(%ebp),%esi
4081e7:	8b 45 f4             	mov    -0xc(%ebp),%eax
4081ea:	8a 4d 14             	mov    0x14(%ebp),%cl
4081ed:	84 4c 30 19          	test   %cl,0x19(%eax,%esi,1)
4081f1:	75 1f                	jne    0x408212
4081f3:	33 d2                	xor    %edx,%edx
4081f5:	39 55 10             	cmp    %edx,0x10(%ebp)
4081f8:	74 12                	je     0x40820c
4081fa:	8b 45 f0             	mov    -0x10(%ebp),%eax
4081fd:	8b 80 90 00 00 00    	mov    0x90(%eax),%eax
408203:	0f b7 04 70          	movzwl (%eax,%esi,2),%eax
408207:	23 45 10             	and    0x10(%ebp),%eax
40820a:	eb 02                	jmp    0x40820e
40820c:	8b c2                	mov    %edx,%eax
40820e:	85 c0                	test   %eax,%eax
408210:	74 03                	je     0x408215
408212:	33 d2                	xor    %edx,%edx
408214:	42                   	inc    %edx
408215:	80 7d fc 00          	cmpb   $0x0,-0x4(%ebp)
408219:	5e                   	pop    %esi
40821a:	74 07                	je     0x408223
40821c:	8b 4d f8             	mov    -0x8(%ebp),%ecx
40821f:	83 61 70 fd          	andl   $0xfffffffd,0x70(%ecx)
408223:	8b c2                	mov    %edx,%eax
408225:	c9                   	leave
408226:	c3                   	ret
408227:	55                   	push   %ebp
408228:	8b ec                	mov    %esp,%ebp
40822a:	6a 04                	push   $0x4
40822c:	6a 00                	push   $0x0
40822e:	ff 75 08             	push   0x8(%ebp)
408231:	6a 00                	push   $0x0
408233:	e8 99 ff ff ff       	call   0x4081d1
408238:	83 c4 10             	add    $0x10,%esp
40823b:	5d                   	pop    %ebp
40823c:	c3                   	ret
40823d:	55                   	push   %ebp
40823e:	8b ec                	mov    %esp,%ebp
408240:	56                   	push   %esi
408241:	8b 75 08             	mov    0x8(%ebp),%esi
408244:	83 fe e0             	cmp    $0xffffffe0,%esi
408247:	77 6f                	ja     0x4082b8
408249:	53                   	push   %ebx
40824a:	57                   	push   %edi
40824b:	a1 54 27 42 00       	mov    0x422754,%eax
408250:	85 c0                	test   %eax,%eax
408252:	75 1d                	jne    0x408271
408254:	e8 4c 2d 00 00       	call   0x40afa5
408259:	6a 1e                	push   $0x1e
40825b:	e8 a2 2d 00 00       	call   0x40b002
408260:	68 ff 00 00 00       	push   $0xff
408265:	e8 4b 28 00 00       	call   0x40aab5
40826a:	a1 54 27 42 00       	mov    0x422754,%eax
40826f:	59                   	pop    %ecx
408270:	59                   	pop    %ecx
408271:	85 f6                	test   %esi,%esi
408273:	74 04                	je     0x408279
408275:	8b ce                	mov    %esi,%ecx
408277:	eb 03                	jmp    0x40827c
408279:	33 c9                	xor    %ecx,%ecx
40827b:	41                   	inc    %ecx
40827c:	51                   	push   %ecx
40827d:	6a 00                	push   $0x0
40827f:	50                   	push   %eax
408280:	ff 15 90 90 41 00    	call   *0x419090
408286:	8b f8                	mov    %eax,%edi
408288:	85 ff                	test   %edi,%edi
40828a:	75 26                	jne    0x4082b2
40828c:	6a 0c                	push   $0xc
40828e:	5b                   	pop    %ebx
40828f:	39 05 90 28 42 00    	cmp    %eax,0x422890
408295:	74 0d                	je     0x4082a4
408297:	56                   	push   %esi
408298:	e8 75 31 00 00       	call   0x40b412
40829d:	59                   	pop    %ecx
40829e:	85 c0                	test   %eax,%eax
4082a0:	75 a9                	jne    0x40824b
4082a2:	eb 07                	jmp    0x4082ab
4082a4:	e8 d4 fe ff ff       	call   0x40817d
4082a9:	89 18                	mov    %ebx,(%eax)
4082ab:	e8 cd fe ff ff       	call   0x40817d
4082b0:	89 18                	mov    %ebx,(%eax)
4082b2:	8b c7                	mov    %edi,%eax
4082b4:	5f                   	pop    %edi
4082b5:	5b                   	pop    %ebx
4082b6:	eb 14                	jmp    0x4082cc
4082b8:	56                   	push   %esi
4082b9:	e8 54 31 00 00       	call   0x40b412
4082be:	59                   	pop    %ecx
4082bf:	e8 b9 fe ff ff       	call   0x40817d
4082c4:	c7 00 0c 00 00 00    	movl   $0xc,(%eax)
4082ca:	33 c0                	xor    %eax,%eax
4082cc:	5e                   	pop    %esi
4082cd:	5d                   	pop    %ebp
4082ce:	c3                   	ret
4082cf:	6a 20                	push   $0x20
4082d1:	68 70 e4 41 00       	push   $0x41e470
4082d6:	e8 d5 2a 00 00       	call   0x40adb0
4082db:	33 db                	xor    %ebx,%ebx
4082dd:	89 5d e4             	mov    %ebx,-0x1c(%ebp)
4082e0:	8b fb                	mov    %ebx,%edi
4082e2:	8b 75 0c             	mov    0xc(%ebp),%esi
4082e5:	85 f6                	test   %esi,%esi
4082e7:	74 70                	je     0x408359
4082e9:	68 ff ff ff 7f       	push   $0x7fffffff
4082ee:	56                   	push   %esi
4082ef:	53                   	push   %ebx
4082f0:	53                   	push   %ebx
4082f1:	8d 45 e4             	lea    -0x1c(%ebp),%eax
4082f4:	50                   	push   %eax
4082f5:	e8 94 73 00 00       	call   0x40f68e
4082fa:	83 c4 14             	add    $0x14,%esp
4082fd:	85 c0                	test   %eax,%eax
4082ff:	74 14                	je     0x408315
408301:	83 f8 16             	cmp    $0x16,%eax
408304:	74 05                	je     0x40830b
408306:	83 f8 22             	cmp    $0x22,%eax
408309:	75 0a                	jne    0x408315
40830b:	53                   	push   %ebx
40830c:	53                   	push   %ebx
40830d:	53                   	push   %ebx
40830e:	53                   	push   %ebx
40830f:	53                   	push   %ebx
408310:	e8 f0 32 00 00       	call   0x40b605
408315:	6a 02                	push   $0x2
408317:	ff 75 e4             	push   -0x1c(%ebp)
40831a:	e8 39 07 00 00       	call   0x408a58
40831f:	59                   	pop    %ecx
408320:	59                   	pop    %ecx
408321:	8b f8                	mov    %eax,%edi
408323:	85 ff                	test   %edi,%edi
408325:	75 07                	jne    0x40832e
408327:	33 c0                	xor    %eax,%eax
408329:	e9 67 01 00 00       	jmp    0x408495
40832e:	6a ff                	push   $0xffffffff
408330:	56                   	push   %esi
408331:	ff 75 e4             	push   -0x1c(%ebp)
408334:	57                   	push   %edi
408335:	53                   	push   %ebx
408336:	e8 53 73 00 00       	call   0x40f68e
40833b:	83 c4 14             	add    $0x14,%esp
40833e:	85 c0                	test   %eax,%eax
408340:	74 17                	je     0x408359
408342:	83 f8 16             	cmp    $0x16,%eax
408345:	74 c4                	je     0x40830b
408347:	83 f8 22             	cmp    $0x22,%eax
40834a:	74 bf                	je     0x40830b
40834c:	85 c0                	test   %eax,%eax
40834e:	74 09                	je     0x408359
408350:	57                   	push   %edi
408351:	e8 c2 cd ff ff       	call   0x405118
408356:	59                   	pop    %ecx
408357:	eb ce                	jmp    0x408327
408359:	57                   	push   %edi
40835a:	8b 75 08             	mov    0x8(%ebp),%esi
40835d:	56                   	push   %esi
40835e:	e8 d5 47 00 00       	call   0x40cb38
408363:	8b d8                	mov    %eax,%ebx
408365:	89 5d 0c             	mov    %ebx,0xc(%ebp)
408368:	57                   	push   %edi
408369:	e8 aa cd ff ff       	call   0x405118
40836e:	83 c4 0c             	add    $0xc,%esp
408371:	85 db                	test   %ebx,%ebx
408373:	74 b2                	je     0x408327
408375:	e8 5c 40 00 00       	call   0x40c3d6
40837a:	89 45 e0             	mov    %eax,-0x20(%ebp)
40837d:	8b 48 6c             	mov    0x6c(%eax),%ecx
408380:	89 4d d0             	mov    %ecx,-0x30(%ebp)
408383:	8b 48 68             	mov    0x68(%eax),%ecx
408386:	89 4d d4             	mov    %ecx,-0x2c(%ebp)
408389:	33 ff                	xor    %edi,%edi
40838b:	89 7d e4             	mov    %edi,-0x1c(%ebp)
40838e:	8d 45 d0             	lea    -0x30(%ebp),%eax
408391:	50                   	push   %eax
408392:	57                   	push   %edi
408393:	53                   	push   %ebx
408394:	57                   	push   %edi
408395:	57                   	push   %edi
408396:	8d 45 e4             	lea    -0x1c(%ebp),%eax
408399:	50                   	push   %eax
40839a:	e8 72 75 00 00       	call   0x40f911