408daf:	00 94 76 40 00 bc 76 	add    %dl,0x76bc0040(%esi,%esi,2)
408db6:	40                   	inc    %eax
408db7:	00 40 03             	add    %al,0x3(%eax)
408dba:	41                   	inc    %ecx
408dbb:	00 4c 72 6b          	add    %cl,0x6b(%edx,%esi,2)
408dbf:	65 72 65             	gs jb  0x408e27
408dc2:	64 65 72 6e          	fs gs jb 0x408e34
408dc6:	65 73 37             	gs jae 0x408e00
408dc9:	00 00                	add    %al,(%eax)
408dcb:	00 68 69             	add    %ch,0x69(%eax)
408dce:	6e                   	outsb  %ds:(%esi),(%dx)
408dcf:	67 73 74             	addr16 jae 0x408e46
408dd2:	00 00                	add    %al,(%eax)
408dd4:	41                   	inc    %ecx
408dd5:	46                   	inc    %esi
408dd6:	53                   	push   %ebx
408dd7:	4a                   	dec    %edx
408dd8:	4c                   	dec    %esp
408dd9:	45                   	inc    %ebp
408dda:	44                   	inc    %esp
408ddb:	45                   	inc    %ebp
408ddc:	53                   	push   %ebx
408ddd:	00 00                	add    %al,(%eax)
408ddf:	00 66 69             	add    %ah,0x69(%esi)
408de2:	6c                   	insb   (%dx),%es:(%edi)
408de3:	6f                   	outsl  %ds:(%esi),(%dx)
408de4:	73 6f                	jae    0x408e55
408de6:	66 65 72 69          	data16 gs jb 0x408e53
408dea:	6e                   	outsb  %ds:(%esi),(%dx)
408deb:	67 65 72 00          	addr16 gs jb 0x408def
408def:	00 62 75             	add    %ah,0x75(%edx)
408df2:	64 67 65 74 73       	fs addr16 gs je 0x408e6a
408df7:	00 42 6e             	add    %al,0x6e(%edx)
408dfa:	6e                   	outsb  %ds:(%esi),(%dx)
408dfb:	65 72 6e             	gs jb  0x408e6c
408dfe:	65 73 35             	gs jae 0x408e36
408e01:	00 00                	add    %al,(%eax)
408e03:	00 4e 6f             	add    %cl,0x6f(%esi)
408e06:	6e                   	outsb  %ds:(%esi),(%dx)
408e07:	6d                   	insl   (%dx),%es:(%edi)
408e08:	61                   	popa
408e09:	67 6e                	outsb  %ds:(%si),(%dx)
408e0b:	65 74 69             	gs je  0x408e77
408e0e:	63 61 6c             	arpl   %esp,0x6c(%ecx)
408e11:	6c                   	insb   (%dx),%es:(%edi)
408e12:	79 36                	jns    0x408e4a
408e14:	00 00                	add    %al,(%eax)
408e16:	00 00                	add    %al,(%eax)
408e18:	53                   	push   %ebx
408e19:	49                   	dec    %ecx
408e1a:	56                   	push   %esi
408e1b:	45                   	inc    %ebp
408e1c:	00 00                	add    %al,(%eax)
408e1e:	00 00                	add    %al,(%eax)
408e20:	55                   	push   %ebp
408e21:	4e                   	dec    %esi
408e22:	44                   	inc    %esp
408e23:	45                   	inc    %ebp
408e24:	52                   	push   %edx
408e25:	46                   	inc    %esi
408e26:	4c                   	dec    %esp
408e27:	4f                   	dec    %edi
408e28:	57                   	push   %edi
408e29:	45                   	inc    %ebp
408e2a:	44                   	inc    %esp
408e2b:	00 42 6f             	add    %al,0x6f(%edx)
408e2e:	61                   	popa
408e2f:	74 35                	je     0x408e66
408e31:	00 00                	add    %al,(%eax)
408e33:	00 4a 61             	add    %cl,0x61(%edx)
408e36:	73 70                	jae    0x408ea8
408e38:	69 64 65 61 6e 00 00 	imul   $0x6e,0x61(%ebp,%eiz,2),%esp
408e3f:	00
408e40:	76 72                	jbe    0x408eb4
408e42:	64 69 73 74 69 67 6e 	imul   $0x696e6769,%fs:0x74(%ebx),%esi
408e49:	69
408e4a:	6e                   	outsb  %ds:(%esi),(%dx)
408e4b:	67 73 61             	addr16 jae 0x408eaf
408e4e:	66 67 69 66 74 65 6e 	imul   $0x6e65,0x74(%bp),%sp
408e55:	00 00                	add    %al,(%eax)
408e57:	00 72 65             	add    %dh,0x65(%edx)
408e5a:	74 73                	je     0x408ecf
408e5c:	6b 72 69 76          	imul   $0x76,0x69(%edx),%esi
408e60:	6e                   	outsb  %ds:(%esi),(%dx)
408e61:	69 6e 67 73 72 65 67 	imul   $0x67657273,0x67(%esi),%ebp
408e68:	6c                   	insb   (%dx),%es:(%edi)
408e69:	65 72 6e             	gs jb  0x408eda
408e6c:	65 00 00             	add    %al,%gs:(%eax)
408e6f:	00 46 75             	add    %al,0x75(%esi)
408e72:	6e                   	outsb  %ds:(%esi),(%dx)
408e73:	6b 74 69 6f 6e       	imul   $0x6e,0x6f(%ecx,%ebp,2),%esi
408e78:	72 65                	jb     0x408edf
408e7a:	6e                   	outsb  %ds:(%esi),(%dx)
408e7b:	73 35                	jae    0x408eb2
408e7d:	00 00                	add    %al,(%eax)
408e7f:	00 53 75             	add    %dl,0x75(%ebx)
408e82:	70 65                	jo     0x408ee9
408e84:	72 67                	jb     0x408eed
408e86:	72 61                	jb     0x408ee9
408e88:	76 69                	jbe    0x408ef3
408e8a:	74 61                	je     0x408eed
408e8c:	74 69                	je     0x408ef7
408e8e:	6e                   	outsb  %ds:(%esi),(%dx)
408e8f:	67 00 00             	add    %al,(%bx,%si)
408e92:	00 00                	add    %al,(%eax)
408e94:	53                   	push   %ebx
408e95:	74 61                	je     0x408ef8
408e97:	6e                   	outsb  %ds:(%esi),(%dx)
408e98:	64 61                	fs popa
408e9a:	72 64                	jb     0x408f00
408e9c:	69 6e 64 73 74 69 6c 	imul   $0x6c697473,0x64(%esi),%ebp
408ea3:	6c                   	insb   (%dx),%es:(%edi)
408ea4:	69 6e 67 65 72 73 38 	imul   $0x38737265,0x67(%esi),%ebp
408eab:	00 4d 61             	add    %cl,0x61(%ebp)
408eae:	76 69                	jbe    0x408f19
408eb0:	6e                   	outsb  %ds:(%esi),(%dx)
408eb1:	73 37                	jae    0x408eea
408eb3:	00 50 69             	add    %dl,0x69(%eax)
408eb6:	6c                   	insb   (%dx),%es:(%edi)
408eb7:	65 36 00 00          	gs add %al,%ss:(%eax)
408ebb:	00 4d 69             	add    %cl,0x69(%ebp)
408ebe:	73 74                	jae    0x408f34
408ec0:	72 73                	jb     0x408f35
408ec2:	74 69                	je     0x408f2d
408ec4:	67 00 00             	add    %al,(%bx,%si)
408ec7:	00 4b 6f             	add    %cl,0x6f(%ebx)
408eca:	6e                   	outsb  %ds:(%esi),(%dx)
408ecb:	73 74                	jae    0x408f41
408ecd:	72 75                	jb     0x408f44
408ecf:	65 72 65             	gs jb  0x408f37
408ed2:	64 65 00 00          	fs add %al,%gs:(%eax)
408ed6:	00 00                	add    %al,(%eax)
408ed8:	77 69                	ja     0x408f43
408eda:	65 6e                	outsb  %gs:(%esi),(%dx)
408edc:	65 72 6c             	gs jb  0x408f4b
408edf:	67 67 65 74 73       	addr16 addr16 gs je 0x408f57
408ee4:	00 00                	add    %al,(%eax)
408ee6:	00 00                	add    %al,(%eax)
408ee8:	50                   	push   %eax
408ee9:	72 65                	jb     0x408f50
408eeb:	70 61                	jo     0x408f4e
408eed:	72 65                	jb     0x408f54
408eef:	73 00                	jae    0x408ef1
408ef1:	00 00                	add    %al,(%eax)
408ef3:	00 4c 4f 56          	add    %cl,0x56(%edi,%ecx,2)
408ef7:	45                   	inc    %ebp
408ef8:	4d                   	dec    %ebp
408ef9:	4f                   	dec    %edi
408efa:	4e                   	dec    %esi
408efb:	47                   	inc    %edi
408efc:	45                   	inc    %ebp
408efd:	52                   	push   %edx
408efe:	00 00                	add    %al,(%eax)
408f00:	48                   	dec    %eax
408f01:	6f                   	outsl  %ds:(%esi),(%dx)
408f02:	6e                   	outsb  %ds:(%esi),(%dx)
408f03:	6b 69 65 73          	imul   $0x73,0x65(%ecx),%ebp
408f07:	00 69 6d             	add    %ch,0x6d(%ecx)
408f0a:	61                   	popa
408f0b:	67 69 6e 61 6c 00 00 	imul   $0x6c,0x61(%bp),%ebp
408f12:	00
408f13:	00 53 52             	add    %dl,0x52(%ebx)
408f16:	54                   	push   %esp
408f17:	4f                   	dec    %edi
408f18:	47                   	inc    %edi
408f19:	45                   	inc    %ebp
408f1a:	4e                   	dec    %esi
408f1b:	45                   	inc    %ebp
408f1c:	53                   	push   %ebx
408f1d:	00 00                	add    %al,(%eax)
408f1f:	00 4b 72             	add    %cl,0x72(%ebx)
408f22:	6e                   	outsb  %ds:(%esi),(%dx)
408f23:	69 6e 67 00 00 53 4b 	imul   $0x4b530000,0x67(%esi),%ebp
408f2a:	41                   	inc    %ecx
408f2b:	47                   	inc    %edi
408f2c:	45                   	inc    %ebp
408f2d:	52                   	push   %edx
408f2e:	00 00                	add    %al,(%eax)
408f30:	73 76                	jae    0x408fa8
408f32:	61                   	popa
408f33:	72 74                	jb     0x408fa9
408f35:	62 61 67             	bound  %esp,0x67(%ecx)
408f38:	65 6e                	outsb  %gs:(%esi),(%dx)
408f3a:	65 00 47 65          	add    %al,%gs:0x65(%edi)
408f3e:	6f                   	outsl  %ds:(%esi),(%dx)
408f3f:	70 68                	jo     0x408fa9
408f41:	79 74                	jns    0x408fb7
408f43:	69 63 00 00 00 cc cc 	imul   $0xcccc0000,0x0(%ebx),%esp
408f4a:	cc                   	int3
408f4b:	cc                   	int3
408f4c:	cc                   	int3
408f4d:	cc                   	int3
408f4e:	cc                   	int3
408f4f:	cc                   	int3
408f50:	e9 e9 e9 e9 cc       	jmp    0xcd2a793e
408f55:	cc                   	int3
408f56:	cc                   	int3
408f57:	cc                   	int3
408f58:	cc                   	int3
408f59:	cc                   	int3
408f5a:	cc                   	int3
408f5b:	cc                   	int3
408f5c:	cc                   	int3
408f5d:	cc                   	int3
408f5e:	cc                   	int3
408f5f:	cc                   	int3
408f60:	55                   	push   %ebp
408f61:	8b ec                	mov    %esp,%ebp
408f63:	83 ec 0c             	sub    $0xc,%esp
408f66:	68 b6 12 40 00       	push   $0x4012b6
408f6b:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
408f71:	50                   	push   %eax
408f72:	64 89 25 00 00 00 00 	mov    %esp,%fs:0x0
408f79:	81 ec 6c 01 00 00    	sub    $0x16c,%esp
408f7f:	53                   	push   %ebx
408f80:	56                   	push   %esi
408f81:	57                   	push   %edi
408f82:	89 65 f4             	mov    %esp,-0xc(%ebp)
408f85:	c7 45 f8 b8 11 40 00 	movl   $0x4011b8,-0x8(%ebp)
408f8c:	8b 45 08             	mov    0x8(%ebp),%eax
408f8f:	8b c8                	mov    %eax,%ecx
408f91:	83 e1 01             	and    $0x1,%ecx
408f94:	89 4d fc             	mov    %ecx,-0x4(%ebp)
408f97:	83 e0 fe             	and    $0xfffffffe,%eax
408f9a:	8b 10                	mov    (%eax),%edx
408f9c:	50                   	push   %eax
408f9d:	89 45 08             	mov    %eax,0x8(%ebp)
408fa0:	ff 52 04             	call   *0x4(%edx)
408fa3:	8b 35 3c 10 40 00    	mov    0x40103c,%esi
408fa9:	33 db                	xor    %ebx,%ebx
408fab:	68 78 77 40 00       	push   $0x407778
408fb0:	68 80 77 40 00       	push   $0x407780
408fb5:	89 5d dc             	mov    %ebx,-0x24(%ebp)
408fb8:	89 5d c0             	mov    %ebx,-0x40(%ebp)
408fbb:	89 5d b0             	mov    %ebx,-0x50(%ebp)
408fbe:	89 5d a0             	mov    %ebx,-0x60(%ebp)
408fc1:	89 5d 88             	mov    %ebx,-0x78(%ebp)
408fc4:	89 9d 74 ff ff ff    	mov    %ebx,-0x8c(%ebp)
408fca:	89 9d 64 ff ff ff    	mov    %ebx,-0x9c(%ebp)
408fd0:	89 9d 54 ff ff ff    	mov    %ebx,-0xac(%ebp)
408fd6:	89 9d 44 ff ff ff    	mov    %ebx,-0xbc(%ebp)
408fdc:	89 9d 34 ff ff ff    	mov    %ebx,-0xcc(%ebp)
408fe2:	89 9d 2c ff ff ff    	mov    %ebx,-0xd4(%ebp)
408fe8:	89 9d 28 ff ff ff    	mov    %ebx,-0xd8(%ebp)
408fee:	89 9d 24 ff ff ff    	mov    %ebx,-0xdc(%ebp)
408ff4:	89 9d 14 ff ff ff    	mov    %ebx,-0xec(%ebp)
408ffa:	89 9d 04 ff ff ff    	mov    %ebx,-0xfc(%ebp)
409000:	89 9d f4 fe ff ff    	mov    %ebx,-0x10c(%ebp)
409006:	89 9d e4 fe ff ff    	mov    %ebx,-0x11c(%ebp)
40900c:	89 9d c4 fe ff ff    	mov    %ebx,-0x13c(%ebp)
409012:	88 9d b0 fe ff ff    	mov    %bl,-0x150(%ebp)
409018:	89 9d ac fe ff ff    	mov    %ebx,-0x154(%ebp)
40901e:	89 9d a8 fe ff ff    	mov    %ebx,-0x158(%ebp)
409024:	89 9d a4 fe ff ff    	mov    %ebx,-0x15c(%ebp)
40902a:	89 9d a0 fe ff ff    	mov    %ebx,-0x160(%ebp)
409030:	89 9d 98 fe ff ff    	mov    %ebx,-0x168(%ebp)
409036:	89 9d 9c fe ff ff    	mov    %ebx,-0x164(%ebp)
40903c:	89 9d 90 fe ff ff    	mov    %ebx,-0x170(%ebp)
409042:	89 9d 94 fe ff ff    	mov    %ebx,-0x16c(%ebp)
409048:	ff d6                	call   *%esi
40904a:	8b 3d 84 11 40 00    	mov    0x401184,%edi
409050:	8b d0                	mov    %eax,%edx
409052:	8d 8d 2c ff ff ff    	lea    -0xd4(%ebp),%ecx
409058:	ff d7                	call   *%edi
40905a:	50                   	push   %eax
40905b:	68 88 77 40 00       	push   $0x407788
409060:	ff d6                	call   *%esi
409062:	8b d0                	mov    %eax,%edx
409064:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
40906a:	ff d7                	call   *%edi
40906c:	50                   	push   %eax
40906d:	68 90 77 40 00       	push   $0x407790
409072:	ff d6                	call   *%esi
409074:	8b d0                	mov    %eax,%edx
409076:	8d 8d 24 ff ff ff    	lea    -0xdc(%ebp),%ecx
40907c:	ff d7                	call   *%edi
40907e:	50                   	push   %eax
40907f:	68 9c 77 40 00       	push   $0x40779c
409084:	ff d6                	call   *%esi
409086:	89 85 1c ff ff ff    	mov    %eax,-0xe4(%ebp)
40908c:	8d 85 14 ff ff ff    	lea    -0xec(%ebp),%eax
409092:	50                   	push   %eax
409093:	8d 8d 04 ff ff ff    	lea    -0xfc(%ebp),%ecx
409099:	51                   	push   %ecx
40909a:	c7 85 14 ff ff ff 08 	movl   $0x8,-0xec(%ebp)
4090a1:	00 00 00
4090a4:	ff 15 8c 11 40 00    	call   *0x40118c
4090aa:	8d 95 04 ff ff ff    	lea    -0xfc(%ebp),%edx
4090b0:	52                   	push   %edx
4090b1:	8d 85 e4 fe ff ff    	lea    -0x11c(%ebp),%eax
4090b7:	50                   	push   %eax
4090b8:	c7 85 ec fe ff ff 0c 	movl   $0xc,-0x114(%ebp)
4090bf:	00 00 00
4090c2:	c7 85 e4 fe ff ff 02 	movl   $0x8002,-0x11c(%ebp)
4090c9:	80 00 00
4090cc:	ff 15 60 11 40 00    	call   *0x401160
4090d2:	66 89 85 8c fe ff ff 	mov    %ax,-0x174(%ebp)
4090d9:	8d 8d 24 ff ff ff    	lea    -0xdc(%ebp),%ecx
4090df:	51                   	push   %ecx
4090e0:	8d 95 28 ff ff ff    	lea    -0xd8(%ebp),%edx
4090e6:	52                   	push   %edx
4090e7:	8d 85 2c ff ff ff    	lea    -0xd4(%ebp),%eax
4090ed:	50                   	push   %eax
4090ee:	6a 03                	push   $0x3
4090f0:	ff 15 48 11 40 00    	call   *0x401148
4090f6:	8d 8d 04 ff ff ff    	lea    -0xfc(%ebp),%ecx
4090fc:	51                   	push   %ecx
4090fd:	8d 95 14 ff ff ff    	lea    -0xec(%ebp),%edx
409103:	52                   	push   %edx
409104:	6a 02                	push   $0x2
409106:	ff 15 28 10 40 00    	call   *0x401028
40910c:	83 c4 1c             	add    $0x1c,%esp
40910f:	66 39 9d 8c fe ff ff 	cmp    %bx,-0x174(%ebp)
409116:	74 73                	je     0x40918b
409118:	83 ec 10             	sub    $0x10,%esp
40911b:	8b d4                	mov    %esp,%edx
40911d:	b9 08 00 00 00       	mov    $0x8,%ecx
409122:	89 0a                	mov    %ecx,(%edx)
409124:	89 8d e4 fe ff ff    	mov    %ecx,-0x11c(%ebp)
40912a:	8b 8d e8 fe ff ff    	mov    -0x118(%ebp),%ecx
409130:	89 4a 04             	mov    %ecx,0x4(%edx)
409133:	b8 a8 77 40 00       	mov    $0x4077a8,%eax
409138:	89 42 08             	mov    %eax,0x8(%edx)
40913b:	89 85 ec fe ff ff    	mov    %eax,-0x114(%ebp)
409141:	8b 85 f0 fe ff ff    	mov    -0x110(%ebp),%eax
409147:	89 42 0c             	mov    %eax,0xc(%edx)
40914a:	8b 95 c8 fe ff ff    	mov    -0x138(%ebp),%edx
409150:	83 ec 10             	sub    $0x10,%esp
409153:	8b cc                	mov    %esp,%ecx
409155:	b8 03 00 00 00       	mov    $0x3,%eax
40915a:	89 01                	mov    %eax,(%ecx)
40915c:	89 51 04             	mov    %edx,0x4(%ecx)
40915f:	b8 8b b0 7a 00       	mov    $0x7ab08b,%eax
409164:	89 41 08             	mov    %eax,0x8(%ecx)
409167:	8b 85 d0 fe ff ff    	mov    -0x130(%ebp),%eax
40916d:	6a 02                	push   $0x2
40916f:	89 41 0c             	mov    %eax,0xc(%ecx)
409172:	68 c0 77 40 00       	push   $0x4077c0
409177:	8d 4d dc             	lea    -0x24(%ebp),%ecx
40917a:	51                   	push   %ecx
40917b:	ff 15 c8 10 40 00    	call   *0x4010c8
409181:	50                   	push   %eax
409182:	ff 15 6c 11 40 00    	call   *0x40116c
409188:	83 c4 2c             	add    $0x2c,%esp
40918b:	68 78 77 40 00       	push   $0x407778
409190:	68 80 77 40 00       	push   $0x407780
409195:	ff d6                	call   *%esi
409197:	8b d0                	mov    %eax,%edx
409199:	8d 8d 2c ff ff ff    	lea    -0xd4(%ebp),%ecx
40919f:	ff d7                	call   *%edi