406196:	f7 e2                	mul    %edx
406198:	0f 90 c1             	seto   %cl
40619b:	f7 d9                	neg    %ecx
40619d:	0b c8                	or     %eax,%ecx
40619f:	51                   	push   %ecx
4061a0:	e8 a4 2b 00 00       	call   0x408d49
4061a5:	8b f0                	mov    %eax,%esi
4061a7:	c7 45 fc 02 00 00 00 	movl   $0x2,-0x4(%ebp)
4061ae:	59                   	pop    %ecx
4061af:	89 75 e8             	mov    %esi,-0x18(%ebp)
4061b2:	8b c7                	mov    %edi,%eax
4061b4:	eb 19                	jmp    0x4061cf
4061b6:	b8 bc 61 40 00       	mov    $0x4061bc,%eax
4061bb:	c3                   	ret
4061bc:	c7 45 fc 02 00 00 00 	movl   $0x2,-0x4(%ebp)
4061c3:	8b 5d e0             	mov    -0x20(%ebp),%ebx
4061c6:	8b 45 ec             	mov    -0x14(%ebp),%eax
4061c9:	8b 7d dc             	mov    -0x24(%ebp),%edi
4061cc:	8b 75 e8             	mov    -0x18(%ebp),%esi
4061cf:	c6 45 fc 05          	movb   $0x5,-0x4(%ebp)
4061d3:	89 75 e0             	mov    %esi,-0x20(%ebp)
4061d6:	85 c0                	test   %eax,%eax
4061d8:	74 51                	je     0x40622b
4061da:	85 f6                	test   %esi,%esi
4061dc:	74 4d                	je     0x40622b
4061de:	8b 4d d8             	mov    -0x28(%ebp),%ecx
4061e1:	51                   	push   %ecx
4061e2:	ff 75 08             	push   0x8(%ebp)
4061e5:	51                   	push   %ecx
4061e6:	50                   	push   %eax
4061e7:	ff 15 ec f1 40 00    	call   *0x40f1ec
4061ed:	83 c4 10             	add    $0x10,%esp
4061f0:	8b c8                	mov    %eax,%ecx
4061f2:	e8 72 09 00 00       	call   0x406b69
4061f7:	8b 45 d4             	mov    -0x2c(%ebp),%eax
4061fa:	50                   	push   %eax
4061fb:	ff 75 0c             	push   0xc(%ebp)
4061fe:	50                   	push   %eax
4061ff:	56                   	push   %esi
406200:	ff 15 ec f1 40 00    	call   *0x40f1ec
406206:	83 c4 10             	add    $0x10,%esp
406209:	8b c8                	mov    %eax,%ecx
40620b:	e8 59 09 00 00       	call   0x406b69
406210:	8b 4d d0             	mov    -0x30(%ebp),%ecx
406213:	8d 45 e8             	lea    -0x18(%ebp),%eax
406216:	50                   	push   %eax
406217:	8d 45 ec             	lea    -0x14(%ebp),%eax
40621a:	50                   	push   %eax
40621b:	e8 68 fe ff ff       	call   0x406088
406220:	85 c0                	test   %eax,%eax
406222:	75 0c                	jne    0x406230
406224:	bb 0e 00 07 80       	mov    $0x8007000e,%ebx
406229:	eb 0d                	jmp    0x406238
40622b:	bb 0e 00 07 80       	mov    $0x8007000e,%ebx
406230:	85 db                	test   %ebx,%ebx
406232:	78 04                	js     0x406238
406234:	33 ff                	xor    %edi,%edi
406236:	33 f6                	xor    %esi,%esi
406238:	56                   	push   %esi
406239:	ff 15 fc f1 40 00    	call   *0x40f1fc
40623f:	57                   	push   %edi
406240:	ff 15 fc f1 40 00    	call   *0x40f1fc
406246:	f7 d3                	not    %ebx
406248:	59                   	pop    %ecx
406249:	c1 eb 1f             	shr    $0x1f,%ebx
40624c:	59                   	pop    %ecx
40624d:	8b c3                	mov    %ebx,%eax
40624f:	eb 02                	jmp    0x406253
406251:	33 c0                	xor    %eax,%eax
406253:	e8 44 3b 00 00       	call   0x409d9c
406258:	c2 08 00             	ret    $0x8
40625b:	cc                   	int3
40625c:	cc                   	int3
40625d:	cc                   	int3
40625e:	cc                   	int3
40625f:	cc                   	int3
406260:	6a 04                	push   $0x4
406262:	b8 8a a5 40 00       	mov    $0x40a58a,%eax
406267:	e8 62 3b 00 00       	call   0x409dce
40626c:	83 7d 0c 00          	cmpl   $0x0,0xc(%ebp)
406270:	74 39                	je     0x4062ab
406272:	83 7d 10 00          	cmpl   $0x0,0x10(%ebp)
406276:	74 33                	je     0x4062ab
406278:	83 65 f0 00          	andl   $0x0,-0x10(%ebp)
40627c:	ff 75 10             	push   0x10(%ebp)
40627f:	8b 4d 08             	mov    0x8(%ebp),%ecx
406282:	ff 75 0c             	push   0xc(%ebp)
406285:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
406289:	8d 49 04             	lea    0x4(%ecx),%ecx
40628c:	e8 64 fe ff ff       	call   0x4060f5
406291:	f7 d8                	neg    %eax
406293:	8d 4d f0             	lea    -0x10(%ebp),%ecx
406296:	1b f6                	sbb    %esi,%esi
406298:	81 e6 f2 ff f8 7f    	and    $0x7ff8fff2,%esi
40629e:	e8 e9 03 00 00       	call   0x40668c
4062a3:	8d 86 0e 00 07 80    	lea    -0x7ff8fff2(%esi),%eax
4062a9:	eb 05                	jmp    0x4062b0
4062ab:	b8 57 00 07 80       	mov    $0x80070057,%eax
4062b0:	e8 e7 3a 00 00       	call   0x409d9c
4062b5:	c2 0c 00             	ret    $0xc
4062b8:	ff 31                	push   (%ecx)
4062ba:	ff 15 f0 f1 40 00    	call   *0x40f1f0
4062c0:	59                   	pop    %ecx
4062c1:	c3                   	ret
4062c2:	8d 41 04             	lea    0x4(%ecx),%eax
4062c5:	39 01                	cmp    %eax,(%ecx)
4062c7:	0f 85 eb ff ff ff    	jne    0x4062b8
4062cd:	c3                   	ret
4062ce:	8b ff                	mov    %edi,%edi
4062d0:	55                   	push   %ebp
4062d1:	8b ec                	mov    %esp,%ebp
4062d3:	56                   	push   %esi
4062d4:	ff 75 08             	push   0x8(%ebp)
4062d7:	8b f1                	mov    %ecx,%esi
4062d9:	ff 15 f4 f1 40 00    	call   *0x40f1f4
4062df:	59                   	pop    %ecx
4062e0:	85 c0                	test   %eax,%eax
4062e2:	74 07                	je     0x4062eb
4062e4:	89 06                	mov    %eax,(%esi)
4062e6:	5e                   	pop    %esi
4062e7:	5d                   	pop    %ebp
4062e8:	c2 04 00             	ret    $0x4
4062eb:	b9 0e 00 07 80       	mov    $0x8007000e,%ecx
4062f0:	e8 57 08 00 00       	call   0x406b4c
4062f5:	cc                   	int3
4062f6:	ff 15 7c f0 40 00    	call   *0x40f07c
4062fc:	85 c0                	test   %eax,%eax
4062fe:	7e 08                	jle    0x406308
406300:	0f b7 c0             	movzwl %ax,%eax
406303:	0d 00 00 07 80       	or     $0x80070000,%eax
406308:	c3                   	ret
406309:	ff 71 08             	push   0x8(%ecx)
40630c:	ff 15 28 f1 40 00    	call   *0x40f128
406312:	c3                   	ret
406313:	6a 00                	push   $0x0
406315:	6a 00                	push   $0x0
406317:	6a 01                	push   $0x1
406319:	51                   	push   %ecx
40631a:	ff 15 c0 f0 40 00    	call   *0x40f0c0
406320:	c3                   	ret
406321:	8b ff                	mov    %edi,%edi
406323:	55                   	push   %ebp
406324:	8b ec                	mov    %esp,%ebp
406326:	53                   	push   %ebx
406327:	56                   	push   %esi
406328:	57                   	push   %edi
406329:	8b f9                	mov    %ecx,%edi
40632b:	33 db                	xor    %ebx,%ebx
40632d:	8b f3                	mov    %ebx,%esi
40632f:	39 5f 0c             	cmp    %ebx,0xc(%edi)
406332:	7e 19                	jle    0x40634d
406334:	8b 47 04             	mov    0x4(%edi),%eax
406337:	ff 75 08             	push   0x8(%ebp)
40633a:	ff 34 b0             	push   (%eax,%esi,4)
40633d:	ff 15 8c f0 40 00    	call   *0x40f08c
406343:	85 c0                	test   %eax,%eax
406345:	74 09                	je     0x406350
406347:	46                   	inc    %esi
406348:	3b 77 0c             	cmp    0xc(%edi),%esi
40634b:	7c e7                	jl     0x406334
40634d:	83 ce ff             	or     $0xffffffff,%esi
406350:	83 fe ff             	cmp    $0xffffffff,%esi
406353:	74 0f                	je     0x406364
406355:	85 f6                	test   %esi,%esi
406357:	78 14                	js     0x40636d
406359:	3b 77 0c             	cmp    0xc(%edi),%esi
40635c:	7d 0f                	jge    0x40636d
40635e:	8b 47 08             	mov    0x8(%edi),%eax
406361:	8b 1c b0             	mov    (%eax,%esi,4),%ebx
406364:	5f                   	pop    %edi
406365:	5e                   	pop    %esi
406366:	8b c3                	mov    %ebx,%eax
406368:	5b                   	pop    %ebx
406369:	5d                   	pop    %ebp
40636a:	c2 04 00             	ret    $0x4
40636d:	b9 8c 00 00 c0       	mov    $0xc000008c,%ecx
406372:	e8 9c ff ff ff       	call   0x406313
406377:	cc                   	int3
406378:	8b ff                	mov    %edi,%edi
40637a:	55                   	push   %ebp
40637b:	8b ec                	mov    %esp,%ebp
40637d:	53                   	push   %ebx
40637e:	56                   	push   %esi
40637f:	57                   	push   %edi
406380:	8b f9                	mov    %ecx,%edi
406382:	8b 4d 0c             	mov    0xc(%ebp),%ecx
406385:	8b 17                	mov    (%edi),%edx
406387:	8d 41 01             	lea    0x1(%ecx),%eax
40638a:	03 c2                	add    %edx,%eax
40638c:	3b c2                	cmp    %edx,%eax
40638e:	0f 8e 8c 00 00 00    	jle    0x406420
406394:	3b c1                	cmp    %ecx,%eax
406396:	0f 8e 84 00 00 00    	jle    0x406420
40639c:	8b 77 04             	mov    0x4(%edi),%esi
40639f:	3b c6                	cmp    %esi,%eax
4063a1:	7c 36                	jl     0x4063d9
4063a3:	81 fe ff ff ff 3f    	cmp    $0x3fffffff,%esi
4063a9:	7f 75                	jg     0x406420
4063ab:	03 f6                	add    %esi,%esi
4063ad:	3b c6                	cmp    %esi,%eax
4063af:	7d f2                	jge    0x4063a3
4063b1:	6a 02                	push   $0x2
4063b3:	8b c6                	mov    %esi,%eax
4063b5:	59                   	pop    %ecx
4063b6:	f7 e1                	mul    %ecx
4063b8:	85 d2                	test   %edx,%edx
4063ba:	77 64                	ja     0x406420
4063bc:	72 05                	jb     0x4063c3
4063be:	83 f8 ff             	cmp    $0xffffffff,%eax
4063c1:	77 5d                	ja     0x406420
4063c3:	50                   	push   %eax
4063c4:	ff 77 08             	push   0x8(%edi)
4063c7:	ff 15 2c f1 40 00    	call   *0x40f12c
4063cd:	85 c0                	test   %eax,%eax
4063cf:	74 4f                	je     0x406420
4063d1:	8b 17                	mov    (%edi),%edx
4063d3:	89 47 08             	mov    %eax,0x8(%edi)
4063d6:	89 77 04             	mov    %esi,0x4(%edi)
4063d9:	85 d2                	test   %edx,%edx
4063db:	78 43                	js     0x406420
4063dd:	3b d6                	cmp    %esi,%edx
4063df:	7d 3f                	jge    0x406420
4063e1:	8b de                	mov    %esi,%ebx
4063e3:	2b da                	sub    %edx,%ebx
4063e5:	3b de                	cmp    %esi,%ebx
4063e7:	7f 37                	jg     0x406420
4063e9:	8b 47 08             	mov    0x8(%edi),%eax
4063ec:	8b 75 0c             	mov    0xc(%ebp),%esi
4063ef:	8d 0c 50             	lea    (%eax,%edx,2),%ecx
4063f2:	8d 04 36             	lea    (%esi,%esi,1),%eax
4063f5:	50                   	push   %eax
4063f6:	ff 75 08             	push   0x8(%ebp)
4063f9:	8d 04 1b             	lea    (%ebx,%ebx,1),%eax
4063fc:	50                   	push   %eax
4063fd:	51                   	push   %ecx
4063fe:	ff 15 ec f1 40 00    	call   *0x40f1ec
406404:	83 c4 10             	add    $0x10,%esp
406407:	8b c8                	mov    %eax,%ecx
406409:	e8 5b 07 00 00       	call   0x406b69
40640e:	01 37                	add    %esi,(%edi)
406410:	33 d2                	xor    %edx,%edx
406412:	8b 47 08             	mov    0x8(%edi),%eax
406415:	8b 0f                	mov    (%edi),%ecx
406417:	66 89 14 48          	mov    %dx,(%eax,%ecx,2)
40641b:	33 c0                	xor    %eax,%eax
40641d:	40                   	inc    %eax
40641e:	eb 02                	jmp    0x406422
406420:	33 c0                	xor    %eax,%eax
406422:	5f                   	pop    %edi
406423:	5e                   	pop    %esi
406424:	5b                   	pop    %ebx
406425:	5d                   	pop    %ebp
406426:	c2 08 00             	ret    $0x8
406429:	6a 5c                	push   $0x5c
40642b:	b8 b5 a5 40 00       	mov    $0x40a5b5,%eax
406430:	e8 cc 39 00 00       	call   0x409e01
406435:	8b f9                	mov    %ecx,%edi
406437:	8b 75 08             	mov    0x8(%ebp),%esi
40643a:	8b 45 0c             	mov    0xc(%ebp),%eax
40643d:	89 45 98             	mov    %eax,-0x68(%ebp)
406440:	85 f6                	test   %esi,%esi
406442:	0f 84 96 01 00 00    	je     0x4065de
406448:	85 c0                	test   %eax,%eax
40644a:	0f 84 8e 01 00 00    	je     0x4065de
406450:	8b ce                	mov    %esi,%ecx
406452:	33 db                	xor    %ebx,%ebx
406454:	89 18                	mov    %ebx,(%eax)
406456:	8d 51 02             	lea    0x2(%ecx),%edx
406459:	66 8b 01             	mov    (%ecx),%ax
40645c:	83 c1 02             	add    $0x2,%ecx
40645f:	66 3b c3             	cmp    %bx,%ax
406462:	75 f5                	jne    0x406459
406464:	2b ca                	sub    %edx,%ecx
406466:	d1 f9                	sar    $1,%ecx
406468:	8d 04 09             	lea    (%ecx,%ecx,1),%eax
40646b:	83 f8 64             	cmp    $0x64,%eax
40646e:	7d 05                	jge    0x406475
406470:	b8 e8 03 00 00       	mov    $0x3e8,%eax
406475:	6a 02                	push   $0x2
406477:	59                   	pop    %ecx
406478:	89 45 a8             	mov    %eax,-0x58(%ebp)
40647b:	f7 e1                	mul    %ecx
40647d:	89 5d a4             	mov    %ebx,-0x5c(%ebp)
406480:	3b d3                	cmp    %ebx,%edx
406482:	77 1c                	ja     0x4064a0
406484:	72 05                	jb     0x40648b
406486:	83 f8 ff             	cmp    $0xffffffff,%eax
406489:	77 15                	ja     0x4064a0
40648b:	50                   	push   %eax
40648c:	ff 15 0c f1 40 00    	call   *0x40f10c
406492:	89 45 ac             	mov    %eax,-0x54(%ebp)
406495:	85 c0                	test   %eax,%eax
406497:	74 0c                	je     0x4064a5
406499:	33 c9                	xor    %ecx,%ecx
40649b:	66 89 08             	mov    %cx,(%eax)
40649e:	eb 05                	jmp    0x4064a5
4064a0:	8b c3                	mov    %ebx,%eax
4064a2:	89 5d ac             	mov    %ebx,-0x54(%ebp)
4064a5:	89 5d fc             	mov    %ebx,-0x4(%ebp)
4064a8:	85 c0                	test   %eax,%eax
4064aa:	75 0a                	jne    0x4064b6
4064ac:	bb 0e 00 07 80       	mov    $0x8007000e,%ebx
4064b1:	e9 1b 01 00 00       	jmp    0x4065d1
4064b6:	89 37                	mov    %esi,(%edi)
4064b8:	0f b7 06             	movzwl (%esi),%eax
4064bb:	8b c8                	mov    %eax,%ecx
4064bd:	66 85 c0             	test   %ax,%ax
4064c0:	0f 84 00 01 00 00    	je     0x4065c6
4064c6:	6a 25                	push   $0x25
4064c8:	59                   	pop    %ecx
4064c9:	66 3b c1             	cmp    %cx,%ax
4064cc:	0f 85 ba 00 00 00    	jne    0x40658c
4064d2:	56                   	push   %esi
4064d3:	ff 15 f8 f0 40 00    	call   *0x40f0f8
4064d9:	6a 25                	push   $0x25
4064db:	5a                   	pop    %edx
4064dc:	89 07                	mov    %eax,(%edi)
4064de:	66 39 10             	cmp    %dx,(%eax)
4064e1:	75 08                	jne    0x4064eb
4064e3:	6a 01                	push   $0x1
4064e5:	50                   	push   %eax
4064e6:	e9 a4 00 00 00       	jmp    0x40658f
4064eb:	8b c8                	mov    %eax,%ecx
4064ed:	e8 f9 00 00 00       	call   0x4065eb
4064f2:	89 45 9c             	mov    %eax,-0x64(%ebp)
4064f5:	85 c0                	test   %eax,%eax
4064f7:	0f 84 c2 00 00 00    	je     0x4065bf
4064fd:	8b c8                	mov    %eax,%ecx
4064ff:	2b 0f                	sub    (%edi),%ecx
406501:	d1 f9                	sar    $1,%ecx
406503:	83 f9 1f             	cmp    $0x1f,%ecx
406506:	0f 8f ac 00 00 00    	jg     0x4065b8
40650c:	51                   	push   %ecx
40650d:	ff 37                	push   (%edi)
40650f:	8d 45 b0             	lea    -0x50(%ebp),%eax
406512:	6a 20                	push   $0x20
406514:	50                   	push   %eax
406515:	ff 15 f8 f1 40 00    	call   *0x40f1f8
40651b:	83 c4 10             	add    $0x10,%esp
40651e:	8b c8                	mov    %eax,%ecx
406520:	e8 44 06 00 00       	call   0x406b69
406525:	8b 4f 04             	mov    0x4(%edi),%ecx
406528:	8d 45 b0             	lea    -0x50(%ebp),%eax
40652b:	50                   	push   %eax
40652c:	e8 f0 fd ff ff       	call   0x406321
406531:	8b d0                	mov    %eax,%edx
406533:	85 d2                	test   %edx,%edx
406535:	0f 84 84 00 00 00    	je     0x4065bf
40653b:	89 5d a0             	mov    %ebx,-0x60(%ebp)
40653e:	8b ca                	mov    %edx,%ecx