406455:	68 ec 64 40 00       	push   $0x4064ec
40645a:	64 ff 30             	push   %fs:(%eax)
40645d:	64 89 20             	mov    %esp,%fs:(%eax)
406460:	8b 45 f8             	mov    -0x8(%ebp),%eax
406463:	e8 b8 e2 ff ff       	call   0x404720
406468:	8b c6                	mov    %esi,%eax
40646a:	33 d2                	xor    %edx,%edx
40646c:	e8 0b ec ff ff       	call   0x40507c
406471:	74 63                	je     0x4064d6
406473:	8b c6                	mov    %esi,%eax
406475:	e8 f6 eb ff ff       	call   0x405070
40647a:	8d 14 40             	lea    (%eax,%eax,2),%edx
40647d:	8d 45 fc             	lea    -0x4(%ebp),%eax
406480:	e8 e7 e9 ff ff       	call   0x404e6c
406485:	8b 5d fc             	mov    -0x4(%ebp),%ebx
406488:	85 db                	test   %ebx,%ebx
40648a:	74 05                	je     0x406491
40648c:	83 eb 04             	sub    $0x4,%ebx
40648f:	8b 1b                	mov    (%ebx),%ebx
406491:	8b c6                	mov    %esi,%eax
406493:	e8 d8 eb ff ff       	call   0x405070
406498:	50                   	push   %eax
406499:	8b c6                	mov    %esi,%eax
40649b:	e8 c0 eb ff ff       	call   0x405060
4064a0:	50                   	push   %eax
4064a1:	8b 45 fc             	mov    -0x4(%ebp),%eax
4064a4:	e8 3b e7 ff ff       	call   0x404be4
4064a9:	8d 53 01             	lea    0x1(%ebx),%edx
4064ac:	59                   	pop    %ecx
4064ad:	e8 82 fd ff ff       	call   0x406234
4064b2:	85 c0                	test   %eax,%eax
4064b4:	7e 0d                	jle    0x4064c3
4064b6:	8b d0                	mov    %eax,%edx
4064b8:	4a                   	dec    %edx
4064b9:	8d 45 fc             	lea    -0x4(%ebp),%eax
4064bc:	e8 ab e9 ff ff       	call   0x404e6c
4064c1:	eb 08                	jmp    0x4064cb
4064c3:	8d 45 fc             	lea    -0x4(%ebp),%eax
4064c6:	e8 55 e2 ff ff       	call   0x404720
4064cb:	8b 45 f8             	mov    -0x8(%ebp),%eax
4064ce:	8b 55 fc             	mov    -0x4(%ebp),%edx
4064d1:	e8 9e e2 ff ff       	call   0x404774
4064d6:	33 c0                	xor    %eax,%eax
4064d8:	5a                   	pop    %edx
4064d9:	59                   	pop    %ecx
4064da:	59                   	pop    %ecx
4064db:	64 89 10             	mov    %edx,%fs:(%eax)
4064de:	68 f3 64 40 00       	push   $0x4064f3
4064e3:	8d 45 fc             	lea    -0x4(%ebp),%eax
4064e6:	e8 35 e2 ff ff       	call   0x404720
4064eb:	c3                   	ret
4064ec:	e9 97 db ff ff       	jmp    0x404088
4064f1:	eb f0                	jmp    0x4064e3
4064f3:	5e                   	pop    %esi
4064f4:	5b                   	pop    %ebx
4064f5:	59                   	pop    %ecx
4064f6:	59                   	pop    %ecx
4064f7:	5d                   	pop    %ebp
4064f8:	c3                   	ret
4064f9:	8d 40 00             	lea    0x0(%eax),%eax
4064fc:	55                   	push   %ebp
4064fd:	8b ec                	mov    %esp,%ebp
4064ff:	83 c4 f4             	add    $0xfffffff4,%esp
406502:	53                   	push   %ebx
406503:	56                   	push   %esi
406504:	33 c9                	xor    %ecx,%ecx
406506:	89 4d fc             	mov    %ecx,-0x4(%ebp)
406509:	89 55 f8             	mov    %edx,-0x8(%ebp)
40650c:	8b f0                	mov    %eax,%esi
40650e:	33 c0                	xor    %eax,%eax
406510:	55                   	push   %ebp
406511:	68 a7 65 40 00       	push   $0x4065a7
406516:	64 ff 30             	push   %fs:(%eax)
406519:	64 89 20             	mov    %esp,%fs:(%eax)
40651c:	8b 45 f8             	mov    -0x8(%ebp),%eax
40651f:	e8 dc e9 ff ff       	call   0x404f00
406524:	85 f6                	test   %esi,%esi
406526:	74 69                	je     0x406591
406528:	89 75 f4             	mov    %esi,-0xc(%ebp)
40652b:	8b 5d f4             	mov    -0xc(%ebp),%ebx
40652e:	8b c3                	mov    %ebx,%eax
406530:	85 c0                	test   %eax,%eax
406532:	74 05                	je     0x406539
406534:	83 e8 04             	sub    $0x4,%eax
406537:	8b 00                	mov    (%eax),%eax
406539:	8d 55 fc             	lea    -0x4(%ebp),%edx
40653c:	92                   	xchg   %eax,%edx
40653d:	e8 0a ec ff ff       	call   0x40514c
406542:	85 db                	test   %ebx,%ebx
406544:	74 05                	je     0x40654b
406546:	83 eb 04             	sub    $0x4,%ebx
406549:	8b 1b                	mov    (%ebx),%ebx
40654b:	53                   	push   %ebx
40654c:	8b 45 fc             	mov    -0x4(%ebp),%eax
40654f:	e8 1c eb ff ff       	call   0x405070
406554:	40                   	inc    %eax
406555:	50                   	push   %eax
406556:	8b c6                	mov    %esi,%eax
406558:	e8 87 e6 ff ff       	call   0x404be4
40655d:	50                   	push   %eax
40655e:	8b 45 fc             	mov    -0x4(%ebp),%eax
406561:	e8 fa ea ff ff       	call   0x405060
406566:	59                   	pop    %ecx
406567:	5a                   	pop    %edx
406568:	e8 a3 fd ff ff       	call   0x406310
40656d:	85 c0                	test   %eax,%eax
40656f:	7e 0d                	jle    0x40657e
406571:	8b d0                	mov    %eax,%edx
406573:	4a                   	dec    %edx
406574:	8d 45 fc             	lea    -0x4(%ebp),%eax
406577:	e8 d0 eb ff ff       	call   0x40514c
40657c:	eb 08                	jmp    0x406586
40657e:	8d 45 fc             	lea    -0x4(%ebp),%eax
406581:	e8 7a e9 ff ff       	call   0x404f00
406586:	8b 45 f8             	mov    -0x8(%ebp),%eax
406589:	8b 55 fc             	mov    -0x4(%ebp),%edx
40658c:	e8 ab e9 ff ff       	call   0x404f3c
406591:	33 c0                	xor    %eax,%eax
406593:	5a                   	pop    %edx
406594:	59                   	pop    %ecx
406595:	59                   	pop    %ecx
406596:	64 89 10             	mov    %edx,%fs:(%eax)
406599:	68 ae 65 40 00       	push   $0x4065ae
40659e:	8d 45 fc             	lea    -0x4(%ebp),%eax
4065a1:	e8 5a e9 ff ff       	call   0x404f00
4065a6:	c3                   	ret
4065a7:	e9 dc da ff ff       	jmp    0x404088
4065ac:	eb f0                	jmp    0x40659e
4065ae:	5e                   	pop    %esi
4065af:	5b                   	pop    %ebx
4065b0:	8b e5                	mov    %ebp,%esp
4065b2:	5d                   	pop    %ebp
4065b3:	c3                   	ret
4065b4:	55                   	push   %ebp
4065b5:	8b ec                	mov    %esp,%ebp
4065b7:	6a 00                	push   $0x0
4065b9:	53                   	push   %ebx
4065ba:	56                   	push   %esi
4065bb:	8b f2                	mov    %edx,%esi
4065bd:	8b d8                	mov    %eax,%ebx
4065bf:	33 c0                	xor    %eax,%eax
4065c1:	55                   	push   %ebp
4065c2:	68 f7 65 40 00       	push   $0x4065f7
4065c7:	64 ff 30             	push   %fs:(%eax)
4065ca:	64 89 20             	mov    %esp,%fs:(%eax)
4065cd:	8d 45 fc             	lea    -0x4(%ebp),%eax
4065d0:	8b d3                	mov    %ebx,%edx
4065d2:	e8 79 ea ff ff       	call   0x405050
4065d7:	8b 45 fc             	mov    -0x4(%ebp),%eax
4065da:	8b d6                	mov    %esi,%edx
4065dc:	e8 5f fe ff ff       	call   0x406440
4065e1:	33 c0                	xor    %eax,%eax
4065e3:	5a                   	pop    %edx
4065e4:	59                   	pop    %ecx
4065e5:	59                   	pop    %ecx
4065e6:	64 89 10             	mov    %edx,%fs:(%eax)
4065e9:	68 fe 65 40 00       	push   $0x4065fe
4065ee:	8d 45 fc             	lea    -0x4(%ebp),%eax
4065f1:	e8 0a e9 ff ff       	call   0x404f00
4065f6:	c3                   	ret
4065f7:	e9 8c da ff ff       	jmp    0x404088
4065fc:	eb f0                	jmp    0x4065ee
4065fe:	5e                   	pop    %esi
4065ff:	5b                   	pop    %ebx
406600:	59                   	pop    %ecx
406601:	5d                   	pop    %ebp
406602:	c3                   	ret
406603:	90                   	nop
406604:	53                   	push   %ebx
406605:	56                   	push   %esi
406606:	81 c4 04 f0 ff ff    	add    $0xfffff004,%esp
40660c:	50                   	push   %eax
40660d:	8b f2                	mov    %edx,%esi
40660f:	8b d8                	mov    %eax,%ebx
406611:	85 db                	test   %ebx,%ebx
406613:	74 3d                	je     0x406652
406615:	81 7b 04 00 00 01 00 	cmpl   $0x10000,0x4(%ebx)
40661c:	7d 2a                	jge    0x406648
40661e:	68 00 10 00 00       	push   $0x1000
406623:	8d 44 24 04          	lea    0x4(%esp),%eax
406627:	50                   	push   %eax
406628:	8b 43 04             	mov    0x4(%ebx),%eax
40662b:	50                   	push   %eax
40662c:	8b 03                	mov    (%ebx),%eax
40662e:	8b 00                	mov    (%eax),%eax
406630:	e8 f3 f4 ff ff       	call   0x405b28
406635:	50                   	push   %eax
406636:	e8 a9 ac ff ff       	call   0x4012e4
40663b:	8b c8                	mov    %eax,%ecx
40663d:	8b d4                	mov    %esp,%edx
40663f:	8b c6                	mov    %esi,%eax
406641:	e8 ca e1 ff ff       	call   0x404810
406646:	eb 0a                	jmp    0x406652
406648:	8b c6                	mov    %esi,%eax
40664a:	8b 53 04             	mov    0x4(%ebx),%edx
40664d:	e8 c6 e2 ff ff       	call   0x404918
406652:	81 c4 00 10 00 00    	add    $0x1000,%esp
406658:	5e                   	pop    %esi
406659:	5b                   	pop    %ebx
40665a:	c3                   	ret
40665b:	90                   	nop
40665c:	ff 25 08 28 47 00    	jmp    *0x472808
406662:	8b c0                	mov    %eax,%eax
406664:	55                   	push   %ebp
406665:	8b ec                	mov    %esp,%ebp
406667:	33 c0                	xor    %eax,%eax
406669:	55                   	push   %ebp
40666a:	68 b8 66 40 00       	push   $0x4066b8
40666f:	64 ff 30             	push   %fs:(%eax)
406672:	64 89 20             	mov    %esp,%fs:(%eax)
406675:	ff 05 b8 e5 46 00    	incl   0x46e5b8
40667b:	75 2d                	jne    0x4066aa
40667d:	b8 50 e0 46 00       	mov    $0x46e050,%eax
406682:	e8 41 ca ff ff       	call   0x4030c8
406687:	b8 1c e2 46 00       	mov    $0x46e21c,%eax
40668c:	e8 37 ca ff ff       	call   0x4030c8
406691:	b8 e8 e3 46 00       	mov    $0x46e3e8,%eax
406696:	e8 2d ca ff ff       	call   0x4030c8
40669b:	e8 e0 c5 ff ff       	call   0x402c80
4066a0:	b8 3c 00 46 00       	mov    $0x46003c,%eax
4066a5:	e8 76 e0 ff ff       	call   0x404720
4066aa:	33 c0                	xor    %eax,%eax
4066ac:	5a                   	pop    %edx
4066ad:	59                   	pop    %ecx
4066ae:	59                   	pop    %ecx
4066af:	64 89 10             	mov    %edx,%fs:(%eax)
4066b2:	68 bf 66 40 00       	push   $0x4066bf
4066b7:	c3                   	ret
4066b8:	e9 cb d9 ff ff       	jmp    0x404088
4066bd:	eb f8                	jmp    0x4066b7
4066bf:	5d                   	pop    %ebp
4066c0:	c3                   	ret
4066c1:	8d 40 00             	lea    0x0(%eax),%eax
4066c4:	ff 25 98 28 47 00    	jmp    *0x472898
4066ca:	8b c0                	mov    %eax,%eax
4066cc:	ff 25 94 28 47 00    	jmp    *0x472894
4066d2:	8b c0                	mov    %eax,%eax
4066d4:	ff 25 90 28 47 00    	jmp    *0x472890
4066da:	8b c0                	mov    %eax,%eax
4066dc:	ff 25 8c 28 47 00    	jmp    *0x47288c
4066e2:	8b c0                	mov    %eax,%eax
4066e4:	50                   	push   %eax
4066e5:	6a 40                	push   $0x40
4066e7:	e8 e0 ff ff ff       	call   0x4066cc
4066ec:	c3                   	ret
4066ed:	8d 40 00             	lea    0x0(%eax),%eax
4066f0:	b8 34 00 00 00       	mov    $0x34,%eax
4066f5:	c3                   	ret
4066f6:	8b c0                	mov    %eax,%eax
4066f8:	53                   	push   %ebx
4066f9:	e8 f2 ff ff ff       	call   0x4066f0
4066fe:	8b d8                	mov    %eax,%ebx
406700:	85 db                	test   %ebx,%ebx
406702:	74 36                	je     0x40673a
406704:	83 3d 8c 07 46 00 ff 	cmpl   $0xffffffff,0x46078c
40670b:	75 0a                	jne    0x406717
40670d:	b8 e2 00 00 00       	mov    $0xe2,%eax
406712:	e8 fd df ff ff       	call   0x404714
406717:	8b c3                	mov    %ebx,%eax
406719:	e8 c6 ff ff ff       	call   0x4066e4
40671e:	85 c0                	test   %eax,%eax
406720:	75 0c                	jne    0x40672e
406722:	b8 e2 00 00 00       	mov    $0xe2,%eax
406727:	e8 e8 df ff ff       	call   0x404714
40672c:	eb 0c                	jmp    0x40673a
40672e:	50                   	push   %eax
40672f:	a1 8c 07 46 00       	mov    0x46078c,%eax
406734:	50                   	push   %eax
406735:	e8 a2 ff ff ff       	call   0x4066dc
40673a:	5b                   	pop    %ebx
40673b:	c3                   	ret
40673c:	8a 0d f4 07 47 00    	mov    0x4707f4,%cl
406742:	a1 8c 07 46 00       	mov    0x46078c,%eax
406747:	84 c9                	test   %cl,%cl
406749:	75 26                	jne    0x406771
40674b:	64 8b 15 2c 00 00 00 	mov    %fs:0x2c,%edx
406752:	8b 04 82             	mov    (%edx,%eax,4),%eax
406755:	c3                   	ret
406756:	e8 9d ff ff ff       	call   0x4066f8
40675b:	a1 8c 07 46 00       	mov    0x46078c,%eax
406760:	50                   	push   %eax
406761:	e8 6e ff ff ff       	call   0x4066d4
406766:	85 c0                	test   %eax,%eax
406768:	74 01                	je     0x40676b
40676a:	c3                   	ret
40676b:	a1 fc 07 47 00       	mov    0x4707fc,%eax
406770:	c3                   	ret
406771:	50                   	push   %eax
406772:	e8 5d ff ff ff       	call   0x4066d4
406777:	85 c0                	test   %eax,%eax
406779:	74 db                	je     0x406756
40677b:	c3                   	ret
40677c:	b8 94 07 46 00       	mov    $0x460794,%eax
406781:	e8 1e f9 ff ff       	call   0x4060a4
406786:	c3                   	ret
406787:	90                   	nop
406788:	53                   	push   %ebx
406789:	8b d8                	mov    %eax,%ebx
40678b:	33 c0                	xor    %eax,%eax
40678d:	a3 8c 07 46 00       	mov    %eax,0x46078c
406792:	6a 00                	push   $0x0
406794:	e8 2b ff ff ff       	call   0x4066c4
406799:	a3 f8 07 47 00       	mov    %eax,0x4707f8
40679e:	a1 f8 07 47 00       	mov    0x4707f8,%eax
4067a3:	a3 98 07 46 00       	mov    %eax,0x460798
4067a8:	33 c0                	xor    %eax,%eax
4067aa:	a3 9c 07 46 00       	mov    %eax,0x46079c
4067af:	33 c0                	xor    %eax,%eax
4067b1:	a3 a0 07 46 00       	mov    %eax,0x4607a0
4067b6:	e8 c1 ff ff ff       	call   0x40677c
4067bb:	ba 94 07 46 00       	mov    $0x460794,%edx
4067c0:	8b c3                	mov    %ebx,%eax
4067c2:	e8 b9 dc ff ff       	call   0x404480
4067c7:	5b                   	pop    %ebx
4067c8:	c3                   	ret
4067c9:	8d 40 00             	lea    0x0(%eax),%eax
4067cc:	55                   	push   %ebp
4067cd:	8b ec                	mov    %esp,%ebp
4067cf:	53                   	push   %ebx
4067d0:	8b 5d 08             	mov    0x8(%ebp),%ebx
4067d3:	89 03                	mov    %eax,(%ebx)
4067d5:	89 53 04             	mov    %edx,0x4(%ebx)
4067d8:	8b 45 0c             	mov    0xc(%ebp),%eax
4067db:	89 43 0c             	mov    %eax,0xc(%ebx)
4067de:	89 4b 08             	mov    %ecx,0x8(%ebx)
4067e1:	5b                   	pop    %ebx
4067e2:	5d                   	pop    %ebp
4067e3:	c2 08 00             	ret    $0x8
4067e6:	8b c0                	mov    %eax,%eax
4067e8:	89 01                	mov    %eax,(%ecx)
4067ea:	89 51 04             	mov    %edx,0x4(%ecx)
4067ed:	c3                   	ret
4067ee:	8b c0                	mov    %eax,%eax
4067f0:	51                   	push   %ecx
4067f1:	8b d0                	mov    %eax,%edx
4067f3:	66 83 e2 ff          	and    $0xffff,%dx
4067f7:	66 89 14 24          	mov    %dx,(%esp)
4067fb:	c1 e8 10             	shr    $0x10,%eax
4067fe:	66 89 44 24 02       	mov    %ax,0x2(%esp)
406803:	8b 04 24             	mov    (%esp),%eax
406806:	5a                   	pop    %edx
406807:	c3                   	ret
406808:	55                   	push   %ebp
406809:	8b ec                	mov    %esp,%ebp
40680b:	53                   	push   %ebx
40680c:	8b 5d 08             	mov    0x8(%ebp),%ebx
40680f:	89 03                	mov    %eax,(%ebx)
406811:	89 53 04             	mov    %edx,0x4(%ebx)
406814:	03 c8                	add    %eax,%ecx
406816:	89 4b 08             	mov    %ecx,0x8(%ebx)