409ce4:	89 75 e0             	mov    %esi,-0x20(%ebp)
409ce7:	89 75 fc             	mov    %esi,-0x4(%ebp)
409cea:	89 75 e4             	mov    %esi,-0x1c(%ebp)
409ced:	8b 5d 0c             	mov    0xc(%ebp),%ebx
409cf0:	8b 7d 08             	mov    0x8(%ebp),%edi
409cf3:	3b 75 10             	cmp    0x10(%ebp),%esi
409cf6:	7d 19                	jge    0x409d11
409cf8:	8b 4d 14             	mov    0x14(%ebp),%ecx
409cfb:	ff 15 20 f2 40 00    	call   *0x40f220
409d01:	8b cf                	mov    %edi,%ecx
409d03:	ff 55 14             	call   *0x14(%ebp)
409d06:	03 fb                	add    %ebx,%edi
409d08:	89 7d 08             	mov    %edi,0x8(%ebp)
409d0b:	46                   	inc    %esi
409d0c:	89 75 e4             	mov    %esi,-0x1c(%ebp)
409d0f:	eb e2                	jmp    0x409cf3
409d11:	33 c0                	xor    %eax,%eax
409d13:	40                   	inc    %eax
409d14:	89 45 e0             	mov    %eax,-0x20(%ebp)
409d17:	c7 45 fc fe ff ff ff 	movl   $0xfffffffe,-0x4(%ebp)
409d1e:	e8 1e 00 00 00       	call   0x409d41
409d23:	8b 4d f0             	mov    -0x10(%ebp),%ecx
409d26:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
409d2d:	59                   	pop    %ecx
409d2e:	5f                   	pop    %edi
409d2f:	5e                   	pop    %esi
409d30:	5b                   	pop    %ebx
409d31:	c9                   	leave
409d32:	c2 14 00             	ret    $0x14
409d35:	8b 5d 0c             	mov    0xc(%ebp),%ebx
409d38:	8b 7d 08             	mov    0x8(%ebp),%edi
409d3b:	8b 75 e4             	mov    -0x1c(%ebp),%esi
409d3e:	8b 45 e0             	mov    -0x20(%ebp),%eax
409d41:	85 c0                	test   %eax,%eax
409d43:	75 0b                	jne    0x409d50
409d45:	ff 75 18             	push   0x18(%ebp)
409d48:	56                   	push   %esi
409d49:	53                   	push   %ebx
409d4a:	57                   	push   %edi
409d4b:	e8 a9 fb ff ff       	call   0x4098f9
409d50:	c3                   	ret
409d51:	e9 7d ff ff ff       	jmp    0x409cd3
409d56:	cc                   	int3
409d57:	cc                   	int3
409d58:	cc                   	int3
409d59:	cc                   	int3
409d5a:	cc                   	int3
409d5b:	cc                   	int3
409d5c:	cc                   	int3
409d5d:	cc                   	int3
409d5e:	cc                   	int3
409d5f:	cc                   	int3
409d60:	ff 25 e0 f1 40 00    	jmp    *0x40f1e0
409d66:	ff 25 dc f1 40 00    	jmp    *0x40f1dc
409d6c:	ff 25 d8 f1 40 00    	jmp    *0x40f1d8
409d72:	ff 25 d4 f1 40 00    	jmp    *0x40f1d4
409d78:	cc                   	int3
409d79:	cc                   	int3
409d7a:	cc                   	int3
409d7b:	cc                   	int3
409d7c:	cc                   	int3
409d7d:	cc                   	int3
409d7e:	cc                   	int3
409d7f:	cc                   	int3
409d80:	ff 25 d0 f1 40 00    	jmp    *0x40f1d0
409d86:	ff 25 cc f1 40 00    	jmp    *0x40f1cc
409d8c:	cc                   	int3
409d8d:	cc                   	int3
409d8e:	cc                   	int3
409d8f:	cc                   	int3
409d90:	ff 25 c8 f1 40 00    	jmp    *0x40f1c8
409d96:	ff 25 c4 f1 40 00    	jmp    *0x40f1c4
409d9c:	8b 4d f4             	mov    -0xc(%ebp),%ecx
409d9f:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
409da6:	59                   	pop    %ecx
409da7:	5f                   	pop    %edi
409da8:	5f                   	pop    %edi
409da9:	5e                   	pop    %esi
409daa:	5b                   	pop    %ebx
409dab:	8b e5                	mov    %ebp,%esp
409dad:	5d                   	pop    %ebp
409dae:	51                   	push   %ecx
409daf:	c3                   	ret
409db0:	8b 4d f0             	mov    -0x10(%ebp),%ecx
409db3:	33 cd                	xor    %ebp,%ecx
409db5:	e8 a6 fa ff ff       	call   0x409860
409dba:	e9 dd ff ff ff       	jmp    0x409d9c
409dbf:	8b 4d ec             	mov    -0x14(%ebp),%ecx
409dc2:	33 cd                	xor    %ebp,%ecx
409dc4:	e8 97 fa ff ff       	call   0x409860
409dc9:	e9 ce ff ff ff       	jmp    0x409d9c
409dce:	50                   	push   %eax
409dcf:	64 ff 35 00 00 00 00 	push   %fs:0x0
409dd6:	8d 44 24 0c          	lea    0xc(%esp),%eax
409dda:	2b 64 24 0c          	sub    0xc(%esp),%esp
409dde:	53                   	push   %ebx
409ddf:	56                   	push   %esi
409de0:	57                   	push   %edi
409de1:	89 28                	mov    %ebp,(%eax)
409de3:	8b e8                	mov    %eax,%ebp
409de5:	a1 e4 c1 40 00       	mov    0x40c1e4,%eax
409dea:	33 c5                	xor    %ebp,%eax
409dec:	50                   	push   %eax
409ded:	ff 75 fc             	push   -0x4(%ebp)
409df0:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
409df7:	8d 45 f4             	lea    -0xc(%ebp),%eax
409dfa:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
409e00:	c3                   	ret
409e01:	50                   	push   %eax
409e02:	64 ff 35 00 00 00 00 	push   %fs:0x0
409e09:	8d 44 24 0c          	lea    0xc(%esp),%eax
409e0d:	2b 64 24 0c          	sub    0xc(%esp),%esp
409e11:	53                   	push   %ebx
409e12:	56                   	push   %esi
409e13:	57                   	push   %edi
409e14:	89 28                	mov    %ebp,(%eax)
409e16:	8b e8                	mov    %eax,%ebp
409e18:	a1 e4 c1 40 00       	mov    0x40c1e4,%eax
409e1d:	33 c5                	xor    %ebp,%eax
409e1f:	50                   	push   %eax
409e20:	89 45 f0             	mov    %eax,-0x10(%ebp)
409e23:	ff 75 fc             	push   -0x4(%ebp)
409e26:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
409e2d:	8d 45 f4             	lea    -0xc(%ebp),%eax
409e30:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
409e36:	c3                   	ret
409e37:	50                   	push   %eax
409e38:	64 ff 35 00 00 00 00 	push   %fs:0x0
409e3f:	8d 44 24 0c          	lea    0xc(%esp),%eax
409e43:	2b 64 24 0c          	sub    0xc(%esp),%esp
409e47:	53                   	push   %ebx
409e48:	56                   	push   %esi
409e49:	57                   	push   %edi
409e4a:	89 28                	mov    %ebp,(%eax)
409e4c:	8b e8                	mov    %eax,%ebp
409e4e:	a1 e4 c1 40 00       	mov    0x40c1e4,%eax
409e53:	33 c5                	xor    %ebp,%eax
409e55:	50                   	push   %eax
409e56:	89 65 f0             	mov    %esp,-0x10(%ebp)
409e59:	ff 75 fc             	push   -0x4(%ebp)
409e5c:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
409e63:	8d 45 f4             	lea    -0xc(%ebp),%eax
409e66:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
409e6c:	c3                   	ret
409e6d:	50                   	push   %eax
409e6e:	64 ff 35 00 00 00 00 	push   %fs:0x0
409e75:	8d 44 24 0c          	lea    0xc(%esp),%eax
409e79:	2b 64 24 0c          	sub    0xc(%esp),%esp
409e7d:	53                   	push   %ebx
409e7e:	56                   	push   %esi
409e7f:	57                   	push   %edi
409e80:	89 28                	mov    %ebp,(%eax)
409e82:	8b e8                	mov    %eax,%ebp
409e84:	a1 e4 c1 40 00       	mov    0x40c1e4,%eax
409e89:	33 c5                	xor    %ebp,%eax
409e8b:	50                   	push   %eax
409e8c:	89 45 ec             	mov    %eax,-0x14(%ebp)
409e8f:	89 65 f0             	mov    %esp,-0x10(%ebp)
409e92:	ff 75 fc             	push   -0x4(%ebp)
409e95:	c7 45 fc ff ff ff ff 	movl   $0xffffffff,-0x4(%ebp)
409e9c:	8d 45 f4             	lea    -0xc(%ebp),%eax
409e9f:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
409ea5:	c3                   	ret
409ea6:	ff 25 c0 f1 40 00    	jmp    *0x40f1c0
409eac:	ff 25 bc f1 40 00    	jmp    *0x40f1bc
409eb2:	cc                   	int3
409eb3:	cc                   	int3
409eb4:	cc                   	int3
409eb5:	cc                   	int3
409eb6:	cc                   	int3
409eb7:	cc                   	int3
409eb8:	cc                   	int3
409eb9:	cc                   	int3
409eba:	cc                   	int3
409ebb:	cc                   	int3
409ebc:	cc                   	int3
409ebd:	cc                   	int3
409ebe:	cc                   	int3
409ebf:	cc                   	int3
409ec0:	c2 00 00             	ret    $0x0
409ec3:	cc                   	int3
409ec4:	cc                   	int3
409ec5:	cc                   	int3
409ec6:	cc                   	int3
409ec7:	cc                   	int3
409ec8:	cc                   	int3
409ec9:	cc                   	int3
409eca:	cc                   	int3
409ecb:	cc                   	int3
409ecc:	cc                   	int3
409ecd:	cc                   	int3
409ece:	cc                   	int3
409ecf:	cc                   	int3
409ed0:	8b ff                	mov    %edi,%edi
409ed2:	55                   	push   %ebp
409ed3:	8b ec                	mov    %esp,%ebp
409ed5:	8b 45 08             	mov    0x8(%ebp),%eax
409ed8:	8b 00                	mov    (%eax),%eax
409eda:	81 38 63 73 6d e0    	cmpl   $0xe06d7363,(%eax)
409ee0:	75 2b                	jne    0x409f0d
409ee2:	83 78 10 03          	cmpl   $0x3,0x10(%eax)
409ee6:	75 25                	jne    0x409f0d
409ee8:	8b 40 14             	mov    0x14(%eax),%eax
409eeb:	3d 20 05 93 19       	cmp    $0x19930520,%eax
409ef0:	74 15                	je     0x409f07
409ef2:	3d 21 05 93 19       	cmp    $0x19930521,%eax
409ef7:	74 0e                	je     0x409f07
409ef9:	3d 22 05 93 19       	cmp    $0x19930522,%eax
409efe:	74 07                	je     0x409f07
409f00:	3d 00 40 99 01       	cmp    $0x1994000,%eax
409f05:	75 06                	jne    0x409f0d
409f07:	ff 15 88 f1 40 00    	call   *0x40f188
409f0d:	33 c0                	xor    %eax,%eax
409f0f:	5d                   	pop    %ebp
409f10:	c2 04 00             	ret    $0x4
409f13:	cc                   	int3
409f14:	cc                   	int3
409f15:	cc                   	int3
409f16:	cc                   	int3
409f17:	cc                   	int3
409f18:	cc                   	int3
409f19:	cc                   	int3
409f1a:	cc                   	int3
409f1b:	cc                   	int3
409f1c:	cc                   	int3
409f1d:	cc                   	int3
409f1e:	cc                   	int3
409f1f:	cc                   	int3
409f20:	68 d0 9e 40 00       	push   $0x409ed0
409f25:	ff 15 3c f1 40 00    	call   *0x40f13c
409f2b:	33 c0                	xor    %eax,%eax
409f2d:	c3                   	ret
409f2e:	ff 25 b8 f1 40 00    	jmp    *0x40f1b8
409f34:	6a 0c                	push   $0xc
409f36:	68 10 af 40 00       	push   $0x40af10
409f3b:	e8 a8 02 00 00       	call   0x40a1e8
409f40:	33 c9                	xor    %ecx,%ecx
409f42:	8b 45 08             	mov    0x8(%ebp),%eax
409f45:	85 c0                	test   %eax,%eax
409f47:	74 4b                	je     0x409f94
409f49:	83 f8 ff             	cmp    $0xffffffff,%eax
409f4c:	74 46                	je     0x409f94
409f4e:	89 4d fc             	mov    %ecx,-0x4(%ebp)
409f51:	ba 4d 5a 00 00       	mov    $0x5a4d,%edx
409f56:	66 39 10             	cmp    %dx,(%eax)
409f59:	75 32                	jne    0x409f8d
409f5b:	8b 50 3c             	mov    0x3c(%eax),%edx
409f5e:	85 d2                	test   %edx,%edx
409f60:	78 2b                	js     0x409f8d
409f62:	81 fa 00 00 00 10    	cmp    $0x10000000,%edx
409f68:	73 23                	jae    0x409f8d
409f6a:	03 c2                	add    %edx,%eax
409f6c:	89 45 e4             	mov    %eax,-0x1c(%ebp)
409f6f:	8b 08                	mov    (%eax),%ecx
409f71:	81 e9 50 45 00 00    	sub    $0x4550,%ecx
409f77:	f7 d9                	neg    %ecx
409f79:	1b c9                	sbb    %ecx,%ecx
409f7b:	f7 d1                	not    %ecx
409f7d:	23 c8                	and    %eax,%ecx
409f7f:	eb 09                	jmp    0x409f8a
409f81:	33 c0                	xor    %eax,%eax
409f83:	40                   	inc    %eax
409f84:	c3                   	ret
409f85:	8b 65 e8             	mov    -0x18(%ebp),%esp
409f88:	33 c9                	xor    %ecx,%ecx
409f8a:	89 4d e4             	mov    %ecx,-0x1c(%ebp)
409f8d:	c7 45 fc fe ff ff ff 	movl   $0xfffffffe,-0x4(%ebp)
409f94:	8b c1                	mov    %ecx,%eax
409f96:	8b 4d f0             	mov    -0x10(%ebp),%ecx
409f99:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
409fa0:	59                   	pop    %ecx
409fa1:	5f                   	pop    %edi
409fa2:	5e                   	pop    %esi
409fa3:	5b                   	pop    %ebx
409fa4:	c9                   	leave
409fa5:	c2 04 00             	ret    $0x4
409fa8:	8b ff                	mov    %edi,%edi
409faa:	55                   	push   %ebp
409fab:	8b ec                	mov    %esp,%ebp
409fad:	6a 00                	push   $0x0
409faf:	ff 15 88 f0 40 00    	call   *0x40f088
409fb5:	85 c0                	test   %eax,%eax
409fb7:	74 20                	je     0x409fd9
409fb9:	50                   	push   %eax
409fba:	e8 75 ff ff ff       	call   0x409f34
409fbf:	85 c0                	test   %eax,%eax
409fc1:	74 16                	je     0x409fd9
409fc3:	0f b7 48 5c          	movzwl 0x5c(%eax),%ecx
409fc7:	6a 02                	push   $0x2
409fc9:	58                   	pop    %eax
409fca:	66 3b c8             	cmp    %ax,%cx
409fcd:	74 0d                	je     0x409fdc
409fcf:	83 f9 03             	cmp    $0x3,%ecx
409fd2:	75 05                	jne    0x409fd9
409fd4:	33 c0                	xor    %eax,%eax
409fd6:	40                   	inc    %eax
409fd7:	5d                   	pop    %ebp
409fd8:	c3                   	ret
409fd9:	8b 45 08             	mov    0x8(%ebp),%eax
409fdc:	5d                   	pop    %ebp
409fdd:	c3                   	ret
409fde:	ff 25 b0 f1 40 00    	jmp    *0x40f1b0
409fe4:	cc                   	int3
409fe5:	cc                   	int3
409fe6:	cc                   	int3
409fe7:	cc                   	int3
409fe8:	cc                   	int3
409fe9:	cc                   	int3
409fea:	cc                   	int3
409feb:	cc                   	int3
409fec:	cc                   	int3
409fed:	cc                   	int3
409fee:	cc                   	int3
409fef:	cc                   	int3
409ff0:	8b ff                	mov    %edi,%edi
409ff2:	55                   	push   %ebp
409ff3:	8b ec                	mov    %esp,%ebp
409ff5:	8b 45 08             	mov    0x8(%ebp),%eax
409ff8:	33 d2                	xor    %edx,%edx
409ffa:	53                   	push   %ebx
409ffb:	56                   	push   %esi
409ffc:	57                   	push   %edi
409ffd:	8b 48 3c             	mov    0x3c(%eax),%ecx
40a000:	03 c8                	add    %eax,%ecx
40a002:	0f b7 41 14          	movzwl 0x14(%ecx),%eax
40a006:	0f b7 59 06          	movzwl 0x6(%ecx),%ebx
40a00a:	83 c0 18             	add    $0x18,%eax
40a00d:	03 c1                	add    %ecx,%eax
40a00f:	85 db                	test   %ebx,%ebx
40a011:	74 1b                	je     0x40a02e
40a013:	8b 7d 0c             	mov    0xc(%ebp),%edi
40a016:	8b 70 0c             	mov    0xc(%eax),%esi
40a019:	3b fe                	cmp    %esi,%edi
40a01b:	72 09                	jb     0x40a026
40a01d:	8b 48 08             	mov    0x8(%eax),%ecx
40a020:	03 ce                	add    %esi,%ecx
40a022:	3b f9                	cmp    %ecx,%edi
40a024:	72 0a                	jb     0x40a030
40a026:	42                   	inc    %edx
40a027:	83 c0 28             	add    $0x28,%eax
40a02a:	3b d3                	cmp    %ebx,%edx
40a02c:	72 e8                	jb     0x40a016
40a02e:	33 c0                	xor    %eax,%eax
40a030:	5f                   	pop    %edi
40a031:	5e                   	pop    %esi
40a032:	5b                   	pop    %ebx
40a033:	5d                   	pop    %ebp
40a034:	c3                   	ret
40a035:	cc                   	int3
40a036:	cc                   	int3