404d64:	6b c6 18             	imul   $0x18,%esi,%eax
404d67:	57                   	push   %edi
404d68:	8d b8 bc 3e 42 00    	lea    0x423ebc(%eax),%edi
404d6e:	57                   	push   %edi
404d6f:	ff 15 40 b0 41 00    	call   *0x41b040
404d75:	ff 0d ec 3e 42 00    	decl   0x423eec
404d7b:	83 ef 18             	sub    $0x18,%edi
404d7e:	83 ee 01             	sub    $0x1,%esi
404d81:	75 eb                	jne    0x404d6e
404d83:	5f                   	pop    %edi
404d84:	b0 01                	mov    $0x1,%al
404d86:	5e                   	pop    %esi
404d87:	c3                   	ret
404d88:	cc                   	int3
404d89:	cc                   	int3
404d8a:	cc                   	int3
404d8b:	cc                   	int3
404d8c:	cc                   	int3
404d8d:	cc                   	int3
404d8e:	cc                   	int3
404d8f:	cc                   	int3
404d90:	53                   	push   %ebx
404d91:	56                   	push   %esi
404d92:	57                   	push   %edi
404d93:	8b 54 24 10          	mov    0x10(%esp),%edx
404d97:	8b 44 24 14          	mov    0x14(%esp),%eax
404d9b:	8b 4c 24 18          	mov    0x18(%esp),%ecx
404d9f:	55                   	push   %ebp
404da0:	52                   	push   %edx
404da1:	50                   	push   %eax
404da2:	51                   	push   %ecx
404da3:	51                   	push   %ecx
404da4:	68 20 4e 40 00       	push   $0x404e20
404da9:	64 ff 35 00 00 00 00 	push   %fs:0x0
404db0:	a1 0c 30 42 00       	mov    0x42300c,%eax
404db5:	33 c4                	xor    %esp,%eax
404db7:	89 44 24 08          	mov    %eax,0x8(%esp)
404dbb:	64 89 25 00 00 00 00 	mov    %esp,%fs:0x0
404dc2:	8b 44 24 30          	mov    0x30(%esp),%eax
404dc6:	8b 58 08             	mov    0x8(%eax),%ebx
404dc9:	8b 4c 24 2c          	mov    0x2c(%esp),%ecx
404dcd:	33 19                	xor    (%ecx),%ebx
404dcf:	8b 70 0c             	mov    0xc(%eax),%esi
404dd2:	83 fe fe             	cmp    $0xfffffffe,%esi
404dd5:	74 3b                	je     0x404e12
404dd7:	8b 54 24 34          	mov    0x34(%esp),%edx
404ddb:	83 fa fe             	cmp    $0xfffffffe,%edx
404dde:	74 04                	je     0x404de4
404de0:	3b f2                	cmp    %edx,%esi
404de2:	76 2e                	jbe    0x404e12
404de4:	8d 34 76             	lea    (%esi,%esi,2),%esi
404de7:	8d 5c b3 10          	lea    0x10(%ebx,%esi,4),%ebx
404deb:	8b 0b                	mov    (%ebx),%ecx
404ded:	89 48 0c             	mov    %ecx,0xc(%eax)
404df0:	83 7b 04 00          	cmpl   $0x0,0x4(%ebx)
404df4:	75 cc                	jne    0x404dc2
404df6:	68 01 01 00 00       	push   $0x101
404dfb:	8b 43 08             	mov    0x8(%ebx),%eax
404dfe:	e8 12 02 00 00       	call   0x405015
404e03:	b9 01 00 00 00       	mov    $0x1,%ecx
404e08:	8b 43 08             	mov    0x8(%ebx),%eax
404e0b:	e8 24 02 00 00       	call   0x405034
404e10:	eb b0                	jmp    0x404dc2
404e12:	64 8f 05 00 00 00 00 	pop    %fs:0x0
404e19:	83 c4 18             	add    $0x18,%esp
404e1c:	5f                   	pop    %edi
404e1d:	5e                   	pop    %esi
404e1e:	5b                   	pop    %ebx
404e1f:	c3                   	ret
404e20:	8b 4c 24 04          	mov    0x4(%esp),%ecx
404e24:	f7 41 04 06 00 00 00 	testl  $0x6,0x4(%ecx)
404e2b:	b8 01 00 00 00       	mov    $0x1,%eax
404e30:	74 33                	je     0x404e65
404e32:	8b 44 24 08          	mov    0x8(%esp),%eax
404e36:	8b 48 08             	mov    0x8(%eax),%ecx
404e39:	33 c8                	xor    %eax,%ecx
404e3b:	e8 16 e1 ff ff       	call   0x402f56
404e40:	55                   	push   %ebp
404e41:	8b 68 18             	mov    0x18(%eax),%ebp
404e44:	ff 70 0c             	push   0xc(%eax)
404e47:	ff 70 10             	push   0x10(%eax)
404e4a:	ff 70 14             	push   0x14(%eax)
404e4d:	e8 3e ff ff ff       	call   0x404d90
404e52:	83 c4 0c             	add    $0xc,%esp
404e55:	5d                   	pop    %ebp
404e56:	8b 44 24 08          	mov    0x8(%esp),%eax
404e5a:	8b 54 24 10          	mov    0x10(%esp),%edx
404e5e:	89 02                	mov    %eax,(%edx)
404e60:	b8 03 00 00 00       	mov    $0x3,%eax
404e65:	c3                   	ret
404e66:	55                   	push   %ebp
404e67:	ff 74 24 08          	push   0x8(%esp)
404e6b:	e8 7a ee ff ff       	call   0x403cea
404e70:	83 c4 04             	add    $0x4,%esp
404e73:	8b 4c 24 08          	mov    0x8(%esp),%ecx
404e77:	8b 29                	mov    (%ecx),%ebp
404e79:	ff 71 1c             	push   0x1c(%ecx)
404e7c:	ff 71 18             	push   0x18(%ecx)
404e7f:	ff 71 28             	push   0x28(%ecx)
404e82:	e8 09 ff ff ff       	call   0x404d90
404e87:	83 c4 0c             	add    $0xc,%esp
404e8a:	5d                   	pop    %ebp
404e8b:	c2 04 00             	ret    $0x4
404e8e:	55                   	push   %ebp
404e8f:	56                   	push   %esi
404e90:	57                   	push   %edi
404e91:	53                   	push   %ebx
404e92:	8b ea                	mov    %edx,%ebp
404e94:	33 c0                	xor    %eax,%eax
404e96:	33 db                	xor    %ebx,%ebx
404e98:	33 d2                	xor    %edx,%edx
404e9a:	33 f6                	xor    %esi,%esi
404e9c:	33 ff                	xor    %edi,%edi
404e9e:	ff d1                	call   *%ecx
404ea0:	5b                   	pop    %ebx
404ea1:	5f                   	pop    %edi
404ea2:	5e                   	pop    %esi
404ea3:	5d                   	pop    %ebp
404ea4:	c3                   	ret
404ea5:	8b ea                	mov    %edx,%ebp
404ea7:	8b f1                	mov    %ecx,%esi
404ea9:	8b c1                	mov    %ecx,%eax
404eab:	6a 01                	push   $0x1
404ead:	e8 63 01 00 00       	call   0x405015
404eb2:	33 c0                	xor    %eax,%eax
404eb4:	33 db                	xor    %ebx,%ebx
404eb6:	33 c9                	xor    %ecx,%ecx
404eb8:	33 d2                	xor    %edx,%edx
404eba:	33 ff                	xor    %edi,%edi
404ebc:	ff e6                	jmp    *%esi
404ebe:	55                   	push   %ebp
404ebf:	8b ec                	mov    %esp,%ebp
404ec1:	53                   	push   %ebx
404ec2:	56                   	push   %esi
404ec3:	57                   	push   %edi
404ec4:	6a 00                	push   $0x0
404ec6:	52                   	push   %edx
404ec7:	68 d2 4e 40 00       	push   $0x404ed2
404ecc:	51                   	push   %ecx
404ecd:	e8 04 36 01 00       	call   0x4184d6
404ed2:	5f                   	pop    %edi
404ed3:	5e                   	pop    %esi
404ed4:	5b                   	pop    %ebx
404ed5:	5d                   	pop    %ebp
404ed6:	c3                   	ret
404ed7:	55                   	push   %ebp
404ed8:	8b 6c 24 08          	mov    0x8(%esp),%ebp
404edc:	52                   	push   %edx
404edd:	51                   	push   %ecx
404ede:	ff 74 24 14          	push   0x14(%esp)
404ee2:	e8 a9 fe ff ff       	call   0x404d90
404ee7:	83 c4 0c             	add    $0xc,%esp
404eea:	5d                   	pop    %ebp
404eeb:	c2 08 00             	ret    $0x8
404eee:	cc                   	int3
404eef:	cc                   	int3
404ef0:	cc                   	int3
404ef1:	cc                   	int3
404ef2:	cc                   	int3
404ef3:	cc                   	int3
404ef4:	cc                   	int3
404ef5:	cc                   	int3
404ef6:	cc                   	int3
404ef7:	cc                   	int3
404ef8:	cc                   	int3
404ef9:	cc                   	int3
404efa:	cc                   	int3
404efb:	cc                   	int3
404efc:	cc                   	int3
404efd:	cc                   	int3
404efe:	cc                   	int3
404eff:	cc                   	int3
404f00:	55                   	push   %ebp
404f01:	8b ec                	mov    %esp,%ebp
404f03:	53                   	push   %ebx
404f04:	56                   	push   %esi
404f05:	57                   	push   %edi
404f06:	55                   	push   %ebp
404f07:	6a 00                	push   $0x0
404f09:	6a 00                	push   $0x0
404f0b:	68 18 4f 40 00       	push   $0x404f18
404f10:	ff 75 08             	push   0x8(%ebp)
404f13:	e8 be 35 01 00       	call   0x4184d6
404f18:	5d                   	pop    %ebp
404f19:	5f                   	pop    %edi
404f1a:	5e                   	pop    %esi
404f1b:	5b                   	pop    %ebx
404f1c:	8b e5                	mov    %ebp,%esp
404f1e:	5d                   	pop    %ebp
404f1f:	c3                   	ret
404f20:	8b 4c 24 04          	mov    0x4(%esp),%ecx
404f24:	f7 41 04 06 00 00 00 	testl  $0x6,0x4(%ecx)
404f2b:	b8 01 00 00 00       	mov    $0x1,%eax
404f30:	74 32                	je     0x404f64
404f32:	8b 44 24 14          	mov    0x14(%esp),%eax
404f36:	8b 48 fc             	mov    -0x4(%eax),%ecx
404f39:	33 c8                	xor    %eax,%ecx
404f3b:	e8 16 e0 ff ff       	call   0x402f56
404f40:	55                   	push   %ebp
404f41:	8b 68 10             	mov    0x10(%eax),%ebp
404f44:	8b 50 28             	mov    0x28(%eax),%edx
404f47:	52                   	push   %edx
404f48:	8b 50 24             	mov    0x24(%eax),%edx
404f4b:	52                   	push   %edx
404f4c:	e8 14 00 00 00       	call   0x404f65
404f51:	83 c4 08             	add    $0x8,%esp
404f54:	5d                   	pop    %ebp
404f55:	8b 44 24 08          	mov    0x8(%esp),%eax
404f59:	8b 54 24 10          	mov    0x10(%esp),%edx
404f5d:	89 02                	mov    %eax,(%edx)
404f5f:	b8 03 00 00 00       	mov    $0x3,%eax
404f64:	c3                   	ret
404f65:	53                   	push   %ebx
404f66:	56                   	push   %esi
404f67:	57                   	push   %edi
404f68:	8b 44 24 10          	mov    0x10(%esp),%eax
404f6c:	55                   	push   %ebp
404f6d:	50                   	push   %eax
404f6e:	6a fe                	push   $0xfffffffe
404f70:	68 20 4f 40 00       	push   $0x404f20
404f75:	64 ff 35 00 00 00 00 	push   %fs:0x0
404f7c:	a1 0c 30 42 00       	mov    0x42300c,%eax
404f81:	33 c4                	xor    %esp,%eax
404f83:	50                   	push   %eax
404f84:	8d 44 24 04          	lea    0x4(%esp),%eax
404f88:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
404f8e:	8b 44 24 28          	mov    0x28(%esp),%eax
404f92:	8b 58 08             	mov    0x8(%eax),%ebx
404f95:	8b 70 0c             	mov    0xc(%eax),%esi
404f98:	83 fe ff             	cmp    $0xffffffff,%esi
404f9b:	74 3a                	je     0x404fd7
404f9d:	83 7c 24 2c ff       	cmpl   $0xffffffff,0x2c(%esp)
404fa2:	74 06                	je     0x404faa
404fa4:	3b 74 24 2c          	cmp    0x2c(%esp),%esi
404fa8:	76 2d                	jbe    0x404fd7
404faa:	8d 34 76             	lea    (%esi,%esi,2),%esi
404fad:	8b 0c b3             	mov    (%ebx,%esi,4),%ecx
404fb0:	89 4c 24 0c          	mov    %ecx,0xc(%esp)
404fb4:	89 48 0c             	mov    %ecx,0xc(%eax)
404fb7:	83 7c b3 04 00       	cmpl   $0x0,0x4(%ebx,%esi,4)
404fbc:	75 17                	jne    0x404fd5
404fbe:	68 01 01 00 00       	push   $0x101
404fc3:	8b 44 b3 08          	mov    0x8(%ebx,%esi,4),%eax
404fc7:	e8 49 00 00 00       	call   0x405015
404fcc:	8b 44 b3 08          	mov    0x8(%ebx,%esi,4),%eax
404fd0:	e8 5f 00 00 00       	call   0x405034
404fd5:	eb b7                	jmp    0x404f8e
404fd7:	8b 4c 24 04          	mov    0x4(%esp),%ecx
404fdb:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
404fe2:	83 c4 18             	add    $0x18,%esp
404fe5:	5f                   	pop    %edi
404fe6:	5e                   	pop    %esi
404fe7:	5b                   	pop    %ebx
404fe8:	c3                   	ret
404fe9:	33 c0                	xor    %eax,%eax
404feb:	64 8b 0d 00 00 00 00 	mov    %fs:0x0,%ecx
404ff2:	81 79 04 20 4f 40 00 	cmpl   $0x404f20,0x4(%ecx)
404ff9:	75 10                	jne    0x40500b
404ffb:	8b 51 0c             	mov    0xc(%ecx),%edx
404ffe:	8b 52 0c             	mov    0xc(%edx),%edx
405001:	39 51 08             	cmp    %edx,0x8(%ecx)
405004:	75 05                	jne    0x40500b
405006:	b8 01 00 00 00       	mov    $0x1,%eax
40500b:	c3                   	ret
40500c:	53                   	push   %ebx
40500d:	51                   	push   %ecx
40500e:	bb 40 30 42 00       	mov    $0x423040,%ebx
405013:	eb 0b                	jmp    0x405020
405015:	53                   	push   %ebx
405016:	51                   	push   %ecx
405017:	bb 40 30 42 00       	mov    $0x423040,%ebx
40501c:	8b 4c 24 0c          	mov    0xc(%esp),%ecx
405020:	89 4b 08             	mov    %ecx,0x8(%ebx)
405023:	89 43 04             	mov    %eax,0x4(%ebx)
405026:	89 6b 0c             	mov    %ebp,0xc(%ebx)
405029:	55                   	push   %ebp
40502a:	51                   	push   %ecx
40502b:	50                   	push   %eax
40502c:	58                   	pop    %eax
40502d:	59                   	pop    %ecx
40502e:	5d                   	pop    %ebp
40502f:	59                   	pop    %ecx
405030:	5b                   	pop    %ebx
405031:	c2 04 00             	ret    $0x4
405034:	ff d0                	call   *%eax
405036:	c3                   	ret
405037:	8b ff                	mov    %edi,%edi
405039:	55                   	push   %ebp
40503a:	8b ec                	mov    %esp,%ebp
40503c:	81 ec 84 04 00 00    	sub    $0x484,%esp
405042:	a1 0c 30 42 00       	mov    0x42300c,%eax
405047:	33 c5                	xor    %ebp,%eax
405049:	89 45 fc             	mov    %eax,-0x4(%ebp)
40504c:	83 7d 18 00          	cmpl   $0x0,0x18(%ebp)
405050:	8b 45 10             	mov    0x10(%ebp),%eax
405053:	53                   	push   %ebx
405054:	8b 5d 14             	mov    0x14(%ebp),%ebx
405057:	89 85 a0 fb ff ff    	mov    %eax,-0x460(%ebp)
40505d:	75 18                	jne    0x405077
40505f:	e8 a3 2c 00 00       	call   0x407d07
405064:	c7 00 16 00 00 00    	movl   $0x16,(%eax)
40506a:	e8 bf 2b 00 00       	call   0x407c2e
40506f:	83 c8 ff             	or     $0xffffffff,%eax
405072:	e9 17 01 00 00       	jmp    0x40518e
405077:	85 db                	test   %ebx,%ebx
405079:	74 04                	je     0x40507f
40507b:	85 c0                	test   %eax,%eax
40507d:	74 e0                	je     0x40505f
40507f:	56                   	push   %esi
405080:	57                   	push   %edi
405081:	ff 75 1c             	push   0x1c(%ebp)
405084:	8d 8d 7c fb ff ff    	lea    -0x484(%ebp),%ecx
40508a:	e8 22 06 00 00       	call   0x4056b1
40508f:	8b 4d 08             	mov    0x8(%ebp),%ecx
405092:	8d bd 90 fb ff ff    	lea    -0x470(%ebp),%edi
405098:	33 c0                	xor    %eax,%eax
40509a:	33 d2                	xor    %edx,%edx
40509c:	ab                   	stos   %eax,%es:(%edi)
40509d:	ab                   	stos   %eax,%es:(%edi)
40509e:	ab                   	stos   %eax,%es:(%edi)
40509f:	ab                   	stos   %eax,%es:(%edi)
4050a0:	8b c1                	mov    %ecx,%eax
4050a2:	8b bd a0 fb ff ff    	mov    -0x460(%ebp),%edi
4050a8:	83 e0 02             	and    $0x2,%eax
4050ab:	89 85 8c fb ff ff    	mov    %eax,-0x474(%ebp)
4050b1:	0b c2                	or     %edx,%eax
4050b3:	89 bd 90 fb ff ff    	mov    %edi,-0x470(%ebp)
4050b9:	89 9d 94 fb ff ff    	mov    %ebx,-0x46c(%ebp)
4050bf:	89 95 98 fb ff ff    	mov    %edx,-0x468(%ebp)
4050c5:	75 0a                	jne    0x4050d1
4050c7:	88 95 9c fb ff ff    	mov    %dl,-0x464(%ebp)
4050cd:	85 ff                	test   %edi,%edi
4050cf:	75 07                	jne    0x4050d8
4050d1:	c6 85 9c fb ff ff 01 	movb   $0x1,-0x464(%ebp)
4050d8:	ff 75 20             	push   0x20(%ebp)
4050db:	8d 85 90 fb ff ff    	lea    -0x470(%ebp),%eax
4050e1:	89 85 a0 fb ff ff    	mov    %eax,-0x460(%ebp)
4050e7:	8d 85 80 fb ff ff    	lea    -0x480(%ebp),%eax
4050ed:	50                   	push   %eax
4050ee:	ff 75 18             	push   0x18(%ebp)
4050f1:	8d 85 a0 fb ff ff    	lea    -0x460(%ebp),%eax
4050f7:	ff 75 0c             	push   0xc(%ebp)
4050fa:	51                   	push   %ecx
4050fb:	50                   	push   %eax
4050fc:	8d 8d a4 fb ff ff    	lea    -0x45c(%ebp),%ecx
405102:	e8 75 05 00 00       	call   0x40567c
405107:	8d 8d a4 fb ff ff    	lea    -0x45c(%ebp),%ecx
40510d:	e8 dc 07 00 00       	call   0x4058ee
405112:	8b f0                	mov    %eax,%esi
405114:	85 ff                	test   %edi,%edi