406ad6:	57                   	push   %edi
406ad7:	68 03 00 1f 00       	push   $0x1f0003
406adc:	ff 15 50 b1 41 00    	call   *0x41b150
406ae2:	8b f0                	mov    %eax,%esi
406ae4:	85 f6                	test   %esi,%esi
406ae6:	75 1d                	jne    0x406b05
406ae8:	ff 15 44 b1 41 00    	call   *0x41b144
406aee:	83 f8 02             	cmp    $0x2,%eax
406af1:	74 48                	je     0x406b3b
406af3:	51                   	push   %ecx
406af4:	8b 4d 04             	mov    0x4(%ebp),%ecx
406af7:	ba c9 00 00 00       	mov    $0xc9,%edx
406afc:	e8 64 fc ff ff       	call   0x406765
406b01:	8b f8                	mov    %eax,%edi
406b03:	eb 36                	jmp    0x406b3b
406b05:	8d 54 24 10          	lea    0x10(%esp),%edx
406b09:	89 7c 24 10          	mov    %edi,0x10(%esp)
406b0d:	8b ce                	mov    %esi,%ecx
406b0f:	e8 5c fe ff ff       	call   0x406970
406b14:	8b d8                	mov    %eax,%ebx
406b16:	85 db                	test   %ebx,%ebx
406b18:	79 13                	jns    0x406b2d
406b1a:	53                   	push   %ebx
406b1b:	51                   	push   %ecx
406b1c:	8b 4d 04             	mov    0x4(%ebp),%ecx
406b1f:	ba cf 00 00 00       	mov    $0xcf,%edx
406b24:	e8 1d fc ff ff       	call   0x406746
406b29:	8b fb                	mov    %ebx,%edi
406b2b:	eb 0e                	jmp    0x406b3b
406b2d:	8b 4c 24 14          	mov    0x14(%esp),%ecx
406b31:	8b 44 24 10          	mov    0x10(%esp),%eax
406b35:	99                   	cltd
406b36:	89 01                	mov    %eax,(%ecx)
406b38:	89 51 04             	mov    %edx,0x4(%ecx)
406b3b:	85 f6                	test   %esi,%esi
406b3d:	74 06                	je     0x406b45
406b3f:	56                   	push   %esi
406b40:	e8 87 fc ff ff       	call   0x4067cc
406b45:	8b 8c 24 24 02 00 00 	mov    0x224(%esp),%ecx
406b4c:	8b c7                	mov    %edi,%eax
406b4e:	5f                   	pop    %edi
406b4f:	5e                   	pop    %esi
406b50:	5b                   	pop    %ebx
406b51:	33 cc                	xor    %esp,%ecx
406b53:	e8 88 cd 00 00       	call   0x4138e0
406b58:	8b e5                	mov    %ebp,%esp
406b5a:	5d                   	pop    %ebp
406b5b:	c2 08 00             	ret    $0x8
406b5e:	8b ff                	mov    %edi,%edi
406b60:	55                   	push   %ebp
406b61:	8b ec                	mov    %esp,%ebp
406b63:	83 ec 0c             	sub    $0xc,%esp
406b66:	8b 45 0c             	mov    0xc(%ebp),%eax
406b69:	53                   	push   %ebx
406b6a:	8b 5d 08             	mov    0x8(%ebp),%ebx
406b6d:	56                   	push   %esi
406b6e:	8b f1                	mov    %ecx,%esi
406b70:	33 c9                	xor    %ecx,%ecx
406b72:	57                   	push   %edi
406b73:	89 46 04             	mov    %eax,0x4(%esi)
406b76:	8b 43 04             	mov    0x4(%ebx),%eax
406b79:	89 46 08             	mov    %eax,0x8(%esi)
406b7c:	8d 46 0c             	lea    0xc(%esi),%eax
406b7f:	89 08                	mov    %ecx,(%eax)
406b81:	89 45 fc             	mov    %eax,-0x4(%ebp)
406b84:	66 8b 43 20          	mov    0x20(%ebx),%ax
406b88:	66 89 46 10          	mov    %ax,0x10(%esi)
406b8c:	8a 03                	mov    (%ebx),%al
406b8e:	88 46 12             	mov    %al,0x12(%esi)
406b91:	8d 46 14             	lea    0x14(%esi),%eax
406b94:	89 08                	mov    %ecx,(%eax)
406b96:	89 45 f8             	mov    %eax,-0x8(%ebp)
406b99:	8b 43 48             	mov    0x48(%ebx),%eax
406b9c:	89 46 18             	mov    %eax,0x18(%esi)
406b9f:	8b 43 4c             	mov    0x4c(%ebx),%eax
406ba2:	89 46 1c             	mov    %eax,0x1c(%esi)
406ba5:	8d 46 20             	lea    0x20(%esi),%eax
406ba8:	89 08                	mov    %ecx,(%eax)
406baa:	8b 4b 0c             	mov    0xc(%ebx),%ecx
406bad:	89 45 f4             	mov    %eax,-0xc(%ebp)
406bb0:	e8 9d f3 ff ff       	call   0x405f52
406bb5:	8b 4b 1c             	mov    0x1c(%ebx),%ecx
406bb8:	8b f8                	mov    %eax,%edi
406bba:	e8 7b f3 ff ff       	call   0x405f3a
406bbf:	8b 4b 44             	mov    0x44(%ebx),%ecx
406bc2:	03 f8                	add    %eax,%edi
406bc4:	e8 71 f3 ff ff       	call   0x405f3a
406bc9:	03 f8                	add    %eax,%edi
406bcb:	83 7e 24 00          	cmpl   $0x0,0x24(%esi)
406bcf:	74 05                	je     0x406bd6
406bd1:	39 7e 28             	cmp    %edi,0x28(%esi)
406bd4:	73 2b                	jae    0x406c01
406bd6:	6a 08                	push   $0x8
406bd8:	8b d7                	mov    %edi,%edx
406bda:	59                   	pop    %ecx
406bdb:	e8 b6 ef ff ff       	call   0x405b96
406be0:	8b d8                	mov    %eax,%ebx
406be2:	85 db                	test   %ebx,%ebx
406be4:	74 18                	je     0x406bfe
406be6:	ff 76 24             	push   0x24(%esi)
406be9:	6a 00                	push   $0x0
406beb:	ff 15 68 b1 41 00    	call   *0x41b168
406bf1:	50                   	push   %eax
406bf2:	ff 15 28 b1 41 00    	call   *0x41b128
406bf8:	89 5e 24             	mov    %ebx,0x24(%esi)
406bfb:	89 7e 28             	mov    %edi,0x28(%esi)
406bfe:	8b 5d 08             	mov    0x8(%ebp),%ebx
406c01:	8b 4e 24             	mov    0x24(%esi),%ecx
406c04:	85 c9                	test   %ecx,%ecx
406c06:	74 3e                	je     0x406c46
406c08:	8b 76 28             	mov    0x28(%esi),%esi
406c0b:	ff 75 fc             	push   -0x4(%ebp)
406c0e:	03 f1                	add    %ecx,%esi
406c10:	ff 73 1c             	push   0x1c(%ebx)
406c13:	8b d6                	mov    %esi,%edx
406c15:	e8 2c 0d 00 00       	call   0x407946
406c1a:	ff 75 f8             	push   -0x8(%ebp)
406c1d:	8b d6                	mov    %esi,%edx
406c1f:	8b c8                	mov    %eax,%ecx
406c21:	ff 73 44             	push   0x44(%ebx)
406c24:	e8 1d 0d 00 00       	call   0x407946
406c29:	ff 75 f4             	push   -0xc(%ebp)
406c2c:	8b d6                	mov    %esi,%edx
406c2e:	8b c8                	mov    %eax,%ecx
406c30:	ff 73 0c             	push   0xc(%ebx)
406c33:	e8 a4 0c 00 00       	call   0x4078dc
406c38:	2b f0                	sub    %eax,%esi
406c3a:	56                   	push   %esi
406c3b:	6a 00                	push   $0x0
406c3d:	50                   	push   %eax
406c3e:	e8 1e d5 00 00       	call   0x414161
406c43:	83 c4 0c             	add    $0xc,%esp
406c46:	5f                   	pop    %edi
406c47:	5e                   	pop    %esi
406c48:	5b                   	pop    %ebx
406c49:	c9                   	leave
406c4a:	c2 08 00             	ret    $0x8
406c4d:	8b ff                	mov    %edi,%edi
406c4f:	53                   	push   %ebx
406c50:	57                   	push   %edi
406c51:	8b f9                	mov    %ecx,%edi
406c53:	0f b7 47 14          	movzwl 0x14(%edi),%eax
406c57:	8b 4f 10             	mov    0x10(%edi),%ecx
406c5a:	6b d8 2c             	imul   $0x2c,%eax,%ebx
406c5d:	03 d9                	add    %ecx,%ebx
406c5f:	3b cb                	cmp    %ebx,%ecx
406c61:	74 2a                	je     0x406c8d
406c63:	56                   	push   %esi
406c64:	8d 71 24             	lea    0x24(%ecx),%esi
406c67:	ff 36                	push   (%esi)
406c69:	6a 00                	push   $0x0
406c6b:	ff 15 68 b1 41 00    	call   *0x41b168
406c71:	50                   	push   %eax
406c72:	ff 15 28 b1 41 00    	call   *0x41b128
406c78:	83 26 00             	andl   $0x0,(%esi)
406c7b:	8d 76 2c             	lea    0x2c(%esi),%esi
406c7e:	83 66 d8 00          	andl   $0x0,-0x28(%esi)
406c82:	8d 46 dc             	lea    -0x24(%esi),%eax
406c85:	3b c3                	cmp    %ebx,%eax
406c87:	75 de                	jne    0x406c67
406c89:	8b 4f 10             	mov    0x10(%edi),%ecx
406c8c:	5e                   	pop    %esi
406c8d:	51                   	push   %ecx
406c8e:	6a 00                	push   $0x0
406c90:	ff 15 68 b1 41 00    	call   *0x41b168
406c96:	50                   	push   %eax
406c97:	ff 15 28 b1 41 00    	call   *0x41b128
406c9d:	33 c0                	xor    %eax,%eax
406c9f:	21 47 10             	and    %eax,0x10(%edi)
406ca2:	89 47 14             	mov    %eax,0x14(%edi)
406ca5:	5f                   	pop    %edi
406ca6:	5b                   	pop    %ebx
406ca7:	c3                   	ret
406ca8:	8b ff                	mov    %edi,%edi
406caa:	55                   	push   %ebp
406cab:	8b ec                	mov    %esp,%ebp
406cad:	53                   	push   %ebx
406cae:	56                   	push   %esi
406caf:	8b f1                	mov    %ecx,%esi
406cb1:	57                   	push   %edi
406cb2:	6a 2c                	push   $0x2c
406cb4:	5b                   	pop    %ebx
406cb5:	8b 56 10             	mov    0x10(%esi),%edx
406cb8:	8b 7e 0c             	mov    0xc(%esi),%edi
406cbb:	85 d2                	test   %edx,%edx
406cbd:	75 49                	jne    0x406d08
406cbf:	85 ff                	test   %edi,%edi
406cc1:	0f 84 9e 00 00 00    	je     0x406d65
406cc7:	6a 08                	push   $0x8
406cc9:	ba dc 00 00 00       	mov    $0xdc,%edx
406cce:	59                   	pop    %ecx
406ccf:	e8 c2 ee ff ff       	call   0x405b96
406cd4:	8b d0                	mov    %eax,%edx
406cd6:	89 56 10             	mov    %edx,0x10(%esi)
406cd9:	85 d2                	test   %edx,%edx
406cdb:	0f 84 84 00 00 00    	je     0x406d65
406ce1:	6a 05                	push   $0x5
406ce3:	58                   	pop    %eax
406ce4:	66 89 46 14          	mov    %ax,0x14(%esi)
406ce8:	33 c0                	xor    %eax,%eax
406cea:	66 89 46 16          	mov    %ax,0x16(%esi)
406cee:	8d 82 dc 00 00 00    	lea    0xdc(%edx),%eax
406cf4:	3b d0                	cmp    %eax,%edx
406cf6:	74 0c                	je     0x406d04
406cf8:	66 89 1a             	mov    %bx,(%edx)
406cfb:	03 d3                	add    %ebx,%edx
406cfd:	3b d0                	cmp    %eax,%edx
406cff:	75 f7                	jne    0x406cf8
406d01:	8b 56 10             	mov    0x10(%esi),%edx
406d04:	85 d2                	test   %edx,%edx
406d06:	74 5d                	je     0x406d65
406d08:	85 ff                	test   %edi,%edi
406d0a:	8b 7d 08             	mov    0x8(%ebp),%edi
406d0d:	74 29                	je     0x406d38
406d0f:	0f b7 46 14          	movzwl 0x14(%esi),%eax
406d13:	6b c8 2c             	imul   $0x2c,%eax,%ecx
406d16:	03 ca                	add    %edx,%ecx
406d18:	3b d1                	cmp    %ecx,%edx
406d1a:	74 1c                	je     0x406d38
406d1c:	8b 5e 0c             	mov    0xc(%esi),%ebx
406d1f:	83 c2 08             	add    $0x8,%edx
406d22:	39 5a fc             	cmp    %ebx,-0x4(%edx)
406d25:	76 07                	jbe    0x406d2e
406d27:	8b 02                	mov    (%edx),%eax
406d29:	3b 47 04             	cmp    0x4(%edi),%eax
406d2c:	74 37                	je     0x406d65
406d2e:	83 c2 2c             	add    $0x2c,%edx
406d31:	8d 42 f8             	lea    -0x8(%edx),%eax
406d34:	3b c1                	cmp    %ecx,%eax
406d36:	75 ea                	jne    0x406d22
406d38:	0f b7 46 16          	movzwl 0x16(%esi),%eax
406d3c:	33 d2                	xor    %edx,%edx
406d3e:	0f b7 4e 14          	movzwl 0x14(%esi),%ecx
406d42:	40                   	inc    %eax
406d43:	f7 f1                	div    %ecx
406d45:	8b 46 08             	mov    0x8(%esi),%eax
406d48:	33 c9                	xor    %ecx,%ecx
406d4a:	66 89 56 16          	mov    %dx,0x16(%esi)
406d4e:	41                   	inc    %ecx
406d4f:	f0 0f c1 08          	lock xadd %ecx,(%eax)
406d53:	41                   	inc    %ecx
406d54:	0f b7 46 16          	movzwl 0x16(%esi),%eax
406d58:	51                   	push   %ecx
406d59:	6b c8 2c             	imul   $0x2c,%eax,%ecx
406d5c:	57                   	push   %edi
406d5d:	03 4e 10             	add    0x10(%esi),%ecx
406d60:	e8 f9 fd ff ff       	call   0x406b5e
406d65:	5f                   	pop    %edi
406d66:	5e                   	pop    %esi
406d67:	5b                   	pop    %ebx
406d68:	5d                   	pop    %ebp
406d69:	c2 04 00             	ret    $0x4
406d6c:	8b ff                	mov    %edi,%edi
406d6e:	55                   	push   %ebp
406d6f:	8b ec                	mov    %esp,%ebp
406d71:	51                   	push   %ecx
406d72:	53                   	push   %ebx
406d73:	56                   	push   %esi
406d74:	57                   	push   %edi
406d75:	8b 3d 10 97 41 00    	mov    0x419710,%edi
406d7b:	33 db                	xor    %ebx,%ebx
406d7d:	8b f3                	mov    %ebx,%esi
406d7f:	85 ff                	test   %edi,%edi
406d81:	74 60                	je     0x406de3
406d83:	39 5f 04             	cmp    %ebx,0x4(%edi)
406d86:	75 1c                	jne    0x406da4
406d88:	8b 0f                	mov    (%edi),%ecx
406d8a:	8d 55 fc             	lea    -0x4(%ebp),%edx
406d8d:	89 5d fc             	mov    %ebx,-0x4(%ebp)
406d90:	e8 7f 03 00 00       	call   0x407114
406d95:	85 c0                	test   %eax,%eax
406d97:	78 0b                	js     0x406da4
406d99:	39 5f 04             	cmp    %ebx,0x4(%edi)
406d9c:	75 06                	jne    0x406da4
406d9e:	8b 45 fc             	mov    -0x4(%ebp),%eax
406da1:	89 47 04             	mov    %eax,0x4(%edi)
406da4:	8b 7f 04             	mov    0x4(%edi),%edi
406da7:	8d 47 10             	lea    0x10(%edi),%eax
406daa:	f7 df                	neg    %edi
406dac:	1b ff                	sbb    %edi,%edi
406dae:	23 f8                	and    %eax,%edi
406db0:	74 31                	je     0x406de3
406db2:	ff 15 38 b1 41 00    	call   *0x41b138
406db8:	6a 0a                	push   $0xa
406dba:	5e                   	pop    %esi
406dbb:	33 d2                	xor    %edx,%edx
406dbd:	8b c8                	mov    %eax,%ecx
406dbf:	f7 f6                	div    %esi
406dc1:	8b 74 97 08          	mov    0x8(%edi,%edx,4),%esi
406dc5:	eb 07                	jmp    0x406dce
406dc7:	39 0e                	cmp    %ecx,(%esi)
406dc9:	74 1f                	je     0x406dea
406dcb:	8b 76 04             	mov    0x4(%esi),%esi
406dce:	85 f6                	test   %esi,%esi
406dd0:	75 f5                	jne    0x406dc7
406dd2:	8b f3                	mov    %ebx,%esi
406dd4:	85 f6                	test   %esi,%esi
406dd6:	74 0b                	je     0x406de3
406dd8:	39 5e 08             	cmp    %ebx,0x8(%esi)
406ddb:	75 06                	jne    0x406de3
406ddd:	8d 4f 04             	lea    0x4(%edi),%ecx
406de0:	89 4e 08             	mov    %ecx,0x8(%esi)
406de3:	5f                   	pop    %edi
406de4:	8b c6                	mov    %esi,%eax
406de6:	5e                   	pop    %esi
406de7:	5b                   	pop    %ebx
406de8:	c9                   	leave
406de9:	c3                   	ret
406dea:	83 c6 08             	add    $0x8,%esi
406ded:	eb e5                	jmp    0x406dd4
406def:	8b ff                	mov    %edi,%edi
406df1:	55                   	push   %ebp
406df2:	8b ec                	mov    %esp,%ebp
406df4:	51                   	push   %ecx
406df5:	53                   	push   %ebx
406df6:	8b 5d 08             	mov    0x8(%ebp),%ebx
406df9:	32 c0                	xor    %al,%al
406dfb:	56                   	push   %esi
406dfc:	57                   	push   %edi
406dfd:	8b f2                	mov    %edx,%esi
406dff:	8b f9                	mov    %ecx,%edi
406e01:	89 7d fc             	mov    %edi,-0x4(%ebp)
406e04:	c6 03 00             	movb   $0x0,(%ebx)
406e07:	85 f6                	test   %esi,%esi
406e09:	0f 84 91 00 00 00    	je     0x406ea0
406e0f:	ff 75 0c             	push   0xc(%ebp)
406e12:	8b 56 08             	mov    0x8(%esi),%edx
406e15:	53                   	push   %ebx
406e16:	e8 d4 ff ff ff       	call   0x406def
406e1b:	8b 56 10             	mov    0x10(%esi),%edx
406e1e:	85 d2                	test   %edx,%edx
406e20:	74 7e                	je     0x406ea0
406e22:	83 3a 00             	cmpl   $0x0,(%edx)
406e25:	75 0e                	jne    0x406e35
406e27:	33 c0                	xor    %eax,%eax
406e29:	40                   	inc    %eax
406e2a:	f0 0f c1 05 20 51 41 	lock xadd %eax,0x415120
406e31:	00
406e32:	40                   	inc    %eax
406e33:	89 02                	mov    %eax,(%edx)
406e35:	83 7f 2c 00          	cmpl   $0x0,0x2c(%edi)
406e39:	75 0b                	jne    0x406e46
406e3b:	8b f2                	mov    %edx,%esi
406e3d:	8d 7f 2c             	lea    0x2c(%edi),%edi
406e40:	a5                   	movsl  %ds:(%esi),%es:(%edi)
406e41:	a5                   	movsl  %ds:(%esi),%es:(%edi)
406e42:	a5                   	movsl  %ds:(%esi),%es:(%edi)
406e43:	8b 7d fc             	mov    -0x4(%ebp),%edi
406e46:	83 c7 38             	add    $0x38,%edi
406e49:	8b f2                	mov    %edx,%esi