408eca:	00 00                	add    %al,(%eax)
408ecc:	50                   	push   %eax
408ecd:	72 65                	jb     0x408f34
408ecf:	70 61                	jo     0x408f32
408ed1:	72 65                	jb     0x408f38
408ed3:	73 00                	jae    0x408ed5
408ed5:	00 00                	add    %al,(%eax)
408ed7:	00 4c 4f 56          	add    %cl,0x56(%edi,%ecx,2)
408edb:	45                   	inc    %ebp
408edc:	4d                   	dec    %ebp
408edd:	4f                   	dec    %edi
408ede:	4e                   	dec    %esi
408edf:	47                   	inc    %edi
408ee0:	45                   	inc    %ebp
408ee1:	52                   	push   %edx
408ee2:	00 00                	add    %al,(%eax)
408ee4:	48                   	dec    %eax
408ee5:	6f                   	outsl  %ds:(%esi),(%dx)
408ee6:	6e                   	outsb  %ds:(%esi),(%dx)
408ee7:	6b 69 65 73          	imul   $0x73,0x65(%ecx),%ebp
408eeb:	00 69 6d             	add    %ch,0x6d(%ecx)
408eee:	61                   	popa
408eef:	67 69 6e 61 6c 00 00 	imul   $0x6c,0x61(%bp),%ebp
408ef6:	00
408ef7:	00 53 52             	add    %dl,0x52(%ebx)
408efa:	54                   	push   %esp
408efb:	4f                   	dec    %edi
408efc:	47                   	inc    %edi
408efd:	45                   	inc    %ebp
408efe:	4e                   	dec    %esi
408eff:	45                   	inc    %ebp
408f00:	53                   	push   %ebx
408f01:	00 00                	add    %al,(%eax)
408f03:	00 4b 72             	add    %cl,0x72(%ebx)
408f06:	6e                   	outsb  %ds:(%esi),(%dx)
408f07:	69 6e 67 00 00 53 4b 	imul   $0x4b530000,0x67(%esi),%ebp
408f0e:	41                   	inc    %ecx
408f0f:	47                   	inc    %edi
408f10:	45                   	inc    %ebp
408f11:	52                   	push   %edx
408f12:	00 00                	add    %al,(%eax)
408f14:	73 76                	jae    0x408f8c
408f16:	61                   	popa
408f17:	72 74                	jb     0x408f8d
408f19:	62 61 67             	bound  %esp,0x67(%ecx)
408f1c:	65 6e                	outsb  %gs:(%esi),(%dx)
408f1e:	65 00 47 65          	add    %al,%gs:0x65(%edi)
408f22:	6f                   	outsl  %ds:(%esi),(%dx)
408f23:	70 68                	jo     0x408f8d
408f25:	79 74                	jns    0x408f9b
408f27:	69 63 00 00 00 cc cc 	imul   $0xcccc0000,0x0(%ebx),%esp
408f2e:	cc                   	int3
408f2f:	cc                   	int3
408f30:	e9 e9 e9 e9 cc       	jmp    0xcd2a791e
408f35:	cc                   	int3
408f36:	cc                   	int3
408f37:	cc                   	int3
408f38:	cc                   	int3
408f39:	cc                   	int3
408f3a:	cc                   	int3
408f3b:	cc                   	int3
408f3c:	cc                   	int3
408f3d:	cc                   	int3
408f3e:	cc                   	int3
408f3f:	cc                   	int3
408f40:	55                   	push   %ebp
408f41:	8b ec                	mov    %esp,%ebp
408f43:	83 ec 0c             	sub    $0xc,%esp
408f46:	68 b6 12 40 00       	push   $0x4012b6
408f4b:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
408f51:	50                   	push   %eax
408f52:	64 89 25 00 00 00 00 	mov    %esp,%fs:0x0
408f59:	81 ec 6c 01 00 00    	sub    $0x16c,%esp
408f5f:	53                   	push   %ebx
408f60:	56                   	push   %esi
408f61:	57                   	push   %edi
408f62:	89 65 f4             	mov    %esp,-0xc(%ebp)
408f65:	c7 45 f8 b8 11 40 00 	movl   $0x4011b8,-0x8(%ebp)
408f6c:	8b 45 08             	mov    0x8(%ebp),%eax
408f6f:	8b c8                	mov    %eax,%ecx
408f71:	83 e1 01             	and    $0x1,%ecx
408f74:	89 4d fc             	mov    %ecx,-0x4(%ebp)
408f77:	83 e0 fe             	and    $0xfffffffe,%eax
408f7a:	8b 10                	mov    (%eax),%edx
408f7c:	50                   	push   %eax
408f7d:	89 45 08             	mov    %eax,0x8(%ebp)
408f80:	ff 52 04             	call   *0x4(%edx)
408f83:	8b 35 3c 10 40 00    	mov    0x40103c,%esi
408f89:	33 db                	xor    %ebx,%ebx
408f8b:	68 70 77 40 00       	push   $0x407770
408f90:	68 78 77 40 00       	push   $0x407778
408f95:	89 5d dc             	mov    %ebx,-0x24(%ebp)
408f98:	89 5d c0             	mov    %ebx,-0x40(%ebp)
408f9b:	89 5d b0             	mov    %ebx,-0x50(%ebp)
408f9e:	89 5d a0             	mov    %ebx,-0x60(%ebp)
408fa1:	89 5d 88             	mov    %ebx,-0x78(%ebp)
408fa4:	89 9d 74 ff ff ff    	mov    %ebx,-0x8c(%ebp)
408faa:	89 9d 64 ff ff ff    	mov    %ebx,-0x9c(%ebp)
408fb0:	89 9d 54 ff ff ff    	mov    %ebx,-0xac(%ebp)
408fb6:	89 9d 44 ff ff ff    	mov    %ebx,-0xbc(%ebp)
408fbc:	89 9d 34 ff ff ff    	mov    %ebx,-0xcc(%ebp)
408fc2:	89 9d 2c ff ff ff    	mov    %ebx,-0xd4(%ebp)
408fc8:	89 9d 28 ff ff ff    	mov    %ebx,-0xd8(%ebp)
408fce:	89 9d 24 ff ff ff    	mov    %ebx,-0xdc(%ebp)
408fd4:	89 9d 14 ff ff ff    	mov    %ebx,-0xec(%ebp)
408fda:	89 9d 04 ff ff ff    	mov    %ebx,-0xfc(%ebp)
408fe0:	89 9d f4 fe ff ff    	mov    %ebx,-0x10c(%ebp)
408fe6:	89 9d e4 fe ff ff    	mov    %ebx,-0x11c(%ebp)
408fec:	89 9d c4 fe ff ff    	mov    %ebx,-0x13c(%ebp)
408ff2:	88 9d b0 fe ff ff    	mov    %bl,-0x150(%ebp)
408ff8:	89 9d ac fe ff ff    	mov    %ebx,-0x154(%ebp)
408ffe:	89 9d a8 fe ff ff    	mov    %ebx,-0x158(%ebp)
409004:	89 9d a4 fe ff ff    	mov    %ebx,-0x15c(%ebp)
40900a:	89 9d a0 fe ff ff    	mov    %ebx,-0x160(%ebp)
409010:	89 9d 98 fe ff ff    	mov    %ebx,-0x168(%ebp)
409016:	89 9d 9c fe ff ff    	mov    %ebx,-0x164(%ebp)
40901c:	89 9d 90 fe ff ff    	mov    %ebx,-0x170(%ebp)
409022:	89 9d 94 fe ff ff    	mov    %ebx,-0x16c(%ebp)
409028:	ff d6                	call   *%esi
40902a:	8b 3d 88 11 40 00    	mov    0x401188,%edi
409030:	8b d0                	mov    %eax,%edx
409032:	8d 8d 2c ff ff ff    	lea    -0xd4(%ebp),%ecx
409038:	ff d7                	call   *%edi
40903a:	50                   	push   %eax
40903b:	68 80 77 40 00       	push   $0x407780
409040:	ff d6                	call   *%esi
409042:	8b d0                	mov    %eax,%edx
409044:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
40904a:	ff d7                	call   *%edi
40904c:	50                   	push   %eax
40904d:	68 88 77 40 00       	push   $0x407788
409052:	ff d6                	call   *%esi
409054:	8b d0                	mov    %eax,%edx
409056:	8d 8d 24 ff ff ff    	lea    -0xdc(%ebp),%ecx
40905c:	ff d7                	call   *%edi
40905e:	50                   	push   %eax
40905f:	68 94 77 40 00       	push   $0x407794
409064:	ff d6                	call   *%esi
409066:	89 85 1c ff ff ff    	mov    %eax,-0xe4(%ebp)
40906c:	8d 85 14 ff ff ff    	lea    -0xec(%ebp),%eax
409072:	50                   	push   %eax
409073:	8d 8d 04 ff ff ff    	lea    -0xfc(%ebp),%ecx
409079:	51                   	push   %ecx
40907a:	c7 85 14 ff ff ff 08 	movl   $0x8,-0xec(%ebp)
409081:	00 00 00
409084:	ff 15 90 11 40 00    	call   *0x401190
40908a:	8d 95 04 ff ff ff    	lea    -0xfc(%ebp),%edx
409090:	52                   	push   %edx
409091:	8d 85 e4 fe ff ff    	lea    -0x11c(%ebp),%eax
409097:	50                   	push   %eax
409098:	c7 85 ec fe ff ff 0c 	movl   $0xc,-0x114(%ebp)
40909f:	00 00 00
4090a2:	c7 85 e4 fe ff ff 02 	movl   $0x8002,-0x11c(%ebp)
4090a9:	80 00 00
4090ac:	ff 15 68 11 40 00    	call   *0x401168
4090b2:	66 89 85 8c fe ff ff 	mov    %ax,-0x174(%ebp)
4090b9:	8d 8d 24 ff ff ff    	lea    -0xdc(%ebp),%ecx
4090bf:	51                   	push   %ecx
4090c0:	8d 95 28 ff ff ff    	lea    -0xd8(%ebp),%edx
4090c6:	52                   	push   %edx
4090c7:	8d 85 2c ff ff ff    	lea    -0xd4(%ebp),%eax
4090cd:	50                   	push   %eax
4090ce:	6a 03                	push   $0x3
4090d0:	ff 15 50 11 40 00    	call   *0x401150
4090d6:	8d 8d 04 ff ff ff    	lea    -0xfc(%ebp),%ecx
4090dc:	51                   	push   %ecx
4090dd:	8d 95 14 ff ff ff    	lea    -0xec(%ebp),%edx
4090e3:	52                   	push   %edx
4090e4:	6a 02                	push   $0x2
4090e6:	ff 15 28 10 40 00    	call   *0x401028
4090ec:	83 c4 1c             	add    $0x1c,%esp
4090ef:	66 39 9d 8c fe ff ff 	cmp    %bx,-0x174(%ebp)
4090f6:	74 73                	je     0x40916b
4090f8:	83 ec 10             	sub    $0x10,%esp
4090fb:	8b d4                	mov    %esp,%edx
4090fd:	b9 08 00 00 00       	mov    $0x8,%ecx
409102:	89 0a                	mov    %ecx,(%edx)
409104:	89 8d e4 fe ff ff    	mov    %ecx,-0x11c(%ebp)
40910a:	8b 8d e8 fe ff ff    	mov    -0x118(%ebp),%ecx
409110:	89 4a 04             	mov    %ecx,0x4(%edx)
409113:	b8 a0 77 40 00       	mov    $0x4077a0,%eax
409118:	89 42 08             	mov    %eax,0x8(%edx)
40911b:	89 85 ec fe ff ff    	mov    %eax,-0x114(%ebp)
409121:	8b 85 f0 fe ff ff    	mov    -0x110(%ebp),%eax
409127:	89 42 0c             	mov    %eax,0xc(%edx)
40912a:	8b 95 c8 fe ff ff    	mov    -0x138(%ebp),%edx
409130:	83 ec 10             	sub    $0x10,%esp
409133:	8b cc                	mov    %esp,%ecx
409135:	b8 03 00 00 00       	mov    $0x3,%eax
40913a:	89 01                	mov    %eax,(%ecx)
40913c:	89 51 04             	mov    %edx,0x4(%ecx)
40913f:	b8 8b b0 7a 00       	mov    $0x7ab08b,%eax
409144:	89 41 08             	mov    %eax,0x8(%ecx)
409147:	8b 85 d0 fe ff ff    	mov    -0x130(%ebp),%eax
40914d:	6a 02                	push   $0x2
40914f:	89 41 0c             	mov    %eax,0xc(%ecx)
409152:	68 b8 77 40 00       	push   $0x4077b8
409157:	8d 4d dc             	lea    -0x24(%ebp),%ecx
40915a:	51                   	push   %ecx
40915b:	ff 15 c8 10 40 00    	call   *0x4010c8
409161:	50                   	push   %eax
409162:	ff 15 70 11 40 00    	call   *0x401170
409168:	83 c4 2c             	add    $0x2c,%esp
40916b:	68 70 77 40 00       	push   $0x407770
409170:	68 78 77 40 00       	push   $0x407778
409175:	ff d6                	call   *%esi
409177:	8b d0                	mov    %eax,%edx
409179:	8d 8d 2c ff ff ff    	lea    -0xd4(%ebp),%ecx
40917f:	ff d7                	call   *%edi
409181:	50                   	push   %eax
409182:	68 80 77 40 00       	push   $0x407780
409187:	ff d6                	call   *%esi
409189:	8b d0                	mov    %eax,%edx
40918b:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
409191:	ff d7                	call   *%edi
409193:	50                   	push   %eax
409194:	68 88 77 40 00       	push   $0x407788
409199:	ff d6                	call   *%esi
40919b:	8b d0                	mov    %eax,%edx
40919d:	8d 8d 24 ff ff ff    	lea    -0xdc(%ebp),%ecx
4091a3:	ff d7                	call   *%edi
4091a5:	50                   	push   %eax
4091a6:	68 94 77 40 00       	push   $0x407794
4091ab:	ff d6                	call   *%esi
4091ad:	8d 95 14 ff ff ff    	lea    -0xec(%ebp),%edx
4091b3:	89 85 1c ff ff ff    	mov    %eax,-0xe4(%ebp)
4091b9:	52                   	push   %edx
4091ba:	8d 85 04 ff ff ff    	lea    -0xfc(%ebp),%eax
4091c0:	50                   	push   %eax
4091c1:	c7 85 14 ff ff ff 08 	movl   $0x8,-0xec(%ebp)
4091c8:	00 00 00
4091cb:	ff 15 90 11 40 00    	call   *0x401190
4091d1:	8d 8d 04 ff ff ff    	lea    -0xfc(%ebp),%ecx
4091d7:	51                   	push   %ecx
4091d8:	8d 95 e4 fe ff ff    	lea    -0x11c(%ebp),%edx
4091de:	52                   	push   %edx
4091df:	c7 85 ec fe ff ff 0c 	movl   $0xc,-0x114(%ebp)
4091e6:	00 00 00
4091e9:	c7 85 e4 fe ff ff 02 	movl   $0x8002,-0x11c(%ebp)
4091f0:	80 00 00
4091f3:	ff 15 68 11 40 00    	call   *0x401168
4091f9:	66 89 85 8c fe ff ff 	mov    %ax,-0x174(%ebp)
409200:	8d 85 24 ff ff ff    	lea    -0xdc(%ebp),%eax
409206:	50                   	push   %eax
409207:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
40920d:	51                   	push   %ecx
40920e:	8d 95 2c ff ff ff    	lea    -0xd4(%ebp),%edx
409214:	52                   	push   %edx
409215:	6a 03                	push   $0x3
409217:	ff 15 50 11 40 00    	call   *0x401150
40921d:	8d 85 04 ff ff ff    	lea    -0xfc(%ebp),%eax
409223:	50                   	push   %eax
409224:	8d 8d 14 ff ff ff    	lea    -0xec(%ebp),%ecx
40922a:	51                   	push   %ecx
40922b:	6a 02                	push   $0x2
40922d:	ff 15 28 10 40 00    	call   *0x401028
409233:	83 c4 1c             	add    $0x1c,%esp
409236:	66 39 9d 8c fe ff ff 	cmp    %bx,-0x174(%ebp)
40923d:	74 73                	je     0x4092b2
40923f:	83 ec 10             	sub    $0x10,%esp
409242:	8b d4                	mov    %esp,%edx
409244:	b9 08 00 00 00       	mov    $0x8,%ecx
409249:	89 0a                	mov    %ecx,(%edx)
40924b:	89 8d e4 fe ff ff    	mov    %ecx,-0x11c(%ebp)
409251:	8b 8d e8 fe ff ff    	mov    -0x118(%ebp),%ecx
409257:	89 4a 04             	mov    %ecx,0x4(%edx)
40925a:	b8 f8 77 40 00       	mov    $0x4077f8,%eax
40925f:	89 42 08             	mov    %eax,0x8(%edx)
409262:	89 85 ec fe ff ff    	mov    %eax,-0x114(%ebp)
409268:	8b 85 f0 fe ff ff    	mov    -0x110(%ebp),%eax
40926e:	89 42 0c             	mov    %eax,0xc(%edx)
409271:	8b 95 c8 fe ff ff    	mov    -0x138(%ebp),%edx
409277:	83 ec 10             	sub    $0x10,%esp
40927a:	8b cc                	mov    %esp,%ecx
40927c:	b8 03 00 00 00       	mov    $0x3,%eax
409281:	89 01                	mov    %eax,(%ecx)
409283:	89 51 04             	mov    %edx,0x4(%ecx)
409286:	b8 b3 52 1d 00       	mov    $0x1d52b3,%eax
40928b:	89 41 08             	mov    %eax,0x8(%ecx)
40928e:	8b 85 d0 fe ff ff    	mov    -0x130(%ebp),%eax
409294:	6a 02                	push   $0x2
409296:	89 41 0c             	mov    %eax,0xc(%ecx)
409299:	68 10 78 40 00       	push   $0x407810
40929e:	8d 4d a0             	lea    -0x60(%ebp),%ecx
4092a1:	51                   	push   %ecx
4092a2:	ff 15 c8 10 40 00    	call   *0x4010c8
4092a8:	50                   	push   %eax
4092a9:	ff 15 70 11 40 00    	call   *0x401170
4092af:	83 c4 2c             	add    $0x2c,%esp
4092b2:	68 70 77 40 00       	push   $0x407770
4092b7:	68 78 77 40 00       	push   $0x407778
4092bc:	ff d6                	call   *%esi
4092be:	8b d0                	mov    %eax,%edx
4092c0:	8d 8d 2c ff ff ff    	lea    -0xd4(%ebp),%ecx
4092c6:	ff d7                	call   *%edi
4092c8:	50                   	push   %eax
4092c9:	68 80 77 40 00       	push   $0x407780
4092ce:	ff d6                	call   *%esi
4092d0:	8b d0                	mov    %eax,%edx
4092d2:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
4092d8:	ff d7                	call   *%edi
4092da:	50                   	push   %eax
4092db:	68 88 77 40 00       	push   $0x407788
4092e0:	ff d6                	call   *%esi
4092e2:	8b d0                	mov    %eax,%edx
4092e4:	8d 8d 24 ff ff ff    	lea    -0xdc(%ebp),%ecx
4092ea:	ff d7                	call   *%edi
4092ec:	50                   	push   %eax
4092ed:	68 94 77 40 00       	push   $0x407794
4092f2:	ff d6                	call   *%esi
4092f4:	8d 95 14 ff ff ff    	lea    -0xec(%ebp),%edx
4092fa:	89 85 1c ff ff ff    	mov    %eax,-0xe4(%ebp)
409300:	52                   	push   %edx
409301:	8d 85 04 ff ff ff    	lea    -0xfc(%ebp),%eax
409307:	50                   	push   %eax
409308:	c7 85 14 ff ff ff 08 	movl   $0x8,-0xec(%ebp)
40930f:	00 00 00
409312:	ff 15 90 11 40 00    	call   *0x401190
409318:	8d 8d 04 ff ff ff    	lea    -0xfc(%ebp),%ecx
40931e:	51                   	push   %ecx
40931f:	8d 95 e4 fe ff ff    	lea    -0x11c(%ebp),%edx
409325:	52                   	push   %edx
409326:	c7 85 ec fe ff ff 0c 	movl   $0xc,-0x114(%ebp)
40932d:	00 00 00
409330:	c7 85 e4 fe ff ff 02 	movl   $0x8002,-0x11c(%ebp)
409337:	80 00 00
40933a:	ff 15 68 11 40 00    	call   *0x401168
409340:	66 89 85 8c fe ff ff 	mov    %ax,-0x174(%ebp)
409347:	8d 85 24 ff ff ff    	lea    -0xdc(%ebp),%eax
40934d:	50                   	push   %eax
40934e:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
409354:	51                   	push   %ecx
409355:	8d 95 2c ff ff ff    	lea    -0xd4(%ebp),%edx
40935b:	52                   	push   %edx
40935c:	6a 03                	push   $0x3
40935e:	ff 15 50 11 40 00    	call   *0x401150
409364:	8d 85 04 ff ff ff    	lea    -0xfc(%ebp),%eax
40936a:	50                   	push   %eax
40936b:	8d 8d 14 ff ff ff    	lea    -0xec(%ebp),%ecx
409371:	51                   	push   %ecx
409372:	6a 02                	push   $0x2
409374:	ff 15 28 10 40 00    	call   *0x401028
40937a:	83 c4 1c             	add    $0x1c,%esp
40937d:	66 39 9d 8c fe ff ff 	cmp    %bx,-0x174(%ebp)
409384:	74 73                	je     0x4093f9
409386:	83 ec 10             	sub    $0x10,%esp
409389:	8b d4                	mov    %esp,%edx
40938b:	b9 08 00 00 00       	mov    $0x8,%ecx
409390:	89 0a                	mov    %ecx,(%edx)
409392:	89 8d e4 fe ff ff    	mov    %ecx,-0x11c(%ebp)