407f47:	85 db                	test   %ebx,%ebx
407f49:	74 4b                	je     0x407f96
407f4b:	8d 04 19             	lea    (%ecx,%ebx,1),%eax
407f4e:	51                   	push   %ecx
407f4f:	50                   	push   %eax
407f50:	8b ce                	mov    %esi,%ecx
407f52:	89 45 fc             	mov    %eax,-0x4(%ebp)
407f55:	e8 81 e4 ff ff       	call   0x4063db
407f5a:	84 c0                	test   %al,%al
407f5c:	74 38                	je     0x407f96
407f5e:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
407f62:	72 04                	jb     0x407f68
407f64:	8b 0e                	mov    (%esi),%ecx
407f66:	eb 02                	jmp    0x407f6a
407f68:	8b ce                	mov    %esi,%ecx
407f6a:	8d 04 1b             	lea    (%ebx,%ebx,1),%eax
407f6d:	50                   	push   %eax
407f6e:	8b 46 10             	mov    0x10(%esi),%eax
407f71:	57                   	push   %edi
407f72:	8d 04 41             	lea    (%ecx,%eax,2),%eax
407f75:	50                   	push   %eax
407f76:	e8 ab 67 00 00       	call   0x40e726
407f7b:	8b 4d fc             	mov    -0x4(%ebp),%ecx
407f7e:	83 c4 0c             	add    $0xc,%esp
407f81:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
407f85:	89 4e 10             	mov    %ecx,0x10(%esi)
407f88:	72 04                	jb     0x407f8e
407f8a:	8b 06                	mov    (%esi),%eax
407f8c:	eb 02                	jmp    0x407f90
407f8e:	8b c6                	mov    %esi,%eax
407f90:	33 d2                	xor    %edx,%edx
407f92:	66 89 14 48          	mov    %dx,(%eax,%ecx,2)
407f96:	8b c6                	mov    %esi,%eax
407f98:	5b                   	pop    %ebx
407f99:	5f                   	pop    %edi
407f9a:	5e                   	pop    %esi
407f9b:	c9                   	leave
407f9c:	c2 08 00             	ret    $0x8
407f9f:	e8 be d0 ff ff       	call   0x405062
407fa4:	cc                   	int3
407fa5:	8b ff                	mov    %edi,%edi
407fa7:	55                   	push   %ebp
407fa8:	8b ec                	mov    %esp,%ebp
407faa:	51                   	push   %ecx
407fab:	53                   	push   %ebx
407fac:	8b 5d 08             	mov    0x8(%ebp),%ebx
407faf:	56                   	push   %esi
407fb0:	8b f1                	mov    %ecx,%esi
407fb2:	8b 4d 0c             	mov    0xc(%ebp),%ecx
407fb5:	57                   	push   %edi
407fb6:	8b 43 10             	mov    0x10(%ebx),%eax
407fb9:	3b c1                	cmp    %ecx,%eax
407fbb:	72 7c                	jb     0x408039
407fbd:	8b 7d 10             	mov    0x10(%ebp),%edi
407fc0:	2b c1                	sub    %ecx,%eax
407fc2:	3b c7                	cmp    %edi,%eax
407fc4:	73 02                	jae    0x407fc8
407fc6:	8b f8                	mov    %eax,%edi
407fc8:	8b 4e 10             	mov    0x10(%esi),%ecx
407fcb:	8b c1                	mov    %ecx,%eax
407fcd:	f7 d0                	not    %eax
407fcf:	3b c7                	cmp    %edi,%eax
407fd1:	76 6b                	jbe    0x40803e
407fd3:	85 ff                	test   %edi,%edi
407fd5:	74 59                	je     0x408030
407fd7:	8d 04 39             	lea    (%ecx,%edi,1),%eax
407fda:	51                   	push   %ecx
407fdb:	50                   	push   %eax
407fdc:	8b ce                	mov    %esi,%ecx
407fde:	89 45 fc             	mov    %eax,-0x4(%ebp)
407fe1:	e8 f5 e3 ff ff       	call   0x4063db
407fe6:	84 c0                	test   %al,%al
407fe8:	74 46                	je     0x408030
407fea:	83 7b 14 08          	cmpl   $0x8,0x14(%ebx)
407fee:	72 02                	jb     0x407ff2
407ff0:	8b 1b                	mov    (%ebx),%ebx
407ff2:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
407ff6:	72 04                	jb     0x407ffc
407ff8:	8b 0e                	mov    (%esi),%ecx
407ffa:	eb 02                	jmp    0x407ffe
407ffc:	8b ce                	mov    %esi,%ecx
407ffe:	8d 04 3f             	lea    (%edi,%edi,1),%eax
408001:	50                   	push   %eax
408002:	8b 45 0c             	mov    0xc(%ebp),%eax
408005:	8d 04 43             	lea    (%ebx,%eax,2),%eax
408008:	50                   	push   %eax
408009:	8b 46 10             	mov    0x10(%esi),%eax
40800c:	8d 04 41             	lea    (%ecx,%eax,2),%eax
40800f:	50                   	push   %eax
408010:	e8 11 67 00 00       	call   0x40e726
408015:	8b 4d fc             	mov    -0x4(%ebp),%ecx
408018:	83 c4 0c             	add    $0xc,%esp
40801b:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
40801f:	89 4e 10             	mov    %ecx,0x10(%esi)
408022:	72 04                	jb     0x408028
408024:	8b 06                	mov    (%esi),%eax
408026:	eb 02                	jmp    0x40802a
408028:	8b c6                	mov    %esi,%eax
40802a:	33 d2                	xor    %edx,%edx
40802c:	66 89 14 48          	mov    %dx,(%eax,%ecx,2)
408030:	5f                   	pop    %edi
408031:	8b c6                	mov    %esi,%eax
408033:	5e                   	pop    %esi
408034:	5b                   	pop    %ebx
408035:	c9                   	leave
408036:	c2 0c 00             	ret    $0xc
408039:	e8 9a cf ff ff       	call   0x404fd8
40803e:	e8 1f d0 ff ff       	call   0x405062
408043:	cc                   	int3
408044:	ff 31                	push   (%ecx)
408046:	ff 15 0c 40 41 00    	call   *0x41400c
40804c:	c3                   	ret
40804d:	b8 ff 0f 00 00       	mov    $0xfff,%eax
408052:	66 39 01             	cmp    %ax,(%ecx)
408055:	75 06                	jne    0x40805d
408057:	6a 08                	push   $0x8
408059:	58                   	pop    %eax
40805a:	66 89 01             	mov    %ax,(%ecx)
40805d:	51                   	push   %ecx
40805e:	ff 15 00 40 41 00    	call   *0x414000
408064:	c3                   	ret
408065:	8b ff                	mov    %edi,%edi
408067:	55                   	push   %ebp
408068:	8b ec                	mov    %esp,%ebp
40806a:	83 ec 0c             	sub    $0xc,%esp
40806d:	53                   	push   %ebx
40806e:	8b 5d 0c             	mov    0xc(%ebp),%ebx
408071:	56                   	push   %esi
408072:	57                   	push   %edi
408073:	89 4d f4             	mov    %ecx,-0xc(%ebp)
408076:	8b cb                	mov    %ebx,%ecx
408078:	6a 10                	push   $0x10
40807a:	89 55 f8             	mov    %edx,-0x8(%ebp)
40807d:	e8 b1 01 00 00       	call   0x408233
408082:	8b 43 04             	mov    0x4(%ebx),%eax
408085:	8d 4d fc             	lea    -0x4(%ebp),%ecx
408088:	2b 03                	sub    (%ebx),%eax
40808a:	33 ff                	xor    %edi,%edi
40808c:	51                   	push   %ecx
40808d:	ff 33                	push   (%ebx)
40808f:	89 45 fc             	mov    %eax,-0x4(%ebp)
408092:	8b f7                	mov    %edi,%esi
408094:	50                   	push   %eax
408095:	57                   	push   %edi
408096:	ff 75 f8             	push   -0x8(%ebp)
408099:	ff 75 f4             	push   -0xc(%ebp)
40809c:	ff 15 00 20 41 00    	call   *0x412000
4080a2:	85 c0                	test   %eax,%eax
4080a4:	75 45                	jne    0x4080eb
4080a6:	ff 15 70 20 41 00    	call   *0x412070
4080ac:	8b f0                	mov    %eax,%esi
4080ae:	83 fe 7a             	cmp    $0x7a,%esi
4080b1:	75 34                	jne    0x4080e7
4080b3:	ff 75 fc             	push   -0x4(%ebp)
4080b6:	8b cb                	mov    %ebx,%ecx
4080b8:	e8 76 01 00 00       	call   0x408233
4080bd:	8b 43 04             	mov    0x4(%ebx),%eax
4080c0:	8d 4d fc             	lea    -0x4(%ebp),%ecx
4080c3:	2b 03                	sub    (%ebx),%eax
4080c5:	8b f7                	mov    %edi,%esi
4080c7:	51                   	push   %ecx
4080c8:	ff 33                	push   (%ebx)
4080ca:	89 45 fc             	mov    %eax,-0x4(%ebp)
4080cd:	50                   	push   %eax
4080ce:	57                   	push   %edi
4080cf:	ff 75 f8             	push   -0x8(%ebp)
4080d2:	ff 75 f4             	push   -0xc(%ebp)
4080d5:	ff 15 00 20 41 00    	call   *0x412000
4080db:	85 c0                	test   %eax,%eax
4080dd:	75 0c                	jne    0x4080eb
4080df:	ff 15 70 20 41 00    	call   *0x412070
4080e5:	8b f0                	mov    %eax,%esi
4080e7:	85 f6                	test   %esi,%esi
4080e9:	75 02                	jne    0x4080ed
4080eb:	8b 3b                	mov    (%ebx),%edi
4080ed:	8b 45 10             	mov    0x10(%ebp),%eax
4080f0:	89 38                	mov    %edi,(%eax)
4080f2:	8b c6                	mov    %esi,%eax
4080f4:	5f                   	pop    %edi
4080f5:	5e                   	pop    %esi
4080f6:	5b                   	pop    %ebx
4080f7:	c9                   	leave
4080f8:	c2 0c 00             	ret    $0xc
4080fb:	8b ff                	mov    %edi,%edi
4080fd:	55                   	push   %ebp
4080fe:	8b ec                	mov    %esp,%ebp
408100:	83 ec 0c             	sub    $0xc,%esp
408103:	53                   	push   %ebx
408104:	8b 5d 10             	mov    0x10(%ebp),%ebx
408107:	56                   	push   %esi
408108:	57                   	push   %edi
408109:	89 4d f4             	mov    %ecx,-0xc(%ebp)
40810c:	8b cb                	mov    %ebx,%ecx
40810e:	6a 10                	push   $0x10
408110:	89 55 f8             	mov    %edx,-0x8(%ebp)
408113:	e8 1b 01 00 00       	call   0x408233
408118:	8b 43 04             	mov    0x4(%ebx),%eax
40811b:	8d 4d fc             	lea    -0x4(%ebp),%ecx
40811e:	2b 03                	sub    (%ebx),%eax
408120:	33 ff                	xor    %edi,%edi
408122:	51                   	push   %ecx
408123:	ff 33                	push   (%ebx)
408125:	89 45 fc             	mov    %eax,-0x4(%ebp)
408128:	8b f7                	mov    %edi,%esi
40812a:	50                   	push   %eax
40812b:	57                   	push   %edi
40812c:	ff 75 08             	push   0x8(%ebp)
40812f:	ff 75 f8             	push   -0x8(%ebp)
408132:	ff 75 f4             	push   -0xc(%ebp)
408135:	ff 15 38 20 41 00    	call   *0x412038
40813b:	85 c0                	test   %eax,%eax
40813d:	75 48                	jne    0x408187
40813f:	ff 15 70 20 41 00    	call   *0x412070
408145:	8b f0                	mov    %eax,%esi
408147:	83 fe 7a             	cmp    $0x7a,%esi
40814a:	75 37                	jne    0x408183
40814c:	ff 75 fc             	push   -0x4(%ebp)
40814f:	8b cb                	mov    %ebx,%ecx
408151:	e8 dd 00 00 00       	call   0x408233
408156:	8b 43 04             	mov    0x4(%ebx),%eax
408159:	8d 4d fc             	lea    -0x4(%ebp),%ecx
40815c:	2b 03                	sub    (%ebx),%eax
40815e:	8b f7                	mov    %edi,%esi
408160:	51                   	push   %ecx
408161:	ff 33                	push   (%ebx)
408163:	89 45 fc             	mov    %eax,-0x4(%ebp)
408166:	50                   	push   %eax
408167:	57                   	push   %edi
408168:	ff 75 08             	push   0x8(%ebp)
40816b:	ff 75 f8             	push   -0x8(%ebp)
40816e:	ff 75 f4             	push   -0xc(%ebp)
408171:	ff 15 38 20 41 00    	call   *0x412038
408177:	85 c0                	test   %eax,%eax
408179:	75 0c                	jne    0x408187
40817b:	ff 15 70 20 41 00    	call   *0x412070
408181:	8b f0                	mov    %eax,%esi
408183:	85 f6                	test   %esi,%esi
408185:	75 02                	jne    0x408189
408187:	8b 3b                	mov    (%ebx),%edi
408189:	8b 45 14             	mov    0x14(%ebp),%eax
40818c:	89 38                	mov    %edi,(%eax)
40818e:	8b c6                	mov    %esi,%eax
408190:	5f                   	pop    %edi
408191:	5e                   	pop    %esi
408192:	5b                   	pop    %ebx
408193:	c9                   	leave
408194:	c2 10 00             	ret    $0x10
408197:	8b ff                	mov    %edi,%edi
408199:	55                   	push   %ebp
40819a:	8b ec                	mov    %esp,%ebp
40819c:	83 ec 0c             	sub    $0xc,%esp
40819f:	53                   	push   %ebx
4081a0:	8b 5d 10             	mov    0x10(%ebp),%ebx
4081a3:	56                   	push   %esi
4081a4:	57                   	push   %edi
4081a5:	89 4d f4             	mov    %ecx,-0xc(%ebp)
4081a8:	8b cb                	mov    %ebx,%ecx
4081aa:	6a 10                	push   $0x10
4081ac:	89 55 f8             	mov    %edx,-0x8(%ebp)
4081af:	e8 7f 00 00 00       	call   0x408233
4081b4:	8b 43 04             	mov    0x4(%ebx),%eax
4081b7:	8d 4d fc             	lea    -0x4(%ebp),%ecx
4081ba:	2b 03                	sub    (%ebx),%eax
4081bc:	33 ff                	xor    %edi,%edi
4081be:	51                   	push   %ecx
4081bf:	ff 33                	push   (%ebx)
4081c1:	89 45 fc             	mov    %eax,-0x4(%ebp)
4081c4:	8b f7                	mov    %edi,%esi
4081c6:	50                   	push   %eax
4081c7:	57                   	push   %edi
4081c8:	ff 75 08             	push   0x8(%ebp)
4081cb:	ff 75 f8             	push   -0x8(%ebp)
4081ce:	ff 75 f4             	push   -0xc(%ebp)
4081d1:	ff 15 3c 20 41 00    	call   *0x41203c
4081d7:	85 c0                	test   %eax,%eax
4081d9:	75 48                	jne    0x408223
4081db:	ff 15 70 20 41 00    	call   *0x412070
4081e1:	8b f0                	mov    %eax,%esi
4081e3:	83 fe 7a             	cmp    $0x7a,%esi
4081e6:	75 37                	jne    0x40821f
4081e8:	ff 75 fc             	push   -0x4(%ebp)
4081eb:	8b cb                	mov    %ebx,%ecx
4081ed:	e8 41 00 00 00       	call   0x408233
4081f2:	8b 43 04             	mov    0x4(%ebx),%eax
4081f5:	8d 4d fc             	lea    -0x4(%ebp),%ecx
4081f8:	2b 03                	sub    (%ebx),%eax
4081fa:	8b f7                	mov    %edi,%esi
4081fc:	51                   	push   %ecx
4081fd:	ff 33                	push   (%ebx)
4081ff:	89 45 fc             	mov    %eax,-0x4(%ebp)
408202:	50                   	push   %eax
408203:	57                   	push   %edi
408204:	ff 75 08             	push   0x8(%ebp)
408207:	ff 75 f8             	push   -0x8(%ebp)
40820a:	ff 75 f4             	push   -0xc(%ebp)
40820d:	ff 15 3c 20 41 00    	call   *0x41203c
408213:	85 c0                	test   %eax,%eax
408215:	75 0c                	jne    0x408223
408217:	ff 15 70 20 41 00    	call   *0x412070
40821d:	8b f0                	mov    %eax,%esi
40821f:	85 f6                	test   %esi,%esi
408221:	75 02                	jne    0x408225
408223:	8b 3b                	mov    (%ebx),%edi
408225:	8b 45 14             	mov    0x14(%ebp),%eax
408228:	89 38                	mov    %edi,(%eax)
40822a:	8b c6                	mov    %esi,%eax
40822c:	5f                   	pop    %edi
40822d:	5e                   	pop    %esi
40822e:	5b                   	pop    %ebx
40822f:	c9                   	leave
408230:	c2 10 00             	ret    $0x10
408233:	8b ff                	mov    %edi,%edi
408235:	55                   	push   %ebp
408236:	8b ec                	mov    %esp,%ebp
408238:	56                   	push   %esi
408239:	8b f1                	mov    %ecx,%esi
40823b:	57                   	push   %edi
40823c:	8b 7d 08             	mov    0x8(%ebp),%edi
40823f:	8b 46 04             	mov    0x4(%esi),%eax
408242:	8b 0e                	mov    (%esi),%ecx
408244:	2b c1                	sub    %ecx,%eax
408246:	3b f8                	cmp    %eax,%edi
408248:	73 13                	jae    0x40825d
40824a:	8d 04 39             	lea    (%ecx,%edi,1),%eax
40824d:	3b c1                	cmp    %ecx,%eax
40824f:	75 05                	jne    0x408256
408251:	89 4e 04             	mov    %ecx,0x4(%esi)
408254:	eb 32                	jmp    0x408288
408256:	3b 46 04             	cmp    0x4(%esi),%eax
408259:	74 2d                	je     0x408288
40825b:	eb 28                	jmp    0x408285
40825d:	76 29                	jbe    0x408288
40825f:	2b 4e 04             	sub    0x4(%esi),%ecx
408262:	03 cf                	add    %edi,%ecx
408264:	51                   	push   %ecx
408265:	8b ce                	mov    %esi,%ecx
408267:	e8 22 00 00 00       	call   0x40828e
40826c:	8b 06                	mov    (%esi),%eax
40826e:	2b 46 04             	sub    0x4(%esi),%eax
408271:	03 c7                	add    %edi,%eax
408273:	50                   	push   %eax
408274:	6a 00                	push   $0x0
408276:	ff 76 04             	push   0x4(%esi)
408279:	e8 d1 69 00 00       	call   0x40ec4f
40827e:	8b 06                	mov    (%esi),%eax
408280:	83 c4 0c             	add    $0xc,%esp
408283:	03 c7                	add    %edi,%eax
408285:	89 46 04             	mov    %eax,0x4(%esi)
408288:	5f                   	pop    %edi
408289:	5e                   	pop    %esi