406613:	74 3d                	je     0x406652
406615:	81 7b 04 00 00 01 00 	cmpl   $0x10000,0x4(%ebx)
40661c:	7d 2a                	jge    0x406648
40661e:	68 00 10 00 00       	push   $0x1000
406623:	8d 44 24 04          	lea    0x4(%esp),%eax
406627:	50                   	push   %eax
406628:	8b 43 04             	mov    0x4(%ebx),%eax
40662b:	50                   	push   %eax
40662c:	8b 03                	mov    (%ebx),%eax
40662e:	8b 00                	mov    (%eax),%eax
406630:	e8 f3 f4 ff ff       	call   0x405b28
406635:	50                   	push   %eax
406636:	e8 a9 ac ff ff       	call   0x4012e4
40663b:	8b c8                	mov    %eax,%ecx
40663d:	8b d4                	mov    %esp,%edx
40663f:	8b c6                	mov    %esi,%eax
406641:	e8 ca e1 ff ff       	call   0x404810
406646:	eb 0a                	jmp    0x406652
406648:	8b c6                	mov    %esi,%eax
40664a:	8b 53 04             	mov    0x4(%ebx),%edx
40664d:	e8 c6 e2 ff ff       	call   0x404918
406652:	81 c4 00 10 00 00    	add    $0x1000,%esp
406658:	5e                   	pop    %esi
406659:	5b                   	pop    %ebx
40665a:	c3                   	ret
40665b:	90                   	nop
40665c:	ff 25 08 28 47 00    	jmp    *0x472808
406662:	8b c0                	mov    %eax,%eax
406664:	55                   	push   %ebp
406665:	8b ec                	mov    %esp,%ebp
406667:	33 c0                	xor    %eax,%eax
406669:	55                   	push   %ebp
40666a:	68 b8 66 40 00       	push   $0x4066b8
40666f:	64 ff 30             	push   %fs:(%eax)
406672:	64 89 20             	mov    %esp,%fs:(%eax)
406675:	ff 05 b8 e5 46 00    	incl   0x46e5b8
40667b:	75 2d                	jne    0x4066aa
40667d:	b8 50 e0 46 00       	mov    $0x46e050,%eax
406682:	e8 41 ca ff ff       	call   0x4030c8
406687:	b8 1c e2 46 00       	mov    $0x46e21c,%eax
40668c:	e8 37 ca ff ff       	call   0x4030c8
406691:	b8 e8 e3 46 00       	mov    $0x46e3e8,%eax
406696:	e8 2d ca ff ff       	call   0x4030c8
40669b:	e8 e0 c5 ff ff       	call   0x402c80
4066a0:	b8 3c 00 46 00       	mov    $0x46003c,%eax
4066a5:	e8 76 e0 ff ff       	call   0x404720
4066aa:	33 c0                	xor    %eax,%eax
4066ac:	5a                   	pop    %edx
4066ad:	59                   	pop    %ecx
4066ae:	59                   	pop    %ecx
4066af:	64 89 10             	mov    %edx,%fs:(%eax)
4066b2:	68 bf 66 40 00       	push   $0x4066bf
4066b7:	c3                   	ret
4066b8:	e9 cb d9 ff ff       	jmp    0x404088
4066bd:	eb f8                	jmp    0x4066b7
4066bf:	5d                   	pop    %ebp
4066c0:	c3                   	ret
4066c1:	8d 40 00             	lea    0x0(%eax),%eax
4066c4:	ff 25 98 28 47 00    	jmp    *0x472898
4066ca:	8b c0                	mov    %eax,%eax
4066cc:	ff 25 94 28 47 00    	jmp    *0x472894
4066d2:	8b c0                	mov    %eax,%eax
4066d4:	ff 25 90 28 47 00    	jmp    *0x472890
4066da:	8b c0                	mov    %eax,%eax
4066dc:	ff 25 8c 28 47 00    	jmp    *0x47288c
4066e2:	8b c0                	mov    %eax,%eax
4066e4:	50                   	push   %eax
4066e5:	6a 40                	push   $0x40
4066e7:	e8 e0 ff ff ff       	call   0x4066cc
4066ec:	c3                   	ret
4066ed:	8d 40 00             	lea    0x0(%eax),%eax
4066f0:	b8 34 00 00 00       	mov    $0x34,%eax
4066f5:	c3                   	ret
4066f6:	8b c0                	mov    %eax,%eax
4066f8:	53                   	push   %ebx
4066f9:	e8 f2 ff ff ff       	call   0x4066f0
4066fe:	8b d8                	mov    %eax,%ebx
406700:	85 db                	test   %ebx,%ebx
406702:	74 36                	je     0x40673a
406704:	83 3d 8c 07 46 00 ff 	cmpl   $0xffffffff,0x46078c
40670b:	75 0a                	jne    0x406717
40670d:	b8 e2 00 00 00       	mov    $0xe2,%eax
406712:	e8 fd df ff ff       	call   0x404714
406717:	8b c3                	mov    %ebx,%eax
406719:	e8 c6 ff ff ff       	call   0x4066e4
40671e:	85 c0                	test   %eax,%eax
406720:	75 0c                	jne    0x40672e
406722:	b8 e2 00 00 00       	mov    $0xe2,%eax
406727:	e8 e8 df ff ff       	call   0x404714
40672c:	eb 0c                	jmp    0x40673a
40672e:	50                   	push   %eax
40672f:	a1 8c 07 46 00       	mov    0x46078c,%eax
406734:	50                   	push   %eax
406735:	e8 a2 ff ff ff       	call   0x4066dc
40673a:	5b                   	pop    %ebx
40673b:	c3                   	ret
40673c:	8a 0d f4 07 47 00    	mov    0x4707f4,%cl
406742:	a1 8c 07 46 00       	mov    0x46078c,%eax
406747:	84 c9                	test   %cl,%cl
406749:	75 26                	jne    0x406771
40674b:	64 8b 15 2c 00 00 00 	mov    %fs:0x2c,%edx
406752:	8b 04 82             	mov    (%edx,%eax,4),%eax
406755:	c3                   	ret
406756:	e8 9d ff ff ff       	call   0x4066f8
40675b:	a1 8c 07 46 00       	mov    0x46078c,%eax
406760:	50                   	push   %eax
406761:	e8 6e ff ff ff       	call   0x4066d4
406766:	85 c0                	test   %eax,%eax
406768:	74 01                	je     0x40676b
40676a:	c3                   	ret
40676b:	a1 fc 07 47 00       	mov    0x4707fc,%eax
406770:	c3                   	ret
406771:	50                   	push   %eax
406772:	e8 5d ff ff ff       	call   0x4066d4
406777:	85 c0                	test   %eax,%eax
406779:	74 db                	je     0x406756
40677b:	c3                   	ret
40677c:	b8 94 07 46 00       	mov    $0x460794,%eax
406781:	e8 1e f9 ff ff       	call   0x4060a4
406786:	c3                   	ret
406787:	90                   	nop
406788:	53                   	push   %ebx
406789:	8b d8                	mov    %eax,%ebx
40678b:	33 c0                	xor    %eax,%eax
40678d:	a3 8c 07 46 00       	mov    %eax,0x46078c
406792:	6a 00                	push   $0x0
406794:	e8 2b ff ff ff       	call   0x4066c4
406799:	a3 f8 07 47 00       	mov    %eax,0x4707f8
40679e:	a1 f8 07 47 00       	mov    0x4707f8,%eax
4067a3:	a3 98 07 46 00       	mov    %eax,0x460798
4067a8:	33 c0                	xor    %eax,%eax
4067aa:	a3 9c 07 46 00       	mov    %eax,0x46079c
4067af:	33 c0                	xor    %eax,%eax
4067b1:	a3 a0 07 46 00       	mov    %eax,0x4607a0
4067b6:	e8 c1 ff ff ff       	call   0x40677c
4067bb:	ba 94 07 46 00       	mov    $0x460794,%edx
4067c0:	8b c3                	mov    %ebx,%eax
4067c2:	e8 b9 dc ff ff       	call   0x404480
4067c7:	5b                   	pop    %ebx
4067c8:	c3                   	ret
4067c9:	8d 40 00             	lea    0x0(%eax),%eax
4067cc:	55                   	push   %ebp
4067cd:	8b ec                	mov    %esp,%ebp
4067cf:	53                   	push   %ebx
4067d0:	8b 5d 08             	mov    0x8(%ebp),%ebx
4067d3:	89 03                	mov    %eax,(%ebx)
4067d5:	89 53 04             	mov    %edx,0x4(%ebx)
4067d8:	8b 45 0c             	mov    0xc(%ebp),%eax
4067db:	89 43 0c             	mov    %eax,0xc(%ebx)
4067de:	89 4b 08             	mov    %ecx,0x8(%ebx)
4067e1:	5b                   	pop    %ebx
4067e2:	5d                   	pop    %ebp
4067e3:	c2 08 00             	ret    $0x8
4067e6:	8b c0                	mov    %eax,%eax
4067e8:	89 01                	mov    %eax,(%ecx)
4067ea:	89 51 04             	mov    %edx,0x4(%ecx)
4067ed:	c3                   	ret
4067ee:	8b c0                	mov    %eax,%eax
4067f0:	51                   	push   %ecx
4067f1:	8b d0                	mov    %eax,%edx
4067f3:	66 83 e2 ff          	and    $0xffff,%dx
4067f7:	66 89 14 24          	mov    %dx,(%esp)
4067fb:	c1 e8 10             	shr    $0x10,%eax
4067fe:	66 89 44 24 02       	mov    %ax,0x2(%esp)
406803:	8b 04 24             	mov    (%esp),%eax
406806:	5a                   	pop    %edx
406807:	c3                   	ret
406808:	55                   	push   %ebp
406809:	8b ec                	mov    %esp,%ebp
40680b:	53                   	push   %ebx
40680c:	8b 5d 08             	mov    0x8(%ebp),%ebx
40680f:	89 03                	mov    %eax,(%ebx)
406811:	89 53 04             	mov    %edx,0x4(%ebx)
406814:	03 c8                	add    %eax,%ecx
406816:	89 4b 08             	mov    %ecx,0x8(%ebx)
406819:	03 55 0c             	add    0xc(%ebp),%edx
40681c:	89 53 0c             	mov    %edx,0xc(%ebx)
40681f:	5b                   	pop    %ebx
406820:	5d                   	pop    %ebp
406821:	c2 08 00             	ret    $0x8
406824:	28 68 40             	sub    %ch,0x40(%eax)
406827:	00 03                	add    %al,(%ebx)
406829:	02 2e                	add    (%esi),%ch
40682b:	31 05 00 00 00 00    	xor    %eax,0x0
406831:	0c 00                	or     $0x0,%al
406833:	00 00                	add    %al,(%eax)
406835:	24 68                	and    $0x68,%al
406837:	40                   	inc    %eax
406838:	00 0a                	add    %cl,(%edx)
40683a:	6f                   	outsl  %ds:(%esi),(%dx)
40683b:	64 53                	fs push %ebx
40683d:	65 6c                	gs insb (%dx),%es:(%edi)
40683f:	65 63 74 65 64       	arpl   %esi,%gs:0x64(%ebp,%eiz,2)
406844:	08 6f 64             	or     %ch,0x64(%edi)
406847:	47                   	inc    %edi
406848:	72 61                	jb     0x4068ab
40684a:	79 65                	jns    0x4068b1
40684c:	64 0a 6f 64          	or     %fs:0x64(%edi),%ch
406850:	44                   	inc    %esp
406851:	69 73 61 62 6c 65 64 	imul   $0x64656c62,0x61(%ebx),%esi
406858:	09 6f 64             	or     %ebp,0x64(%edi)
40685b:	43                   	inc    %ebx
40685c:	68 65 63 6b 65       	push   $0x656b6365
406861:	64 09 6f 64          	or     %ebp,%fs:0x64(%edi)
406865:	46                   	inc    %esi
406866:	6f                   	outsl  %ds:(%esi),(%dx)
406867:	63 75 73             	arpl   %esi,0x73(%ebp)
40686a:	65 64 09 6f 64       	gs or  %ebp,%fs:0x64(%edi)
40686f:	44                   	inc    %esp
406870:	65 66 61             	gs popaw
406873:	75 6c                	jne    0x4068e1
406875:	74 0a                	je     0x406881
406877:	6f                   	outsl  %ds:(%esi),(%dx)
406878:	64 48                	fs dec %eax
40687a:	6f                   	outsl  %ds:(%esi),(%dx)
40687b:	74 4c                	je     0x4068c9
40687d:	69 67 68 74 0a 6f 64 	imul   $0x646f0a74,0x68(%edi),%esp
406884:	49                   	dec    %ecx
406885:	6e                   	outsb  %ds:(%esi),(%dx)
406886:	61                   	popa
406887:	63 74 69 76          	arpl   %esi,0x76(%ecx,%ebp,2)
40688b:	65 09 6f 64          	or     %ebp,%gs:0x64(%edi)
40688f:	4e                   	dec    %esi
406890:	6f                   	outsl  %ds:(%esi),(%dx)
406891:	41                   	inc    %ecx
406892:	63 63 65             	arpl   %esp,0x65(%ebx)
406895:	6c                   	insb   (%dx),%es:(%edi)
406896:	0d 6f 64 4e 6f       	or     $0x6f4e646f,%eax
40689b:	46                   	inc    %esi
40689c:	6f                   	outsl  %ds:(%esi),(%dx)
40689d:	63 75 73             	arpl   %esi,0x73(%ebp)
4068a0:	52                   	push   %edx
4068a1:	65 63 74 0b 6f       	arpl   %esi,%gs:0x6f(%ebx,%ecx,1)
4068a6:	64 52                	fs push %edx
4068a8:	65 73 65             	gs jae 0x406910
4068ab:	72 76                	jb     0x406923
4068ad:	65 64 31 0b          	gs xor %ecx,%fs:(%ebx)
4068b1:	6f                   	outsl  %ds:(%esi),(%dx)
4068b2:	64 52                	fs push %edx
4068b4:	65 73 65             	gs jae 0x40691c
4068b7:	72 76                	jb     0x40692f
4068b9:	65 64 32 0e          	gs xor %fs:(%esi),%cl
4068bd:	6f                   	outsl  %ds:(%esi),(%dx)
4068be:	64 43                	fs inc %ebx
4068c0:	6f                   	outsl  %ds:(%esi),(%dx)
4068c1:	6d                   	insl   (%dx),%es:(%edi)
4068c2:	62 6f 42             	bound  %ebp,0x42(%edi)
4068c5:	6f                   	outsl  %ds:(%esi),(%dx)
4068c6:	78 45                	js     0x40690d
4068c8:	64 69 74 07 57 69 6e 	imul   $0x6f646e69,%fs:0x57(%edi,%eax,1),%esi
4068cf:	64 6f
4068d1:	77 73                	ja     0x406946
4068d3:	90                   	nop
4068d4:	d8 68 40             	fsubrs 0x40(%eax)
4068d7:	00 06                	add    %al,(%esi)
4068d9:	0f 54 4f 77          	andps  0x77(%edi),%xmm1
4068dd:	6e                   	outsb  %ds:(%esi),(%dx)
4068de:	65 72 44             	gs jb  0x406925
4068e1:	72 61                	jb     0x406944
4068e3:	77 53                	ja     0x406938
4068e5:	74 61                	je     0x406948
4068e7:	74 65                	je     0x40694e
4068e9:	03 24 68             	add    (%eax,%ebp,2),%esp
4068ec:	40                   	inc    %eax
4068ed:	00 8b c0 ff 25 60    	add    %cl,0x6025ffc0(%ebx)
4068f3:	2d 47 00 8b c0       	sub    $0xc08b0047,%eax
4068f8:	ff 25 5c 2d 47 00    	jmp    *0x472d5c
4068fe:	8b c0                	mov    %eax,%eax
406900:	ff 25 58 2d 47 00    	jmp    *0x472d58
406906:	8b c0                	mov    %eax,%eax
406908:	ff 25 54 2d 47 00    	jmp    *0x472d54
40690e:	8b c0                	mov    %eax,%eax
406910:	ff 25 4c 2d 47 00    	jmp    *0x472d4c
406916:	8b c0                	mov    %eax,%eax
406918:	ff 25 48 2d 47 00    	jmp    *0x472d48
40691e:	8b c0                	mov    %eax,%eax
406920:	ff 25 44 2d 47 00    	jmp    *0x472d44
406926:	8b c0                	mov    %eax,%eax
406928:	ff 25 40 2d 47 00    	jmp    *0x472d40
40692e:	8b c0                	mov    %eax,%eax
406930:	ff 25 3c 2d 47 00    	jmp    *0x472d3c
406936:	8b c0                	mov    %eax,%eax
406938:	ff 25 38 2d 47 00    	jmp    *0x472d38
40693e:	8b c0                	mov    %eax,%eax
406940:	ff 25 34 2d 47 00    	jmp    *0x472d34
406946:	8b c0                	mov    %eax,%eax
406948:	ff 25 30 2d 47 00    	jmp    *0x472d30
40694e:	8b c0                	mov    %eax,%eax
406950:	ff 25 2c 2d 47 00    	jmp    *0x472d2c
406956:	8b c0                	mov    %eax,%eax
406958:	ff 25 28 2d 47 00    	jmp    *0x472d28
40695e:	8b c0                	mov    %eax,%eax
406960:	ff 25 24 2d 47 00    	jmp    *0x472d24
406966:	8b c0                	mov    %eax,%eax
406968:	ff 25 20 2d 47 00    	jmp    *0x472d20
40696e:	8b c0                	mov    %eax,%eax
406970:	ff 25 1c 2d 47 00    	jmp    *0x472d1c
406976:	8b c0                	mov    %eax,%eax
406978:	ff 25 18 2d 47 00    	jmp    *0x472d18
40697e:	8b c0                	mov    %eax,%eax
406980:	ff 25 14 2d 47 00    	jmp    *0x472d14
406986:	8b c0                	mov    %eax,%eax
406988:	ff 25 10 2d 47 00    	jmp    *0x472d10
40698e:	8b c0                	mov    %eax,%eax
406990:	ff 25 0c 2d 47 00    	jmp    *0x472d0c
406996:	8b c0                	mov    %eax,%eax
406998:	ff 25 08 2d 47 00    	jmp    *0x472d08
40699e:	8b c0                	mov    %eax,%eax
4069a0:	ff 25 04 2d 47 00    	jmp    *0x472d04
4069a6:	8b c0                	mov    %eax,%eax
4069a8:	ff 25 00 2d 47 00    	jmp    *0x472d00
4069ae:	8b c0                	mov    %eax,%eax
4069b0:	ff 25 fc 2c 47 00    	jmp    *0x472cfc
4069b6:	8b c0                	mov    %eax,%eax
4069b8:	ff 25 f8 2c 47 00    	jmp    *0x472cf8
4069be:	8b c0                	mov    %eax,%eax
4069c0:	ff 25 f4 2c 47 00    	jmp    *0x472cf4
4069c6:	8b c0                	mov    %eax,%eax
4069c8:	ff 25 f0 2c 47 00    	jmp    *0x472cf0
4069ce:	8b c0                	mov    %eax,%eax
4069d0:	ff 25 ec 2c 47 00    	jmp    *0x472cec
4069d6:	8b c0                	mov    %eax,%eax
4069d8:	ff 25 e8 2c 47 00    	jmp    *0x472ce8
4069de:	8b c0                	mov    %eax,%eax
4069e0:	ff 25 e4 2c 47 00    	jmp    *0x472ce4
4069e6:	8b c0                	mov    %eax,%eax
4069e8:	ff 25 e0 2c 47 00    	jmp    *0x472ce0
4069ee:	8b c0                	mov    %eax,%eax
4069f0:	ff 25 dc 2c 47 00    	jmp    *0x472cdc
4069f6:	8b c0                	mov    %eax,%eax
4069f8:	ff 25 d8 2c 47 00    	jmp    *0x472cd8
4069fe:	8b c0                	mov    %eax,%eax
406a00:	ff 25 d4 2c 47 00    	jmp    *0x472cd4
406a06:	8b c0                	mov    %eax,%eax
406a08:	ff 25 d0 2c 47 00    	jmp    *0x472cd0
406a0e:	8b c0                	mov    %eax,%eax
406a10:	ff 25 cc 2c 47 00    	jmp    *0x472ccc
406a16:	8b c0                	mov    %eax,%eax
406a18:	ff 25 c8 2c 47 00    	jmp    *0x472cc8
406a1e:	8b c0                	mov    %eax,%eax
406a20:	ff 25 c4 2c 47 00    	jmp    *0x472cc4
406a26:	8b c0                	mov    %eax,%eax
406a28:	ff 25 c0 2c 47 00    	jmp    *0x472cc0
406a2e:	8b c0                	mov    %eax,%eax
406a30:	ff 25 bc 2c 47 00    	jmp    *0x472cbc
406a36:	8b c0                	mov    %eax,%eax
406a38:	ff 25 b8 2c 47 00    	jmp    *0x472cb8
406a3e:	8b c0                	mov    %eax,%eax
406a40:	ff 25 b4 2c 47 00    	jmp    *0x472cb4
406a46:	8b c0                	mov    %eax,%eax