407d84:	83 7d e8 00          	cmpl   $0x0,-0x18(%ebp)
407d88:	74 0c                	je     0x407d96
407d8a:	51                   	push   %ecx
407d8b:	8d 4d d8             	lea    -0x28(%ebp),%ecx
407d8e:	e8 18 01 00 00       	call   0x407eab
407d93:	8b 45 d4             	mov    -0x2c(%ebp),%eax
407d96:	66 39 18             	cmp    %bx,(%eax)
407d99:	75 04                	jne    0x407d9f
407d9b:	8b d3                	mov    %ebx,%edx
407d9d:	eb 14                	jmp    0x407db3
407d9f:	8b d0                	mov    %eax,%edx
407da1:	8d 72 02             	lea    0x2(%edx),%esi
407da4:	66 8b 0a             	mov    (%edx),%cx
407da7:	83 c2 02             	add    $0x2,%edx
407daa:	66 3b cb             	cmp    %bx,%cx
407dad:	75 f5                	jne    0x407da4
407daf:	2b d6                	sub    %esi,%edx
407db1:	d1 fa                	sar    $1,%edx
407db3:	52                   	push   %edx
407db4:	50                   	push   %eax
407db5:	8d 4d d8             	lea    -0x28(%ebp),%ecx
407db8:	e8 48 01 00 00       	call   0x407f05
407dbd:	8b 45 d4             	mov    -0x2c(%ebp),%eax
407dc0:	50                   	push   %eax
407dc1:	c6 45 fc 04          	movb   $0x4,-0x4(%ebp)
407dc5:	ff 15 0c 40 41 00    	call   *0x41400c
407dcb:	8b 45 cc             	mov    -0x34(%ebp),%eax
407dce:	8d 55 d0             	lea    -0x30(%ebp),%edx
407dd1:	52                   	push   %edx
407dd2:	50                   	push   %eax
407dd3:	8b 08                	mov    (%eax),%ecx
407dd5:	8b 71 24             	mov    0x24(%ecx),%esi
407dd8:	8b ce                	mov    %esi,%ecx
407dda:	ff 15 10 22 41 00    	call   *0x412210
407de0:	ff d6                	call   *%esi
407de2:	85 c0                	test   %eax,%eax
407de4:	0f 84 71 ff ff ff    	je     0x407d5b
407dea:	83 7d ec 08          	cmpl   $0x8,-0x14(%ebp)
407dee:	8b 45 d8             	mov    -0x28(%ebp),%eax
407df1:	73 03                	jae    0x407df6
407df3:	8d 45 d8             	lea    -0x28(%ebp),%eax
407df6:	50                   	push   %eax
407df7:	ff 15 08 40 41 00    	call   *0x414008
407dfd:	8b f8                	mov    %eax,%edi
407dff:	8b 45 c8             	mov    -0x38(%ebp),%eax
407e02:	89 38                	mov    %edi,(%eax)
407e04:	f7 df                	neg    %edi
407e06:	1b ff                	sbb    %edi,%edi
407e08:	81 e7 f2 ff f8 7f    	and    $0x7ff8fff2,%edi
407e0e:	81 c7 0e 00 07 80    	add    $0x8007000e,%edi
407e14:	c6 45 fc 06          	movb   $0x6,-0x4(%ebp)
407e18:	8b 45 d0             	mov    -0x30(%ebp),%eax
407e1b:	85 c0                	test   %eax,%eax
407e1d:	74 10                	je     0x407e2f
407e1f:	8b 08                	mov    (%eax),%ecx
407e21:	50                   	push   %eax
407e22:	8b 71 08             	mov    0x8(%ecx),%esi
407e25:	8b ce                	mov    %esi,%ecx
407e27:	ff 15 10 22 41 00    	call   *0x412210
407e2d:	ff d6                	call   *%esi
407e2f:	53                   	push   %ebx
407e30:	6a 01                	push   $0x1
407e32:	8d 4d d8             	lea    -0x28(%ebp),%ecx
407e35:	e8 b6 e6 ff ff       	call   0x4064f0
407e3a:	c7 45 fc 07 00 00 00 	movl   $0x7,-0x4(%ebp)
407e41:	8b 4d cc             	mov    -0x34(%ebp),%ecx
407e44:	85 c9                	test   %ecx,%ecx
407e46:	74 10                	je     0x407e58
407e48:	8b 11                	mov    (%ecx),%edx
407e4a:	51                   	push   %ecx
407e4b:	8b 72 08             	mov    0x8(%edx),%esi
407e4e:	8b ce                	mov    %esi,%ecx
407e50:	ff 15 10 22 41 00    	call   *0x412210
407e56:	ff d6                	call   *%esi
407e58:	8b c7                	mov    %edi,%eax
407e5a:	e8 d1 67 00 00       	call   0x40e630
407e5f:	c2 08 00             	ret    $0x8
407e62:	8b ff                	mov    %edi,%edi
407e64:	55                   	push   %ebp
407e65:	8b ec                	mov    %esp,%ebp
407e67:	6a ff                	push   $0xffffffff
407e69:	68 a7 ef 40 00       	push   $0x40efa7
407e6e:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
407e74:	50                   	push   %eax
407e75:	56                   	push   %esi
407e76:	a1 54 13 41 00       	mov    0x411354,%eax
407e7b:	33 c5                	xor    %ebp,%eax
407e7d:	50                   	push   %eax
407e7e:	8d 45 f4             	lea    -0xc(%ebp),%eax
407e81:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
407e87:	8b 09                	mov    (%ecx),%ecx
407e89:	85 c9                	test   %ecx,%ecx
407e8b:	74 10                	je     0x407e9d
407e8d:	8b 01                	mov    (%ecx),%eax
407e8f:	51                   	push   %ecx
407e90:	8b 70 08             	mov    0x8(%eax),%esi
407e93:	8b ce                	mov    %esi,%ecx
407e95:	ff 15 10 22 41 00    	call   *0x412210
407e9b:	ff d6                	call   *%esi
407e9d:	8b 4d f4             	mov    -0xc(%ebp),%ecx
407ea0:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
407ea7:	59                   	pop    %ecx
407ea8:	5e                   	pop    %esi
407ea9:	c9                   	leave
407eaa:	c3                   	ret
407eab:	8b ff                	mov    %edi,%edi
407ead:	56                   	push   %esi
407eae:	8b f1                	mov    %ecx,%esi
407eb0:	57                   	push   %edi
407eb1:	8b 4e 10             	mov    0x10(%esi),%ecx
407eb4:	8b c1                	mov    %ecx,%eax
407eb6:	f7 d0                	not    %eax
407eb8:	83 f8 01             	cmp    $0x1,%eax
407ebb:	76 42                	jbe    0x407eff
407ebd:	8d 79 01             	lea    0x1(%ecx),%edi
407ec0:	51                   	push   %ecx
407ec1:	57                   	push   %edi
407ec2:	8b ce                	mov    %esi,%ecx
407ec4:	e8 12 e5 ff ff       	call   0x4063db
407ec9:	84 c0                	test   %al,%al
407ecb:	74 2b                	je     0x407ef8
407ecd:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
407ed1:	8b 4e 10             	mov    0x10(%esi),%ecx
407ed4:	72 04                	jb     0x407eda
407ed6:	8b 06                	mov    (%esi),%eax
407ed8:	eb 02                	jmp    0x407edc
407eda:	8b c6                	mov    %esi,%eax
407edc:	6a 2c                	push   $0x2c
407ede:	5a                   	pop    %edx
407edf:	66 89 14 48          	mov    %dx,(%eax,%ecx,2)
407ee3:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
407ee7:	89 7e 10             	mov    %edi,0x10(%esi)
407eea:	72 04                	jb     0x407ef0
407eec:	8b 06                	mov    (%esi),%eax
407eee:	eb 02                	jmp    0x407ef2
407ef0:	8b c6                	mov    %esi,%eax
407ef2:	33 c9                	xor    %ecx,%ecx
407ef4:	66 89 0c 78          	mov    %cx,(%eax,%edi,2)
407ef8:	5f                   	pop    %edi
407ef9:	8b c6                	mov    %esi,%eax
407efb:	5e                   	pop    %esi
407efc:	c2 04 00             	ret    $0x4
407eff:	e8 5e d1 ff ff       	call   0x405062
407f04:	cc                   	int3
407f05:	8b ff                	mov    %edi,%edi
407f07:	55                   	push   %ebp
407f08:	8b ec                	mov    %esp,%ebp
407f0a:	51                   	push   %ecx
407f0b:	56                   	push   %esi
407f0c:	57                   	push   %edi
407f0d:	8b 7d 08             	mov    0x8(%ebp),%edi
407f10:	8b f1                	mov    %ecx,%esi
407f12:	57                   	push   %edi
407f13:	e8 50 e2 ff ff       	call   0x406168
407f18:	84 c0                	test   %al,%al
407f1a:	74 1c                	je     0x407f38
407f1c:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
407f20:	72 04                	jb     0x407f26
407f22:	8b 06                	mov    (%esi),%eax
407f24:	eb 02                	jmp    0x407f28
407f26:	8b c6                	mov    %esi,%eax
407f28:	ff 75 0c             	push   0xc(%ebp)
407f2b:	2b f8                	sub    %eax,%edi
407f2d:	d1 ff                	sar    $1,%edi
407f2f:	57                   	push   %edi
407f30:	56                   	push   %esi
407f31:	e8 6f 00 00 00       	call   0x407fa5
407f36:	eb 61                	jmp    0x407f99
407f38:	8b 4e 10             	mov    0x10(%esi),%ecx
407f3b:	8b c1                	mov    %ecx,%eax
407f3d:	53                   	push   %ebx
407f3e:	8b 5d 0c             	mov    0xc(%ebp),%ebx
407f41:	f7 d0                	not    %eax
407f43:	3b c3                	cmp    %ebx,%eax
407f45:	76 58                	jbe    0x407f9f
407f47:	85 db                	test   %ebx,%ebx
407f49:	74 4b                	je     0x407f96
407f4b:	8d 04 19             	lea    (%ecx,%ebx,1),%eax
407f4e:	51                   	push   %ecx
407f4f:	50                   	push   %eax
407f50:	8b ce                	mov    %esi,%ecx
407f52:	89 45 fc             	mov    %eax,-0x4(%ebp)
407f55:	e8 81 e4 ff ff       	call   0x4063db
407f5a:	84 c0                	test   %al,%al
407f5c:	74 38                	je     0x407f96
407f5e:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
407f62:	72 04                	jb     0x407f68
407f64:	8b 0e                	mov    (%esi),%ecx
407f66:	eb 02                	jmp    0x407f6a
407f68:	8b ce                	mov    %esi,%ecx
407f6a:	8d 04 1b             	lea    (%ebx,%ebx,1),%eax
407f6d:	50                   	push   %eax
407f6e:	8b 46 10             	mov    0x10(%esi),%eax
407f71:	57                   	push   %edi
407f72:	8d 04 41             	lea    (%ecx,%eax,2),%eax
407f75:	50                   	push   %eax
407f76:	e8 ab 67 00 00       	call   0x40e726
407f7b:	8b 4d fc             	mov    -0x4(%ebp),%ecx
407f7e:	83 c4 0c             	add    $0xc,%esp
407f81:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
407f85:	89 4e 10             	mov    %ecx,0x10(%esi)
407f88:	72 04                	jb     0x407f8e
407f8a:	8b 06                	mov    (%esi),%eax
407f8c:	eb 02                	jmp    0x407f90
407f8e:	8b c6                	mov    %esi,%eax
407f90:	33 d2                	xor    %edx,%edx
407f92:	66 89 14 48          	mov    %dx,(%eax,%ecx,2)
407f96:	8b c6                	mov    %esi,%eax
407f98:	5b                   	pop    %ebx
407f99:	5f                   	pop    %edi
407f9a:	5e                   	pop    %esi
407f9b:	c9                   	leave
407f9c:	c2 08 00             	ret    $0x8
407f9f:	e8 be d0 ff ff       	call   0x405062
407fa4:	cc                   	int3
407fa5:	8b ff                	mov    %edi,%edi
407fa7:	55                   	push   %ebp
407fa8:	8b ec                	mov    %esp,%ebp
407faa:	51                   	push   %ecx
407fab:	53                   	push   %ebx
407fac:	8b 5d 08             	mov    0x8(%ebp),%ebx
407faf:	56                   	push   %esi
407fb0:	8b f1                	mov    %ecx,%esi
407fb2:	8b 4d 0c             	mov    0xc(%ebp),%ecx
407fb5:	57                   	push   %edi
407fb6:	8b 43 10             	mov    0x10(%ebx),%eax
407fb9:	3b c1                	cmp    %ecx,%eax
407fbb:	72 7c                	jb     0x408039
407fbd:	8b 7d 10             	mov    0x10(%ebp),%edi
407fc0:	2b c1                	sub    %ecx,%eax
407fc2:	3b c7                	cmp    %edi,%eax
407fc4:	73 02                	jae    0x407fc8
407fc6:	8b f8                	mov    %eax,%edi
407fc8:	8b 4e 10             	mov    0x10(%esi),%ecx
407fcb:	8b c1                	mov    %ecx,%eax
407fcd:	f7 d0                	not    %eax
407fcf:	3b c7                	cmp    %edi,%eax
407fd1:	76 6b                	jbe    0x40803e
407fd3:	85 ff                	test   %edi,%edi
407fd5:	74 59                	je     0x408030
407fd7:	8d 04 39             	lea    (%ecx,%edi,1),%eax
407fda:	51                   	push   %ecx
407fdb:	50                   	push   %eax
407fdc:	8b ce                	mov    %esi,%ecx
407fde:	89 45 fc             	mov    %eax,-0x4(%ebp)
407fe1:	e8 f5 e3 ff ff       	call   0x4063db
407fe6:	84 c0                	test   %al,%al
407fe8:	74 46                	je     0x408030
407fea:	83 7b 14 08          	cmpl   $0x8,0x14(%ebx)
407fee:	72 02                	jb     0x407ff2
407ff0:	8b 1b                	mov    (%ebx),%ebx
407ff2:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
407ff6:	72 04                	jb     0x407ffc
407ff8:	8b 0e                	mov    (%esi),%ecx
407ffa:	eb 02                	jmp    0x407ffe
407ffc:	8b ce                	mov    %esi,%ecx
407ffe:	8d 04 3f             	lea    (%edi,%edi,1),%eax
408001:	50                   	push   %eax
408002:	8b 45 0c             	mov    0xc(%ebp),%eax
408005:	8d 04 43             	lea    (%ebx,%eax,2),%eax
408008:	50                   	push   %eax
408009:	8b 46 10             	mov    0x10(%esi),%eax
40800c:	8d 04 41             	lea    (%ecx,%eax,2),%eax
40800f:	50                   	push   %eax
408010:	e8 11 67 00 00       	call   0x40e726
408015:	8b 4d fc             	mov    -0x4(%ebp),%ecx
408018:	83 c4 0c             	add    $0xc,%esp
40801b:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
40801f:	89 4e 10             	mov    %ecx,0x10(%esi)
408022:	72 04                	jb     0x408028
408024:	8b 06                	mov    (%esi),%eax
408026:	eb 02                	jmp    0x40802a
408028:	8b c6                	mov    %esi,%eax
40802a:	33 d2                	xor    %edx,%edx
40802c:	66 89 14 48          	mov    %dx,(%eax,%ecx,2)
408030:	5f                   	pop    %edi
408031:	8b c6                	mov    %esi,%eax
408033:	5e                   	pop    %esi
408034:	5b                   	pop    %ebx
408035:	c9                   	leave
408036:	c2 0c 00             	ret    $0xc
408039:	e8 9a cf ff ff       	call   0x404fd8
40803e:	e8 1f d0 ff ff       	call   0x405062
408043:	cc                   	int3
408044:	ff 31                	push   (%ecx)
408046:	ff 15 0c 40 41 00    	call   *0x41400c
40804c:	c3                   	ret
40804d:	b8 ff 0f 00 00       	mov    $0xfff,%eax
408052:	66 39 01             	cmp    %ax,(%ecx)
408055:	75 06                	jne    0x40805d
408057:	6a 08                	push   $0x8
408059:	58                   	pop    %eax
40805a:	66 89 01             	mov    %ax,(%ecx)
40805d:	51                   	push   %ecx
40805e:	ff 15 00 40 41 00    	call   *0x414000
408064:	c3                   	ret
408065:	8b ff                	mov    %edi,%edi
408067:	55                   	push   %ebp
408068:	8b ec                	mov    %esp,%ebp
40806a:	83 ec 0c             	sub    $0xc,%esp
40806d:	53                   	push   %ebx
40806e:	8b 5d 0c             	mov    0xc(%ebp),%ebx
408071:	56                   	push   %esi
408072:	57                   	push   %edi
408073:	89 4d f4             	mov    %ecx,-0xc(%ebp)
408076:	8b cb                	mov    %ebx,%ecx
408078:	6a 10                	push   $0x10
40807a:	89 55 f8             	mov    %edx,-0x8(%ebp)
40807d:	e8 b1 01 00 00       	call   0x408233
408082:	8b 43 04             	mov    0x4(%ebx),%eax
408085:	8d 4d fc             	lea    -0x4(%ebp),%ecx
408088:	2b 03                	sub    (%ebx),%eax
40808a:	33 ff                	xor    %edi,%edi
40808c:	51                   	push   %ecx
40808d:	ff 33                	push   (%ebx)
40808f:	89 45 fc             	mov    %eax,-0x4(%ebp)
408092:	8b f7                	mov    %edi,%esi
408094:	50                   	push   %eax
408095:	57                   	push   %edi
408096:	ff 75 f8             	push   -0x8(%ebp)
408099:	ff 75 f4             	push   -0xc(%ebp)
40809c:	ff 15 00 20 41 00    	call   *0x412000
4080a2:	85 c0                	test   %eax,%eax
4080a4:	75 45                	jne    0x4080eb
4080a6:	ff 15 70 20 41 00    	call   *0x412070
4080ac:	8b f0                	mov    %eax,%esi
4080ae:	83 fe 7a             	cmp    $0x7a,%esi
4080b1:	75 34                	jne    0x4080e7
4080b3:	ff 75 fc             	push   -0x4(%ebp)
4080b6:	8b cb                	mov    %ebx,%ecx
4080b8:	e8 76 01 00 00       	call   0x408233
4080bd:	8b 43 04             	mov    0x4(%ebx),%eax
4080c0:	8d 4d fc             	lea    -0x4(%ebp),%ecx
4080c3:	2b 03                	sub    (%ebx),%eax
4080c5:	8b f7                	mov    %edi,%esi
4080c7:	51                   	push   %ecx
4080c8:	ff 33                	push   (%ebx)
4080ca:	89 45 fc             	mov    %eax,-0x4(%ebp)
4080cd:	50                   	push   %eax
4080ce:	57                   	push   %edi
4080cf:	ff 75 f8             	push   -0x8(%ebp)
4080d2:	ff 75 f4             	push   -0xc(%ebp)
4080d5:	ff 15 00 20 41 00    	call   *0x412000
4080db:	85 c0                	test   %eax,%eax
4080dd:	75 0c                	jne    0x4080eb
4080df:	ff 15 70 20 41 00    	call   *0x412070
4080e5:	8b f0                	mov    %eax,%esi
4080e7:	85 f6                	test   %esi,%esi
4080e9:	75 02                	jne    0x4080ed
4080eb:	8b 3b                	mov    (%ebx),%edi