408f2c:	45                   	inc    %ebp
408f2d:	52                   	push   %edx
408f2e:	00 00                	add    %al,(%eax)
408f30:	73 76                	jae    0x408fa8
408f32:	61                   	popa
408f33:	72 74                	jb     0x408fa9
408f35:	62 61 67             	bound  %esp,0x67(%ecx)
408f38:	65 6e                	outsb  %gs:(%esi),(%dx)
408f3a:	65 00 47 65          	add    %al,%gs:0x65(%edi)
408f3e:	6f                   	outsl  %ds:(%esi),(%dx)
408f3f:	70 68                	jo     0x408fa9
408f41:	79 74                	jns    0x408fb7
408f43:	69 63 00 00 00 cc cc 	imul   $0xcccc0000,0x0(%ebx),%esp
408f4a:	cc                   	int3
408f4b:	cc                   	int3
408f4c:	cc                   	int3
408f4d:	cc                   	int3
408f4e:	cc                   	int3
408f4f:	cc                   	int3
408f50:	e9 e9 e9 e9 cc       	jmp    0xcd2a793e
408f55:	cc                   	int3
408f56:	cc                   	int3
408f57:	cc                   	int3
408f58:	cc                   	int3
408f59:	cc                   	int3
408f5a:	cc                   	int3
408f5b:	cc                   	int3
408f5c:	cc                   	int3
408f5d:	cc                   	int3
408f5e:	cc                   	int3
408f5f:	cc                   	int3
408f60:	55                   	push   %ebp
408f61:	8b ec                	mov    %esp,%ebp
408f63:	83 ec 0c             	sub    $0xc,%esp
408f66:	68 b6 12 40 00       	push   $0x4012b6
408f6b:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
408f71:	50                   	push   %eax
408f72:	64 89 25 00 00 00 00 	mov    %esp,%fs:0x0
408f79:	81 ec 6c 01 00 00    	sub    $0x16c,%esp
408f7f:	53                   	push   %ebx
408f80:	56                   	push   %esi
408f81:	57                   	push   %edi
408f82:	89 65 f4             	mov    %esp,-0xc(%ebp)
408f85:	c7 45 f8 b8 11 40 00 	movl   $0x4011b8,-0x8(%ebp)
408f8c:	8b 45 08             	mov    0x8(%ebp),%eax
408f8f:	8b c8                	mov    %eax,%ecx
408f91:	83 e1 01             	and    $0x1,%ecx
408f94:	89 4d fc             	mov    %ecx,-0x4(%ebp)
408f97:	83 e0 fe             	and    $0xfffffffe,%eax
408f9a:	8b 10                	mov    (%eax),%edx
408f9c:	50                   	push   %eax
408f9d:	89 45 08             	mov    %eax,0x8(%ebp)
408fa0:	ff 52 04             	call   *0x4(%edx)
408fa3:	8b 35 3c 10 40 00    	mov    0x40103c,%esi
408fa9:	33 db                	xor    %ebx,%ebx
408fab:	68 78 77 40 00       	push   $0x407778
408fb0:	68 80 77 40 00       	push   $0x407780
408fb5:	89 5d dc             	mov    %ebx,-0x24(%ebp)
408fb8:	89 5d c0             	mov    %ebx,-0x40(%ebp)
408fbb:	89 5d b0             	mov    %ebx,-0x50(%ebp)
408fbe:	89 5d a0             	mov    %ebx,-0x60(%ebp)
408fc1:	89 5d 88             	mov    %ebx,-0x78(%ebp)
408fc4:	89 9d 74 ff ff ff    	mov    %ebx,-0x8c(%ebp)
408fca:	89 9d 64 ff ff ff    	mov    %ebx,-0x9c(%ebp)
408fd0:	89 9d 54 ff ff ff    	mov    %ebx,-0xac(%ebp)
408fd6:	89 9d 44 ff ff ff    	mov    %ebx,-0xbc(%ebp)
408fdc:	89 9d 34 ff ff ff    	mov    %ebx,-0xcc(%ebp)
408fe2:	89 9d 2c ff ff ff    	mov    %ebx,-0xd4(%ebp)
408fe8:	89 9d 28 ff ff ff    	mov    %ebx,-0xd8(%ebp)
408fee:	89 9d 24 ff ff ff    	mov    %ebx,-0xdc(%ebp)
408ff4:	89 9d 14 ff ff ff    	mov    %ebx,-0xec(%ebp)
408ffa:	89 9d 04 ff ff ff    	mov    %ebx,-0xfc(%ebp)
409000:	89 9d f4 fe ff ff    	mov    %ebx,-0x10c(%ebp)
409006:	89 9d e4 fe ff ff    	mov    %ebx,-0x11c(%ebp)
40900c:	89 9d c4 fe ff ff    	mov    %ebx,-0x13c(%ebp)
409012:	88 9d b0 fe ff ff    	mov    %bl,-0x150(%ebp)
409018:	89 9d ac fe ff ff    	mov    %ebx,-0x154(%ebp)
40901e:	89 9d a8 fe ff ff    	mov    %ebx,-0x158(%ebp)
409024:	89 9d a4 fe ff ff    	mov    %ebx,-0x15c(%ebp)
40902a:	89 9d a0 fe ff ff    	mov    %ebx,-0x160(%ebp)
409030:	89 9d 98 fe ff ff    	mov    %ebx,-0x168(%ebp)
409036:	89 9d 9c fe ff ff    	mov    %ebx,-0x164(%ebp)
40903c:	89 9d 90 fe ff ff    	mov    %ebx,-0x170(%ebp)
409042:	89 9d 94 fe ff ff    	mov    %ebx,-0x16c(%ebp)
409048:	ff d6                	call   *%esi
40904a:	8b 3d 84 11 40 00    	mov    0x401184,%edi
409050:	8b d0                	mov    %eax,%edx
409052:	8d 8d 2c ff ff ff    	lea    -0xd4(%ebp),%ecx
409058:	ff d7                	call   *%edi
40905a:	50                   	push   %eax
40905b:	68 88 77 40 00       	push   $0x407788
409060:	ff d6                	call   *%esi
409062:	8b d0                	mov    %eax,%edx
409064:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
40906a:	ff d7                	call   *%edi
40906c:	50                   	push   %eax
40906d:	68 90 77 40 00       	push   $0x407790
409072:	ff d6                	call   *%esi
409074:	8b d0                	mov    %eax,%edx
409076:	8d 8d 24 ff ff ff    	lea    -0xdc(%ebp),%ecx
40907c:	ff d7                	call   *%edi
40907e:	50                   	push   %eax
40907f:	68 9c 77 40 00       	push   $0x40779c
409084:	ff d6                	call   *%esi
409086:	89 85 1c ff ff ff    	mov    %eax,-0xe4(%ebp)
40908c:	8d 85 14 ff ff ff    	lea    -0xec(%ebp),%eax
409092:	50                   	push   %eax
409093:	8d 8d 04 ff ff ff    	lea    -0xfc(%ebp),%ecx
409099:	51                   	push   %ecx
40909a:	c7 85 14 ff ff ff 08 	movl   $0x8,-0xec(%ebp)
4090a1:	00 00 00
4090a4:	ff 15 8c 11 40 00    	call   *0x40118c
4090aa:	8d 95 04 ff ff ff    	lea    -0xfc(%ebp),%edx
4090b0:	52                   	push   %edx
4090b1:	8d 85 e4 fe ff ff    	lea    -0x11c(%ebp),%eax
4090b7:	50                   	push   %eax
4090b8:	c7 85 ec fe ff ff 0c 	movl   $0xc,-0x114(%ebp)
4090bf:	00 00 00
4090c2:	c7 85 e4 fe ff ff 02 	movl   $0x8002,-0x11c(%ebp)
4090c9:	80 00 00
4090cc:	ff 15 60 11 40 00    	call   *0x401160
4090d2:	66 89 85 8c fe ff ff 	mov    %ax,-0x174(%ebp)
4090d9:	8d 8d 24 ff ff ff    	lea    -0xdc(%ebp),%ecx
4090df:	51                   	push   %ecx
4090e0:	8d 95 28 ff ff ff    	lea    -0xd8(%ebp),%edx
4090e6:	52                   	push   %edx
4090e7:	8d 85 2c ff ff ff    	lea    -0xd4(%ebp),%eax
4090ed:	50                   	push   %eax
4090ee:	6a 03                	push   $0x3
4090f0:	ff 15 48 11 40 00    	call   *0x401148
4090f6:	8d 8d 04 ff ff ff    	lea    -0xfc(%ebp),%ecx
4090fc:	51                   	push   %ecx
4090fd:	8d 95 14 ff ff ff    	lea    -0xec(%ebp),%edx
409103:	52                   	push   %edx
409104:	6a 02                	push   $0x2
409106:	ff 15 28 10 40 00    	call   *0x401028
40910c:	83 c4 1c             	add    $0x1c,%esp
40910f:	66 39 9d 8c fe ff ff 	cmp    %bx,-0x174(%ebp)
409116:	74 73                	je     0x40918b
409118:	83 ec 10             	sub    $0x10,%esp
40911b:	8b d4                	mov    %esp,%edx
40911d:	b9 08 00 00 00       	mov    $0x8,%ecx
409122:	89 0a                	mov    %ecx,(%edx)
409124:	89 8d e4 fe ff ff    	mov    %ecx,-0x11c(%ebp)
40912a:	8b 8d e8 fe ff ff    	mov    -0x118(%ebp),%ecx
409130:	89 4a 04             	mov    %ecx,0x4(%edx)
409133:	b8 a8 77 40 00       	mov    $0x4077a8,%eax
409138:	89 42 08             	mov    %eax,0x8(%edx)
40913b:	89 85 ec fe ff ff    	mov    %eax,-0x114(%ebp)
409141:	8b 85 f0 fe ff ff    	mov    -0x110(%ebp),%eax
409147:	89 42 0c             	mov    %eax,0xc(%edx)
40914a:	8b 95 c8 fe ff ff    	mov    -0x138(%ebp),%edx
409150:	83 ec 10             	sub    $0x10,%esp
409153:	8b cc                	mov    %esp,%ecx
409155:	b8 03 00 00 00       	mov    $0x3,%eax
40915a:	89 01                	mov    %eax,(%ecx)
40915c:	89 51 04             	mov    %edx,0x4(%ecx)
40915f:	b8 8b b0 7a 00       	mov    $0x7ab08b,%eax
409164:	89 41 08             	mov    %eax,0x8(%ecx)
409167:	8b 85 d0 fe ff ff    	mov    -0x130(%ebp),%eax
40916d:	6a 02                	push   $0x2
40916f:	89 41 0c             	mov    %eax,0xc(%ecx)
409172:	68 c0 77 40 00       	push   $0x4077c0
409177:	8d 4d dc             	lea    -0x24(%ebp),%ecx
40917a:	51                   	push   %ecx
40917b:	ff 15 c8 10 40 00    	call   *0x4010c8
409181:	50                   	push   %eax
409182:	ff 15 6c 11 40 00    	call   *0x40116c
409188:	83 c4 2c             	add    $0x2c,%esp
40918b:	68 78 77 40 00       	push   $0x407778
409190:	68 80 77 40 00       	push   $0x407780
409195:	ff d6                	call   *%esi
409197:	8b d0                	mov    %eax,%edx
409199:	8d 8d 2c ff ff ff    	lea    -0xd4(%ebp),%ecx
40919f:	ff d7                	call   *%edi
4091a1:	50                   	push   %eax
4091a2:	68 88 77 40 00       	push   $0x407788
4091a7:	ff d6                	call   *%esi
4091a9:	8b d0                	mov    %eax,%edx
4091ab:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
4091b1:	ff d7                	call   *%edi
4091b3:	50                   	push   %eax
4091b4:	68 90 77 40 00       	push   $0x407790
4091b9:	ff d6                	call   *%esi
4091bb:	8b d0                	mov    %eax,%edx
4091bd:	8d 8d 24 ff ff ff    	lea    -0xdc(%ebp),%ecx
4091c3:	ff d7                	call   *%edi
4091c5:	50                   	push   %eax
4091c6:	68 9c 77 40 00       	push   $0x40779c
4091cb:	ff d6                	call   *%esi
4091cd:	8d 95 14 ff ff ff    	lea    -0xec(%ebp),%edx
4091d3:	89 85 1c ff ff ff    	mov    %eax,-0xe4(%ebp)
4091d9:	52                   	push   %edx
4091da:	8d 85 04 ff ff ff    	lea    -0xfc(%ebp),%eax
4091e0:	50                   	push   %eax
4091e1:	c7 85 14 ff ff ff 08 	movl   $0x8,-0xec(%ebp)
4091e8:	00 00 00
4091eb:	ff 15 8c 11 40 00    	call   *0x40118c
4091f1:	8d 8d 04 ff ff ff    	lea    -0xfc(%ebp),%ecx
4091f7:	51                   	push   %ecx
4091f8:	8d 95 e4 fe ff ff    	lea    -0x11c(%ebp),%edx
4091fe:	52                   	push   %edx
4091ff:	c7 85 ec fe ff ff 0c 	movl   $0xc,-0x114(%ebp)
409206:	00 00 00
409209:	c7 85 e4 fe ff ff 02 	movl   $0x8002,-0x11c(%ebp)
409210:	80 00 00
409213:	ff 15 60 11 40 00    	call   *0x401160
409219:	66 89 85 8c fe ff ff 	mov    %ax,-0x174(%ebp)
409220:	8d 85 24 ff ff ff    	lea    -0xdc(%ebp),%eax
409226:	50                   	push   %eax
409227:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
40922d:	51                   	push   %ecx
40922e:	8d 95 2c ff ff ff    	lea    -0xd4(%ebp),%edx
409234:	52                   	push   %edx
409235:	6a 03                	push   $0x3
409237:	ff 15 48 11 40 00    	call   *0x401148
40923d:	8d 85 04 ff ff ff    	lea    -0xfc(%ebp),%eax
409243:	50                   	push   %eax
409244:	8d 8d 14 ff ff ff    	lea    -0xec(%ebp),%ecx
40924a:	51                   	push   %ecx
40924b:	6a 02                	push   $0x2
40924d:	ff 15 28 10 40 00    	call   *0x401028
409253:	83 c4 1c             	add    $0x1c,%esp
409256:	66 39 9d 8c fe ff ff 	cmp    %bx,-0x174(%ebp)
40925d:	74 73                	je     0x4092d2
40925f:	83 ec 10             	sub    $0x10,%esp
409262:	8b d4                	mov    %esp,%edx
409264:	b9 08 00 00 00       	mov    $0x8,%ecx
409269:	89 0a                	mov    %ecx,(%edx)
40926b:	89 8d e4 fe ff ff    	mov    %ecx,-0x11c(%ebp)
409271:	8b 8d e8 fe ff ff    	mov    -0x118(%ebp),%ecx
409277:	89 4a 04             	mov    %ecx,0x4(%edx)
40927a:	b8 00 78 40 00       	mov    $0x407800,%eax
40927f:	89 42 08             	mov    %eax,0x8(%edx)
409282:	89 85 ec fe ff ff    	mov    %eax,-0x114(%ebp)
409288:	8b 85 f0 fe ff ff    	mov    -0x110(%ebp),%eax
40928e:	89 42 0c             	mov    %eax,0xc(%edx)
409291:	8b 95 c8 fe ff ff    	mov    -0x138(%ebp),%edx
409297:	83 ec 10             	sub    $0x10,%esp
40929a:	8b cc                	mov    %esp,%ecx
40929c:	b8 03 00 00 00       	mov    $0x3,%eax
4092a1:	89 01                	mov    %eax,(%ecx)
4092a3:	89 51 04             	mov    %edx,0x4(%ecx)
4092a6:	b8 b3 52 1d 00       	mov    $0x1d52b3,%eax
4092ab:	89 41 08             	mov    %eax,0x8(%ecx)
4092ae:	8b 85 d0 fe ff ff    	mov    -0x130(%ebp),%eax
4092b4:	6a 02                	push   $0x2
4092b6:	89 41 0c             	mov    %eax,0xc(%ecx)
4092b9:	68 18 78 40 00       	push   $0x407818
4092be:	8d 4d a0             	lea    -0x60(%ebp),%ecx
4092c1:	51                   	push   %ecx
4092c2:	ff 15 c8 10 40 00    	call   *0x4010c8
4092c8:	50                   	push   %eax
4092c9:	ff 15 6c 11 40 00    	call   *0x40116c
4092cf:	83 c4 2c             	add    $0x2c,%esp
4092d2:	68 78 77 40 00       	push   $0x407778
4092d7:	68 80 77 40 00       	push   $0x407780
4092dc:	ff d6                	call   *%esi
4092de:	8b d0                	mov    %eax,%edx
4092e0:	8d 8d 2c ff ff ff    	lea    -0xd4(%ebp),%ecx
4092e6:	ff d7                	call   *%edi
4092e8:	50                   	push   %eax
4092e9:	68 88 77 40 00       	push   $0x407788
4092ee:	ff d6                	call   *%esi
4092f0:	8b d0                	mov    %eax,%edx
4092f2:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
4092f8:	ff d7                	call   *%edi
4092fa:	50                   	push   %eax
4092fb:	68 90 77 40 00       	push   $0x407790
409300:	ff d6                	call   *%esi
409302:	8b d0                	mov    %eax,%edx
409304:	8d 8d 24 ff ff ff    	lea    -0xdc(%ebp),%ecx
40930a:	ff d7                	call   *%edi
40930c:	50                   	push   %eax
40930d:	68 9c 77 40 00       	push   $0x40779c
409312:	ff d6                	call   *%esi
409314:	8d 95 14 ff ff ff    	lea    -0xec(%ebp),%edx
40931a:	89 85 1c ff ff ff    	mov    %eax,-0xe4(%ebp)
409320:	52                   	push   %edx
409321:	8d 85 04 ff ff ff    	lea    -0xfc(%ebp),%eax
409327:	50                   	push   %eax
409328:	c7 85 14 ff ff ff 08 	movl   $0x8,-0xec(%ebp)
40932f:	00 00 00
409332:	ff 15 8c 11 40 00    	call   *0x40118c
409338:	8d 8d 04 ff ff ff    	lea    -0xfc(%ebp),%ecx
40933e:	51                   	push   %ecx
40933f:	8d 95 e4 fe ff ff    	lea    -0x11c(%ebp),%edx
409345:	52                   	push   %edx
409346:	c7 85 ec fe ff ff 0c 	movl   $0xc,-0x114(%ebp)
40934d:	00 00 00
409350:	c7 85 e4 fe ff ff 02 	movl   $0x8002,-0x11c(%ebp)
409357:	80 00 00
40935a:	ff 15 60 11 40 00    	call   *0x401160
409360:	66 89 85 8c fe ff ff 	mov    %ax,-0x174(%ebp)
409367:	8d 85 24 ff ff ff    	lea    -0xdc(%ebp),%eax
40936d:	50                   	push   %eax
40936e:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
409374:	51                   	push   %ecx
409375:	8d 95 2c ff ff ff    	lea    -0xd4(%ebp),%edx
40937b:	52                   	push   %edx
40937c:	6a 03                	push   $0x3
40937e:	ff 15 48 11 40 00    	call   *0x401148
409384:	8d 85 04 ff ff ff    	lea    -0xfc(%ebp),%eax
40938a:	50                   	push   %eax
40938b:	8d 8d 14 ff ff ff    	lea    -0xec(%ebp),%ecx
409391:	51                   	push   %ecx
409392:	6a 02                	push   $0x2
409394:	ff 15 28 10 40 00    	call   *0x401028
40939a:	83 c4 1c             	add    $0x1c,%esp
40939d:	66 39 9d 8c fe ff ff 	cmp    %bx,-0x174(%ebp)
4093a4:	74 73                	je     0x409419
4093a6:	83 ec 10             	sub    $0x10,%esp
4093a9:	8b d4                	mov    %esp,%edx
4093ab:	b9 08 00 00 00       	mov    $0x8,%ecx
4093b0:	89 0a                	mov    %ecx,(%edx)
4093b2:	89 8d e4 fe ff ff    	mov    %ecx,-0x11c(%ebp)
4093b8:	8b 8d e8 fe ff ff    	mov    -0x118(%ebp),%ecx
4093be:	89 4a 04             	mov    %ecx,0x4(%edx)
4093c1:	b8 3c 78 40 00       	mov    $0x40783c,%eax
4093c6:	89 42 08             	mov    %eax,0x8(%edx)
4093c9:	89 85 ec fe ff ff    	mov    %eax,-0x114(%ebp)
4093cf:	8b 85 f0 fe ff ff    	mov    -0x110(%ebp),%eax
4093d5:	89 42 0c             	mov    %eax,0xc(%edx)
4093d8:	8b 95 c8 fe ff ff    	mov    -0x138(%ebp),%edx
4093de:	83 ec 10             	sub    $0x10,%esp
4093e1:	8b cc                	mov    %esp,%ecx
4093e3:	b8 03 00 00 00       	mov    $0x3,%eax
4093e8:	89 01                	mov    %eax,(%ecx)
4093ea:	89 51 04             	mov    %edx,0x4(%ecx)
4093ed:	b8 14 3a 6e 00       	mov    $0x6e3a14,%eax
4093f2:	89 41 08             	mov    %eax,0x8(%ecx)
4093f5:	8b 85 d0 fe ff ff    	mov    -0x130(%ebp),%eax
4093fb:	6a 02                	push   $0x2
4093fd:	89 41 0c             	mov    %eax,0xc(%ecx)
409400:	68 4c 78 40 00       	push   $0x40784c
409405:	8d 4d c0             	lea    -0x40(%ebp),%ecx
409408:	51                   	push   %ecx
409409:	ff 15 c8 10 40 00    	call   *0x4010c8
40940f:	50                   	push   %eax
409410:	ff 15 6c 11 40 00    	call   *0x40116c
409416:	83 c4 2c             	add    $0x2c,%esp
409419:	68 78 77 40 00       	push   $0x407778
40941e:	68 80 77 40 00       	push   $0x407780
409423:	ff d6                	call   *%esi
409425:	8b d0                	mov    %eax,%edx
409427:	8d 8d 2c ff ff ff    	lea    -0xd4(%ebp),%ecx
40942d:	ff d7                	call   *%edi
40942f:	50                   	push   %eax
409430:	68 88 77 40 00       	push   $0x407788
409435:	ff d6                	call   *%esi