405d96:	89 4d e8             	mov    %ecx,-0x18(%ebp)
405d99:	8b 55 e8             	mov    -0x18(%ebp),%edx
405d9c:	3b 55 e0             	cmp    -0x20(%ebp),%edx
405d9f:	73 6b                	jae    0x405e0c
405da1:	68 ff 01 0f 00       	push   $0xf01ff
405da6:	6b 45 e8 24          	imul   $0x24,-0x18(%ebp),%eax
405daa:	8b 4d f0             	mov    -0x10(%ebp),%ecx
405dad:	8b 14 01             	mov    (%ecx,%eax,1),%edx
405db0:	52                   	push   %edx
405db1:	8b 45 f4             	mov    -0xc(%ebp),%eax
405db4:	8b 08                	mov    (%eax),%ecx
405db6:	51                   	push   %ecx
405db7:	e8 04 c8 ff ff       	call   0x4025c0
405dbc:	8b 90 b8 01 00 00    	mov    0x1b8(%eax),%edx
405dc2:	ff d2                	call   *%edx
405dc4:	89 45 dc             	mov    %eax,-0x24(%ebp)
405dc7:	8b 45 f8             	mov    -0x8(%ebp),%eax
405dca:	8d 0c 85 04 00 00 00 	lea    0x4(,%eax,4),%ecx
405dd1:	51                   	push   %ecx
405dd2:	8b 55 fc             	mov    -0x4(%ebp),%edx
405dd5:	52                   	push   %edx
405dd6:	e8 05 0b 00 00       	call   0x4068e0
405ddb:	83 c4 08             	add    $0x8,%esp
405dde:	89 45 fc             	mov    %eax,-0x4(%ebp)
405de1:	83 7d fc 00          	cmpl   $0x0,-0x4(%ebp)
405de5:	74 23                	je     0x405e0a
405de7:	8b 45 dc             	mov    -0x24(%ebp),%eax
405dea:	50                   	push   %eax
405deb:	68 e0 5e 40 00       	push   $0x405ee0
405df0:	e8 4b e0 00 00       	call   0x413e40
405df5:	83 c4 08             	add    $0x8,%esp
405df8:	8b 4d f8             	mov    -0x8(%ebp),%ecx
405dfb:	8b 55 fc             	mov    -0x4(%ebp),%edx
405dfe:	89 04 8a             	mov    %eax,(%edx,%ecx,4)
405e01:	8b 45 f8             	mov    -0x8(%ebp),%eax
405e04:	83 c0 01             	add    $0x1,%eax
405e07:	89 45 f8             	mov    %eax,-0x8(%ebp)
405e0a:	eb 84                	jmp    0x405d90
405e0c:	8b 4d f0             	mov    -0x10(%ebp),%ecx
405e0f:	51                   	push   %ecx
405e10:	e8 9b 0a 00 00       	call   0x4068b0
405e15:	83 c4 04             	add    $0x4,%esp
405e18:	83 7d fc 00          	cmpl   $0x0,-0x4(%ebp)
405e1c:	74 5e                	je     0x405e7c
405e1e:	83 7d f8 00          	cmpl   $0x0,-0x8(%ebp)
405e22:	74 58                	je     0x405e7c
405e24:	6a ff                	push   $0xffffffff
405e26:	6a 01                	push   $0x1
405e28:	8b 55 fc             	mov    -0x4(%ebp),%edx
405e2b:	52                   	push   %edx
405e2c:	8b 45 f8             	mov    -0x8(%ebp),%eax
405e2f:	50                   	push   %eax
405e30:	e8 8b c7 ff ff       	call   0x4025c0
405e35:	8b 88 50 01 00 00    	mov    0x150(%eax),%ecx
405e3b:	ff d1                	call   *%ecx
405e3d:	c7 45 e4 00 00 00 00 	movl   $0x0,-0x1c(%ebp)
405e44:	eb 09                	jmp    0x405e4f
405e46:	8b 55 e4             	mov    -0x1c(%ebp),%edx
405e49:	83 c2 01             	add    $0x1,%edx
405e4c:	89 55 e4             	mov    %edx,-0x1c(%ebp)
405e4f:	8b 45 e4             	mov    -0x1c(%ebp),%eax
405e52:	3b 45 f8             	cmp    -0x8(%ebp),%eax
405e55:	73 19                	jae    0x405e70
405e57:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
405e5a:	8b 55 fc             	mov    -0x4(%ebp),%edx
405e5d:	8b 04 8a             	mov    (%edx,%ecx,4),%eax
405e60:	50                   	push   %eax
405e61:	e8 5a c7 ff ff       	call   0x4025c0
405e66:	8b 88 f4 00 00 00    	mov    0xf4(%eax),%ecx
405e6c:	ff d1                	call   *%ecx
405e6e:	eb d6                	jmp    0x405e46
405e70:	8b 55 fc             	mov    -0x4(%ebp),%edx
405e73:	52                   	push   %edx
405e74:	e8 37 0a 00 00       	call   0x4068b0
405e79:	83 c4 04             	add    $0x4,%esp
405e7c:	8d 45 c0             	lea    -0x40(%ebp),%eax
405e7f:	50                   	push   %eax
405e80:	6a 01                	push   $0x1
405e82:	8b 4d f4             	mov    -0xc(%ebp),%ecx
405e85:	8b 51 04             	mov    0x4(%ecx),%edx
405e88:	52                   	push   %edx
405e89:	e8 32 c7 ff ff       	call   0x4025c0
405e8e:	8b 80 c0 01 00 00    	mov    0x1c0(%eax),%eax
405e94:	ff d0                	call   *%eax
405e96:	85 c0                	test   %eax,%eax
405e98:	74 13                	je     0x405ead
405e9a:	8d 4d c0             	lea    -0x40(%ebp),%ecx
405e9d:	51                   	push   %ecx
405e9e:	8b 55 f4             	mov    -0xc(%ebp),%edx
405ea1:	8b 42 04             	mov    0x4(%edx),%eax
405ea4:	50                   	push   %eax
405ea5:	e8 56 fd ff ff       	call   0x405c00
405eaa:	83 c4 08             	add    $0x8,%esp
405ead:	8b 4d f4             	mov    -0xc(%ebp),%ecx
405eb0:	8b 51 04             	mov    0x4(%ecx),%edx
405eb3:	52                   	push   %edx
405eb4:	e8 07 c7 ff ff       	call   0x4025c0
405eb9:	8b 80 c4 01 00 00    	mov    0x1c4(%eax),%eax
405ebf:	ff d0                	call   *%eax
405ec1:	8b 4d f4             	mov    -0xc(%ebp),%ecx
405ec4:	51                   	push   %ecx
405ec5:	e8 e6 09 00 00       	call   0x4068b0
405eca:	83 c4 04             	add    $0x4,%esp
405ecd:	33 c0                	xor    %eax,%eax
405ecf:	8b e5                	mov    %ebp,%esp
405ed1:	5d                   	pop    %ebp
405ed2:	c2 04 00             	ret    $0x4
405ed5:	cc                   	int3
405ed6:	cc                   	int3
405ed7:	cc                   	int3
405ed8:	cc                   	int3
405ed9:	cc                   	int3
405eda:	cc                   	int3
405edb:	cc                   	int3
405edc:	cc                   	int3
405edd:	cc                   	int3
405ede:	cc                   	int3
405edf:	cc                   	int3
405ee0:	55                   	push   %ebp
405ee1:	8b ec                	mov    %esp,%ebp
405ee3:	83 ec 20             	sub    $0x20,%esp
405ee6:	83 7d 08 00          	cmpl   $0x0,0x8(%ebp)
405eea:	75 04                	jne    0x405ef0
405eec:	33 c0                	xor    %eax,%eax
405eee:	eb 44                	jmp    0x405f34
405ef0:	8b 45 08             	mov    0x8(%ebp),%eax
405ef3:	89 45 fc             	mov    %eax,-0x4(%ebp)
405ef6:	8d 4d e0             	lea    -0x20(%ebp),%ecx
405ef9:	51                   	push   %ecx
405efa:	6a 01                	push   $0x1
405efc:	8b 55 fc             	mov    -0x4(%ebp),%edx
405eff:	52                   	push   %edx
405f00:	e8 bb c6 ff ff       	call   0x4025c0
405f05:	8b 80 c0 01 00 00    	mov    0x1c0(%eax),%eax
405f0b:	ff d0                	call   *%eax
405f0d:	85 c0                	test   %eax,%eax
405f0f:	74 10                	je     0x405f21
405f11:	8d 4d e0             	lea    -0x20(%ebp),%ecx
405f14:	51                   	push   %ecx
405f15:	8b 55 fc             	mov    -0x4(%ebp),%edx
405f18:	52                   	push   %edx
405f19:	e8 e2 fc ff ff       	call   0x405c00
405f1e:	83 c4 08             	add    $0x8,%esp
405f21:	8b 45 fc             	mov    -0x4(%ebp),%eax
405f24:	50                   	push   %eax
405f25:	e8 96 c6 ff ff       	call   0x4025c0
405f2a:	8b 88 c4 01 00 00    	mov    0x1c4(%eax),%ecx
405f30:	ff d1                	call   *%ecx
405f32:	33 c0                	xor    %eax,%eax
405f34:	8b e5                	mov    %ebp,%esp
405f36:	5d                   	pop    %ebp
405f37:	c2 04 00             	ret    $0x4
405f3a:	cc                   	int3
405f3b:	cc                   	int3
405f3c:	cc                   	int3
405f3d:	cc                   	int3
405f3e:	cc                   	int3
405f3f:	cc                   	int3
405f40:	55                   	push   %ebp
405f41:	8b ec                	mov    %esp,%ebp
405f43:	83 ec 2c             	sub    $0x2c,%esp
405f46:	83 3d ac 73 41 00 00 	cmpl   $0x0,0x4173ac
405f4d:	74 0b                	je     0x405f5a
405f4f:	a1 a8 73 41 00       	mov    0x4173a8,%eax
405f54:	83 78 50 00          	cmpl   $0x0,0x50(%eax)
405f58:	75 07                	jne    0x405f61
405f5a:	33 c0                	xor    %eax,%eax
405f5c:	e9 63 02 00 00       	jmp    0x4061c4
405f61:	68 3f 00 0f 00       	push   $0xf003f
405f66:	6a 00                	push   $0x0
405f68:	6a 00                	push   $0x0
405f6a:	e8 51 c6 ff ff       	call   0x4025c0
405f6f:	8b 88 b0 01 00 00    	mov    0x1b0(%eax),%ecx
405f75:	ff d1                	call   *%ecx
405f77:	89 45 ec             	mov    %eax,-0x14(%ebp)
405f7a:	83 7d ec 00          	cmpl   $0x0,-0x14(%ebp)
405f7e:	0f 84 3e 02 00 00    	je     0x4061c2
405f84:	ba 01 00 00 00       	mov    $0x1,%edx
405f89:	85 d2                	test   %edx,%edx
405f8b:	0f 84 20 02 00 00    	je     0x4061b1
405f91:	c7 45 e8 00 00 00 00 	movl   $0x0,-0x18(%ebp)
405f98:	c7 45 dc 00 00 00 00 	movl   $0x0,-0x24(%ebp)
405f9f:	c7 45 d8 00 00 00 00 	movl   $0x0,-0x28(%ebp)
405fa6:	8d 45 d8             	lea    -0x28(%ebp),%eax
405fa9:	50                   	push   %eax
405faa:	8d 4d dc             	lea    -0x24(%ebp),%ecx
405fad:	51                   	push   %ecx
405fae:	8d 55 e8             	lea    -0x18(%ebp),%edx
405fb1:	52                   	push   %edx
405fb2:	6a 00                	push   $0x0
405fb4:	6a 00                	push   $0x0
405fb6:	6a 01                	push   $0x1
405fb8:	6a 30                	push   $0x30
405fba:	8b 45 ec             	mov    -0x14(%ebp),%eax
405fbd:	50                   	push   %eax
405fbe:	e8 fd c5 ff ff       	call   0x4025c0
405fc3:	8b 88 b4 01 00 00    	mov    0x1b4(%eax),%ecx
405fc9:	ff d1                	call   *%ecx
405fcb:	85 c0                	test   %eax,%eax
405fcd:	0f 85 c7 01 00 00    	jne    0x40619a
405fd3:	e8 e8 c5 ff ff       	call   0x4025c0
405fd8:	8b 90 7c 01 00 00    	mov    0x17c(%eax),%edx
405fde:	ff d2                	call   *%edx
405fe0:	3d ea 00 00 00       	cmp    $0xea,%eax
405fe5:	0f 85 af 01 00 00    	jne    0x40619a
405feb:	8b 45 e8             	mov    -0x18(%ebp),%eax
405fee:	50                   	push   %eax
405fef:	e8 8c 08 00 00       	call   0x406880
405ff4:	83 c4 04             	add    $0x4,%esp
405ff7:	89 45 f0             	mov    %eax,-0x10(%ebp)
405ffa:	83 7d f0 00          	cmpl   $0x0,-0x10(%ebp)
405ffe:	0f 84 96 01 00 00    	je     0x40619a
406004:	8d 4d d8             	lea    -0x28(%ebp),%ecx
406007:	51                   	push   %ecx
406008:	8d 55 dc             	lea    -0x24(%ebp),%edx
40600b:	52                   	push   %edx
40600c:	8d 45 e8             	lea    -0x18(%ebp),%eax
40600f:	50                   	push   %eax
406010:	8b 4d e8             	mov    -0x18(%ebp),%ecx
406013:	51                   	push   %ecx
406014:	8b 55 f0             	mov    -0x10(%ebp),%edx
406017:	52                   	push   %edx
406018:	6a 01                	push   $0x1
40601a:	6a 30                	push   $0x30
40601c:	8b 45 ec             	mov    -0x14(%ebp),%eax
40601f:	50                   	push   %eax
406020:	e8 9b c5 ff ff       	call   0x4025c0
406025:	8b 88 b4 01 00 00    	mov    0x1b4(%eax),%ecx
40602b:	ff d1                	call   *%ecx
40602d:	85 c0                	test   %eax,%eax
40602f:	0f 84 59 01 00 00    	je     0x40618e
406035:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
40603c:	c7 45 f8 00 00 00 00 	movl   $0x0,-0x8(%ebp)
406043:	c7 45 f4 00 00 00 00 	movl   $0x0,-0xc(%ebp)
40604a:	eb 09                	jmp    0x406055
40604c:	8b 55 f4             	mov    -0xc(%ebp),%edx
40604f:	83 c2 01             	add    $0x1,%edx
406052:	89 55 f4             	mov    %edx,-0xc(%ebp)
406055:	8b 45 f4             	mov    -0xc(%ebp),%eax
406058:	3b 45 dc             	cmp    -0x24(%ebp),%eax
40605b:	0f 83 c9 00 00 00    	jae    0x40612a
406061:	6b 4d f4 24          	imul   $0x24,-0xc(%ebp),%ecx
406065:	8b 55 f0             	mov    -0x10(%ebp),%edx
406068:	8b 04 0a             	mov    (%edx,%ecx,1),%eax
40606b:	50                   	push   %eax
40606c:	e8 8f f9 ff ff       	call   0x405a00
406071:	83 c4 04             	add    $0x4,%esp
406074:	85 c0                	test   %eax,%eax
406076:	75 1c                	jne    0x406094
406078:	6b 4d f4 24          	imul   $0x24,-0xc(%ebp),%ecx
40607c:	8b 55 f0             	mov    -0x10(%ebp),%edx
40607f:	8b 44 0a 04          	mov    0x4(%edx,%ecx,1),%eax
406083:	50                   	push   %eax
406084:	e8 77 f9 ff ff       	call   0x405a00
406089:	83 c4 04             	add    $0x4,%esp
40608c:	85 c0                	test   %eax,%eax
40608e:	0f 84 91 00 00 00    	je     0x406125
406094:	68 ff 01 0f 00       	push   $0xf01ff
406099:	6b 4d f4 24          	imul   $0x24,-0xc(%ebp),%ecx
40609d:	8b 55 f0             	mov    -0x10(%ebp),%edx
4060a0:	8b 04 0a             	mov    (%edx,%ecx,1),%eax
4060a3:	50                   	push   %eax
4060a4:	8b 4d ec             	mov    -0x14(%ebp),%ecx
4060a7:	51                   	push   %ecx
4060a8:	e8 13 c5 ff ff       	call   0x4025c0
4060ad:	8b 90 b8 01 00 00    	mov    0x1b8(%eax),%edx
4060b3:	ff d2                	call   *%edx
4060b5:	89 45 d4             	mov    %eax,-0x2c(%ebp)
4060b8:	83 7d d4 00          	cmpl   $0x0,-0x2c(%ebp)
4060bc:	74 67                	je     0x406125
4060be:	6a 08                	push   $0x8
4060c0:	e8 bb 07 00 00       	call   0x406880
4060c5:	83 c4 04             	add    $0x4,%esp
4060c8:	89 45 e4             	mov    %eax,-0x1c(%ebp)
4060cb:	83 7d e4 00          	cmpl   $0x0,-0x1c(%ebp)
4060cf:	74 54                	je     0x406125
4060d1:	8b 45 e4             	mov    -0x1c(%ebp),%eax
4060d4:	8b 4d ec             	mov    -0x14(%ebp),%ecx
4060d7:	89 08                	mov    %ecx,(%eax)
4060d9:	8b 55 e4             	mov    -0x1c(%ebp),%edx
4060dc:	8b 45 d4             	mov    -0x2c(%ebp),%eax
4060df:	89 42 04             	mov    %eax,0x4(%edx)
4060e2:	8b 4d f8             	mov    -0x8(%ebp),%ecx
4060e5:	8d 14 8d 04 00 00 00 	lea    0x4(,%ecx,4),%edx
4060ec:	52                   	push   %edx
4060ed:	8b 45 fc             	mov    -0x4(%ebp),%eax
4060f0:	50                   	push   %eax
4060f1:	e8 ea 07 00 00       	call   0x4068e0
4060f6:	83 c4 08             	add    $0x8,%esp
4060f9:	89 45 fc             	mov    %eax,-0x4(%ebp)
4060fc:	83 7d fc 00          	cmpl   $0x0,-0x4(%ebp)
406100:	74 23                	je     0x406125
406102:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
406105:	51                   	push   %ecx
406106:	68 c0 5c 40 00       	push   $0x405cc0
40610b:	e8 30 dd 00 00       	call   0x413e40
406110:	83 c4 08             	add    $0x8,%esp
406113:	8b 55 f8             	mov    -0x8(%ebp),%edx
406116:	8b 4d fc             	mov    -0x4(%ebp),%ecx
406119:	89 04 91             	mov    %eax,(%ecx,%edx,4)
40611c:	8b 55 f8             	mov    -0x8(%ebp),%edx
40611f:	83 c2 01             	add    $0x1,%edx
406122:	89 55 f8             	mov    %edx,-0x8(%ebp)
406125:	e9 22 ff ff ff       	jmp    0x40604c
40612a:	83 7d fc 00          	cmpl   $0x0,-0x4(%ebp)
40612e:	74 5e                	je     0x40618e
406130:	83 7d f8 00          	cmpl   $0x0,-0x8(%ebp)
406134:	74 58                	je     0x40618e
406136:	6a ff                	push   $0xffffffff
406138:	6a 01                	push   $0x1
40613a:	8b 45 fc             	mov    -0x4(%ebp),%eax
40613d:	50                   	push   %eax
40613e:	8b 4d f8             	mov    -0x8(%ebp),%ecx
406141:	51                   	push   %ecx
406142:	e8 79 c4 ff ff       	call   0x4025c0
406147:	8b 90 50 01 00 00    	mov    0x150(%eax),%edx
40614d:	ff d2                	call   *%edx
40614f:	c7 45 e0 00 00 00 00 	movl   $0x0,-0x20(%ebp)
406156:	eb 09                	jmp    0x406161
406158:	8b 45 e0             	mov    -0x20(%ebp),%eax
40615b:	83 c0 01             	add    $0x1,%eax
40615e:	89 45 e0             	mov    %eax,-0x20(%ebp)
406161:	8b 4d e0             	mov    -0x20(%ebp),%ecx
406164:	3b 4d f8             	cmp    -0x8(%ebp),%ecx
406167:	73 19                	jae    0x406182
406169:	8b 55 e0             	mov    -0x20(%ebp),%edx
40616c:	8b 45 fc             	mov    -0x4(%ebp),%eax
40616f:	8b 0c 90             	mov    (%eax,%edx,4),%ecx
406172:	51                   	push   %ecx
406173:	e8 48 c4 ff ff       	call   0x4025c0
406178:	8b 90 f4 00 00 00    	mov    0xf4(%eax),%edx
40617e:	ff d2                	call   *%edx
406180:	eb d6                	jmp    0x406158
406182:	8b 45 fc             	mov    -0x4(%ebp),%eax
406185:	50                   	push   %eax
406186:	e8 25 07 00 00       	call   0x4068b0
40618b:	83 c4 04             	add    $0x4,%esp
40618e:	8b 4d f0             	mov    -0x10(%ebp),%ecx
406191:	51                   	push   %ecx
406192:	e8 19 07 00 00       	call   0x4068b0
406197:	83 c4 04             	add    $0x4,%esp
40619a:	68 60 ea 00 00       	push   $0xea60
40619f:	e8 1c c4 ff ff       	call   0x4025c0
4061a4:	8b 90 64 01 00 00    	mov    0x164(%eax),%edx
4061aa:	ff d2                	call   *%edx
4061ac:	e9 d3 fd ff ff       	jmp    0x405f84
4061b1:	8b 45 ec             	mov    -0x14(%ebp),%eax
4061b4:	50                   	push   %eax
4061b5:	e8 06 c4 ff ff       	call   0x4025c0
4061ba:	8b 88 c4 01 00 00    	mov    0x1c4(%eax),%ecx