404c6c:	8b 65 e8             	mov    -0x18(%ebp),%esp
404c6f:	be 0e 00 07 80       	mov    $0x8007000e,%esi
404c74:	89 75 e4             	mov    %esi,-0x1c(%ebp)
404c77:	c7 45 fc fe ff ff ff 	movl   $0xfffffffe,-0x4(%ebp)
404c7e:	8b c6                	mov    %esi,%eax
404c80:	8b 4d f0             	mov    -0x10(%ebp),%ecx
404c83:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
404c8a:	59                   	pop    %ecx
404c8b:	5f                   	pop    %edi
404c8c:	5e                   	pop    %esi
404c8d:	5b                   	pop    %ebx
404c8e:	c9                   	leave
404c8f:	c3                   	ret
404c90:	ff 15 68 61 41 00    	call   *0x416168
404c96:	85 c0                	test   %eax,%eax
404c98:	7e 08                	jle    0x404ca2
404c9a:	0f b7 c0             	movzwl %ax,%eax
404c9d:	0d 00 00 07 80       	or     $0x80070000,%eax
404ca2:	c3                   	ret
404ca3:	85 c9                	test   %ecx,%ecx
404ca5:	7e 09                	jle    0x404cb0
404ca7:	0f b7 c9             	movzwl %cx,%ecx
404caa:	81 c9 00 00 07 80    	or     $0x80070000,%ecx
404cb0:	8b c1                	mov    %ecx,%eax
404cb2:	c3                   	ret
404cb3:	cc                   	int3
404cb4:	cc                   	int3
404cb5:	cc                   	int3
404cb6:	cc                   	int3
404cb7:	cc                   	int3
404cb8:	cc                   	int3
404cb9:	cc                   	int3
404cba:	cc                   	int3
404cbb:	cc                   	int3
404cbc:	cc                   	int3
404cbd:	cc                   	int3
404cbe:	cc                   	int3
404cbf:	cc                   	int3
404cc0:	ff 31                	push   (%ecx)
404cc2:	ff 15 b8 61 41 00    	call   *0x4161b8
404cc8:	c3                   	ret
404cc9:	8b ff                	mov    %edi,%edi
404ccb:	56                   	push   %esi
404ccc:	8b 31                	mov    (%ecx),%esi
404cce:	57                   	push   %edi
404ccf:	bf ff ff ff 7f       	mov    $0x7fffffff,%edi
404cd4:	3b f7                	cmp    %edi,%esi
404cd6:	74 1a                	je     0x404cf2
404cd8:	8d 56 01             	lea    0x1(%esi),%edx
404cdb:	8b c6                	mov    %esi,%eax
404cdd:	f0 0f b1 11          	lock cmpxchg %edx,(%ecx)
404ce1:	3b c6                	cmp    %esi,%eax
404ce3:	74 06                	je     0x404ceb
404ce5:	8b 31                	mov    (%ecx),%esi
404ce7:	3b f7                	cmp    %edi,%esi
404ce9:	75 ed                	jne    0x404cd8
404ceb:	8d 46 01             	lea    0x1(%esi),%eax
404cee:	3b f7                	cmp    %edi,%esi
404cf0:	75 02                	jne    0x404cf4
404cf2:	8b c7                	mov    %edi,%eax
404cf4:	5f                   	pop    %edi
404cf5:	5e                   	pop    %esi
404cf6:	c3                   	ret
404cf7:	33 c0                	xor    %eax,%eax
404cf9:	39 01                	cmp    %eax,(%ecx)
404cfb:	75 18                	jne    0x404d15
404cfd:	39 41 04             	cmp    %eax,0x4(%ecx)
404d00:	75 13                	jne    0x404d15
404d02:	81 79 08 c0 00 00 00 	cmpl   $0xc0,0x8(%ecx)
404d09:	75 0a                	jne    0x404d15
404d0b:	81 79 0c 00 00 00 46 	cmpl   $0x46000000,0xc(%ecx)
404d12:	75 01                	jne    0x404d15
404d14:	40                   	inc    %eax
404d15:	c3                   	ret
404d16:	8b ff                	mov    %edi,%edi
404d18:	56                   	push   %esi
404d19:	8b f1                	mov    %ecx,%esi
404d1b:	83 3e 00             	cmpl   $0x0,(%esi)
404d1e:	74 0b                	je     0x404d2b
404d20:	ff 36                	push   (%esi)
404d22:	ff 15 18 60 41 00    	call   *0x416018
404d28:	83 26 00             	andl   $0x0,(%esi)
404d2b:	5e                   	pop    %esi
404d2c:	c3                   	ret
404d2d:	8b ff                	mov    %edi,%edi
404d2f:	55                   	push   %ebp
404d30:	8b ec                	mov    %esp,%ebp
404d32:	53                   	push   %ebx
404d33:	56                   	push   %esi
404d34:	8b f1                	mov    %ecx,%esi
404d36:	33 db                	xor    %ebx,%ebx
404d38:	57                   	push   %edi
404d39:	39 5e 04             	cmp    %ebx,0x4(%esi)
404d3c:	75 45                	jne    0x404d83
404d3e:	39 5e 08             	cmp    %ebx,0x8(%esi)
404d41:	75 40                	jne    0x404d83
404d43:	68 a0 27 40 00       	push   $0x4027a0
404d48:	ff 15 cc 60 41 00    	call   *0x4160cc
404d4e:	85 c0                	test   %eax,%eax
404d50:	74 11                	je     0x404d63
404d52:	68 f4 27 40 00       	push   $0x4027f4
404d57:	50                   	push   %eax
404d58:	ff 15 70 61 41 00    	call   *0x416170
404d5e:	89 46 04             	mov    %eax,0x4(%esi)
404d61:	eb 20                	jmp    0x404d83
404d63:	53                   	push   %ebx
404d64:	53                   	push   %ebx
404d65:	68 04 28 40 00       	push   $0x402804
404d6a:	ff 15 d8 60 41 00    	call   *0x4160d8
404d70:	85 c0                	test   %eax,%eax
404d72:	74 0f                	je     0x404d83
404d74:	68 20 28 40 00       	push   $0x402820
404d79:	50                   	push   %eax
404d7a:	ff 15 70 61 41 00    	call   *0x416170
404d80:	89 46 08             	mov    %eax,0x8(%esi)
404d83:	8b 7e 04             	mov    0x4(%esi),%edi
404d86:	85 ff                	test   %edi,%edi
404d88:	74 13                	je     0x404d9d
404d8a:	53                   	push   %ebx
404d8b:	53                   	push   %ebx
404d8c:	ff 75 08             	push   0x8(%ebp)
404d8f:	8b cf                	mov    %edi,%ecx
404d91:	ff 36                	push   (%esi)
404d93:	ff 15 28 63 41 00    	call   *0x416328
404d99:	ff d7                	call   *%edi
404d9b:	eb 1e                	jmp    0x404dbb
404d9d:	8b 7e 08             	mov    0x8(%esi),%edi
404da0:	85 ff                	test   %edi,%edi
404da2:	74 11                	je     0x404db5
404da4:	ff 75 08             	push   0x8(%ebp)
404da7:	8b cf                	mov    %edi,%ecx
404da9:	ff 36                	push   (%esi)
404dab:	ff 15 28 63 41 00    	call   *0x416328
404db1:	ff d7                	call   *%edi
404db3:	eb 06                	jmp    0x404dbb
404db5:	ff 15 68 61 41 00    	call   *0x416168
404dbb:	5f                   	pop    %edi
404dbc:	5e                   	pop    %esi
404dbd:	5b                   	pop    %ebx
404dbe:	5d                   	pop    %ebp
404dbf:	c2 04 00             	ret    $0x4
404dc2:	8b ff                	mov    %edi,%edi
404dc4:	55                   	push   %ebp
404dc5:	8b ec                	mov    %esp,%ebp
404dc7:	51                   	push   %ecx
404dc8:	51                   	push   %ecx
404dc9:	8b 55 0c             	mov    0xc(%ebp),%edx
404dcc:	53                   	push   %ebx
404dcd:	8b d9                	mov    %ecx,%ebx
404dcf:	56                   	push   %esi
404dd0:	57                   	push   %edi
404dd1:	85 d2                	test   %edx,%edx
404dd3:	74 47                	je     0x404e1c
404dd5:	33 c0                	xor    %eax,%eax
404dd7:	8b fa                	mov    %edx,%edi
404dd9:	89 45 fc             	mov    %eax,-0x4(%ebp)
404ddc:	8b f0                	mov    %eax,%esi
404dde:	8b cf                	mov    %edi,%ecx
404de0:	8d 41 02             	lea    0x2(%ecx),%eax
404de3:	89 45 f8             	mov    %eax,-0x8(%ebp)
404de6:	66 8b 01             	mov    (%ecx),%ax
404de9:	83 c1 02             	add    $0x2,%ecx
404dec:	66 3b 45 fc          	cmp    -0x4(%ebp),%ax
404df0:	75 f4                	jne    0x404de6
404df2:	2b 4d f8             	sub    -0x8(%ebp),%ecx
404df5:	d1 f9                	sar    $1,%ecx
404df7:	41                   	inc    %ecx
404df8:	8d 3c 4f             	lea    (%edi,%ecx,2),%edi
404dfb:	8d 34 4e             	lea    (%esi,%ecx,2),%esi
404dfe:	83 f9 01             	cmp    $0x1,%ecx
404e01:	75 db                	jne    0x404dde
404e03:	56                   	push   %esi
404e04:	52                   	push   %edx
404e05:	6a 07                	push   $0x7
404e07:	33 c0                	xor    %eax,%eax
404e09:	50                   	push   %eax
404e0a:	ff 75 08             	push   0x8(%ebp)
404e0d:	ff 33                	push   (%ebx)
404e0f:	ff 15 08 60 41 00    	call   *0x416008
404e15:	5f                   	pop    %edi
404e16:	5e                   	pop    %esi
404e17:	5b                   	pop    %ebx
404e18:	c9                   	leave
404e19:	c2 08 00             	ret    $0x8
404e1c:	b9 05 40 00 80       	mov    $0x80004005,%ecx
404e21:	e8 c9 fd ff ff       	call   0x404bef
404e26:	cc                   	int3
404e27:	8b ff                	mov    %edi,%edi
404e29:	55                   	push   %ebp
404e2a:	8b ec                	mov    %esp,%ebp
404e2c:	83 e4 f8             	and    $0xfffffff8,%esp
404e2f:	81 ec 24 02 00 00    	sub    $0x224,%esp
404e35:	a1 f4 51 41 00       	mov    0x4151f4,%eax
404e3a:	33 c4                	xor    %esp,%eax
404e3c:	89 84 24 20 02 00 00 	mov    %eax,0x220(%esp)
404e43:	53                   	push   %ebx
404e44:	8b 5d 08             	mov    0x8(%ebp),%ebx
404e47:	8d 44 24 14          	lea    0x14(%esp),%eax
404e4b:	56                   	push   %esi
404e4c:	57                   	push   %edi
404e4d:	50                   	push   %eax
404e4e:	8b f9                	mov    %ecx,%edi
404e50:	33 c9                	xor    %ecx,%ecx
404e52:	68 1f 00 02 00       	push   $0x2001f
404e57:	51                   	push   %ecx
404e58:	53                   	push   %ebx
404e59:	ff 37                	push   (%edi)
404e5b:	89 4c 24 20          	mov    %ecx,0x20(%esp)
404e5f:	89 4c 24 24          	mov    %ecx,0x24(%esp)
404e63:	89 4c 24 28          	mov    %ecx,0x28(%esp)
404e67:	89 4c 24 30          	mov    %ecx,0x30(%esp)
404e6b:	ff 15 04 60 41 00    	call   *0x416004
404e71:	8b f0                	mov    %eax,%esi
404e73:	85 f6                	test   %esi,%esi
404e75:	0f 85 90 00 00 00    	jne    0x404f0b
404e7b:	39 74 24 0c          	cmp    %esi,0xc(%esp)
404e7f:	74 0c                	je     0x404e8d
404e81:	ff 74 24 0c          	push   0xc(%esp)
404e85:	ff 15 18 60 41 00    	call   *0x416018
404e8b:	8b f0                	mov    %eax,%esi
404e8d:	8b 44 24 1c          	mov    0x1c(%esp),%eax
404e91:	89 44 24 0c          	mov    %eax,0xc(%esp)
404e95:	85 f6                	test   %esi,%esi
404e97:	75 72                	jne    0x404f0b
404e99:	8d 4c 24 20          	lea    0x20(%esp),%ecx
404e9d:	51                   	push   %ecx
404e9e:	56                   	push   %esi
404e9f:	56                   	push   %esi
404ea0:	56                   	push   %esi
404ea1:	8d 4c 24 28          	lea    0x28(%esp),%ecx
404ea5:	51                   	push   %ecx
404ea6:	8d 4c 24 3c          	lea    0x3c(%esp),%ecx
404eaa:	51                   	push   %ecx
404eab:	56                   	push   %esi
404eac:	50                   	push   %eax
404ead:	eb 2b                	jmp    0x404eda
404eaf:	8d 44 24 28          	lea    0x28(%esp),%eax
404eb3:	50                   	push   %eax
404eb4:	8d 4c 24 10          	lea    0x10(%esp),%ecx
404eb8:	e8 6a ff ff ff       	call   0x404e27
404ebd:	8b f0                	mov    %eax,%esi
404ebf:	85 f6                	test   %esi,%esi
404ec1:	75 48                	jne    0x404f0b
404ec3:	8d 44 24 20          	lea    0x20(%esp),%eax
404ec7:	50                   	push   %eax
404ec8:	56                   	push   %esi
404ec9:	56                   	push   %esi
404eca:	56                   	push   %esi
404ecb:	8d 44 24 28          	lea    0x28(%esp),%eax
404ecf:	50                   	push   %eax
404ed0:	8d 44 24 3c          	lea    0x3c(%esp),%eax
404ed4:	50                   	push   %eax
404ed5:	56                   	push   %esi
404ed6:	ff 74 24 28          	push   0x28(%esp)
404eda:	c7 44 24 38 00 01 00 	movl   $0x100,0x38(%esp)
404ee1:	00
404ee2:	ff 15 0c 60 41 00    	call   *0x41600c
404ee8:	85 c0                	test   %eax,%eax
404eea:	74 c3                	je     0x404eaf
404eec:	83 7c 24 0c 00       	cmpl   $0x0,0xc(%esp)
404ef1:	74 0e                	je     0x404f01
404ef3:	ff 74 24 0c          	push   0xc(%esp)
404ef7:	ff 15 18 60 41 00    	call   *0x416018
404efd:	89 74 24 0c          	mov    %esi,0xc(%esp)
404f01:	53                   	push   %ebx
404f02:	8b cf                	mov    %edi,%ecx
404f04:	e8 24 fe ff ff       	call   0x404d2d
404f09:	8b f0                	mov    %eax,%esi
404f0b:	83 7c 24 0c 00       	cmpl   $0x0,0xc(%esp)
404f10:	74 0a                	je     0x404f1c
404f12:	ff 74 24 0c          	push   0xc(%esp)
404f16:	ff 15 18 60 41 00    	call   *0x416018
404f1c:	8b 8c 24 2c 02 00 00 	mov    0x22c(%esp),%ecx
404f23:	8b c6                	mov    %esi,%eax
404f25:	5f                   	pop    %edi
404f26:	5e                   	pop    %esi
404f27:	5b                   	pop    %ebx
404f28:	33 cc                	xor    %esp,%ecx
404f2a:	e8 c1 d0 00 00       	call   0x411ff0
404f2f:	8b e5                	mov    %ebp,%esp
404f31:	5d                   	pop    %ebp
404f32:	c2 04 00             	ret    $0x4
404f35:	6a 24                	push   $0x24
404f37:	b8 07 2b 41 00       	mov    $0x412b07,%eax
404f3c:	e8 86 d6 00 00       	call   0x4125c7
404f41:	89 4d d0             	mov    %ecx,-0x30(%ebp)
404f44:	8b 45 08             	mov    0x8(%ebp),%eax
404f47:	85 c0                	test   %eax,%eax
404f49:	0f 84 42 01 00 00    	je     0x405091
404f4f:	83 7d 0c 00          	cmpl   $0x0,0xc(%ebp)
404f53:	0f 84 38 01 00 00    	je     0x405091
404f59:	8b c8                	mov    %eax,%ecx
404f5b:	33 f6                	xor    %esi,%esi
404f5d:	8b de                	mov    %esi,%ebx
404f5f:	6a 02                	push   $0x2
404f61:	89 5d e0             	mov    %ebx,-0x20(%ebp)
404f64:	8d 51 02             	lea    0x2(%ecx),%edx
404f67:	5f                   	pop    %edi
404f68:	66 8b 01             	mov    (%ecx),%ax
404f6b:	03 cf                	add    %edi,%ecx
404f6d:	66 3b c6             	cmp    %si,%ax
404f70:	75 f6                	jne    0x404f68
404f72:	2b ca                	sub    %edx,%ecx
404f74:	89 75 ec             	mov    %esi,-0x14(%ebp)
404f77:	d1 f9                	sar    $1,%ecx
404f79:	89 75 fc             	mov    %esi,-0x4(%ebp)
404f7c:	8d 04 4d 02 00 00 00 	lea    0x2(,%ecx,2),%eax
404f83:	33 c9                	xor    %ecx,%ecx
404f85:	89 45 d8             	mov    %eax,-0x28(%ebp)
404f88:	f7 e7                	mul    %edi
404f8a:	0f 90 c1             	seto   %cl
404f8d:	f7 d9                	neg    %ecx
404f8f:	0b c8                	or     %eax,%ecx
404f91:	51                   	push   %ecx
404f92:	e8 3a c5 00 00       	call   0x4114d1
404f97:	59                   	pop    %ecx
404f98:	89 45 ec             	mov    %eax,-0x14(%ebp)
404f9b:	eb 10                	jmp    0x404fad
404f9d:	b8 a3 4f 40 00       	mov    $0x404fa3,%eax
404fa2:	c3                   	ret
404fa3:	8b 45 ec             	mov    -0x14(%ebp),%eax
404fa6:	33 f6                	xor    %esi,%esi
404fa8:	6a 02                	push   $0x2
404faa:	5f                   	pop    %edi
404fab:	8b de                	mov    %esi,%ebx
404fad:	89 45 e4             	mov    %eax,-0x1c(%ebp)
404fb0:	8b 4d 0c             	mov    0xc(%ebp),%ecx
404fb3:	89 7d fc             	mov    %edi,-0x4(%ebp)
404fb6:	8b f8                	mov    %eax,%edi
404fb8:	89 7d dc             	mov    %edi,-0x24(%ebp)
404fbb:	e8 f5 fb ff ff       	call   0x404bb5
404fc0:	33 c9                	xor    %ecx,%ecx
404fc2:	89 75 e8             	mov    %esi,-0x18(%ebp)
404fc5:	6a 02                	push   $0x2
404fc7:	5a                   	pop    %edx
404fc8:	8d 04 45 02 00 00 00 	lea    0x2(,%eax,2),%eax
404fcf:	c6 45 fc 03          	movb   $0x3,-0x4(%ebp)
404fd3:	89 45 d4             	mov    %eax,-0x2c(%ebp)
404fd6:	f7 e2                	mul    %edx
404fd8:	0f 90 c1             	seto   %cl
404fdb:	f7 d9                	neg    %ecx
404fdd:	0b c8                	or     %eax,%ecx
404fdf:	51                   	push   %ecx
404fe0:	e8 ec c4 00 00       	call   0x4114d1
404fe5:	8b f0                	mov    %eax,%esi
404fe7:	c7 45 fc 02 00 00 00 	movl   $0x2,-0x4(%ebp)
404fee:	59                   	pop    %ecx
404fef:	89 75 e8             	mov    %esi,-0x18(%ebp)
404ff2:	8b c7                	mov    %edi,%eax
404ff4:	eb 19                	jmp    0x40500f