4086fa:	8d 55 88             	lea    -0x78(%ebp),%edx
4086fd:	8d 4d c8             	lea    -0x38(%ebp),%ecx
408700:	c7 45 90 48 64 40 00 	movl   $0x406448,-0x70(%ebp)
408707:	c7 45 88 08 00 00 00 	movl   $0x8,-0x78(%ebp)
40870e:	ff 15 98 11 40 00    	call   *0x401198
408714:	8d 4d c8             	lea    -0x38(%ebp),%ecx
408717:	51                   	push   %ecx
408718:	8d 55 b8             	lea    -0x48(%ebp),%edx
40871b:	52                   	push   %edx
40871c:	ff 15 68 10 40 00    	call   *0x401068
408722:	8d 45 b8             	lea    -0x48(%ebp),%eax
408725:	50                   	push   %eax
408726:	8d 4d c8             	lea    -0x38(%ebp),%ecx
408729:	51                   	push   %ecx
40872a:	6a 02                	push   $0x2
40872c:	ff d7                	call   *%edi
40872e:	83 c4 0c             	add    $0xc,%esp
408731:	9b                   	fwait
408732:	68 7f 87 40 00       	push   $0x40877f
408737:	eb 30                	jmp    0x408769
408739:	8d 55 d8             	lea    -0x28(%ebp),%edx
40873c:	52                   	push   %edx
40873d:	8d 45 dc             	lea    -0x24(%ebp),%eax
408740:	50                   	push   %eax
408741:	8d 4d e0             	lea    -0x20(%ebp),%ecx
408744:	51                   	push   %ecx
408745:	6a 03                	push   $0x3
408747:	ff 15 78 11 40 00    	call   *0x401178
40874d:	8d 55 98             	lea    -0x68(%ebp),%edx
408750:	52                   	push   %edx
408751:	8d 45 a8             	lea    -0x58(%ebp),%eax
408754:	50                   	push   %eax
408755:	8d 4d b8             	lea    -0x48(%ebp),%ecx
408758:	51                   	push   %ecx
408759:	8d 55 c8             	lea    -0x38(%ebp),%edx
40875c:	52                   	push   %edx
40875d:	6a 04                	push   $0x4
40875f:	ff 15 28 10 40 00    	call   *0x401028
408765:	83 c4 24             	add    $0x24,%esp
408768:	c3                   	ret
408769:	8b 35 cc 11 40 00    	mov    0x4011cc,%esi
40876f:	8d 4d ec             	lea    -0x14(%ebp),%ecx
408772:	ff d6                	call   *%esi
408774:	8d 4d e8             	lea    -0x18(%ebp),%ecx
408777:	ff d6                	call   *%esi
408779:	8d 4d e4             	lea    -0x1c(%ebp),%ecx
40877c:	ff d6                	call   *%esi
40877e:	c3                   	ret
40877f:	8b 4d f0             	mov    -0x10(%ebp),%ecx
408782:	5f                   	pop    %edi
408783:	5e                   	pop    %esi
408784:	33 c0                	xor    %eax,%eax
408786:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
40878d:	5b                   	pop    %ebx
40878e:	8b e5                	mov    %ebp,%esp
408790:	5d                   	pop    %ebp
408791:	c2 0c 00             	ret    $0xc
408794:	90                   	nop
408795:	90                   	nop
408796:	90                   	nop
408797:	90                   	nop
408798:	90                   	nop
408799:	90                   	nop
40879a:	90                   	nop
40879b:	90                   	nop
40879c:	90                   	nop
40879d:	90                   	nop
40879e:	90                   	nop
40879f:	90                   	nop
4087a0:	55                   	push   %ebp
4087a1:	8b ec                	mov    %esp,%ebp
4087a3:	83 ec 08             	sub    $0x8,%esp
4087a6:	68 26 13 40 00       	push   $0x401326
4087ab:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
4087b1:	50                   	push   %eax
4087b2:	64 89 25 00 00 00 00 	mov    %esp,%fs:0x0
4087b9:	81 ec 28 01 00 00    	sub    $0x128,%esp
4087bf:	53                   	push   %ebx
4087c0:	56                   	push   %esi
4087c1:	57                   	push   %edi
4087c2:	89 65 f8             	mov    %esp,-0x8(%ebp)
4087c5:	c7 45 fc 78 12 40 00 	movl   $0x401278,-0x4(%ebp)
4087cc:	33 ff                	xor    %edi,%edi
4087ce:	8d 45 b4             	lea    -0x4c(%ebp),%eax
4087d1:	50                   	push   %eax
4087d2:	89 7d e0             	mov    %edi,-0x20(%ebp)
4087d5:	89 7d d8             	mov    %edi,-0x28(%ebp)
4087d8:	89 7d dc             	mov    %edi,-0x24(%ebp)
4087db:	89 7d d4             	mov    %edi,-0x2c(%ebp)
4087de:	89 7d cc             	mov    %edi,-0x34(%ebp)
4087e1:	89 7d c8             	mov    %edi,-0x38(%ebp)
4087e4:	89 7d c4             	mov    %edi,-0x3c(%ebp)
4087e7:	89 7d a4             	mov    %edi,-0x5c(%ebp)
4087ea:	89 7d 94             	mov    %edi,-0x6c(%ebp)
4087ed:	89 7d 84             	mov    %edi,-0x7c(%ebp)
4087f0:	89 bd 74 ff ff ff    	mov    %edi,-0x8c(%ebp)
4087f6:	89 bd 64 ff ff ff    	mov    %edi,-0x9c(%ebp)
4087fc:	89 bd 54 ff ff ff    	mov    %edi,-0xac(%ebp)
408802:	89 bd 44 ff ff ff    	mov    %edi,-0xbc(%ebp)
408808:	89 bd 34 ff ff ff    	mov    %edi,-0xcc(%ebp)
40880e:	89 bd 24 ff ff ff    	mov    %edi,-0xdc(%ebp)
408814:	89 bd 14 ff ff ff    	mov    %edi,-0xec(%ebp)
40881a:	89 bd 04 ff ff ff    	mov    %edi,-0xfc(%ebp)
408820:	89 bd e0 fe ff ff    	mov    %edi,-0x120(%ebp)
408826:	c7 45 bc 4b 00 00 00 	movl   $0x4b,-0x44(%ebp)
40882d:	c7 45 b4 02 00 00 00 	movl   $0x2,-0x4c(%ebp)
408834:	ff 15 60 11 40 00    	call   *0x401160
40883a:	8b 35 b0 11 40 00    	mov    0x4011b0,%esi
408840:	8b d0                	mov    %eax,%edx
408842:	8d 4d cc             	lea    -0x34(%ebp),%ecx
408845:	ff d6                	call   *%esi
408847:	50                   	push   %eax
408848:	68 5c 60 40 00       	push   $0x40605c
40884d:	68 64 60 40 00       	push   $0x406064
408852:	ff 15 4c 10 40 00    	call   *0x40104c
408858:	8b d0                	mov    %eax,%edx
40885a:	8d 4d c8             	lea    -0x38(%ebp),%ecx
40885d:	ff d6                	call   *%esi
40885f:	50                   	push   %eax
408860:	ff 15 d4 10 40 00    	call   *0x4010d4
408866:	8b f0                	mov    %eax,%esi
408868:	f7 de                	neg    %esi
40886a:	8d 4d c8             	lea    -0x38(%ebp),%ecx
40886d:	51                   	push   %ecx
40886e:	1b f6                	sbb    %esi,%esi
408870:	8d 55 cc             	lea    -0x34(%ebp),%edx
408873:	52                   	push   %edx
408874:	f7 de                	neg    %esi
408876:	6a 02                	push   $0x2
408878:	f7 de                	neg    %esi
40887a:	ff 15 78 11 40 00    	call   *0x401178
408880:	83 c4 0c             	add    $0xc,%esp
408883:	8d 4d b4             	lea    -0x4c(%ebp),%ecx
408886:	ff 15 1c 10 40 00    	call   *0x40101c
40888c:	66 3b f7             	cmp    %di,%si
40888f:	0f 84 31 01 00 00    	je     0x4089c6
408895:	39 3d 38 b3 40 00    	cmp    %edi,0x40b338
40889b:	75 10                	jne    0x4088ad
40889d:	68 38 b3 40 00       	push   $0x40b338
4088a2:	68 c4 60 40 00       	push   $0x4060c4
4088a7:	ff 15 4c 11 40 00    	call   *0x40114c
4088ad:	8d 5d c4             	lea    -0x3c(%ebp),%ebx
4088b0:	53                   	push   %ebx
4088b1:	83 ec 10             	sub    $0x10,%esp
4088b4:	8b dc                	mov    %esp,%ebx
4088b6:	b9 03 00 00 00       	mov    $0x3,%ecx
4088bb:	89 0b                	mov    %ecx,(%ebx)
4088bd:	8b 8d 08 ff ff ff    	mov    -0xf8(%ebp),%ecx
4088c3:	89 4b 04             	mov    %ecx,0x4(%ebx)
4088c6:	b8 2a 23 30 00       	mov    $0x30232a,%eax
4088cb:	89 43 08             	mov    %eax,0x8(%ebx)
4088ce:	8b 85 10 ff ff ff    	mov    -0xf0(%ebp),%eax
4088d4:	89 43 0c             	mov    %eax,0xc(%ebx)
4088d7:	83 ec 10             	sub    $0x10,%esp
4088da:	8b cc                	mov    %esp,%ecx
4088dc:	b8 03 00 00 00       	mov    $0x3,%eax
4088e1:	89 01                	mov    %eax,(%ecx)
4088e3:	8b 85 18 ff ff ff    	mov    -0xe8(%ebp),%eax
4088e9:	89 41 04             	mov    %eax,0x4(%ecx)
4088ec:	8b 35 38 b3 40 00    	mov    0x40b338,%esi
4088f2:	ba d1 d3 85 00       	mov    $0x85d3d1,%edx
4088f7:	89 51 08             	mov    %edx,0x8(%ecx)
4088fa:	8b 95 20 ff ff ff    	mov    -0xe0(%ebp),%edx
408900:	89 51 0c             	mov    %edx,0xc(%ecx)
408903:	8b 95 28 ff ff ff    	mov    -0xd8(%ebp),%edx
408909:	83 ec 10             	sub    $0x10,%esp
40890c:	8b cc                	mov    %esp,%ecx
40890e:	b8 02 00 00 00       	mov    $0x2,%eax
408913:	89 01                	mov    %eax,(%ecx)
408915:	89 51 04             	mov    %edx,0x4(%ecx)
408918:	8b 95 38 ff ff ff    	mov    -0xc8(%ebp),%edx
40891e:	b8 18 00 00 00       	mov    $0x18,%eax
408923:	89 41 08             	mov    %eax,0x8(%ecx)
408926:	8b 85 30 ff ff ff    	mov    -0xd0(%ebp),%eax
40892c:	89 41 0c             	mov    %eax,0xc(%ecx)
40892f:	83 ec 10             	sub    $0x10,%esp
408932:	8b cc                	mov    %esp,%ecx
408934:	b8 03 00 00 00       	mov    $0x3,%eax
408939:	89 01                	mov    %eax,(%ecx)
40893b:	89 51 04             	mov    %edx,0x4(%ecx)
40893e:	b8 ec 53 0a 00       	mov    $0xa53ec,%eax
408943:	89 41 08             	mov    %eax,0x8(%ecx)
408946:	8b 85 40 ff ff ff    	mov    -0xc0(%ebp),%eax
40894c:	89 41 0c             	mov    %eax,0xc(%ecx)
40894f:	8b 85 48 ff ff ff    	mov    -0xb8(%ebp),%eax
408955:	83 ec 10             	sub    $0x10,%esp
408958:	c7 85 44 ff ff ff 08 	movl   $0x8,-0xbc(%ebp)
40895f:	00 00 00
408962:	8b 95 44 ff ff ff    	mov    -0xbc(%ebp),%edx
408968:	8b cc                	mov    %esp,%ecx
40896a:	89 11                	mov    %edx,(%ecx)
40896c:	c7 85 4c ff ff ff 64 	movl   $0x406464,-0xb4(%ebp)
408973:	64 40 00
408976:	8b 95 4c ff ff ff    	mov    -0xb4(%ebp),%edx
40897c:	8b 3e                	mov    (%esi),%edi
40897e:	89 41 04             	mov    %eax,0x4(%ecx)
408981:	8b 85 50 ff ff ff    	mov    -0xb0(%ebp),%eax
408987:	89 51 08             	mov    %edx,0x8(%ecx)
40898a:	56                   	push   %esi
40898b:	89 41 0c             	mov    %eax,0xc(%ecx)
40898e:	ff 57 44             	call   *0x44(%edi)
408991:	db e2                	fnclex
408993:	33 ff                	xor    %edi,%edi
408995:	3b c7                	cmp    %edi,%eax
408997:	7d 1c                	jge    0x4089b5
408999:	8b 1d 58 10 40 00    	mov    0x401058,%ebx
40899f:	6a 44                	push   $0x44
4089a1:	68 b4 60 40 00       	push   $0x4060b4
4089a6:	56                   	push   %esi
4089a7:	50                   	push   %eax
4089a8:	ff d3                	call   *%ebx
4089aa:	8d 4d c4             	lea    -0x3c(%ebp),%ecx
4089ad:	ff 15 d0 11 40 00    	call   *0x4011d0
4089b3:	eb 17                	jmp    0x4089cc
4089b5:	8b 1d 58 10 40 00    	mov    0x401058,%ebx
4089bb:	8d 4d c4             	lea    -0x3c(%ebp),%ecx
4089be:	ff 15 d0 11 40 00    	call   *0x4011d0
4089c4:	eb 06                	jmp    0x4089cc
4089c6:	8b 1d 58 10 40 00    	mov    0x401058,%ebx
4089cc:	39 3d 38 b3 40 00    	cmp    %edi,0x40b338
4089d2:	75 10                	jne    0x4089e4
4089d4:	68 38 b3 40 00       	push   $0x40b338
4089d9:	68 c4 60 40 00       	push   $0x4060c4
4089de:	ff 15 4c 11 40 00    	call   *0x40114c
4089e4:	8b 35 38 b3 40 00    	mov    0x40b338,%esi
4089ea:	8b 0e                	mov    (%esi),%ecx
4089ec:	8d 55 c4             	lea    -0x3c(%ebp),%edx
4089ef:	52                   	push   %edx
4089f0:	56                   	push   %esi
4089f1:	ff 51 14             	call   *0x14(%ecx)
4089f4:	db e2                	fnclex
4089f6:	3b c7                	cmp    %edi,%eax
4089f8:	7d 0b                	jge    0x408a05
4089fa:	6a 14                	push   $0x14
4089fc:	68 b4 60 40 00       	push   $0x4060b4
408a01:	56                   	push   %esi
408a02:	50                   	push   %eax
408a03:	ff d3                	call   *%ebx
408a05:	8b 45 c4             	mov    -0x3c(%ebp),%eax
408a08:	8b 08                	mov    (%eax),%ecx
408a0a:	8d 55 cc             	lea    -0x34(%ebp),%edx
408a0d:	52                   	push   %edx
408a0e:	50                   	push   %eax
408a0f:	8b f0                	mov    %eax,%esi
408a11:	ff 91 e0 00 00 00    	call   *0xe0(%ecx)
408a17:	db e2                	fnclex
408a19:	3b c7                	cmp    %edi,%eax
408a1b:	7d 0e                	jge    0x408a2b
408a1d:	68 e0 00 00 00       	push   $0xe0
408a22:	68 d4 60 40 00       	push   $0x4060d4
408a27:	56                   	push   %esi
408a28:	50                   	push   %eax
408a29:	ff d3                	call   *%ebx
408a2b:	8b 55 cc             	mov    -0x34(%ebp),%edx
408a2e:	8d 4d d4             	lea    -0x2c(%ebp),%ecx
408a31:	89 7d cc             	mov    %edi,-0x34(%ebp)
408a34:	ff 15 b0 11 40 00    	call   *0x4011b0
408a3a:	8d 4d c4             	lea    -0x3c(%ebp),%ecx
408a3d:	ff 15 d0 11 40 00    	call   *0x4011d0
408a43:	6a 01                	push   $0x1
408a45:	ff 15 24 10 40 00    	call   *0x401024
408a4b:	3d 00 00 80 00       	cmp    $0x800000,%eax
408a50:	0f 84 9f 00 00 00    	je     0x408af5
408a56:	8b 45 08             	mov    0x8(%ebp),%eax
408a59:	83 ec 10             	sub    $0x10,%esp
408a5c:	8b dc                	mov    %esp,%ebx
408a5e:	b9 09 00 00 00       	mov    $0x9,%ecx
408a63:	89 0b                	mov    %ecx,(%ebx)
408a65:	89 8d 44 ff ff ff    	mov    %ecx,-0xbc(%ebp)
408a6b:	8b 8d 48 ff ff ff    	mov    -0xb8(%ebp),%ecx
408a71:	89 4b 04             	mov    %ecx,0x4(%ebx)
408a74:	89 43 08             	mov    %eax,0x8(%ebx)
408a77:	83 ec 10             	sub    $0x10,%esp
408a7a:	89 85 4c ff ff ff    	mov    %eax,-0xb4(%ebp)
408a80:	8b 85 50 ff ff ff    	mov    -0xb0(%ebp),%eax
408a86:	89 43 0c             	mov    %eax,0xc(%ebx)
408a89:	8b 85 28 ff ff ff    	mov    -0xd8(%ebp),%eax
408a8f:	8b cc                	mov    %esp,%ecx
408a91:	be 08 00 00 00       	mov    $0x8,%esi
408a96:	89 31                	mov    %esi,(%ecx)
408a98:	89 41 04             	mov    %eax,0x4(%ecx)
408a9b:	ba 80 64 40 00       	mov    $0x406480,%edx
408aa0:	89 51 08             	mov    %edx,0x8(%ecx)
408aa3:	8b 95 30 ff ff ff    	mov    -0xd0(%ebp),%edx
408aa9:	89 51 0c             	mov    %edx,0xc(%ecx)
408aac:	8b 95 08 ff ff ff    	mov    -0xf8(%ebp),%edx
408ab2:	83 ec 10             	sub    $0x10,%esp
408ab5:	8b cc                	mov    %esp,%ecx
408ab7:	b8 03 00 00 00       	mov    $0x3,%eax
408abc:	89 01                	mov    %eax,(%ecx)
408abe:	8b 85 10 ff ff ff    	mov    -0xf0(%ebp),%eax
408ac4:	89 51 04             	mov    %edx,0x4(%ecx)
408ac7:	bf f7 82 5e 00       	mov    $0x5e82f7,%edi
408acc:	89 79 08             	mov    %edi,0x8(%ecx)
408acf:	6a 03                	push   $0x3
408ad1:	89 41 0c             	mov    %eax,0xc(%ecx)
408ad4:	68 98 64 40 00       	push   $0x406498
408ad9:	8d 4d e0             	lea    -0x20(%ebp),%ecx
408adc:	51                   	push   %ecx
408add:	ff 15 e4 10 40 00    	call   *0x4010e4
408ae3:	50                   	push   %eax
408ae4:	ff 15 90 11 40 00    	call   *0x401190
408aea:	8b 1d 58 10 40 00    	mov    0x401058,%ebx
408af0:	83 c4 3c             	add    $0x3c,%esp
408af3:	33 ff                	xor    %edi,%edi
408af5:	39 3d 38 b3 40 00    	cmp    %edi,0x40b338
408afb:	75 10                	jne    0x408b0d
408afd:	68 38 b3 40 00       	push   $0x40b338
408b02:	68 c4 60 40 00       	push   $0x4060c4
408b07:	ff 15 4c 11 40 00    	call   *0x40114c
408b0d:	8b 35 38 b3 40 00    	mov    0x40b338,%esi
408b13:	8b 16                	mov    (%esi),%edx
408b15:	8d 45 c4             	lea    -0x3c(%ebp),%eax
408b18:	50                   	push   %eax
408b19:	56                   	push   %esi
408b1a:	ff 52 14             	call   *0x14(%edx)
408b1d:	db e2                	fnclex
408b1f:	3b c7                	cmp    %edi,%eax
408b21:	7d 0b                	jge    0x408b2e
408b23:	6a 14                	push   $0x14
408b25:	68 b4 60 40 00       	push   $0x4060b4
408b2a:	56                   	push   %esi
408b2b:	50                   	push   %eax
408b2c:	ff d3                	call   *%ebx
408b2e:	8b 45 c4             	mov    -0x3c(%ebp),%eax
408b31:	8b 08                	mov    (%eax),%ecx
408b33:	8d 95 e0 fe ff ff    	lea    -0x120(%ebp),%edx
408b39:	52                   	push   %edx
408b3a:	50                   	push   %eax
408b3b:	8b f0                	mov    %eax,%esi
408b3d:	ff 91 40 01 00 00    	call   *0x140(%ecx)
408b43:	db e2                	fnclex
408b45:	3b c7                	cmp    %edi,%eax
408b47:	7d 0e                	jge    0x408b57
408b49:	68 40 01 00 00       	push   $0x140
408b4e:	68 d4 60 40 00       	push   $0x4060d4
408b53:	56                   	push   %esi
408b54:	50                   	push   %eax
408b55:	ff d3                	call   *%ebx
408b57:	8d 4d c4             	lea    -0x3c(%ebp),%ecx
408b5a:	ff 15 d0 11 40 00    	call   *0x4011d0
408b60:	68 84 62 40 00       	push   $0x406284
408b65:	ff 15 74 11 40 00    	call   *0x401174
408b6b:	83 f8 02             	cmp    $0x2,%eax
408b6e:	0f 84 d6 00 00 00    	je     0x408c4a
408b74:	b9 04 00 02 80       	mov    $0x80020004,%ecx
408b79:	b8 0a 00 00 00       	mov    $0xa,%eax
408b7e:	89 8d 5c ff ff ff    	mov    %ecx,-0xa4(%ebp)
408b84:	89 8d 6c ff ff ff    	mov    %ecx,-0x94(%ebp)
408b8a:	89 8d 7c ff ff ff    	mov    %ecx,-0x84(%ebp)