40e06b:	81 c9 00 00 07 80    	or     $0x80070000,%ecx
40e071:	51                   	push   %ecx
40e072:	51                   	push   %ecx
40e073:	51                   	push   %ecx
40e074:	6a 03                	push   $0x3
40e076:	ff 75 14             	push   0x14(%ebp)
40e079:	8b d7                	mov    %edi,%edx
40e07b:	8b cb                	mov    %ebx,%ecx
40e07d:	6a 00                	push   $0x0
40e07f:	6a 00                	push   $0x0
40e081:	68 b8 25 40 00       	push   $0x4025b8
40e086:	e8 c1 fe ff ff       	call   0x40df4c
40e08b:	5f                   	pop    %edi
40e08c:	8b c6                	mov    %esi,%eax
40e08e:	5e                   	pop    %esi
40e08f:	5b                   	pop    %ebx
40e090:	5d                   	pop    %ebp
40e091:	c2 14 00             	ret    $0x14
40e094:	8b ff                	mov    %edi,%edi
40e096:	55                   	push   %ebp
40e097:	8b ec                	mov    %esp,%ebp
40e099:	53                   	push   %ebx
40e09a:	56                   	push   %esi
40e09b:	57                   	push   %edi
40e09c:	ff 75 14             	push   0x14(%ebp)
40e09f:	8b fa                	mov    %edx,%edi
40e0a1:	8b d9                	mov    %ecx,%ebx
40e0a3:	51                   	push   %ecx
40e0a4:	51                   	push   %ecx
40e0a5:	ff 75 08             	push   0x8(%ebp)
40e0a8:	e8 64 f7 ff ff       	call   0x40d811
40e0ad:	8b f0                	mov    %eax,%esi
40e0af:	85 f6                	test   %esi,%esi
40e0b1:	7e 09                	jle    0x40e0bc
40e0b3:	0f b7 f6             	movzwl %si,%esi
40e0b6:	81 ce 00 00 07 80    	or     $0x80070000,%esi
40e0bc:	51                   	push   %ecx
40e0bd:	51                   	push   %ecx
40e0be:	56                   	push   %esi
40e0bf:	6a 01                	push   $0x1
40e0c1:	ff 75 14             	push   0x14(%ebp)
40e0c4:	8b d7                	mov    %edi,%edx
40e0c6:	8b cb                	mov    %ebx,%ecx
40e0c8:	6a 00                	push   $0x0
40e0ca:	6a 00                	push   $0x0
40e0cc:	ff 75 08             	push   0x8(%ebp)
40e0cf:	e8 78 fe ff ff       	call   0x40df4c
40e0d4:	5f                   	pop    %edi
40e0d5:	8b c6                	mov    %esi,%eax
40e0d7:	5e                   	pop    %esi
40e0d8:	5b                   	pop    %ebx
40e0d9:	5d                   	pop    %ebp
40e0da:	c2 14 00             	ret    $0x14
40e0dd:	8b ff                	mov    %edi,%edi
40e0df:	55                   	push   %ebp
40e0e0:	8b ec                	mov    %esp,%ebp
40e0e2:	ff 75 0c             	push   0xc(%ebp)
40e0e5:	6a 01                	push   $0x1
40e0e7:	ff 75 04             	push   0x4(%ebp)
40e0ea:	6a 00                	push   $0x0
40e0ec:	6a 00                	push   $0x0
40e0ee:	ff 75 08             	push   0x8(%ebp)
40e0f1:	e8 29 ff ff ff       	call   0x40e01f
40e0f6:	5d                   	pop    %ebp
40e0f7:	c2 08 00             	ret    $0x8
40e0fa:	8b ff                	mov    %edi,%edi
40e0fc:	55                   	push   %ebp
40e0fd:	8b ec                	mov    %esp,%ebp
40e0ff:	51                   	push   %ecx
40e100:	51                   	push   %ecx
40e101:	ff 75 04             	push   0x4(%ebp)
40e104:	51                   	push   %ecx
40e105:	51                   	push   %ecx
40e106:	ff 75 08             	push   0x8(%ebp)
40e109:	e8 86 ff ff ff       	call   0x40e094
40e10e:	59                   	pop    %ecx
40e10f:	5d                   	pop    %ebp
40e110:	c2 04 00             	ret    $0x4
40e113:	8b ff                	mov    %edi,%edi
40e115:	55                   	push   %ebp
40e116:	8b ec                	mov    %esp,%ebp
40e118:	51                   	push   %ecx
40e119:	ff 75 04             	push   0x4(%ebp)
40e11c:	83 ec 0c             	sub    $0xc,%esp
40e11f:	e8 1f ff ff ff       	call   0x40e043
40e124:	5d                   	pop    %ebp
40e125:	c2 04 00             	ret    $0x4
40e128:	8b ff                	mov    %edi,%edi
40e12a:	55                   	push   %ebp
40e12b:	8b ec                	mov    %esp,%ebp
40e12d:	68 ff ff 00 80       	push   $0x8000ffff
40e132:	6a 03                	push   $0x3
40e134:	ff 75 04             	push   0x4(%ebp)
40e137:	ba 4c 0b 00 00       	mov    $0xb4c,%edx
40e13c:	6a 00                	push   $0x0
40e13e:	6a 00                	push   $0x0
40e140:	68 b8 25 40 00       	push   $0x4025b8
40e145:	e8 d5 fe ff ff       	call   0x40e01f
40e14a:	5d                   	pop    %ebp
40e14b:	c2 04 00             	ret    $0x4
40e14e:	8b ff                	mov    %edi,%edi
40e150:	55                   	push   %ebp
40e151:	8b ec                	mov    %esp,%ebp
40e153:	68 ff ff 00 80       	push   $0x8000ffff
40e158:	6a 03                	push   $0x3
40e15a:	ff 75 04             	push   0x4(%ebp)
40e15d:	ba 35 13 00 00       	mov    $0x1335,%edx
40e162:	6a 00                	push   $0x0
40e164:	6a 00                	push   $0x0
40e166:	68 04 26 40 00       	push   $0x402604
40e16b:	e8 af fe ff ff       	call   0x40e01f
40e170:	5d                   	pop    %ebp
40e171:	c2 04 00             	ret    $0x4
40e174:	6a 07                	push   $0x7
40e176:	59                   	pop    %ecx
40e177:	cd 29                	int    $0x29
40e179:	c3                   	ret
40e17a:	a1 ac ba 42 00       	mov    0x42baac,%eax
40e17f:	85 c0                	test   %eax,%eax
40e181:	75 10                	jne    0x40e193
40e183:	68 48 24 40 00       	push   $0x402448
40e188:	ff 15 40 c2 42 00    	call   *0x42c240
40e18e:	a3 ac ba 42 00       	mov    %eax,0x42baac
40e193:	c3                   	ret
40e194:	cc                   	int3
40e195:	cc                   	int3
40e196:	cc                   	int3
40e197:	cc                   	int3
40e198:	cc                   	int3
40e199:	cc                   	int3
40e19a:	cc                   	int3
40e19b:	cc                   	int3
40e19c:	cc                   	int3
40e19d:	cc                   	int3
40e19e:	cc                   	int3
40e19f:	cc                   	int3
40e1a0:	8b ff                	mov    %edi,%edi
40e1a2:	55                   	push   %ebp
40e1a3:	8b ec                	mov    %esp,%ebp
40e1a5:	56                   	push   %esi
40e1a6:	8b 35 a8 ba 42 00    	mov    0x42baa8,%esi
40e1ac:	85 f6                	test   %esi,%esi
40e1ae:	75 1d                	jne    0x40e1cd
40e1b0:	68 5c 24 40 00       	push   $0x40245c
40e1b5:	e8 c0 ff ff ff       	call   0x40e17a
40e1ba:	50                   	push   %eax
40e1bb:	ff 15 84 c1 42 00    	call   *0x42c184
40e1c1:	8b f0                	mov    %eax,%esi
40e1c3:	89 35 a8 ba 42 00    	mov    %esi,0x42baa8
40e1c9:	85 f6                	test   %esi,%esi
40e1cb:	74 0d                	je     0x40e1da
40e1cd:	ff 75 08             	push   0x8(%ebp)
40e1d0:	8b ce                	mov    %esi,%ecx
40e1d2:	ff 15 d4 c4 42 00    	call   *0x42c4d4
40e1d8:	ff d6                	call   *%esi
40e1da:	5e                   	pop    %esi
40e1db:	5d                   	pop    %ebp
40e1dc:	c2 04 00             	ret    $0x4
40e1df:	cc                   	int3
40e1e0:	8b ff                	mov    %edi,%edi
40e1e2:	56                   	push   %esi
40e1e3:	8b 35 a4 ba 42 00    	mov    0x42baa4,%esi
40e1e9:	85 f6                	test   %esi,%esi
40e1eb:	75 21                	jne    0x40e20e
40e1ed:	68 78 24 40 00       	push   $0x402478
40e1f2:	e8 83 ff ff ff       	call   0x40e17a
40e1f7:	50                   	push   %eax
40e1f8:	ff 15 84 c1 42 00    	call   *0x42c184
40e1fe:	8b f0                	mov    %eax,%esi
40e200:	89 35 a4 ba 42 00    	mov    %esi,0x42baa4
40e206:	85 f6                	test   %esi,%esi
40e208:	75 04                	jne    0x40e20e
40e20a:	32 c0                	xor    %al,%al
40e20c:	5e                   	pop    %esi
40e20d:	c3                   	ret
40e20e:	8b ce                	mov    %esi,%ecx
40e210:	ff 15 d4 c4 42 00    	call   *0x42c4d4
40e216:	ff d6                	call   *%esi
40e218:	5e                   	pop    %esi
40e219:	c3                   	ret
40e21a:	cc                   	int3
40e21b:	cc                   	int3
40e21c:	cc                   	int3
40e21d:	cc                   	int3
40e21e:	cc                   	int3
40e21f:	cc                   	int3
40e220:	8b ff                	mov    %edi,%edi
40e222:	55                   	push   %ebp
40e223:	8b ec                	mov    %esp,%ebp
40e225:	56                   	push   %esi
40e226:	8b 35 a0 ba 42 00    	mov    0x42baa0,%esi
40e22c:	85 f6                	test   %esi,%esi
40e22e:	75 1d                	jne    0x40e24d
40e230:	68 94 24 40 00       	push   $0x402494
40e235:	e8 40 ff ff ff       	call   0x40e17a
40e23a:	50                   	push   %eax
40e23b:	ff 15 84 c1 42 00    	call   *0x42c184
40e241:	8b f0                	mov    %eax,%esi
40e243:	89 35 a0 ba 42 00    	mov    %esi,0x42baa0
40e249:	85 f6                	test   %esi,%esi
40e24b:	74 10                	je     0x40e25d
40e24d:	ff 75 0c             	push   0xc(%ebp)
40e250:	8b ce                	mov    %esi,%ecx
40e252:	ff 75 08             	push   0x8(%ebp)
40e255:	ff 15 d4 c4 42 00    	call   *0x42c4d4
40e25b:	ff d6                	call   *%esi
40e25d:	5e                   	pop    %esi
40e25e:	5d                   	pop    %ebp
40e25f:	c2 08 00             	ret    $0x8
40e262:	8b ff                	mov    %edi,%edi
40e264:	55                   	push   %ebp
40e265:	8b ec                	mov    %esp,%ebp
40e267:	56                   	push   %esi
40e268:	8b 35 98 ba 42 00    	mov    0x42ba98,%esi
40e26e:	57                   	push   %edi
40e26f:	8b f9                	mov    %ecx,%edi
40e271:	85 f6                	test   %esi,%esi
40e273:	75 24                	jne    0x40e299
40e275:	68 34 25 40 00       	push   $0x402534
40e27a:	e8 fb fe ff ff       	call   0x40e17a
40e27f:	50                   	push   %eax
40e280:	ff 15 84 c1 42 00    	call   *0x42c184
40e286:	8b f0                	mov    %eax,%esi
40e288:	89 35 98 ba 42 00    	mov    %esi,0x42ba98
40e28e:	85 f6                	test   %esi,%esi
40e290:	75 07                	jne    0x40e299
40e292:	b8 39 01 00 c0       	mov    $0xc0000139,%eax
40e297:	eb 18                	jmp    0x40e2b1
40e299:	ff 75 14             	push   0x14(%ebp)
40e29c:	8b ce                	mov    %esi,%ecx
40e29e:	ff 75 10             	push   0x10(%ebp)
40e2a1:	ff 75 0c             	push   0xc(%ebp)
40e2a4:	6a 00                	push   $0x0
40e2a6:	6a 00                	push   $0x0
40e2a8:	57                   	push   %edi
40e2a9:	ff 15 d4 c4 42 00    	call   *0x42c4d4
40e2af:	ff d6                	call   *%esi
40e2b1:	5f                   	pop    %edi
40e2b2:	5e                   	pop    %esi
40e2b3:	5d                   	pop    %ebp
40e2b4:	c2 10 00             	ret    $0x10
40e2b7:	8b ff                	mov    %edi,%edi
40e2b9:	55                   	push   %ebp
40e2ba:	8b ec                	mov    %esp,%ebp
40e2bc:	53                   	push   %ebx
40e2bd:	56                   	push   %esi
40e2be:	8b 35 94 ba 42 00    	mov    0x42ba94,%esi
40e2c4:	8b d9                	mov    %ecx,%ebx
40e2c6:	57                   	push   %edi
40e2c7:	8b fa                	mov    %edx,%edi
40e2c9:	85 f6                	test   %esi,%esi
40e2cb:	75 24                	jne    0x40e2f1
40e2cd:	68 48 25 40 00       	push   $0x402548
40e2d2:	e8 a3 fe ff ff       	call   0x40e17a
40e2d7:	50                   	push   %eax
40e2d8:	ff 15 84 c1 42 00    	call   *0x42c184
40e2de:	8b f0                	mov    %eax,%esi
40e2e0:	89 35 94 ba 42 00    	mov    %esi,0x42ba94
40e2e6:	85 f6                	test   %esi,%esi
40e2e8:	75 07                	jne    0x40e2f1
40e2ea:	b8 39 01 00 c0       	mov    $0xc0000139,%eax
40e2ef:	eb 19                	jmp    0x40e30a
40e2f1:	ff 75 18             	push   0x18(%ebp)
40e2f4:	8b ce                	mov    %esi,%ecx
40e2f6:	ff 75 14             	push   0x14(%ebp)
40e2f9:	6a 00                	push   $0x0
40e2fb:	6a 00                	push   $0x0
40e2fd:	ff 75 08             	push   0x8(%ebp)
40e300:	57                   	push   %edi
40e301:	53                   	push   %ebx
40e302:	ff 15 d4 c4 42 00    	call   *0x42c4d4
40e308:	ff d6                	call   *%esi
40e30a:	5f                   	pop    %edi
40e30b:	5e                   	pop    %esi
40e30c:	5b                   	pop    %ebx
40e30d:	5d                   	pop    %ebp
40e30e:	c2 14 00             	ret    $0x14
40e311:	8b ff                	mov    %edi,%edi
40e313:	55                   	push   %ebp
40e314:	8b ec                	mov    %esp,%ebp
40e316:	53                   	push   %ebx
40e317:	56                   	push   %esi
40e318:	8b 35 90 ba 42 00    	mov    0x42ba90,%esi
40e31e:	8b d9                	mov    %ecx,%ebx
40e320:	57                   	push   %edi
40e321:	8b fa                	mov    %edx,%edi
40e323:	85 f6                	test   %esi,%esi
40e325:	75 24                	jne    0x40e34b
40e327:	68 60 25 40 00       	push   $0x402560
40e32c:	e8 49 fe ff ff       	call   0x40e17a
40e331:	50                   	push   %eax
40e332:	ff 15 84 c1 42 00    	call   *0x42c184
40e338:	8b f0                	mov    %eax,%esi
40e33a:	89 35 90 ba 42 00    	mov    %esi,0x42ba90
40e340:	85 f6                	test   %esi,%esi
40e342:	75 07                	jne    0x40e34b
40e344:	b8 39 01 00 c0       	mov    $0xc0000139,%eax
40e349:	eb 1d                	jmp    0x40e368
40e34b:	33 c0                	xor    %eax,%eax
40e34d:	8b ce                	mov    %esi,%ecx
40e34f:	50                   	push   %eax
40e350:	50                   	push   %eax
40e351:	50                   	push   %eax
40e352:	ff 75 14             	push   0x14(%ebp)
40e355:	ff 75 10             	push   0x10(%ebp)
40e358:	57                   	push   %edi
40e359:	ff 75 0c             	push   0xc(%ebp)
40e35c:	ff 75 08             	push   0x8(%ebp)
40e35f:	53                   	push   %ebx
40e360:	ff 15 d4 c4 42 00    	call   *0x42c4d4
40e366:	ff d6                	call   *%esi
40e368:	5f                   	pop    %edi
40e369:	5e                   	pop    %esi
40e36a:	5b                   	pop    %ebx
40e36b:	5d                   	pop    %ebp
40e36c:	c2 1c 00             	ret    $0x1c
40e36f:	8b ff                	mov    %edi,%edi
40e371:	55                   	push   %ebp
40e372:	8b ec                	mov    %esp,%ebp
40e374:	83 ec 30             	sub    $0x30,%esp
40e377:	a1 74 b6 42 00       	mov    0x42b674,%eax
40e37c:	33 c5                	xor    %ebp,%eax
40e37e:	89 45 f8             	mov    %eax,-0x8(%ebp)
40e381:	53                   	push   %ebx
40e382:	8b 5d 0c             	mov    0xc(%ebp),%ebx
40e385:	56                   	push   %esi
40e386:	57                   	push   %edi
40e387:	6a 34                	push   $0x34
40e389:	33 f6                	xor    %esi,%esi
40e38b:	89 55 d4             	mov    %edx,-0x2c(%ebp)
40e38e:	8b f9                	mov    %ecx,%edi
40e390:	89 5d e0             	mov    %ebx,-0x20(%ebp)
40e393:	56                   	push   %esi
40e394:	57                   	push   %edi
40e395:	89 7d f4             	mov    %edi,-0xc(%ebp)
40e398:	89 75 d0             	mov    %esi,-0x30(%ebp)
40e39b:	e8 0d a0 01 00       	call   0x4283ad
40e3a0:	8b 45 d4             	mov    -0x2c(%ebp),%eax
40e3a3:	83 c4 0c             	add    $0xc,%esp
40e3a6:	f7 db                	neg    %ebx
40e3a8:	89 07                	mov    %eax,(%edi)
40e3aa:	89 75 dc             	mov    %esi,-0x24(%ebp)
40e3ad:	1b db                	sbb    %ebx,%ebx
40e3af:	81 e3 c8 00 00 00    	and    $0xc8,%ebx
40e3b5:	85 c0                	test   %eax,%eax
40e3b7:	75 0d                	jne    0x40e3c6
40e3b9:	a1 1c 28 40 00       	mov    0x40281c,%eax
40e3be:	8b 0d 20 28 40 00    	mov    0x402820,%ecx
40e3c4:	eb 0b                	jmp    0x40e3d1
40e3c6:	a1 0c 28 40 00       	mov    0x40280c,%eax