40706f:	3b cb                	cmp    %ebx,%ecx
407071:	75 f6                	jne    0x407069
407073:	83 c9 ff             	or     $0xffffffff,%ecx
407076:	8b 45 14             	mov    0x14(%ebp),%eax
407079:	2b c1                	sub    %ecx,%eax
40707b:	48                   	dec    %eax
40707c:	3b 45 14             	cmp    0x14(%ebp),%eax
40707f:	7d 01                	jge    0x407082
407081:	40                   	inc    %eax
407082:	89 45 14             	mov    %eax,0x14(%ebp)
407085:	a1 14 10 43 00       	mov    0x431014,%eax
40708a:	83 f8 02             	cmp    $0x2,%eax
40708d:	0f 84 ac 01 00 00    	je     0x40723f
407093:	3b c3                	cmp    %ebx,%eax
407095:	0f 84 a4 01 00 00    	je     0x40723f
40709b:	83 f8 01             	cmp    $0x1,%eax
40709e:	0f 85 cc 01 00 00    	jne    0x407270
4070a4:	89 5d f8             	mov    %ebx,-0x8(%ebp)
4070a7:	39 5d 20             	cmp    %ebx,0x20(%ebp)
4070aa:	75 08                	jne    0x4070b4
4070ac:	8b 06                	mov    (%esi),%eax
4070ae:	8b 40 04             	mov    0x4(%eax),%eax
4070b1:	89 45 20             	mov    %eax,0x20(%ebp)
4070b4:	8b 35 20 d1 41 00    	mov    0x41d120,%esi
4070ba:	33 c0                	xor    %eax,%eax
4070bc:	39 5d 24             	cmp    %ebx,0x24(%ebp)
4070bf:	53                   	push   %ebx
4070c0:	53                   	push   %ebx
4070c1:	ff 75 14             	push   0x14(%ebp)
4070c4:	0f 95 c0             	setne  %al
4070c7:	ff 75 10             	push   0x10(%ebp)
4070ca:	8d 04 c5 01 00 00 00 	lea    0x1(,%eax,8),%eax
4070d1:	50                   	push   %eax
4070d2:	ff 75 20             	push   0x20(%ebp)
4070d5:	ff d6                	call   *%esi
4070d7:	8b f8                	mov    %eax,%edi
4070d9:	3b fb                	cmp    %ebx,%edi
4070db:	0f 84 8f 01 00 00    	je     0x407270
4070e1:	7e 43                	jle    0x407126
4070e3:	6a e0                	push   $0xffffffe0
4070e5:	33 d2                	xor    %edx,%edx
4070e7:	58                   	pop    %eax
4070e8:	f7 f7                	div    %edi
4070ea:	83 f8 02             	cmp    $0x2,%eax
4070ed:	72 37                	jb     0x407126
4070ef:	8d 44 3f 08          	lea    0x8(%edi,%edi,1),%eax
4070f3:	3d 00 04 00 00       	cmp    $0x400,%eax
4070f8:	77 13                	ja     0x40710d
4070fa:	e8 b1 1a 00 00       	call   0x408bb0
4070ff:	8b c4                	mov    %esp,%eax
407101:	3b c3                	cmp    %ebx,%eax
407103:	74 1c                	je     0x407121
407105:	c7 00 cc cc 00 00    	movl   $0xcccc,(%eax)
40710b:	eb 11                	jmp    0x40711e
40710d:	50                   	push   %eax
40710e:	e8 27 05 00 00       	call   0x40763a
407113:	59                   	pop    %ecx
407114:	3b c3                	cmp    %ebx,%eax
407116:	74 09                	je     0x407121
407118:	c7 00 dd dd 00 00    	movl   $0xdddd,(%eax)
40711e:	83 c0 08             	add    $0x8,%eax
407121:	89 45 f4             	mov    %eax,-0xc(%ebp)
407124:	eb 03                	jmp    0x407129
407126:	89 5d f4             	mov    %ebx,-0xc(%ebp)
407129:	39 5d f4             	cmp    %ebx,-0xc(%ebp)
40712c:	0f 84 3e 01 00 00    	je     0x407270
407132:	57                   	push   %edi
407133:	ff 75 f4             	push   -0xc(%ebp)
407136:	ff 75 14             	push   0x14(%ebp)
407139:	ff 75 10             	push   0x10(%ebp)
40713c:	6a 01                	push   $0x1
40713e:	ff 75 20             	push   0x20(%ebp)
407141:	ff d6                	call   *%esi
407143:	85 c0                	test   %eax,%eax
407145:	0f 84 e3 00 00 00    	je     0x40722e
40714b:	8b 35 3c d0 41 00    	mov    0x41d03c,%esi
407151:	53                   	push   %ebx
407152:	53                   	push   %ebx
407153:	57                   	push   %edi
407154:	ff 75 f4             	push   -0xc(%ebp)
407157:	ff 75 0c             	push   0xc(%ebp)
40715a:	ff 75 08             	push   0x8(%ebp)
40715d:	ff d6                	call   *%esi
40715f:	8b c8                	mov    %eax,%ecx
407161:	89 4d f8             	mov    %ecx,-0x8(%ebp)
407164:	3b cb                	cmp    %ebx,%ecx
407166:	0f 84 c2 00 00 00    	je     0x40722e
40716c:	f7 45 0c 00 04 00 00 	testl  $0x400,0xc(%ebp)
407173:	74 29                	je     0x40719e
407175:	39 5d 1c             	cmp    %ebx,0x1c(%ebp)
407178:	0f 84 b0 00 00 00    	je     0x40722e
40717e:	3b 4d 1c             	cmp    0x1c(%ebp),%ecx
407181:	0f 8f a7 00 00 00    	jg     0x40722e
407187:	ff 75 1c             	push   0x1c(%ebp)
40718a:	ff 75 18             	push   0x18(%ebp)
40718d:	57                   	push   %edi
40718e:	ff 75 f4             	push   -0xc(%ebp)
407191:	ff 75 0c             	push   0xc(%ebp)
407194:	ff 75 08             	push   0x8(%ebp)
407197:	ff d6                	call   *%esi
407199:	e9 90 00 00 00       	jmp    0x40722e
40719e:	3b cb                	cmp    %ebx,%ecx
4071a0:	7e 45                	jle    0x4071e7
4071a2:	6a e0                	push   $0xffffffe0
4071a4:	33 d2                	xor    %edx,%edx
4071a6:	58                   	pop    %eax
4071a7:	f7 f1                	div    %ecx
4071a9:	83 f8 02             	cmp    $0x2,%eax
4071ac:	72 39                	jb     0x4071e7
4071ae:	8d 44 09 08          	lea    0x8(%ecx,%ecx,1),%eax
4071b2:	3d 00 04 00 00       	cmp    $0x400,%eax
4071b7:	77 16                	ja     0x4071cf
4071b9:	e8 f2 19 00 00       	call   0x408bb0
4071be:	8b f4                	mov    %esp,%esi
4071c0:	3b f3                	cmp    %ebx,%esi
4071c2:	74 6a                	je     0x40722e
4071c4:	c7 06 cc cc 00 00    	movl   $0xcccc,(%esi)
4071ca:	83 c6 08             	add    $0x8,%esi
4071cd:	eb 1a                	jmp    0x4071e9
4071cf:	50                   	push   %eax
4071d0:	e8 65 04 00 00       	call   0x40763a
4071d5:	59                   	pop    %ecx
4071d6:	3b c3                	cmp    %ebx,%eax
4071d8:	74 09                	je     0x4071e3
4071da:	c7 00 dd dd 00 00    	movl   $0xdddd,(%eax)
4071e0:	83 c0 08             	add    $0x8,%eax
4071e3:	8b f0                	mov    %eax,%esi
4071e5:	eb 02                	jmp    0x4071e9
4071e7:	33 f6                	xor    %esi,%esi
4071e9:	3b f3                	cmp    %ebx,%esi
4071eb:	74 41                	je     0x40722e
4071ed:	ff 75 f8             	push   -0x8(%ebp)
4071f0:	56                   	push   %esi
4071f1:	57                   	push   %edi
4071f2:	ff 75 f4             	push   -0xc(%ebp)
4071f5:	ff 75 0c             	push   0xc(%ebp)
4071f8:	ff 75 08             	push   0x8(%ebp)
4071fb:	ff 15 3c d0 41 00    	call   *0x41d03c
407201:	85 c0                	test   %eax,%eax
407203:	74 22                	je     0x407227
407205:	53                   	push   %ebx
407206:	53                   	push   %ebx
407207:	39 5d 1c             	cmp    %ebx,0x1c(%ebp)
40720a:	75 04                	jne    0x407210
40720c:	53                   	push   %ebx
40720d:	53                   	push   %ebx
40720e:	eb 06                	jmp    0x407216
407210:	ff 75 1c             	push   0x1c(%ebp)
407213:	ff 75 18             	push   0x18(%ebp)
407216:	ff 75 f8             	push   -0x8(%ebp)
407219:	56                   	push   %esi
40721a:	53                   	push   %ebx
40721b:	ff 75 20             	push   0x20(%ebp)
40721e:	ff 15 98 d0 41 00    	call   *0x41d098
407224:	89 45 f8             	mov    %eax,-0x8(%ebp)
407227:	56                   	push   %esi
407228:	e8 b8 fd ff ff       	call   0x406fe5
40722d:	59                   	pop    %ecx
40722e:	ff 75 f4             	push   -0xc(%ebp)
407231:	e8 af fd ff ff       	call   0x406fe5
407236:	8b 45 f8             	mov    -0x8(%ebp),%eax
407239:	59                   	pop    %ecx
40723a:	e9 59 01 00 00       	jmp    0x407398
40723f:	89 5d f4             	mov    %ebx,-0xc(%ebp)
407242:	89 5d f0             	mov    %ebx,-0x10(%ebp)
407245:	39 5d 08             	cmp    %ebx,0x8(%ebp)
407248:	75 08                	jne    0x407252
40724a:	8b 06                	mov    (%esi),%eax
40724c:	8b 40 14             	mov    0x14(%eax),%eax
40724f:	89 45 08             	mov    %eax,0x8(%ebp)
407252:	39 5d 20             	cmp    %ebx,0x20(%ebp)
407255:	75 08                	jne    0x40725f
407257:	8b 06                	mov    (%esi),%eax
407259:	8b 40 04             	mov    0x4(%eax),%eax
40725c:	89 45 20             	mov    %eax,0x20(%ebp)
40725f:	ff 75 08             	push   0x8(%ebp)
407262:	e8 75 19 00 00       	call   0x408bdc
407267:	59                   	pop    %ecx
407268:	89 45 ec             	mov    %eax,-0x14(%ebp)
40726b:	83 f8 ff             	cmp    $0xffffffff,%eax
40726e:	75 07                	jne    0x407277
407270:	33 c0                	xor    %eax,%eax
407272:	e9 21 01 00 00       	jmp    0x407398
407277:	3b 45 20             	cmp    0x20(%ebp),%eax
40727a:	0f 84 db 00 00 00    	je     0x40735b
407280:	53                   	push   %ebx
407281:	53                   	push   %ebx
407282:	8d 4d 14             	lea    0x14(%ebp),%ecx
407285:	51                   	push   %ecx
407286:	ff 75 10             	push   0x10(%ebp)
407289:	50                   	push   %eax
40728a:	ff 75 20             	push   0x20(%ebp)
40728d:	e8 93 19 00 00       	call   0x408c25
407292:	83 c4 18             	add    $0x18,%esp
407295:	89 45 f4             	mov    %eax,-0xc(%ebp)
407298:	3b c3                	cmp    %ebx,%eax
40729a:	74 d4                	je     0x407270
40729c:	8b 35 1c d1 41 00    	mov    0x41d11c,%esi
4072a2:	53                   	push   %ebx
4072a3:	53                   	push   %ebx
4072a4:	ff 75 14             	push   0x14(%ebp)
4072a7:	50                   	push   %eax
4072a8:	ff 75 0c             	push   0xc(%ebp)
4072ab:	ff 75 08             	push   0x8(%ebp)
4072ae:	ff d6                	call   *%esi
4072b0:	89 45 f8             	mov    %eax,-0x8(%ebp)
4072b3:	3b c3                	cmp    %ebx,%eax
4072b5:	75 07                	jne    0x4072be
4072b7:	33 f6                	xor    %esi,%esi
4072b9:	e9 b7 00 00 00       	jmp    0x407375
4072be:	7e 3d                	jle    0x4072fd
4072c0:	83 f8 e0             	cmp    $0xffffffe0,%eax
4072c3:	77 38                	ja     0x4072fd
4072c5:	83 c0 08             	add    $0x8,%eax
4072c8:	3d 00 04 00 00       	cmp    $0x400,%eax
4072cd:	77 16                	ja     0x4072e5
4072cf:	e8 dc 18 00 00       	call   0x408bb0
4072d4:	8b fc                	mov    %esp,%edi
4072d6:	3b fb                	cmp    %ebx,%edi
4072d8:	74 dd                	je     0x4072b7
4072da:	c7 07 cc cc 00 00    	movl   $0xcccc,(%edi)
4072e0:	83 c7 08             	add    $0x8,%edi
4072e3:	eb 1a                	jmp    0x4072ff
4072e5:	50                   	push   %eax
4072e6:	e8 4f 03 00 00       	call   0x40763a
4072eb:	59                   	pop    %ecx
4072ec:	3b c3                	cmp    %ebx,%eax
4072ee:	74 09                	je     0x4072f9
4072f0:	c7 00 dd dd 00 00    	movl   $0xdddd,(%eax)
4072f6:	83 c0 08             	add    $0x8,%eax
4072f9:	8b f8                	mov    %eax,%edi
4072fb:	eb 02                	jmp    0x4072ff
4072fd:	33 ff                	xor    %edi,%edi
4072ff:	3b fb                	cmp    %ebx,%edi
407301:	74 b4                	je     0x4072b7
407303:	ff 75 f8             	push   -0x8(%ebp)
407306:	53                   	push   %ebx
407307:	57                   	push   %edi
407308:	e8 33 fb ff ff       	call   0x406e40
40730d:	83 c4 0c             	add    $0xc,%esp
407310:	ff 75 f8             	push   -0x8(%ebp)
407313:	57                   	push   %edi
407314:	ff 75 14             	push   0x14(%ebp)
407317:	ff 75 f4             	push   -0xc(%ebp)
40731a:	ff 75 0c             	push   0xc(%ebp)
40731d:	ff 75 08             	push   0x8(%ebp)
407320:	ff d6                	call   *%esi
407322:	89 45 f8             	mov    %eax,-0x8(%ebp)
407325:	3b c3                	cmp    %ebx,%eax
407327:	75 04                	jne    0x40732d
407329:	33 f6                	xor    %esi,%esi
40732b:	eb 25                	jmp    0x407352
40732d:	ff 75 1c             	push   0x1c(%ebp)
407330:	8d 45 f8             	lea    -0x8(%ebp),%eax
407333:	ff 75 18             	push   0x18(%ebp)
407336:	50                   	push   %eax
407337:	57                   	push   %edi
407338:	ff 75 20             	push   0x20(%ebp)
40733b:	ff 75 ec             	push   -0x14(%ebp)
40733e:	e8 e2 18 00 00       	call   0x408c25
407343:	8b f0                	mov    %eax,%esi
407345:	89 75 f0             	mov    %esi,-0x10(%ebp)
407348:	83 c4 18             	add    $0x18,%esp
40734b:	f7 de                	neg    %esi
40734d:	1b f6                	sbb    %esi,%esi
40734f:	23 75 f8             	and    -0x8(%ebp),%esi
407352:	57                   	push   %edi
407353:	e8 8d fc ff ff       	call   0x406fe5
407358:	59                   	pop    %ecx
407359:	eb 1a                	jmp    0x407375
40735b:	ff 75 1c             	push   0x1c(%ebp)
40735e:	ff 75 18             	push   0x18(%ebp)
407361:	ff 75 14             	push   0x14(%ebp)
407364:	ff 75 10             	push   0x10(%ebp)
407367:	ff 75 0c             	push   0xc(%ebp)
40736a:	ff 75 08             	push   0x8(%ebp)
40736d:	ff 15 1c d1 41 00    	call   *0x41d11c
407373:	8b f0                	mov    %eax,%esi
407375:	39 5d f4             	cmp    %ebx,-0xc(%ebp)
407378:	74 09                	je     0x407383
40737a:	ff 75 f4             	push   -0xc(%ebp)
40737d:	e8 21 da ff ff       	call   0x404da3
407382:	59                   	pop    %ecx
407383:	8b 45 f0             	mov    -0x10(%ebp),%eax
407386:	3b c3                	cmp    %ebx,%eax
407388:	74 0c                	je     0x407396
40738a:	39 45 18             	cmp    %eax,0x18(%ebp)
40738d:	74 07                	je     0x407396
40738f:	50                   	push   %eax
407390:	e8 0e da ff ff       	call   0x404da3
407395:	59                   	pop    %ecx
407396:	8b c6                	mov    %esi,%eax
407398:	8d 65 e0             	lea    -0x20(%ebp),%esp
40739b:	5f                   	pop    %edi
40739c:	5e                   	pop    %esi
40739d:	5b                   	pop    %ebx
40739e:	8b 4d fc             	mov    -0x4(%ebp),%ecx
4073a1:	33 cd                	xor    %ebp,%ecx
4073a3:	e8 58 9c ff ff       	call   0x401000
4073a8:	c9                   	leave
4073a9:	c3                   	ret
4073aa:	8b ff                	mov    %edi,%edi
4073ac:	55                   	push   %ebp
4073ad:	8b ec                	mov    %esp,%ebp
4073af:	83 ec 10             	sub    $0x10,%esp
4073b2:	ff 75 08             	push   0x8(%ebp)
4073b5:	8d 4d f0             	lea    -0x10(%ebp),%ecx
4073b8:	e8 11 d2 ff ff       	call   0x4045ce
4073bd:	ff 75 28             	push   0x28(%ebp)
4073c0:	8d 4d f0             	lea    -0x10(%ebp),%ecx
4073c3:	ff 75 24             	push   0x24(%ebp)
4073c6:	ff 75 20             	push   0x20(%ebp)
4073c9:	ff 75 1c             	push   0x1c(%ebp)
4073cc:	ff 75 18             	push   0x18(%ebp)
4073cf:	ff 75 14             	push   0x14(%ebp)
4073d2:	ff 75 10             	push   0x10(%ebp)
4073d5:	ff 75 0c             	push   0xc(%ebp)
4073d8:	e8 28 fc ff ff       	call   0x407005
4073dd:	83 c4 20             	add    $0x20,%esp
4073e0:	80 7d fc 00          	cmpb   $0x0,-0x4(%ebp)
4073e4:	74 07                	je     0x4073ed
4073e6:	8b 4d f8             	mov    -0x8(%ebp),%ecx
4073e9:	83 61 70 fd          	andl   $0xfffffffd,0x70(%ecx)
4073ed:	c9                   	leave
4073ee:	c3                   	ret
4073ef:	8b ff                	mov    %edi,%edi
4073f1:	55                   	push   %ebp
4073f2:	8b ec                	mov    %esp,%ebp
4073f4:	51                   	push   %ecx
4073f5:	51                   	push   %ecx
4073f6:	a1 04 f0 41 00       	mov    0x41f004,%eax
4073fb:	33 c5                	xor    %ebp,%eax
4073fd:	89 45 fc             	mov    %eax,-0x4(%ebp)
407400:	a1 18 10 43 00       	mov    0x431018,%eax
407405:	53                   	push   %ebx
407406:	56                   	push   %esi
407407:	33 db                	xor    %ebx,%ebx
407409:	57                   	push   %edi
40740a:	8b f9                	mov    %ecx,%edi
40740c:	3b c3                	cmp    %ebx,%eax
40740e:	75 3a                	jne    0x40744a
407410:	8d 45 f8             	lea    -0x8(%ebp),%eax
407413:	50                   	push   %eax
407414:	33 f6                	xor    %esi,%esi
407416:	46                   	inc    %esi
407417:	56                   	push   %esi
407418:	68 38 db 41 00       	push   $0x41db38
40741d:	56                   	push   %esi
40741e:	ff 15 28 d1 41 00    	call   *0x41d128
407424:	85 c0                	test   %eax,%eax