407eca:	89 45 fc             	mov    %eax,-0x4(%ebp)
407ecd:	8b 45 18             	mov    0x18(%ebp),%eax
407ed0:	83 e8 00             	sub    $0x0,%eax
407ed3:	74 46                	je     0x407f1b
407ed5:	83 e8 01             	sub    $0x1,%eax
407ed8:	74 38                	je     0x407f12
407eda:	83 e8 01             	sub    $0x1,%eax
407edd:	74 0d                	je     0x407eec
407edf:	83 e8 01             	sub    $0x1,%eax
407ee2:	75 41                	jne    0x407f25
407ee4:	57                   	push   %edi
407ee5:	e8 96 cd ff ff       	call   0x404c80
407eea:	eb 36                	jmp    0x407f22
407eec:	85 ff                	test   %edi,%edi
407eee:	78 19                	js     0x407f09
407ef0:	bf 9c 02 07 80       	mov    $0x8007029c,%edi
407ef5:	57                   	push   %edi
407ef6:	6a 02                	push   $0x2
407ef8:	ff 75 14             	push   0x14(%ebp)
407efb:	ff 75 10             	push   0x10(%ebp)
407efe:	ff 75 0c             	push   0xc(%ebp)
407f01:	ff 75 08             	push   0x8(%ebp)
407f04:	e8 01 03 00 00       	call   0x40820a
407f09:	8b cf                	mov    %edi,%ecx
407f0b:	e8 f6 fc ff ff       	call   0x407c06
407f10:	eb 10                	jmp    0x407f22
407f12:	8b cf                	mov    %edi,%ecx
407f14:	e8 da fc ff ff       	call   0x407bf3
407f19:	eb 07                	jmp    0x407f22
407f1b:	8b cf                	mov    %edi,%ecx
407f1d:	e8 be fc ff ff       	call   0x407be0
407f22:	89 45 fc             	mov    %eax,-0x4(%ebp)
407f25:	8b 75 38             	mov    0x38(%ebp),%esi
407f28:	8b 45 18             	mov    0x18(%ebp),%eax
407f2b:	89 06                	mov    %eax,(%esi)
407f2d:	33 c0                	xor    %eax,%eax
407f2f:	89 7e 04             	mov    %edi,0x4(%esi)
407f32:	40                   	inc    %eax
407f33:	f0 0f c1 05 98 26 43 	lock xadd %eax,0x432698
407f3a:	00
407f3b:	40                   	inc    %eax
407f3c:	89 46 08             	mov    %eax,0x8(%esi)
407f3f:	8b 45 20             	mov    0x20(%ebp),%eax
407f42:	85 c0                	test   %eax,%eax
407f44:	74 07                	je     0x407f4d
407f46:	33 c9                	xor    %ecx,%ecx
407f48:	66 39 08             	cmp    %cx,(%eax)
407f4b:	75 02                	jne    0x407f4f
407f4d:	33 c0                	xor    %eax,%eax
407f4f:	89 46 0c             	mov    %eax,0xc(%esi)
407f52:	ff 15 50 31 43 00    	call   *0x433150
407f58:	89 46 10             	mov    %eax,0x10(%esi)
407f5b:	8d 7e 2c             	lea    0x2c(%esi),%edi
407f5e:	8b 45 08             	mov    0x8(%ebp),%eax
407f61:	33 d2                	xor    %edx,%edx
407f63:	89 46 1c             	mov    %eax,0x1c(%esi)
407f66:	8b 45 f8             	mov    -0x8(%ebp),%eax
407f69:	89 46 20             	mov    %eax,0x20(%esi)
407f6c:	8b 45 fc             	mov    -0x4(%ebp),%eax
407f6f:	89 46 24             	mov    %eax,0x24(%esi)
407f72:	8b 45 10             	mov    0x10(%ebp),%eax
407f75:	89 46 14             	mov    %eax,0x14(%esi)
407f78:	8b 45 0c             	mov    0xc(%ebp),%eax
407f7b:	89 46 18             	mov    %eax,0x18(%esi)
407f7e:	8b 45 14             	mov    0x14(%ebp),%eax
407f81:	89 46 48             	mov    %eax,0x48(%esi)
407f84:	8b 45 f4             	mov    -0xc(%ebp),%eax
407f87:	89 46 4c             	mov    %eax,0x4c(%esi)
407f8a:	33 c0                	xor    %eax,%eax
407f8c:	6a 06                	push   $0x6
407f8e:	59                   	pop    %ecx
407f8f:	89 56 28             	mov    %edx,0x28(%esi)
407f92:	f3 ab                	rep stos %eax,%es:(%edi)
407f94:	8b 3d 08 26 43 00    	mov    0x432608,%edi
407f9a:	85 ff                	test   %edi,%edi
407f9c:	74 0a                	je     0x407fa8
407f9e:	8b cf                	mov    %edi,%ecx
407fa0:	ff 15 18 34 43 00    	call   *0x433418
407fa6:	ff d7                	call   *%edi
407fa8:	8b 3d 10 26 43 00    	mov    0x432610,%edi
407fae:	89 46 44             	mov    %eax,0x44(%esi)
407fb1:	85 ff                	test   %edi,%edi
407fb3:	74 13                	je     0x407fc8
407fb5:	68 00 04 00 00       	push   $0x400
407fba:	ff 75 30             	push   0x30(%ebp)
407fbd:	8b cf                	mov    %edi,%ecx
407fbf:	56                   	push   %esi
407fc0:	ff 15 18 34 43 00    	call   *0x433418
407fc6:	ff d7                	call   *%edi
407fc8:	8b 3d 0c 26 43 00    	mov    0x43260c,%edi
407fce:	85 ff                	test   %edi,%edi
407fd0:	74 0b                	je     0x407fdd
407fd2:	56                   	push   %esi
407fd3:	8b cf                	mov    %edi,%ecx
407fd5:	ff 15 18 34 43 00    	call   *0x433418
407fdb:	ff d7                	call   *%edi
407fdd:	8b 3d ec 25 43 00    	mov    0x4325ec,%edi
407fe3:	85 ff                	test   %edi,%edi
407fe5:	74 0b                	je     0x407ff2
407fe7:	56                   	push   %esi
407fe8:	8b cf                	mov    %edi,%ecx
407fea:	ff 15 18 34 43 00    	call   *0x433418
407ff0:	ff d7                	call   *%edi
407ff2:	33 c0                	xor    %eax,%eax
407ff4:	39 46 04             	cmp    %eax,0x4(%esi)
407ff7:	7c 11                	jl     0x40800a
407ff9:	83 7d 18 03          	cmpl   $0x3,0x18(%ebp)
407ffd:	0f 85 bc 00 00 00    	jne    0x4080bf
408003:	c7 46 04 ff ff 00 80 	movl   $0x8000ffff,0x4(%esi)
40800a:	38 05 21 26 43 00    	cmp    %al,0x432621
408010:	75 4a                	jne    0x40805c
408012:	8b 3d 24 26 43 00    	mov    0x432624,%edi
408018:	85 ff                	test   %edi,%edi
40801a:	74 0f                	je     0x40802b
40801c:	8b cf                	mov    %edi,%ecx
40801e:	ff 15 18 34 43 00    	call   *0x433418
408024:	ff d7                	call   *%edi
408026:	0f b6 c0             	movzbl %al,%eax
408029:	eb 0c                	jmp    0x408037
40802b:	ff 15 2c 31 43 00    	call   *0x43312c
408031:	f7 d8                	neg    %eax
408033:	1b c0                	sbb    %eax,%eax
408035:	f7 d8                	neg    %eax
408037:	85 c0                	test   %eax,%eax
408039:	75 21                	jne    0x40805c
40803b:	8b 3d 28 26 43 00    	mov    0x432628,%edi
408041:	85 ff                	test   %edi,%edi
408043:	74 56                	je     0x40809b
408045:	38 05 18 26 43 00    	cmp    %al,0x432618
40804b:	75 4e                	jne    0x40809b
40804d:	50                   	push   %eax
40804e:	50                   	push   %eax
40804f:	56                   	push   %esi
408050:	8b cf                	mov    %edi,%ecx
408052:	ff 15 18 34 43 00    	call   *0x433418
408058:	ff d7                	call   *%edi
40805a:	eb 3f                	jmp    0x40809b
40805c:	8b 3d 28 26 43 00    	mov    0x432628,%edi
408062:	85 ff                	test   %edi,%edi
408064:	74 1a                	je     0x408080
408066:	80 3d 18 26 43 00 00 	cmpb   $0x0,0x432618
40806d:	75 11                	jne    0x408080
40806f:	68 00 08 00 00       	push   $0x800
408074:	53                   	push   %ebx
408075:	56                   	push   %esi
408076:	8b cf                	mov    %edi,%ecx
408078:	ff 15 18 34 43 00    	call   *0x433418
40807e:	ff d7                	call   *%edi
408080:	33 c0                	xor    %eax,%eax
408082:	66 39 03             	cmp    %ax,(%ebx)
408085:	75 0d                	jne    0x408094
408087:	56                   	push   %esi
408088:	ba 00 08 00 00       	mov    $0x800,%edx
40808d:	8b cb                	mov    %ebx,%ecx
40808f:	e8 d8 f8 ff ff       	call   0x40796c
408094:	53                   	push   %ebx
408095:	ff 15 98 31 43 00    	call   *0x433198
40809b:	80 3d 20 26 43 00 00 	cmpb   $0x0,0x432620
4080a2:	74 14                	je     0x4080b8
4080a4:	8b 35 04 26 43 00    	mov    0x432604,%esi
4080aa:	85 f6                	test   %esi,%esi
4080ac:	74 0a                	je     0x4080b8
4080ae:	8b ce                	mov    %esi,%ecx
4080b0:	ff 15 18 34 43 00    	call   *0x433418
4080b6:	ff d6                	call   *%esi
4080b8:	5f                   	pop    %edi
4080b9:	5e                   	pop    %esi
4080ba:	5b                   	pop    %ebx
4080bb:	c9                   	leave
4080bc:	c2 34 00             	ret    $0x34
4080bf:	e8 c7 02 00 00       	call   0x40838b
4080c4:	cc                   	int3
4080c5:	8b ff                	mov    %edi,%edi
4080c7:	55                   	push   %ebp
4080c8:	8b ec                	mov    %esp,%ebp
4080ca:	83 ec 50             	sub    $0x50,%esp
4080cd:	56                   	push   %esi
4080ce:	57                   	push   %edi
4080cf:	8b 3d 1c 26 43 00    	mov    0x43261c,%edi
4080d5:	8b f1                	mov    %ecx,%esi
4080d7:	85 ff                	test   %edi,%edi
4080d9:	74 0b                	je     0x4080e6
4080db:	56                   	push   %esi
4080dc:	8b cf                	mov    %edi,%ecx
4080de:	ff 15 18 34 43 00    	call   *0x433418
4080e4:	ff d7                	call   *%edi
4080e6:	6a 50                	push   $0x50
4080e8:	8d 45 b0             	lea    -0x50(%ebp),%eax
4080eb:	6a 00                	push   $0x0
4080ed:	50                   	push   %eax
4080ee:	e8 14 8a 00 00       	call   0x410b07
4080f3:	8b 4e 48             	mov    0x48(%esi),%ecx
4080f6:	33 c0                	xor    %eax,%eax
4080f8:	40                   	inc    %eax
4080f9:	c7 45 b0 09 04 00 c0 	movl   $0xc0000409,-0x50(%ebp)
408100:	83 c4 0c             	add    $0xc,%esp
408103:	89 45 c0             	mov    %eax,-0x40(%ebp)
408106:	89 45 b4             	mov    %eax,-0x4c(%ebp)
408109:	c7 45 c4 07 00 00 00 	movl   $0x7,-0x3c(%ebp)
408110:	85 c9                	test   %ecx,%ecx
408112:	75 09                	jne    0x40811d
408114:	50                   	push   %eax
408115:	8d 4d b0             	lea    -0x50(%ebp),%ecx
408118:	e8 fc fa ff ff       	call   0x407c19
40811d:	8b 46 04             	mov    0x4(%esi),%eax
408120:	89 45 c8             	mov    %eax,-0x38(%ebp)
408123:	8b 46 20             	mov    0x20(%esi),%eax
408126:	c7 45 c0 03 00 00 00 	movl   $0x3,-0x40(%ebp)
40812d:	89 45 cc             	mov    %eax,-0x34(%ebp)
408130:	89 4d bc             	mov    %ecx,-0x44(%ebp)
408133:	6a 00                	push   $0x0
408135:	eb de                	jmp    0x408115
408137:	8b ff                	mov    %edi,%edi
408139:	55                   	push   %ebp
40813a:	8b ec                	mov    %esp,%ebp
40813c:	83 e4 f8             	and    $0xfffffff8,%esp
40813f:	b8 64 14 00 00       	mov    $0x1464,%eax
408144:	e8 87 89 00 00       	call   0x410ad0
408149:	a1 64 10 41 00       	mov    0x411064,%eax
40814e:	33 c4                	xor    %esp,%eax
408150:	89 84 24 60 14 00 00 	mov    %eax,0x1460(%esp)
408157:	83 7d 18 00          	cmpl   $0x0,0x18(%ebp)
40815b:	8b 45 08             	mov    0x8(%ebp),%eax
40815e:	53                   	push   %ebx
40815f:	8b 5d 10             	mov    0x10(%ebp),%ebx
408162:	56                   	push   %esi
408163:	89 5c 24 10          	mov    %ebx,0x10(%esp)
408167:	8b 5d 14             	mov    0x14(%ebp),%ebx
40816a:	57                   	push   %edi
40816b:	8b 7d 0c             	mov    0xc(%ebp),%edi
40816e:	89 5c 24 10          	mov    %ebx,0x10(%esp)
408172:	75 0d                	jne    0x408181
408174:	83 3d f0 25 43 00 00 	cmpl   $0x0,0x4325f0
40817b:	74 04                	je     0x408181
40817d:	b3 01                	mov    $0x1,%bl
40817f:	eb 02                	jmp    0x408183
408181:	32 db                	xor    %bl,%bl
408183:	8d 74 24 18          	lea    0x18(%esp),%esi
408187:	56                   	push   %esi
408188:	51                   	push   %ecx
408189:	8d 74 24 70          	lea    0x70(%esp),%esi
40818d:	56                   	push   %esi
40818e:	51                   	push   %ecx
40818f:	8d b4 24 78 04 00 00 	lea    0x478(%esp),%esi
408196:	56                   	push   %esi
408197:	8b 75 18             	mov    0x18(%ebp),%esi
40819a:	51                   	push   %ecx
40819b:	6a 00                	push   $0x0
40819d:	ff 75 1c             	push   0x1c(%ebp)
4081a0:	56                   	push   %esi
4081a1:	ff 74 24 34          	push   0x34(%esp)
4081a5:	ff 74 24 3c          	push   0x3c(%esp)
4081a9:	57                   	push   %edi
4081aa:	50                   	push   %eax
4081ab:	e8 f6 fc ff ff       	call   0x407ea6
4081b0:	83 fe 03             	cmp    $0x3,%esi
4081b3:	74 4b                	je     0x408200
4081b5:	85 f6                	test   %esi,%esi
4081b7:	75 30                	jne    0x4081e9
4081b9:	84 db                	test   %bl,%bl
4081bb:	74 1d                	je     0x4081da
4081bd:	8b 35 f0 25 43 00    	mov    0x4325f0,%esi
4081c3:	8d 84 24 68 04 00 00 	lea    0x468(%esp),%eax
4081ca:	50                   	push   %eax
4081cb:	8d 44 24 1c          	lea    0x1c(%esp),%eax
4081cf:	8b ce                	mov    %esi,%ecx
4081d1:	50                   	push   %eax
4081d2:	ff 15 18 34 43 00    	call   *0x433418
4081d8:	ff d6                	call   *%esi
4081da:	8d 4c 24 18          	lea    0x18(%esp),%ecx
4081de:	e8 a9 fc ff ff       	call   0x407e8c
4081e3:	8d 4c 24 18          	lea    0x18(%esp),%ecx
4081e7:	eb 1b                	jmp    0x408204
4081e9:	8b 8c 24 6c 14 00 00 	mov    0x146c(%esp),%ecx
4081f0:	5f                   	pop    %edi
4081f1:	5e                   	pop    %esi
4081f2:	5b                   	pop    %ebx
4081f3:	33 cc                	xor    %esp,%ecx
4081f5:	e8 36 82 00 00       	call   0x410430
4081fa:	8b e5                	mov    %ebp,%esp
4081fc:	5d                   	pop    %ebp
4081fd:	c2 20 00             	ret    $0x20
408200:	8d 4c 24 18          	lea    0x18(%esp),%ecx
408204:	e8 bc fe ff ff       	call   0x4080c5
408209:	cc                   	int3
40820a:	8b ff                	mov    %edi,%edi
40820c:	55                   	push   %ebp
40820d:	8b ec                	mov    %esp,%ebp
40820f:	83 e4 f8             	and    $0xfffffff8,%esp
408212:	51                   	push   %ecx
408213:	51                   	push   %ecx
408214:	ff 75 1c             	push   0x1c(%ebp)
408217:	ff 75 18             	push   0x18(%ebp)
40821a:	ff 75 14             	push   0x14(%ebp)
40821d:	ff 75 10             	push   0x10(%ebp)
408220:	ff 75 0c             	push   0xc(%ebp)
408223:	ff 75 08             	push   0x8(%ebp)
408226:	e8 0c ff ff ff       	call   0x408137
40822b:	8b e5                	mov    %ebp,%esp
40822d:	5d                   	pop    %ebp
40822e:	c2 18 00             	ret    $0x18
408231:	8b ff                	mov    %edi,%edi
408233:	55                   	push   %ebp
408234:	8b ec                	mov    %esp,%ebp
408236:	53                   	push   %ebx
408237:	56                   	push   %esi
408238:	57                   	push   %edi
408239:	ff 75 14             	push   0x14(%ebp)
40823c:	8b fa                	mov    %edx,%edi
40823e:	8b d9                	mov    %ecx,%ebx
408240:	51                   	push   %ecx
408241:	51                   	push   %ecx
408242:	68 a0 16 40 00       	push   $0x4016a0
408247:	e8 f7 f9 ff ff       	call   0x407c43
40824c:	8b f0                	mov    %eax,%esi
40824e:	85 f6                	test   %esi,%esi
408250:	7f 04                	jg     0x408256
408252:	8b ce                	mov    %esi,%ecx
408254:	eb 09                	jmp    0x40825f
408256:	0f b7 ce             	movzwl %si,%ecx
408259:	81 c9 00 00 07 80    	or     $0x80070000,%ecx
40825f:	51                   	push   %ecx
408260:	51                   	push   %ecx
408261:	51                   	push   %ecx
408262:	6a 03                	push   $0x3
408264:	ff 75 14             	push   0x14(%ebp)
408267:	8b d7                	mov    %edi,%edx
408269:	8b cb                	mov    %ebx,%ecx
40826b:	6a 00                	push   $0x0
40826d:	6a 00                	push   $0x0
40826f:	68 a0 16 40 00       	push   $0x4016a0
408274:	e8 be fe ff ff       	call   0x408137
408279:	5f                   	pop    %edi
40827a:	8b c6                	mov    %esi,%eax
40827c:	5e                   	pop    %esi
40827d:	5b                   	pop    %ebx
40827e:	5d                   	pop    %ebp
40827f:	c2 14 00             	ret    $0x14
408282:	8b ff                	mov    %edi,%edi
408284:	55                   	push   %ebp
408285:	8b ec                	mov    %esp,%ebp
408287:	53                   	push   %ebx
408288:	56                   	push   %esi
408289:	57                   	push   %edi
40828a:	ff 75 14             	push   0x14(%ebp)
40828d:	8b fa                	mov    %edx,%edi
40828f:	8b d9                	mov    %ecx,%ebx
408291:	51                   	push   %ecx
408292:	51                   	push   %ecx
408293:	68 9c 16 40 00       	push   $0x40169c