406ff9:	ff 15 80 10 40 00    	call   *0x401080
406fff:	8d 85 78 ff ff ff    	lea    -0x88(%ebp),%eax
407005:	50                   	push   %eax
407006:	8d 4d 88             	lea    -0x78(%ebp),%ecx
407009:	51                   	push   %ecx
40700a:	8d 55 98             	lea    -0x68(%ebp),%edx
40700d:	52                   	push   %edx
40700e:	8d 45 a8             	lea    -0x58(%ebp),%eax
407011:	50                   	push   %eax
407012:	6a 04                	push   $0x4
407014:	ff 15 28 10 40 00    	call   *0x401028
40701a:	83 c4 14             	add    $0x14,%esp
40701d:	39 1d 38 b3 40 00    	cmp    %ebx,0x40b338
407023:	75 10                	jne    0x407035
407025:	68 38 b3 40 00       	push   $0x40b338
40702a:	68 c4 60 40 00       	push   $0x4060c4
40702f:	ff 15 4c 11 40 00    	call   *0x40114c
407035:	8b 3d 38 b3 40 00    	mov    0x40b338,%edi
40703b:	8b 0f                	mov    (%edi),%ecx
40703d:	8d 55 b8             	lea    -0x48(%ebp),%edx
407040:	52                   	push   %edx
407041:	57                   	push   %edi
407042:	ff 51 14             	call   *0x14(%ecx)
407045:	db e2                	fnclex
407047:	3b c3                	cmp    %ebx,%eax
407049:	7d 0f                	jge    0x40705a
40704b:	6a 14                	push   $0x14
40704d:	68 b4 60 40 00       	push   $0x4060b4
407052:	57                   	push   %edi
407053:	50                   	push   %eax
407054:	ff 15 58 10 40 00    	call   *0x401058
40705a:	8b 45 b8             	mov    -0x48(%ebp),%eax
40705d:	83 ec 10             	sub    $0x10,%esp
407060:	8b fc                	mov    %esp,%edi
407062:	b9 0a 00 00 00       	mov    $0xa,%ecx
407067:	89 0f                	mov    %ecx,(%edi)
407069:	89 8d 68 ff ff ff    	mov    %ecx,-0x98(%ebp)
40706f:	8b 8d 6c ff ff ff    	mov    -0x94(%ebp),%ecx
407075:	89 4f 04             	mov    %ecx,0x4(%edi)
407078:	c7 85 70 ff ff ff 04 	movl   $0x80020004,-0x90(%ebp)
40707f:	00 02 80
407082:	8b 8d 70 ff ff ff    	mov    -0x90(%ebp),%ecx
407088:	8b 10                	mov    (%eax),%edx
40708a:	89 4f 08             	mov    %ecx,0x8(%edi)
40708d:	8b 8d 74 ff ff ff    	mov    -0x8c(%ebp),%ecx
407093:	68 94 60 40 00       	push   $0x406094
407098:	50                   	push   %eax
407099:	89 85 04 ff ff ff    	mov    %eax,-0xfc(%ebp)
40709f:	89 4f 0c             	mov    %ecx,0xc(%edi)
4070a2:	ff 92 3c 01 00 00    	call   *0x13c(%edx)
4070a8:	db e2                	fnclex
4070aa:	3b c3                	cmp    %ebx,%eax
4070ac:	7d 18                	jge    0x4070c6
4070ae:	8b 95 04 ff ff ff    	mov    -0xfc(%ebp),%edx
4070b4:	68 3c 01 00 00       	push   $0x13c
4070b9:	68 d4 60 40 00       	push   $0x4060d4
4070be:	52                   	push   %edx
4070bf:	50                   	push   %eax
4070c0:	ff 15 58 10 40 00    	call   *0x401058
4070c6:	8d 4d b8             	lea    -0x48(%ebp),%ecx
4070c9:	ff 15 d0 11 40 00    	call   *0x4011d0
4070cf:	6a 01                	push   $0x1
4070d1:	ff 15 c0 10 40 00    	call   *0x4010c0
4070d7:	8b d0                	mov    %eax,%edx
4070d9:	8d 4d c0             	lea    -0x40(%ebp),%ecx
4070dc:	ff 15 b0 11 40 00    	call   *0x4011b0
4070e2:	50                   	push   %eax
4070e3:	68 e8 60 40 00       	push   $0x4060e8
4070e8:	ff 15 d4 10 40 00    	call   *0x4010d4
4070ee:	8b f8                	mov    %eax,%edi
4070f0:	f7 df                	neg    %edi
4070f2:	1b ff                	sbb    %edi,%edi
4070f4:	f7 df                	neg    %edi
4070f6:	8d 4d c0             	lea    -0x40(%ebp),%ecx
4070f9:	f7 df                	neg    %edi
4070fb:	ff 15 cc 11 40 00    	call   *0x4011cc
407101:	66 3b fb             	cmp    %bx,%di
407104:	74 26                	je     0x40712c
407106:	8b 06                	mov    (%esi),%eax
407108:	68 11 03 00 00       	push   $0x311
40710d:	56                   	push   %esi
40710e:	ff 90 5c 01 00 00    	call   *0x15c(%eax)
407114:	db e2                	fnclex
407116:	3b c3                	cmp    %ebx,%eax
407118:	7d 12                	jge    0x40712c
40711a:	68 5c 01 00 00       	push   $0x15c
40711f:	68 ec 5e 40 00       	push   $0x405eec
407124:	56                   	push   %esi
407125:	50                   	push   %eax
407126:	ff 15 58 10 40 00    	call   *0x401058
40712c:	39 1d 38 b3 40 00    	cmp    %ebx,0x40b338
407132:	75 10                	jne    0x407144
407134:	68 38 b3 40 00       	push   $0x40b338
407139:	68 c4 60 40 00       	push   $0x4060c4
40713e:	ff 15 4c 11 40 00    	call   *0x40114c
407144:	8b 3d 38 b3 40 00    	mov    0x40b338,%edi
40714a:	8b 0f                	mov    (%edi),%ecx
40714c:	8d 55 b8             	lea    -0x48(%ebp),%edx
40714f:	52                   	push   %edx
407150:	57                   	push   %edi
407151:	ff 51 14             	call   *0x14(%ecx)
407154:	db e2                	fnclex
407156:	3b c3                	cmp    %ebx,%eax
407158:	7d 0f                	jge    0x407169
40715a:	6a 14                	push   $0x14
40715c:	68 b4 60 40 00       	push   $0x4060b4
407161:	57                   	push   %edi
407162:	50                   	push   %eax
407163:	ff 15 58 10 40 00    	call   *0x401058
407169:	8b 45 b8             	mov    -0x48(%ebp),%eax
40716c:	8b 08                	mov    (%eax),%ecx
40716e:	8d 95 34 ff ff ff    	lea    -0xcc(%ebp),%edx
407174:	52                   	push   %edx
407175:	50                   	push   %eax
407176:	8b f8                	mov    %eax,%edi
407178:	ff 91 40 01 00 00    	call   *0x140(%ecx)
40717e:	db e2                	fnclex
407180:	3b c3                	cmp    %ebx,%eax
407182:	7d 12                	jge    0x407196
407184:	68 40 01 00 00       	push   $0x140
407189:	68 d4 60 40 00       	push   $0x4060d4
40718e:	57                   	push   %edi
40718f:	50                   	push   %eax
407190:	ff 15 58 10 40 00    	call   *0x401058
407196:	8d 4d b8             	lea    -0x48(%ebp),%ecx
407199:	ff 15 d0 11 40 00    	call   *0x4011d0
40719f:	8b 3e                	mov    (%esi),%edi
4071a1:	8d 85 18 ff ff ff    	lea    -0xe8(%ebp),%eax
4071a7:	50                   	push   %eax
4071a8:	b9 15 00 00 00       	mov    $0x15,%ecx
4071ad:	c7 85 20 ff ff ff 00 	movl   $0x92c00000,-0xe0(%ebp)
4071b4:	00 c0 92
4071b7:	c7 85 24 ff ff ff e1 	movl   $0x4202a0e1,-0xdc(%ebp)
4071be:	a0 02 42
4071c1:	ff 15 18 11 40 00    	call   *0x401118
4071c7:	8d 8d 20 ff ff ff    	lea    -0xe0(%ebp),%ecx
4071cd:	50                   	push   %eax
4071ce:	51                   	push   %ecx
4071cf:	56                   	push   %esi
4071d0:	ff 97 f8 06 00 00    	call   *0x6f8(%edi)
4071d6:	3b c3                	cmp    %ebx,%eax
4071d8:	7d 12                	jge    0x4071ec
4071da:	68 f8 06 00 00       	push   $0x6f8
4071df:	68 1c 5f 40 00       	push   $0x405f1c
4071e4:	56                   	push   %esi
4071e5:	50                   	push   %eax
4071e6:	ff 15 58 10 40 00    	call   *0x401058
4071ec:	b9 bd 00 00 00       	mov    $0xbd,%ecx
4071f1:	ff 15 18 11 40 00    	call   *0x401118
4071f7:	8b 16                	mov    (%esi),%edx
4071f9:	88 85 34 ff ff ff    	mov    %al,-0xcc(%ebp)
4071ff:	8d 85 34 ff ff ff    	lea    -0xcc(%ebp),%eax
407205:	50                   	push   %eax
407206:	56                   	push   %esi
407207:	ff 92 fc 06 00 00    	call   *0x6fc(%edx)
40720d:	3b c3                	cmp    %ebx,%eax
40720f:	7d 12                	jge    0x407223
407211:	68 fc 06 00 00       	push   $0x6fc
407216:	68 1c 5f 40 00       	push   $0x405f1c
40721b:	56                   	push   %esi
40721c:	50                   	push   %eax
40721d:	ff 15 58 10 40 00    	call   *0x401058
407223:	8b 0e                	mov    (%esi),%ecx
407225:	8d 95 28 ff ff ff    	lea    -0xd8(%ebp),%edx
40722b:	52                   	push   %edx
40722c:	68 0c 61 40 00       	push   $0x40610c
407231:	68 cc 40 7e 00       	push   $0x7e40cc
407236:	8d 85 30 ff ff ff    	lea    -0xd0(%ebp),%eax
40723c:	50                   	push   %eax
40723d:	68 be 49 00 00       	push   $0x49be
407242:	8d 95 34 ff ff ff    	lea    -0xcc(%ebp),%edx
407248:	52                   	push   %edx
407249:	68 f0 60 40 00       	push   $0x4060f0
40724e:	56                   	push   %esi
40724f:	c7 85 30 ff ff ff f4 	movl   $0x5ef4,-0xd0(%ebp)
407256:	5e 00 00
407259:	c7 85 34 ff ff ff ff 	movl   $0xffffffff,-0xcc(%ebp)
407260:	ff ff ff
407263:	ff 91 10 07 00 00    	call   *0x710(%ecx)
407269:	8b 06                	mov    (%esi),%eax
40726b:	68 4c 61 40 00       	push   $0x40614c
407270:	8d 8d 20 ff ff ff    	lea    -0xe0(%ebp),%ecx
407276:	51                   	push   %ecx
407277:	56                   	push   %esi
407278:	c7 85 20 ff ff ff a0 	movl   $0x9a5f65a0,-0xe0(%ebp)
40727f:	65 5f 9a
407282:	c7 85 24 ff ff ff 04 	movl   $0x5b04,-0xdc(%ebp)
407289:	5b 00 00
40728c:	ff 90 14 07 00 00    	call   *0x714(%eax)
407292:	8b 3d 6c 11 40 00    	mov    0x40116c,%edi
407298:	ba 6c 61 40 00       	mov    $0x40616c,%edx
40729d:	8d 4d c0             	lea    -0x40(%ebp),%ecx
4072a0:	c7 85 18 ff ff ff 00 	movl   $0xc9e80000,-0xe8(%ebp)
4072a7:	00 e8 c9
4072aa:	c7 85 1c ff ff ff a6 	movl   $0x4202a2a6,-0xe4(%ebp)
4072b1:	a2 02 42
4072b4:	c7 85 20 ff ff ff 20 	movl   $0x4293ec20,-0xe0(%ebp)
4072bb:	ec 93 42
4072be:	c7 85 24 ff ff ff 03 	movl   $0x5b03,-0xdc(%ebp)
4072c5:	5b 00 00
4072c8:	ff d7                	call   *%edi
4072ca:	8b 16                	mov    (%esi),%edx
4072cc:	8d 85 10 ff ff ff    	lea    -0xf0(%ebp),%eax
4072d2:	50                   	push   %eax
4072d3:	68 86 6a 0e 00       	push   $0xe6a86
4072d8:	8d 8d 18 ff ff ff    	lea    -0xe8(%ebp),%ecx
4072de:	51                   	push   %ecx
4072df:	68 bd 44 00 00       	push   $0x44bd
4072e4:	8d 85 20 ff ff ff    	lea    -0xe0(%ebp),%eax
4072ea:	50                   	push   %eax
4072eb:	8d 4d c0             	lea    -0x40(%ebp),%ecx
4072ee:	51                   	push   %ecx
4072ef:	56                   	push   %esi
4072f0:	ff 92 18 07 00 00    	call   *0x718(%edx)
4072f6:	8d 4d c0             	lea    -0x40(%ebp),%ecx
4072f9:	ff 15 cc 11 40 00    	call   *0x4011cc
4072ff:	ba 98 61 40 00       	mov    $0x406198,%edx
407304:	8d 4d bc             	lea    -0x44(%ebp),%ecx
407307:	ff d7                	call   *%edi
407309:	ba 80 61 40 00       	mov    $0x406180,%edx
40730e:	8d 4d c0             	lea    -0x40(%ebp),%ecx
407311:	c7 85 28 ff ff ff 10 	movl   $0x684010,-0xd8(%ebp)
407318:	40 68 00
40731b:	ff d7                	call   *%edi
40731d:	8b 16                	mov    (%esi),%edx
40731f:	8d 45 bc             	lea    -0x44(%ebp),%eax
407322:	50                   	push   %eax
407323:	68 2f 96 85 4b       	push   $0x4b85962f
407328:	8d 8d 28 ff ff ff    	lea    -0xd8(%ebp),%ecx
40732e:	51                   	push   %ecx
40732f:	8d 45 c0             	lea    -0x40(%ebp),%eax
407332:	50                   	push   %eax
407333:	56                   	push   %esi
407334:	ff 92 00 07 00 00    	call   *0x700(%edx)
40733a:	3b c3                	cmp    %ebx,%eax
40733c:	7d 16                	jge    0x407354
40733e:	8b 3d 58 10 40 00    	mov    0x401058,%edi
407344:	68 00 07 00 00       	push   $0x700
407349:	68 1c 5f 40 00       	push   $0x405f1c
40734e:	56                   	push   %esi
40734f:	50                   	push   %eax
407350:	ff d7                	call   *%edi
407352:	eb 06                	jmp    0x40735a
407354:	8b 3d 58 10 40 00    	mov    0x401058,%edi
40735a:	8d 4d bc             	lea    -0x44(%ebp),%ecx
40735d:	51                   	push   %ecx
40735e:	8d 55 c0             	lea    -0x40(%ebp),%edx
407361:	52                   	push   %edx
407362:	6a 02                	push   $0x2
407364:	ff 15 78 11 40 00    	call   *0x401178
40736a:	8b 06                	mov    (%esi),%eax
40736c:	83 c4 0c             	add    $0xc,%esp
40736f:	68 b0 61 40 00       	push   $0x4061b0
407374:	8d 8d 20 ff ff ff    	lea    -0xe0(%ebp),%ecx
40737a:	51                   	push   %ecx
40737b:	56                   	push   %esi
40737c:	c7 85 20 ff ff ff 10 	movl   $0x1b496610,-0xe0(%ebp)
407383:	66 49 1b
407386:	c7 85 24 ff ff ff 01 	movl   $0x5b01,-0xdc(%ebp)
40738d:	5b 00 00
407390:	ff 90 04 07 00 00    	call   *0x704(%eax)
407396:	3b c3                	cmp    %ebx,%eax
407398:	7d 0e                	jge    0x4073a8
40739a:	68 04 07 00 00       	push   $0x704
40739f:	68 1c 5f 40 00       	push   $0x405f1c
4073a4:	56                   	push   %esi
4073a5:	50                   	push   %eax
4073a6:	ff d7                	call   *%edi
4073a8:	8b 16                	mov    (%esi),%edx
4073aa:	8d 85 30 ff ff ff    	lea    -0xd0(%ebp),%eax
4073b0:	50                   	push   %eax
4073b1:	68 c8 61 40 00       	push   $0x4061c8
4073b6:	8d 8d 34 ff ff ff    	lea    -0xcc(%ebp),%ecx
4073bc:	51                   	push   %ecx
4073bd:	56                   	push   %esi
4073be:	c7 85 34 ff ff ff cc 	movl   $0x71cc,-0xcc(%ebp)
4073c5:	71 00 00
4073c8:	ff 92 08 07 00 00    	call   *0x708(%edx)
4073ce:	3b c3                	cmp    %ebx,%eax
4073d0:	7d 0e                	jge    0x4073e0
4073d2:	68 08 07 00 00       	push   $0x708
4073d7:	68 1c 5f 40 00       	push   $0x405f1c
4073dc:	56                   	push   %esi
4073dd:	50                   	push   %eax
4073de:	ff d7                	call   *%edi
4073e0:	8b 16                	mov    (%esi),%edx
4073e2:	8d 85 2c ff ff ff    	lea    -0xd4(%ebp),%eax
4073e8:	50                   	push   %eax
4073e9:	8d 8d 30 ff ff ff    	lea    -0xd0(%ebp),%ecx
4073ef:	51                   	push   %ecx
4073f0:	6a ff                	push   $0xffffffff
4073f2:	8d 85 34 ff ff ff    	lea    -0xcc(%ebp),%eax
4073f8:	50                   	push   %eax
4073f9:	68 14 62 2c 4b       	push   $0x4b2c6214
4073fe:	56                   	push   %esi
4073ff:	c7 85 30 ff ff ff d1 	movl   $0x57d1,-0xd0(%ebp)
407406:	57 00 00
407409:	89 9d 34 ff ff ff    	mov    %ebx,-0xcc(%ebp)
40740f:	ff 92 1c 07 00 00    	call   *0x71c(%edx)
407415:	b9 67 00 00 00       	mov    $0x67,%ecx
40741a:	ff 15 18 11 40 00    	call   *0x401118
407420:	8b 0e                	mov    (%esi),%ecx
407422:	8d 95 20 ff ff ff    	lea    -0xe0(%ebp),%edx
407428:	52                   	push   %edx
407429:	88 85 34 ff ff ff    	mov    %al,-0xcc(%ebp)
40742f:	8d 85 34 ff ff ff    	lea    -0xcc(%ebp),%eax
407435:	50                   	push   %eax
407436:	68 c4 b2 88 4b       	push   $0x4b88b2c4
40743b:	6a ff                	push   $0xffffffff
40743d:	68 02 5b 00 00       	push   $0x5b02
407442:	68 b0 68 7b 4f       	push   $0x4f7b68b0
407447:	56                   	push   %esi
407448:	ff 91 20 07 00 00    	call   *0x720(%ecx)
40744e:	e8 8d 33 00 00       	call   0x40a7e0
407453:	89 5d fc             	mov    %ebx,-0x4(%ebp)
407456:	9b                   	fwait
407457:	68 9a 74 40 00       	push   $0x40749a
40745c:	eb 3b                	jmp    0x407499
40745e:	8d 4d bc             	lea    -0x44(%ebp),%ecx
407461:	51                   	push   %ecx
407462:	8d 55 c0             	lea    -0x40(%ebp),%edx
407465:	52                   	push   %edx
407466:	6a 02                	push   $0x2
407468:	ff 15 78 11 40 00    	call   *0x401178
40746e:	83 c4 0c             	add    $0xc,%esp
407471:	8d 4d b8             	lea    -0x48(%ebp),%ecx
407474:	ff 15 d0 11 40 00    	call   *0x4011d0
40747a:	8d 85 78 ff ff ff    	lea    -0x88(%ebp),%eax
407480:	50                   	push   %eax
407481:	8d 4d 88             	lea    -0x78(%ebp),%ecx
407484:	51                   	push   %ecx
407485:	8d 55 98             	lea    -0x68(%ebp),%edx
407488:	52                   	push   %edx
407489:	8d 45 a8             	lea    -0x58(%ebp),%eax
40748c:	50                   	push   %eax
40748d:	6a 04                	push   $0x4
40748f:	ff 15 28 10 40 00    	call   *0x401028
407495:	83 c4 14             	add    $0x14,%esp
407498:	c3                   	ret
407499:	c3                   	ret
40749a:	8b 45 08             	mov    0x8(%ebp),%eax
40749d:	8b 08                	mov    (%eax),%ecx
40749f:	50                   	push   %eax
4074a0:	ff 51 08             	call   *0x8(%ecx)
4074a3:	8b 45 fc             	mov    -0x4(%ebp),%eax
4074a6:	8b 4d ec             	mov    -0x14(%ebp),%ecx
4074a9:	5f                   	pop    %edi
4074aa:	5e                   	pop    %esi
4074ab:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
4074b2:	5b                   	pop    %ebx