409662:	b9 0b 00 00 00       	mov    $0xb,%ecx
409667:	83 ec 10             	sub    $0x10,%esp
40966a:	89 45 84             	mov    %eax,-0x7c(%ebp)
40966d:	89 8d 7c ff ff ff    	mov    %ecx,-0x84(%ebp)
409673:	8b d4                	mov    %esp,%edx
409675:	89 0a                	mov    %ecx,(%edx)
409677:	8b 4d 80             	mov    -0x80(%ebp),%ecx
40967a:	89 4a 04             	mov    %ecx,0x4(%edx)
40967d:	8b 4d b8             	mov    -0x48(%ebp),%ecx
409680:	89 42 08             	mov    %eax,0x8(%edx)
409683:	8b 45 88             	mov    -0x78(%ebp),%eax
409686:	68 4c 66 40 00       	push   $0x40664c
40968b:	51                   	push   %ecx
40968c:	89 42 0c             	mov    %eax,0xc(%edx)
40968f:	ff d6                	call   *%esi
409691:	8b 55 b8             	mov    -0x48(%ebp),%edx
409694:	6a 00                	push   $0x0
409696:	68 1c 67 40 00       	push   $0x40671c
40969b:	52                   	push   %edx
40969c:	8d 45 9c             	lea    -0x64(%ebp),%eax
40969f:	50                   	push   %eax
4096a0:	c7 45 84 ff ff ff ff 	movl   $0xffffffff,-0x7c(%ebp)
4096a7:	c7 85 7c ff ff ff 0b 	movl   $0x800b,-0x84(%ebp)
4096ae:	80 00 00
4096b1:	ff d7                	call   *%edi
4096b3:	83 c4 10             	add    $0x10,%esp
4096b6:	50                   	push   %eax
4096b7:	8d 8d 7c ff ff ff    	lea    -0x84(%ebp),%ecx
4096bd:	51                   	push   %ecx
4096be:	ff 15 88 11 40 00    	call   *0x401188
4096c4:	8d 4d 9c             	lea    -0x64(%ebp),%ecx
4096c7:	66 8b f0             	mov    %ax,%si
4096ca:	ff 15 1c 10 40 00    	call   *0x40101c
4096d0:	66 85 f6             	test   %si,%si
4096d3:	0f 84 8d 00 00 00    	je     0x409766
4096d9:	a1 38 b3 40 00       	mov    0x40b338,%eax
4096de:	85 c0                	test   %eax,%eax
4096e0:	75 10                	jne    0x4096f2
4096e2:	68 38 b3 40 00       	push   $0x40b338
4096e7:	68 c4 60 40 00       	push   $0x4060c4
4096ec:	ff 15 4c 11 40 00    	call   *0x40114c
4096f2:	8b 35 38 b3 40 00    	mov    0x40b338,%esi
4096f8:	8d 7d b0             	lea    -0x50(%ebp),%edi
4096fb:	57                   	push   %edi
4096fc:	68 e8 58 00 00       	push   $0x58e8
409701:	83 ec 10             	sub    $0x10,%esp
409704:	b9 02 00 00 00       	mov    $0x2,%ecx
409709:	8b fc                	mov    %esp,%edi
40970b:	89 0f                	mov    %ecx,(%edi)
40970d:	89 8d 7c ff ff ff    	mov    %ecx,-0x84(%ebp)
409713:	8b 4d 80             	mov    -0x80(%ebp),%ecx
409716:	b8 99 00 00 00       	mov    $0x99,%eax
40971b:	89 4f 04             	mov    %ecx,0x4(%edi)
40971e:	89 45 84             	mov    %eax,-0x7c(%ebp)
409721:	8b 16                	mov    (%esi),%edx
409723:	89 47 08             	mov    %eax,0x8(%edi)
409726:	8b 45 88             	mov    -0x78(%ebp),%eax
409729:	56                   	push   %esi
40972a:	89 47 0c             	mov    %eax,0xc(%edi)
40972d:	ff 52 34             	call   *0x34(%edx)
409730:	db e2                	fnclex
409732:	85 c0                	test   %eax,%eax
409734:	7d 13                	jge    0x409749
409736:	8b 1d 58 10 40 00    	mov    0x401058,%ebx
40973c:	6a 34                	push   $0x34
40973e:	68 b4 60 40 00       	push   $0x4060b4
409743:	56                   	push   %esi
409744:	50                   	push   %eax
409745:	ff d3                	call   *%ebx
409747:	eb 06                	jmp    0x40974f
409749:	8b 1d 58 10 40 00    	mov    0x401058,%ebx
40974f:	8b 45 b0             	mov    -0x50(%ebp),%eax
409752:	50                   	push   %eax
409753:	8d 4d dc             	lea    -0x24(%ebp),%ecx
409756:	51                   	push   %ecx
409757:	c7 45 b0 00 00 00 00 	movl   $0x0,-0x50(%ebp)
40975e:	ff 15 70 11 40 00    	call   *0x401170
409764:	eb 06                	jmp    0x40976c
409766:	8b 1d 58 10 40 00    	mov    0x401058,%ebx
40976c:	a1 38 b3 40 00       	mov    0x40b338,%eax
409771:	85 c0                	test   %eax,%eax
409773:	75 10                	jne    0x409785
409775:	68 38 b3 40 00       	push   $0x40b338
40977a:	68 c4 60 40 00       	push   $0x4060c4
40977f:	ff 15 4c 11 40 00    	call   *0x40114c
409785:	8b 35 38 b3 40 00    	mov    0x40b338,%esi
40978b:	8b 16                	mov    (%esi),%edx
40978d:	8d 45 b0             	lea    -0x50(%ebp),%eax
409790:	50                   	push   %eax
409791:	56                   	push   %esi
409792:	ff 52 14             	call   *0x14(%edx)
409795:	db e2                	fnclex
409797:	85 c0                	test   %eax,%eax
409799:	7d 0b                	jge    0x4097a6
40979b:	6a 14                	push   $0x14
40979d:	68 b4 60 40 00       	push   $0x4060b4
4097a2:	56                   	push   %esi
4097a3:	50                   	push   %eax
4097a4:	ff d3                	call   *%ebx
4097a6:	8b 45 b0             	mov    -0x50(%ebp),%eax
4097a9:	8b 08                	mov    (%eax),%ecx
4097ab:	8d 95 48 ff ff ff    	lea    -0xb8(%ebp),%edx
4097b1:	52                   	push   %edx
4097b2:	50                   	push   %eax
4097b3:	8b f0                	mov    %eax,%esi
4097b5:	ff 91 08 01 00 00    	call   *0x108(%ecx)
4097bb:	db e2                	fnclex
4097bd:	85 c0                	test   %eax,%eax
4097bf:	7d 0e                	jge    0x4097cf
4097c1:	68 08 01 00 00       	push   $0x108
4097c6:	68 d4 60 40 00       	push   $0x4060d4
4097cb:	56                   	push   %esi
4097cc:	50                   	push   %eax
4097cd:	ff d3                	call   *%ebx
4097cf:	8d 4d b0             	lea    -0x50(%ebp),%ecx
4097d2:	ff 15 d0 11 40 00    	call   *0x4011d0
4097d8:	8b 7d 08             	mov    0x8(%ebp),%edi
4097db:	8b 07                	mov    (%edi),%eax
4097dd:	8d 4d b4             	lea    -0x4c(%ebp),%ecx
4097e0:	51                   	push   %ecx
4097e1:	57                   	push   %edi
4097e2:	ff 90 a8 00 00 00    	call   *0xa8(%eax)
4097e8:	db e2                	fnclex
4097ea:	85 c0                	test   %eax,%eax
4097ec:	7d 0e                	jge    0x4097fc
4097ee:	68 a8 00 00 00       	push   $0xa8
4097f3:	68 ec 5e 40 00       	push   $0x405eec
4097f8:	57                   	push   %edi
4097f9:	50                   	push   %eax
4097fa:	ff d3                	call   *%ebx
4097fc:	8b 55 b4             	mov    -0x4c(%ebp),%edx
4097ff:	52                   	push   %edx
409800:	6a 00                	push   $0x0
409802:	ff 15 d4 10 40 00    	call   *0x4010d4
409808:	8b f0                	mov    %eax,%esi
40980a:	f7 de                	neg    %esi
40980c:	1b f6                	sbb    %esi,%esi
40980e:	46                   	inc    %esi
40980f:	8d 4d b4             	lea    -0x4c(%ebp),%ecx
409812:	f7 de                	neg    %esi
409814:	ff 15 cc 11 40 00    	call   *0x4011cc
40981a:	66 85 f6             	test   %si,%si
40981d:	74 7b                	je     0x40989a
40981f:	8b 07                	mov    (%edi),%eax
409821:	8d 4d b0             	lea    -0x50(%ebp),%ecx
409824:	51                   	push   %ecx
409825:	57                   	push   %edi
409826:	ff 90 60 01 00 00    	call   *0x160(%eax)
40982c:	db e2                	fnclex
40982e:	85 c0                	test   %eax,%eax
409830:	7d 0e                	jge    0x409840
409832:	68 60 01 00 00       	push   $0x160
409837:	68 ec 5e 40 00       	push   $0x405eec
40983c:	57                   	push   %edi
40983d:	50                   	push   %eax
40983e:	ff d3                	call   *%ebx
409840:	a1 38 b3 40 00       	mov    0x40b338,%eax
409845:	85 c0                	test   %eax,%eax
409847:	75 10                	jne    0x409859
409849:	68 38 b3 40 00       	push   $0x40b338
40984e:	68 c4 60 40 00       	push   $0x4060c4
409853:	ff 15 4c 11 40 00    	call   *0x40114c
409859:	8b 45 b0             	mov    -0x50(%ebp),%eax
40985c:	8b 35 38 b3 40 00    	mov    0x40b338,%esi
409862:	68 30 67 40 00       	push   $0x406730
409867:	50                   	push   %eax
409868:	8d 55 ac             	lea    -0x54(%ebp),%edx
40986b:	c7 45 b0 00 00 00 00 	movl   $0x0,-0x50(%ebp)
409872:	8b 3e                	mov    (%esi),%edi
409874:	52                   	push   %edx
409875:	ff 15 84 10 40 00    	call   *0x401084
40987b:	50                   	push   %eax
40987c:	56                   	push   %esi
40987d:	ff 57 40             	call   *0x40(%edi)
409880:	db e2                	fnclex
409882:	85 c0                	test   %eax,%eax
409884:	7d 0b                	jge    0x409891
409886:	6a 40                	push   $0x40
409888:	68 b4 60 40 00       	push   $0x4060b4
40988d:	56                   	push   %esi
40988e:	50                   	push   %eax
40988f:	ff d3                	call   *%ebx
409891:	8d 4d ac             	lea    -0x54(%ebp),%ecx
409894:	ff 15 d0 11 40 00    	call   *0x4011d0
40989a:	9b                   	fwait
40989b:	68 00 99 40 00       	push   $0x409900
4098a0:	eb 2d                	jmp    0x4098cf
4098a2:	8d 4d b4             	lea    -0x4c(%ebp),%ecx
4098a5:	ff 15 cc 11 40 00    	call   *0x4011cc
4098ab:	8d 45 ac             	lea    -0x54(%ebp),%eax
4098ae:	50                   	push   %eax
4098af:	8d 4d b0             	lea    -0x50(%ebp),%ecx
4098b2:	51                   	push   %ecx
4098b3:	6a 02                	push   $0x2
4098b5:	ff 15 40 10 40 00    	call   *0x401040
4098bb:	8d 55 8c             	lea    -0x74(%ebp),%edx
4098be:	52                   	push   %edx
4098bf:	8d 45 9c             	lea    -0x64(%ebp),%eax
4098c2:	50                   	push   %eax
4098c3:	6a 02                	push   $0x2
4098c5:	ff 15 28 10 40 00    	call   *0x401028
4098cb:	83 c4 18             	add    $0x18,%esp
4098ce:	c3                   	ret
4098cf:	8b 35 1c 10 40 00    	mov    0x40101c,%esi
4098d5:	8d 4d dc             	lea    -0x24(%ebp),%ecx
4098d8:	ff d6                	call   *%esi
4098da:	8b 3d d0 11 40 00    	mov    0x4011d0,%edi
4098e0:	8d 4d d8             	lea    -0x28(%ebp),%ecx
4098e3:	ff d7                	call   *%edi
4098e5:	8b 1d cc 11 40 00    	mov    0x4011cc,%ebx
4098eb:	8d 4d d0             	lea    -0x30(%ebp),%ecx
4098ee:	ff d3                	call   *%ebx
4098f0:	8d 4d cc             	lea    -0x34(%ebp),%ecx
4098f3:	ff d3                	call   *%ebx
4098f5:	8d 4d bc             	lea    -0x44(%ebp),%ecx
4098f8:	ff d6                	call   *%esi
4098fa:	8d 4d b8             	lea    -0x48(%ebp),%ecx
4098fd:	ff d7                	call   *%edi
4098ff:	c3                   	ret
409900:	8b 45 08             	mov    0x8(%ebp),%eax
409903:	8b 08                	mov    (%eax),%ecx
409905:	50                   	push   %eax
409906:	ff 51 08             	call   *0x8(%ecx)
409909:	8b 45 fc             	mov    -0x4(%ebp),%eax
40990c:	8b 4d ec             	mov    -0x14(%ebp),%ecx
40990f:	5f                   	pop    %edi
409910:	5e                   	pop    %esi
409911:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
409918:	5b                   	pop    %ebx
409919:	8b e5                	mov    %ebp,%esp
40991b:	5d                   	pop    %ebp
40991c:	c2 0c 00             	ret    $0xc
40991f:	90                   	nop
409920:	55                   	push   %ebp
409921:	8b ec                	mov    %esp,%ebp
409923:	83 ec 0c             	sub    $0xc,%esp
409926:	68 26 13 40 00       	push   $0x401326
40992b:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
409931:	50                   	push   %eax
409932:	64 89 25 00 00 00 00 	mov    %esp,%fs:0x0
409939:	81 ec 1c 01 00 00    	sub    $0x11c,%esp
40993f:	53                   	push   %ebx
409940:	56                   	push   %esi
409941:	57                   	push   %edi
409942:	89 65 f4             	mov    %esp,-0xc(%ebp)
409945:	c7 45 f8 b8 12 40 00 	movl   $0x4012b8,-0x8(%ebp)
40994c:	33 f6                	xor    %esi,%esi
40994e:	89 75 fc             	mov    %esi,-0x4(%ebp)
409951:	8b 5d 08             	mov    0x8(%ebp),%ebx
409954:	8b 03                	mov    (%ebx),%eax
409956:	53                   	push   %ebx
409957:	ff 50 04             	call   *0x4(%eax)
40995a:	8b 55 10             	mov    0x10(%ebp),%edx
40995d:	8d 4d e8             	lea    -0x18(%ebp),%ecx
409960:	89 75 e8             	mov    %esi,-0x18(%ebp)
409963:	89 75 e4             	mov    %esi,-0x1c(%ebp)
409966:	89 75 e0             	mov    %esi,-0x20(%ebp)
409969:	89 75 dc             	mov    %esi,-0x24(%ebp)
40996c:	89 75 d8             	mov    %esi,-0x28(%ebp)
40996f:	89 75 d4             	mov    %esi,-0x2c(%ebp)
409972:	89 75 d0             	mov    %esi,-0x30(%ebp)
409975:	89 75 cc             	mov    %esi,-0x34(%ebp)
409978:	89 75 bc             	mov    %esi,-0x44(%ebp)
40997b:	89 75 ac             	mov    %esi,-0x54(%ebp)
40997e:	89 75 9c             	mov    %esi,-0x64(%ebp)
409981:	89 75 8c             	mov    %esi,-0x74(%ebp)
409984:	89 b5 7c ff ff ff    	mov    %esi,-0x84(%ebp)
40998a:	89 b5 6c ff ff ff    	mov    %esi,-0x94(%ebp)
409990:	89 b5 5c ff ff ff    	mov    %esi,-0xa4(%ebp)
409996:	89 b5 4c ff ff ff    	mov    %esi,-0xb4(%ebp)
40999c:	ff 15 6c 11 40 00    	call   *0x40116c
4099a2:	68 84 62 40 00       	push   $0x406284
4099a7:	ff 15 74 11 40 00    	call   *0x401174
4099ad:	83 f8 02             	cmp    $0x2,%eax
4099b0:	0f 84 d3 00 00 00    	je     0x409a89
4099b6:	b9 04 00 02 80       	mov    $0x80020004,%ecx
4099bb:	b8 0a 00 00 00       	mov    $0xa,%eax
4099c0:	89 8d 64 ff ff ff    	mov    %ecx,-0x9c(%ebp)
4099c6:	89 8d 74 ff ff ff    	mov    %ecx,-0x8c(%ebp)
4099cc:	89 4d 84             	mov    %ecx,-0x7c(%ebp)
4099cf:	89 4d 94             	mov    %ecx,-0x6c(%ebp)
4099d2:	89 4d a4             	mov    %ecx,-0x5c(%ebp)
4099d5:	89 4d b4             	mov    %ecx,-0x4c(%ebp)
4099d8:	8d 95 4c ff ff ff    	lea    -0xb4(%ebp),%edx
4099de:	8d 4d bc             	lea    -0x44(%ebp),%ecx
4099e1:	89 85 5c ff ff ff    	mov    %eax,-0xa4(%ebp)
4099e7:	89 85 6c ff ff ff    	mov    %eax,-0x94(%ebp)
4099ed:	89 85 7c ff ff ff    	mov    %eax,-0x84(%ebp)
4099f3:	89 45 8c             	mov    %eax,-0x74(%ebp)
4099f6:	89 45 9c             	mov    %eax,-0x64(%ebp)
4099f9:	89 45 ac             	mov    %eax,-0x54(%ebp)
4099fc:	c7 85 54 ff ff ff 40 	movl   $0x406740,-0xac(%ebp)
409a03:	67 40 00
409a06:	c7 85 4c ff ff ff 08 	movl   $0x8,-0xb4(%ebp)
409a0d:	00 00 00
409a10:	ff 15 98 11 40 00    	call   *0x401198
409a16:	8d 8d 5c ff ff ff    	lea    -0xa4(%ebp),%ecx
409a1c:	51                   	push   %ecx
409a1d:	8d 95 6c ff ff ff    	lea    -0x94(%ebp),%edx
409a23:	52                   	push   %edx
409a24:	8d 85 7c ff ff ff    	lea    -0x84(%ebp),%eax
409a2a:	50                   	push   %eax
409a2b:	8d 4d 8c             	lea    -0x74(%ebp),%ecx
409a2e:	51                   	push   %ecx
409a2f:	8d 55 9c             	lea    -0x64(%ebp),%edx
409a32:	52                   	push   %edx
409a33:	8d 45 ac             	lea    -0x54(%ebp),%eax
409a36:	50                   	push   %eax
409a37:	8d 4d bc             	lea    -0x44(%ebp),%ecx
409a3a:	51                   	push   %ecx
409a3b:	ff 15 88 10 40 00    	call   *0x401088
409a41:	8b 3d b0 11 40 00    	mov    0x4011b0,%edi
409a47:	8b d0                	mov    %eax,%edx
409a49:	8d 4d dc             	lea    -0x24(%ebp),%ecx
409a4c:	ff d7                	call   *%edi
409a4e:	8d 4d dc             	lea    -0x24(%ebp),%ecx
409a51:	ff 15 cc 11 40 00    	call   *0x4011cc
409a57:	8d 95 5c ff ff ff    	lea    -0xa4(%ebp),%edx
409a5d:	52                   	push   %edx
409a5e:	8d 85 6c ff ff ff    	lea    -0x94(%ebp),%eax
409a64:	50                   	push   %eax
409a65:	8d 8d 7c ff ff ff    	lea    -0x84(%ebp),%ecx
409a6b:	51                   	push   %ecx
409a6c:	8d 55 8c             	lea    -0x74(%ebp),%edx
409a6f:	52                   	push   %edx
409a70:	8d 45 9c             	lea    -0x64(%ebp),%eax
409a73:	50                   	push   %eax
409a74:	8d 4d ac             	lea    -0x54(%ebp),%ecx
409a77:	51                   	push   %ecx
409a78:	8d 55 bc             	lea    -0x44(%ebp),%edx
409a7b:	52                   	push   %edx
409a7c:	6a 07                	push   $0x7
409a7e:	ff 15 28 10 40 00    	call   *0x401028
409a84:	83 c4 20             	add    $0x20,%esp
409a87:	eb 06                	jmp    0x409a8f
409a89:	8b 3d b0 11 40 00    	mov    0x4011b0,%edi
409a8f:	8b 35 4c 10 40 00    	mov    0x40104c,%esi
409a95:	68 a4 63 40 00       	push   $0x4063a4
409a9a:	68 5c 67 40 00       	push   $0x40675c
409a9f:	ff d6                	call   *%esi
409aa1:	8b d0                	mov    %eax,%edx
409aa3:	8d 4d dc             	lea    -0x24(%ebp),%ecx
409aa6:	ff d7                	call   *%edi
409aa8:	50                   	push   %eax
409aa9:	68 68 67 40 00       	push   $0x406768
409aae:	ff d6                	call   *%esi
409ab0:	8b d0                	mov    %eax,%edx
409ab2:	8d 4d d8             	lea    -0x28(%ebp),%ecx
409ab5:	ff d7                	call   *%edi
409ab7:	50                   	push   %eax