4081b7:	6a 20                	push   $0x20
4081b9:	b8 08 fc 40 00       	mov    $0x40fc08,%eax
4081be:	e8 8c 71 00 00       	call   0x40f34f
4081c3:	89 55 d8             	mov    %edx,-0x28(%ebp)
4081c6:	8b d9                	mov    %ecx,%ebx
4081c8:	8d 4d e8             	lea    -0x18(%ebp),%ecx
4081cb:	ff 15 f8 21 41 00    	call   *0x4121f8
4081d1:	33 ff                	xor    %edi,%edi
4081d3:	89 7d fc             	mov    %edi,-0x4(%ebp)
4081d6:	89 7d e0             	mov    %edi,-0x20(%ebp)
4081d9:	89 7d e4             	mov    %edi,-0x1c(%ebp)
4081dc:	89 7d ec             	mov    %edi,-0x14(%ebp)
4081df:	85 db                	test   %ebx,%ebx
4081e1:	75 1f                	jne    0x408202
4081e3:	b9 08 10 04 80       	mov    $0x80041008,%ecx
4081e8:	e8 1d f7 ff ff       	call   0x40790a
4081ed:	83 4d fc ff          	orl    $0xffffffff,-0x4(%ebp)
4081f1:	8d 4d e8             	lea    -0x18(%ebp),%ecx
4081f4:	ff 15 30 22 41 00    	call   *0x412230
4081fa:	33 c0                	xor    %eax,%eax
4081fc:	e8 f8 70 00 00       	call   0x40f2f9
408201:	c3                   	ret
408202:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
408206:	68 84 17 40 00       	push   $0x401784
40820b:	8d 4d dc             	lea    -0x24(%ebp),%ecx
40820e:	e8 c6 d7 ff ff       	call   0x4059d9
408213:	c6 45 fc 02          	movb   $0x2,-0x4(%ebp)
408217:	8b 00                	mov    (%eax),%eax
408219:	85 c0                	test   %eax,%eax
40821b:	74 04                	je     0x408221
40821d:	8b 00                	mov    (%eax),%eax
40821f:	eb 02                	jmp    0x408223
408221:	8b c7                	mov    %edi,%eax
408223:	8b 33                	mov    (%ebx),%esi
408225:	8d 4d ec             	lea    -0x14(%ebp),%ecx
408228:	51                   	push   %ecx
408229:	57                   	push   %edi
40822a:	57                   	push   %edi
40822b:	50                   	push   %eax
40822c:	53                   	push   %ebx
40822d:	8b 4e 48             	mov    0x48(%esi),%ecx
408230:	ff 15 20 23 41 00    	call   *0x412320
408236:	ff 56 48             	call   *0x48(%esi)
408239:	8b f0                	mov    %eax,%esi
40823b:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
40823f:	8d 4d dc             	lea    -0x24(%ebp),%ecx
408242:	e8 08 d7 ff ff       	call   0x40594f
408247:	85 f6                	test   %esi,%esi
408249:	0f 88 e4 01 00 00    	js     0x408433
40824f:	8b 55 d8             	mov    -0x28(%ebp),%edx
408252:	8b 4d ec             	mov    -0x14(%ebp),%ecx
408255:	e8 6f f3 ff ff       	call   0x4075c9
40825a:	85 c0                	test   %eax,%eax
40825c:	79 07                	jns    0x408265
40825e:	8b c8                	mov    %eax,%ecx
408260:	e9 d0 01 00 00       	jmp    0x408435
408265:	8b 45 ec             	mov    -0x14(%ebp),%eax
408268:	8b 30                	mov    (%eax),%esi
40826a:	8d 4d e0             	lea    -0x20(%ebp),%ecx
40826d:	51                   	push   %ecx
40826e:	8d 4d e4             	lea    -0x1c(%ebp),%ecx
408271:	51                   	push   %ecx
408272:	6a 01                	push   $0x1
408274:	83 cb ff             	or     $0xffffffff,%ebx
408277:	53                   	push   %ebx
408278:	50                   	push   %eax
408279:	8b 4e 10             	mov    0x10(%esi),%ecx
40827c:	ff 15 20 23 41 00    	call   *0x412320
408282:	ff 56 10             	call   *0x10(%esi)
408285:	85 c0                	test   %eax,%eax
408287:	78 d5                	js     0x40825e
408289:	83 7d e0 00          	cmpl   $0x0,-0x20(%ebp)
40828d:	75 44                	jne    0x4082d3
40828f:	33 c9                	xor    %ecx,%ecx
408291:	41                   	inc    %ecx
408292:	e8 73 f6 ff ff       	call   0x40790a
408297:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
40829a:	85 c9                	test   %ecx,%ecx
40829c:	74 13                	je     0x4082b1
40829e:	8b 01                	mov    (%ecx),%eax
4082a0:	51                   	push   %ecx
4082a1:	8b 70 08             	mov    0x8(%eax),%esi
4082a4:	8b ce                	mov    %esi,%ecx
4082a6:	ff 15 20 23 41 00    	call   *0x412320
4082ac:	ff d6                	call   *%esi
4082ae:	89 7d e4             	mov    %edi,-0x1c(%ebp)
4082b1:	8b 4d ec             	mov    -0x14(%ebp),%ecx
4082b4:	85 c9                	test   %ecx,%ecx
4082b6:	74 13                	je     0x4082cb
4082b8:	8b 01                	mov    (%ecx),%eax
4082ba:	51                   	push   %ecx
4082bb:	8b 70 08             	mov    0x8(%eax),%esi
4082be:	8b ce                	mov    %esi,%ecx
4082c0:	ff 15 20 23 41 00    	call   *0x412320
4082c6:	ff d6                	call   *%esi
4082c8:	89 7d ec             	mov    %edi,-0x14(%ebp)
4082cb:	89 5d fc             	mov    %ebx,-0x4(%ebp)
4082ce:	e9 1e ff ff ff       	jmp    0x4081f1
4082d3:	b9 8d 13 00 00       	mov    $0x138d,%ecx
4082d8:	e8 74 17 00 00       	call   0x409a51
4082dd:	50                   	push   %eax
4082de:	8d 45 e8             	lea    -0x18(%ebp),%eax
4082e1:	50                   	push   %eax
4082e2:	ba b0 17 40 00       	mov    $0x4017b0,%edx
4082e7:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
4082ea:	e8 d3 f8 ff ff       	call   0x407bc2
4082ef:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
4082f2:	85 c0                	test   %eax,%eax
4082f4:	74 a4                	je     0x40829a
4082f6:	85 c9                	test   %ecx,%ecx
4082f8:	74 13                	je     0x40830d
4082fa:	8b 01                	mov    (%ecx),%eax
4082fc:	51                   	push   %ecx
4082fd:	8b 70 08             	mov    0x8(%eax),%esi
408300:	8b ce                	mov    %esi,%ecx
408302:	ff 15 20 23 41 00    	call   *0x412320
408308:	ff d6                	call   *%esi
40830a:	89 7d e4             	mov    %edi,-0x1c(%ebp)
40830d:	8b 4d ec             	mov    -0x14(%ebp),%ecx
408310:	85 c9                	test   %ecx,%ecx
408312:	74 13                	je     0x408327
408314:	8b 01                	mov    (%ecx),%eax
408316:	51                   	push   %ecx
408317:	8b 70 08             	mov    0x8(%eax),%esi
40831a:	8b ce                	mov    %esi,%ecx
40831c:	ff 15 20 23 41 00    	call   *0x412320
408322:	ff d6                	call   *%esi
408324:	89 7d ec             	mov    %edi,-0x14(%ebp)
408327:	68 c8 17 40 00       	push   $0x4017c8
40832c:	8d 4d e8             	lea    -0x18(%ebp),%ecx
40832f:	ff 15 28 22 41 00    	call   *0x412228
408335:	3b c3                	cmp    %ebx,%eax
408337:	74 14                	je     0x40834d
408339:	89 5d fc             	mov    %ebx,-0x4(%ebp)
40833c:	8d 4d e8             	lea    -0x18(%ebp),%ecx
40833f:	ff 15 30 22 41 00    	call   *0x412230
408345:	33 c0                	xor    %eax,%eax
408347:	40                   	inc    %eax
408348:	e9 af fe ff ff       	jmp    0x4081fc
40834d:	68 d0 17 40 00       	push   $0x4017d0
408352:	8d 4d e8             	lea    -0x18(%ebp),%ecx
408355:	ff 15 28 22 41 00    	call   *0x412228
40835b:	3b c3                	cmp    %ebx,%eax
40835d:	74 14                	je     0x408373
40835f:	89 5d fc             	mov    %ebx,-0x4(%ebp)
408362:	8d 4d e8             	lea    -0x18(%ebp),%ecx
408365:	ff 15 30 22 41 00    	call   *0x412230
40836b:	6a 02                	push   $0x2
40836d:	58                   	pop    %eax
40836e:	e9 89 fe ff ff       	jmp    0x4081fc
408373:	68 dc 17 40 00       	push   $0x4017dc
408378:	8d 4d e8             	lea    -0x18(%ebp),%ecx
40837b:	ff 15 28 22 41 00    	call   *0x412228
408381:	3b c3                	cmp    %ebx,%eax
408383:	0f 84 42 ff ff ff    	je     0x4082cb
408389:	89 5d fc             	mov    %ebx,-0x4(%ebp)
40838c:	8d 4d e8             	lea    -0x18(%ebp),%ecx
40838f:	ff 15 30 22 41 00    	call   *0x412230
408395:	6a 03                	push   $0x3
408397:	eb d4                	jmp    0x40836d
408399:	8b 45 d4             	mov    -0x2c(%ebp),%eax
40839c:	8b 48 04             	mov    0x4(%eax),%ecx
40839f:	e8 66 f5 ff ff       	call   0x40790a
4083a4:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
4083a7:	85 c9                	test   %ecx,%ecx
4083a9:	74 17                	je     0x4083c2
4083ab:	8b 01                	mov    (%ecx),%eax
4083ad:	51                   	push   %ecx
4083ae:	8b 70 08             	mov    0x8(%eax),%esi
4083b1:	8b ce                	mov    %esi,%ecx
4083b3:	ff 15 20 23 41 00    	call   *0x412320
4083b9:	ff d6                	call   *%esi
4083bb:	33 ff                	xor    %edi,%edi
4083bd:	89 7d e4             	mov    %edi,-0x1c(%ebp)
4083c0:	eb 02                	jmp    0x4083c4
4083c2:	33 ff                	xor    %edi,%edi
4083c4:	8b 4d ec             	mov    -0x14(%ebp),%ecx
4083c7:	85 c9                	test   %ecx,%ecx
4083c9:	74 13                	je     0x4083de
4083cb:	8b 01                	mov    (%ecx),%eax
4083cd:	51                   	push   %ecx
4083ce:	8b 70 08             	mov    0x8(%eax),%esi
4083d1:	8b ce                	mov    %esi,%ecx
4083d3:	ff 15 20 23 41 00    	call   *0x412320
4083d9:	ff d6                	call   *%esi
4083db:	89 7d ec             	mov    %edi,-0x14(%ebp)
4083de:	b8 e4 83 40 00       	mov    $0x4083e4,%eax
4083e3:	c3                   	ret
4083e4:	e9 04 fe ff ff       	jmp    0x4081ed
4083e9:	b9 06 10 04 80       	mov    $0x80041006,%ecx
4083ee:	e8 17 f5 ff ff       	call   0x40790a
4083f3:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
4083f6:	85 c9                	test   %ecx,%ecx
4083f8:	74 17                	je     0x408411
4083fa:	8b 01                	mov    (%ecx),%eax
4083fc:	51                   	push   %ecx
4083fd:	8b 70 08             	mov    0x8(%eax),%esi
408400:	8b ce                	mov    %esi,%ecx
408402:	ff 15 20 23 41 00    	call   *0x412320
408408:	ff d6                	call   *%esi
40840a:	33 ff                	xor    %edi,%edi
40840c:	89 7d e4             	mov    %edi,-0x1c(%ebp)
40840f:	eb 02                	jmp    0x408413
408411:	33 ff                	xor    %edi,%edi
408413:	8b 4d ec             	mov    -0x14(%ebp),%ecx
408416:	85 c9                	test   %ecx,%ecx
408418:	74 13                	je     0x40842d
40841a:	8b 01                	mov    (%ecx),%eax
40841c:	51                   	push   %ecx
40841d:	8b 70 08             	mov    0x8(%eax),%esi
408420:	8b ce                	mov    %esi,%ecx
408422:	ff 15 20 23 41 00    	call   *0x412320
408428:	ff d6                	call   *%esi
40842a:	89 7d ec             	mov    %edi,-0x14(%ebp)
40842d:	b8 ed 81 40 00       	mov    $0x4081ed,%eax
408432:	c3                   	ret
408433:	8b ce                	mov    %esi,%ecx
408435:	e8 e7 02 00 00       	call   0x408721
40843a:	cc                   	int3
40843b:	6a 10                	push   $0x10
40843d:	b8 2b fc 40 00       	mov    $0x40fc2b,%eax
408442:	e8 d5 6e 00 00       	call   0x40f31c
408447:	8b f1                	mov    %ecx,%esi
408449:	8b 7d 08             	mov    0x8(%ebp),%edi
40844c:	83 26 00             	andl   $0x0,(%esi)
40844f:	6a 08                	push   $0x8
408451:	5b                   	pop    %ebx
408452:	66 39 1f             	cmp    %bx,(%edi)
408455:	75 0a                	jne    0x408461
408457:	ff 77 08             	push   0x8(%edi)
40845a:	e8 81 02 00 00       	call   0x4086e0
40845f:	eb 49                	jmp    0x4084aa
408461:	8d 45 e4             	lea    -0x1c(%ebp),%eax
408464:	50                   	push   %eax
408465:	ff 15 18 21 41 00    	call   *0x412118
40846b:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
40846f:	8d 45 e4             	lea    -0x1c(%ebp),%eax
408472:	3b c7                	cmp    %edi,%eax
408474:	75 06                	jne    0x40847c
408476:	66 3b 5d e4          	cmp    -0x1c(%ebp),%bx
40847a:	74 12                	je     0x40848e
40847c:	53                   	push   %ebx
40847d:	6a 00                	push   $0x0
40847f:	57                   	push   %edi
408480:	8d 45 e4             	lea    -0x1c(%ebp),%eax
408483:	50                   	push   %eax
408484:	ff 15 1c 21 41 00    	call   *0x41211c
40848a:	85 c0                	test   %eax,%eax
40848c:	78 26                	js     0x4084b4
40848e:	ff 75 ec             	push   -0x14(%ebp)
408491:	8b ce                	mov    %esi,%ecx
408493:	e8 48 02 00 00       	call   0x4086e0
408498:	83 4d fc ff          	orl    $0xffffffff,-0x4(%ebp)
40849c:	8d 45 e4             	lea    -0x1c(%ebp),%eax
40849f:	50                   	push   %eax
4084a0:	ff 15 14 21 41 00    	call   *0x412114
4084a6:	85 c0                	test   %eax,%eax
4084a8:	78 0a                	js     0x4084b4
4084aa:	8b c6                	mov    %esi,%eax
4084ac:	e8 48 6e 00 00       	call   0x40f2f9
4084b1:	c2 04 00             	ret    $0x4
4084b4:	8b c8                	mov    %eax,%ecx
4084b6:	e8 66 02 00 00       	call   0x408721
4084bb:	cc                   	int3
4084bc:	8b ff                	mov    %edi,%edi
4084be:	51                   	push   %ecx
4084bf:	ff 15 14 21 41 00    	call   *0x412114
4084c5:	85 c0                	test   %eax,%eax
4084c7:	79 07                	jns    0x4084d0
4084c9:	8b c8                	mov    %eax,%ecx
4084cb:	e9 51 02 00 00       	jmp    0x408721
4084d0:	c3                   	ret
4084d1:	8b ff                	mov    %edi,%edi
4084d3:	53                   	push   %ebx
4084d4:	8b d9                	mov    %ecx,%ebx
4084d6:	56                   	push   %esi
4084d7:	57                   	push   %edi
4084d8:	33 f6                	xor    %esi,%esi
4084da:	8d 7b 0c             	lea    0xc(%ebx),%edi
4084dd:	39 37                	cmp    %esi,(%edi)
4084df:	0f 85 8f 00 00 00    	jne    0x408574
4084e5:	56                   	push   %esi
4084e6:	56                   	push   %esi
4084e7:	57                   	push   %edi
4084e8:	68 00 04 00 00       	push   $0x400
4084ed:	ff 73 04             	push   0x4(%ebx)
4084f0:	56                   	push   %esi
4084f1:	68 00 11 00 00       	push   $0x1100
4084f6:	ff 15 60 20 41 00    	call   *0x412060
4084fc:	8b 0f                	mov    (%edi),%ecx
4084fe:	85 c9                	test   %ecx,%ecx
408500:	74 25                	je     0x408527
408502:	83 f8 01             	cmp    $0x1,%eax
408505:	76 6d                	jbe    0x408574
408507:	66 83 7c 41 fe 0a    	cmpw   $0xa,-0x2(%ecx,%eax,2)
40850d:	75 65                	jne    0x408574
40850f:	33 d2                	xor    %edx,%edx
408511:	66 89 54 41 fe       	mov    %dx,-0x2(%ecx,%eax,2)
408516:	8b 0f                	mov    (%edi),%ecx
408518:	66 83 7c 41 fc 0d    	cmpw   $0xd,-0x4(%ecx,%eax,2)
40851e:	75 54                	jne    0x408574
408520:	66 89 54 41 fc       	mov    %dx,-0x4(%ecx,%eax,2)
408525:	eb 4d                	jmp    0x408574
408527:	6a 40                	push   $0x40
408529:	56                   	push   %esi
40852a:	ff 15 5c 20 41 00    	call   *0x41205c
408530:	8b c8                	mov    %eax,%ecx
408532:	89 0f                	mov    %ecx,(%edi)
408534:	85 c9                	test   %ecx,%ecx
408536:	74 3c                	je     0x408574
408538:	8b 53 04             	mov    0x4(%ebx),%edx
40853b:	81 fa 00 02 04 80    	cmp    $0x80040200,%edx
408541:	7c 11                	jl     0x408554
408543:	81 fa ff ff 04 80    	cmp    $0x8004ffff,%edx
408549:	7f 09                	jg     0x408554
40854b:	8d 82 00 fe ff ff    	lea    -0x200(%edx),%eax
408551:	0f b7 f0             	movzwl %ax,%esi
408554:	66 85 f6             	test   %si,%si
408557:	74 0b                	je     0x408564
408559:	0f b7 c6             	movzwl %si,%eax
40855c:	50                   	push   %eax
40855d:	68 e8 17 40 00       	push   $0x4017e8
408562:	eb 06                	jmp    0x40856a
408564:	52                   	push   %edx
408565:	68 10 18 40 00       	push   $0x401810
40856a:	51                   	push   %ecx
40856b:	ff 15 5c 21 41 00    	call   *0x41215c
408571:	83 c4 0c             	add    $0xc,%esp
408574:	8b 07                	mov    (%edi),%eax
408576:	5f                   	pop    %edi
408577:	5e                   	pop    %esi
408578:	5b                   	pop    %ebx
408579:	c3                   	ret
40857a:	8b 01                	mov    (%ecx),%eax
40857c:	85 c0                	test   %eax,%eax
40857e:	74 0e                	je     0x40858e
408580:	83 38 00             	cmpl   $0x0,(%eax)
408583:	74 09                	je     0x40858e
408585:	ff 30                	push   (%eax)
408587:	ff 15 2c 21 41 00    	call   *0x41212c
40858d:	c3                   	ret
40858e:	33 c0                	xor    %eax,%eax
408590:	c3                   	ret
408591:	8b ff                	mov    %edi,%edi
408593:	55                   	push   %ebp
408594:	8b ec                	mov    %esp,%ebp
408596:	51                   	push   %ecx
408597:	51                   	push   %ecx
408598:	53                   	push   %ebx
408599:	56                   	push   %esi