406be2:	e8 88 fc ff ff       	call   0x40686f
406be7:	89 45 fc             	mov    %eax,-0x4(%ebp)
406bea:	8b 75 38             	mov    0x38(%ebp),%esi
406bed:	8b 45 18             	mov    0x18(%ebp),%eax
406bf0:	89 06                	mov    %eax,(%esi)
406bf2:	33 c0                	xor    %eax,%eax
406bf4:	89 7e 04             	mov    %edi,0x4(%esi)
406bf7:	40                   	inc    %eax
406bf8:	f0 0f c1 05 80 4d 42 	lock xadd %eax,0x424d80
406bff:	00
406c00:	40                   	inc    %eax
406c01:	89 46 08             	mov    %eax,0x8(%esi)
406c04:	8b 45 20             	mov    0x20(%ebp),%eax
406c07:	85 c0                	test   %eax,%eax
406c09:	74 07                	je     0x406c12
406c0b:	33 c9                	xor    %ecx,%ecx
406c0d:	66 39 08             	cmp    %cx,(%eax)
406c10:	75 02                	jne    0x406c14
406c12:	33 c0                	xor    %eax,%eax
406c14:	89 46 0c             	mov    %eax,0xc(%esi)
406c17:	ff 15 7c 61 42 00    	call   *0x42617c
406c1d:	89 46 10             	mov    %eax,0x10(%esi)
406c20:	8d 7e 2c             	lea    0x2c(%esi),%edi
406c23:	8b 45 08             	mov    0x8(%ebp),%eax
406c26:	33 d2                	xor    %edx,%edx
406c28:	89 46 1c             	mov    %eax,0x1c(%esi)
406c2b:	8b 45 f8             	mov    -0x8(%ebp),%eax
406c2e:	89 46 20             	mov    %eax,0x20(%esi)
406c31:	8b 45 fc             	mov    -0x4(%ebp),%eax
406c34:	89 46 24             	mov    %eax,0x24(%esi)
406c37:	8b 45 10             	mov    0x10(%ebp),%eax
406c3a:	89 46 14             	mov    %eax,0x14(%esi)
406c3d:	8b 45 0c             	mov    0xc(%ebp),%eax
406c40:	89 46 18             	mov    %eax,0x18(%esi)
406c43:	8b 45 14             	mov    0x14(%ebp),%eax
406c46:	89 46 48             	mov    %eax,0x48(%esi)
406c49:	8b 45 f4             	mov    -0xc(%ebp),%eax
406c4c:	89 46 4c             	mov    %eax,0x4c(%esi)
406c4f:	33 c0                	xor    %eax,%eax
406c51:	6a 06                	push   $0x6
406c53:	59                   	pop    %ecx
406c54:	89 56 28             	mov    %edx,0x28(%esi)
406c57:	f3 ab                	rep stos %eax,%es:(%edi)
406c59:	8b 3d dc 4c 42 00    	mov    0x424cdc,%edi
406c5f:	85 ff                	test   %edi,%edi
406c61:	74 0a                	je     0x406c6d
406c63:	8b cf                	mov    %edi,%ecx
406c65:	ff 15 78 64 42 00    	call   *0x426478
406c6b:	ff d7                	call   *%edi
406c6d:	8b 3d bc 4c 42 00    	mov    0x424cbc,%edi
406c73:	89 46 44             	mov    %eax,0x44(%esi)
406c76:	85 ff                	test   %edi,%edi
406c78:	74 13                	je     0x406c8d
406c7a:	68 00 04 00 00       	push   $0x400
406c7f:	ff 75 30             	push   0x30(%ebp)
406c82:	8b cf                	mov    %edi,%ecx
406c84:	56                   	push   %esi
406c85:	ff 15 78 64 42 00    	call   *0x426478
406c8b:	ff d7                	call   *%edi
406c8d:	8b 3d b4 4c 42 00    	mov    0x424cb4,%edi
406c93:	85 ff                	test   %edi,%edi
406c95:	74 0b                	je     0x406ca2
406c97:	56                   	push   %esi
406c98:	8b cf                	mov    %edi,%ecx
406c9a:	ff 15 78 64 42 00    	call   *0x426478
406ca0:	ff d7                	call   *%edi
406ca2:	8b 3d cc 4c 42 00    	mov    0x424ccc,%edi
406ca8:	85 ff                	test   %edi,%edi
406caa:	74 0b                	je     0x406cb7
406cac:	56                   	push   %esi
406cad:	8b cf                	mov    %edi,%ecx
406caf:	ff 15 78 64 42 00    	call   *0x426478
406cb5:	ff d7                	call   *%edi
406cb7:	33 c0                	xor    %eax,%eax
406cb9:	39 46 04             	cmp    %eax,0x4(%esi)
406cbc:	7c 11                	jl     0x406ccf
406cbe:	83 7d 18 03          	cmpl   $0x3,0x18(%ebp)
406cc2:	0f 85 bc 00 00 00    	jne    0x406d84
406cc8:	c7 46 04 ff ff 00 80 	movl   $0x8000ffff,0x4(%esi)
406ccf:	38 05 9c 4c 42 00    	cmp    %al,0x424c9c
406cd5:	75 4a                	jne    0x406d21
406cd7:	8b 3d 94 4c 42 00    	mov    0x424c94,%edi
406cdd:	85 ff                	test   %edi,%edi
406cdf:	74 0f                	je     0x406cf0
406ce1:	8b cf                	mov    %edi,%ecx
406ce3:	ff 15 78 64 42 00    	call   *0x426478
406ce9:	ff d7                	call   *%edi
406ceb:	0f b6 c0             	movzbl %al,%eax
406cee:	eb 0c                	jmp    0x406cfc
406cf0:	ff 15 88 60 42 00    	call   *0x426088
406cf6:	f7 d8                	neg    %eax
406cf8:	1b c0                	sbb    %eax,%eax
406cfa:	f7 d8                	neg    %eax
406cfc:	85 c0                	test   %eax,%eax
406cfe:	75 21                	jne    0x406d21
406d00:	8b 3d a0 4c 42 00    	mov    0x424ca0,%edi
406d06:	85 ff                	test   %edi,%edi
406d08:	74 56                	je     0x406d60
406d0a:	38 05 ac 4c 42 00    	cmp    %al,0x424cac
406d10:	75 4e                	jne    0x406d60
406d12:	50                   	push   %eax
406d13:	50                   	push   %eax
406d14:	56                   	push   %esi
406d15:	8b cf                	mov    %edi,%ecx
406d17:	ff 15 78 64 42 00    	call   *0x426478
406d1d:	ff d7                	call   *%edi
406d1f:	eb 3f                	jmp    0x406d60
406d21:	8b 3d a0 4c 42 00    	mov    0x424ca0,%edi
406d27:	85 ff                	test   %edi,%edi
406d29:	74 1a                	je     0x406d45
406d2b:	80 3d ac 4c 42 00 00 	cmpb   $0x0,0x424cac
406d32:	75 11                	jne    0x406d45
406d34:	68 00 08 00 00       	push   $0x800
406d39:	53                   	push   %ebx
406d3a:	56                   	push   %esi
406d3b:	8b cf                	mov    %edi,%ecx
406d3d:	ff 15 78 64 42 00    	call   *0x426478
406d43:	ff d7                	call   *%edi
406d45:	33 c0                	xor    %eax,%eax
406d47:	66 39 03             	cmp    %ax,(%ebx)
406d4a:	75 0d                	jne    0x406d59
406d4c:	56                   	push   %esi
406d4d:	ba 00 08 00 00       	mov    $0x800,%edx
406d52:	8b cb                	mov    %ebx,%ecx
406d54:	e8 c7 f8 ff ff       	call   0x406620
406d59:	53                   	push   %ebx
406d5a:	ff 15 68 61 42 00    	call   *0x426168
406d60:	80 3d a4 4c 42 00 00 	cmpb   $0x0,0x424ca4
406d67:	74 14                	je     0x406d7d
406d69:	8b 35 c4 4c 42 00    	mov    0x424cc4,%esi
406d6f:	85 f6                	test   %esi,%esi
406d71:	74 0a                	je     0x406d7d
406d73:	8b ce                	mov    %esi,%ecx
406d75:	ff 15 78 64 42 00    	call   *0x426478
406d7b:	ff d6                	call   *%esi
406d7d:	5f                   	pop    %edi
406d7e:	5e                   	pop    %esi
406d7f:	5b                   	pop    %ebx
406d80:	c9                   	leave
406d81:	c2 34 00             	ret    $0x34
406d84:	e8 71 02 00 00       	call   0x406ffa
406d89:	cc                   	int3
406d8a:	8b ff                	mov    %edi,%edi
406d8c:	55                   	push   %ebp
406d8d:	8b ec                	mov    %esp,%ebp
406d8f:	83 ec 50             	sub    $0x50,%esp
406d92:	56                   	push   %esi
406d93:	57                   	push   %edi
406d94:	8b 3d e4 4c 42 00    	mov    0x424ce4,%edi
406d9a:	8b f1                	mov    %ecx,%esi
406d9c:	85 ff                	test   %edi,%edi
406d9e:	74 0b                	je     0x406dab
406da0:	56                   	push   %esi
406da1:	8b cf                	mov    %edi,%ecx
406da3:	ff 15 78 64 42 00    	call   *0x426478
406da9:	ff d7                	call   *%edi
406dab:	6a 50                	push   $0x50
406dad:	8d 45 b0             	lea    -0x50(%ebp),%eax
406db0:	6a 00                	push   $0x0
406db2:	50                   	push   %eax
406db3:	e8 90 ba 01 00       	call   0x422848
406db8:	8b 4e 48             	mov    0x48(%esi),%ecx
406dbb:	33 c0                	xor    %eax,%eax
406dbd:	40                   	inc    %eax
406dbe:	c7 45 b0 09 04 00 c0 	movl   $0xc0000409,-0x50(%ebp)
406dc5:	83 c4 0c             	add    $0xc,%esp
406dc8:	89 45 c0             	mov    %eax,-0x40(%ebp)
406dcb:	89 45 b4             	mov    %eax,-0x4c(%ebp)
406dce:	c7 45 c4 07 00 00 00 	movl   $0x7,-0x3c(%ebp)
406dd5:	85 c9                	test   %ecx,%ecx
406dd7:	75 09                	jne    0x406de2
406dd9:	50                   	push   %eax
406dda:	8d 4d b0             	lea    -0x50(%ebp),%ecx
406ddd:	e8 e2 fa ff ff       	call   0x4068c4
406de2:	8b 46 04             	mov    0x4(%esi),%eax
406de5:	89 45 c8             	mov    %eax,-0x38(%ebp)
406de8:	8b 46 20             	mov    0x20(%esi),%eax
406deb:	c7 45 c0 03 00 00 00 	movl   $0x3,-0x40(%ebp)
406df2:	89 45 cc             	mov    %eax,-0x34(%ebp)
406df5:	89 4d bc             	mov    %ecx,-0x44(%ebp)
406df8:	6a 00                	push   $0x0
406dfa:	eb de                	jmp    0x406dda
406dfc:	8b ff                	mov    %edi,%edi
406dfe:	55                   	push   %ebp
406dff:	8b ec                	mov    %esp,%ebp
406e01:	83 e4 f8             	and    $0xfffffff8,%esp
406e04:	b8 64 14 00 00       	mov    $0x1464,%eax
406e09:	e8 42 bd 01 00       	call   0x422b50
406e0e:	a1 10 42 42 00       	mov    0x424210,%eax
406e13:	33 c4                	xor    %esp,%eax
406e15:	89 84 24 60 14 00 00 	mov    %eax,0x1460(%esp)
406e1c:	83 7d 18 00          	cmpl   $0x0,0x18(%ebp)
406e20:	8b 45 08             	mov    0x8(%ebp),%eax
406e23:	53                   	push   %ebx
406e24:	8b 5d 10             	mov    0x10(%ebp),%ebx
406e27:	56                   	push   %esi
406e28:	89 5c 24 10          	mov    %ebx,0x10(%esp)
406e2c:	8b 5d 14             	mov    0x14(%ebp),%ebx
406e2f:	57                   	push   %edi
406e30:	8b 7d 0c             	mov    0xc(%ebp),%edi
406e33:	89 5c 24 10          	mov    %ebx,0x10(%esp)
406e37:	75 0d                	jne    0x406e46
406e39:	83 3d c8 4c 42 00 00 	cmpl   $0x0,0x424cc8
406e40:	74 04                	je     0x406e46
406e42:	b3 01                	mov    $0x1,%bl
406e44:	eb 02                	jmp    0x406e48
406e46:	32 db                	xor    %bl,%bl
406e48:	8d 74 24 18          	lea    0x18(%esp),%esi
406e4c:	56                   	push   %esi
406e4d:	51                   	push   %ecx
406e4e:	8d 74 24 70          	lea    0x70(%esp),%esi
406e52:	56                   	push   %esi
406e53:	51                   	push   %ecx
406e54:	8d b4 24 78 04 00 00 	lea    0x478(%esp),%esi
406e5b:	56                   	push   %esi
406e5c:	8b 75 18             	mov    0x18(%ebp),%esi
406e5f:	51                   	push   %ecx
406e60:	6a 00                	push   $0x0
406e62:	ff 75 1c             	push   0x1c(%ebp)
406e65:	56                   	push   %esi
406e66:	ff 74 24 34          	push   0x34(%esp)
406e6a:	ff 74 24 3c          	push   0x3c(%esp)
406e6e:	57                   	push   %edi
406e6f:	50                   	push   %eax
406e70:	e8 f6 fc ff ff       	call   0x406b6b
406e75:	83 fe 03             	cmp    $0x3,%esi
406e78:	74 4b                	je     0x406ec5
406e7a:	85 f6                	test   %esi,%esi
406e7c:	75 30                	jne    0x406eae
406e7e:	84 db                	test   %bl,%bl
406e80:	74 1d                	je     0x406e9f
406e82:	8b 35 c8 4c 42 00    	mov    0x424cc8,%esi
406e88:	8d 84 24 68 04 00 00 	lea    0x468(%esp),%eax
406e8f:	50                   	push   %eax
406e90:	8d 44 24 1c          	lea    0x1c(%esp),%eax
406e94:	8b ce                	mov    %esi,%ecx
406e96:	50                   	push   %eax
406e97:	ff 15 78 64 42 00    	call   *0x426478
406e9d:	ff d6                	call   *%esi
406e9f:	8d 4c 24 18          	lea    0x18(%esp),%ecx
406ea3:	e8 a9 fc ff ff       	call   0x406b51
406ea8:	8d 4c 24 18          	lea    0x18(%esp),%ecx
406eac:	eb 1b                	jmp    0x406ec9
406eae:	8b 8c 24 6c 14 00 00 	mov    0x146c(%esp),%ecx
406eb5:	5f                   	pop    %edi
406eb6:	5e                   	pop    %esi
406eb7:	5b                   	pop    %ebx
406eb8:	33 cc                	xor    %esp,%ecx
406eba:	e8 b1 a9 01 00       	call   0x421870
406ebf:	8b e5                	mov    %ebp,%esp
406ec1:	5d                   	pop    %ebp
406ec2:	c2 20 00             	ret    $0x20
406ec5:	8d 4c 24 18          	lea    0x18(%esp),%ecx
406ec9:	e8 bc fe ff ff       	call   0x406d8a
406ece:	cc                   	int3
406ecf:	8b ff                	mov    %edi,%edi
406ed1:	55                   	push   %ebp
406ed2:	8b ec                	mov    %esp,%ebp
406ed4:	83 e4 f8             	and    $0xfffffff8,%esp
406ed7:	51                   	push   %ecx
406ed8:	51                   	push   %ecx
406ed9:	ff 75 1c             	push   0x1c(%ebp)
406edc:	ff 75 18             	push   0x18(%ebp)
406edf:	ff 75 14             	push   0x14(%ebp)
406ee2:	ff 75 10             	push   0x10(%ebp)
406ee5:	ff 75 0c             	push   0xc(%ebp)
406ee8:	ff 75 08             	push   0x8(%ebp)
406eeb:	e8 0c ff ff ff       	call   0x406dfc
406ef0:	8b e5                	mov    %ebp,%esp
406ef2:	5d                   	pop    %ebp
406ef3:	c2 18 00             	ret    $0x18
406ef6:	8b ff                	mov    %edi,%edi
406ef8:	55                   	push   %ebp
406ef9:	8b ec                	mov    %esp,%ebp
406efb:	53                   	push   %ebx
406efc:	56                   	push   %esi
406efd:	57                   	push   %edi
406efe:	ff 75 14             	push   0x14(%ebp)
406f01:	8b fa                	mov    %edx,%edi
406f03:	8b d9                	mov    %ecx,%ebx
406f05:	51                   	push   %ecx
406f06:	51                   	push   %ecx
406f07:	68 a4 1a 40 00       	push   $0x401aa4
406f0c:	e8 90 fb ff ff       	call   0x406aa1
406f11:	8b f0                	mov    %eax,%esi
406f13:	85 f6                	test   %esi,%esi
406f15:	7f 04                	jg     0x406f1b
406f17:	8b ce                	mov    %esi,%ecx
406f19:	eb 09                	jmp    0x406f24
406f1b:	0f b7 ce             	movzwl %si,%ecx
406f1e:	81 c9 00 00 07 80    	or     $0x80070000,%ecx
406f24:	51                   	push   %ecx
406f25:	51                   	push   %ecx
406f26:	51                   	push   %ecx
406f27:	6a 03                	push   $0x3
406f29:	ff 75 14             	push   0x14(%ebp)
406f2c:	8b d7                	mov    %edi,%edx
406f2e:	8b cb                	mov    %ebx,%ecx
406f30:	6a 00                	push   $0x0
406f32:	6a 00                	push   $0x0
406f34:	68 a4 1a 40 00       	push   $0x401aa4
406f39:	e8 be fe ff ff       	call   0x406dfc
406f3e:	5f                   	pop    %edi
406f3f:	8b c6                	mov    %esi,%eax
406f41:	5e                   	pop    %esi
406f42:	5b                   	pop    %ebx
406f43:	5d                   	pop    %ebp
406f44:	c2 14 00             	ret    $0x14
406f47:	8b ff                	mov    %edi,%edi
406f49:	55                   	push   %ebp
406f4a:	8b ec                	mov    %esp,%ebp
406f4c:	53                   	push   %ebx
406f4d:	56                   	push   %esi
406f4e:	57                   	push   %edi
406f4f:	ff 75 14             	push   0x14(%ebp)
406f52:	8b fa                	mov    %edx,%edi
406f54:	8b d9                	mov    %ecx,%ebx
406f56:	51                   	push   %ecx
406f57:	51                   	push   %ecx
406f58:	ff 75 08             	push   0x8(%ebp)
406f5b:	e8 41 fb ff ff       	call   0x406aa1
406f60:	8b f0                	mov    %eax,%esi
406f62:	85 f6                	test   %esi,%esi
406f64:	7e 09                	jle    0x406f6f
406f66:	0f b7 f6             	movzwl %si,%esi
406f69:	81 ce 00 00 07 80    	or     $0x80070000,%esi
406f6f:	51                   	push   %ecx
406f70:	51                   	push   %ecx
406f71:	56                   	push   %esi
406f72:	6a 01                	push   $0x1
406f74:	ff 75 14             	push   0x14(%ebp)
406f77:	8b d7                	mov    %edi,%edx
406f79:	8b cb                	mov    %ebx,%ecx
406f7b:	6a 00                	push   $0x0
406f7d:	6a 00                	push   $0x0
406f7f:	ff 75 08             	push   0x8(%ebp)
406f82:	e8 75 fe ff ff       	call   0x406dfc
406f87:	5f                   	pop    %edi
406f88:	8b c6                	mov    %esi,%eax
406f8a:	5e                   	pop    %esi
406f8b:	5b                   	pop    %ebx
406f8c:	5d                   	pop    %ebp
406f8d:	c2 14 00             	ret    $0x14
406f90:	8b ff                	mov    %edi,%edi
406f92:	55                   	push   %ebp
406f93:	8b ec                	mov    %esp,%ebp
406f95:	ff 75 0c             	push   0xc(%ebp)
406f98:	6a 01                	push   $0x1
406f9a:	ff 75 04             	push   0x4(%ebp)
406f9d:	6a 00                	push   $0x0