407f9e:	ff d6                	call   *%esi
407fa0:	89 7d e8             	mov    %edi,-0x18(%ebp)
407fa3:	89 7d dc             	mov    %edi,-0x24(%ebp)
407fa6:	6a 2e                	push   $0x2e
407fa8:	8d 4d ec             	lea    -0x14(%ebp),%ecx
407fab:	ff 15 10 22 41 00    	call   *0x412210
407fb1:	8b d8                	mov    %eax,%ebx
407fb3:	89 5d d8             	mov    %ebx,-0x28(%ebp)
407fb6:	83 fb ff             	cmp    $0xffffffff,%ebx
407fb9:	75 23                	jne    0x407fde
407fbb:	57                   	push   %edi
407fbc:	8b 4d ec             	mov    -0x14(%ebp),%ecx
407fbf:	e8 28 1d 00 00       	call   0x409cec
407fc4:	85 c0                	test   %eax,%eax
407fc6:	0f 84 9d fe ff ff    	je     0x407e69
407fcc:	8b 4d ec             	mov    -0x14(%ebp),%ecx
407fcf:	e8 61 1c 00 00       	call   0x409c35
407fd4:	8b d8                	mov    %eax,%ebx
407fd6:	89 5d dc             	mov    %ebx,-0x24(%ebp)
407fd9:	e9 18 01 00 00       	jmp    0x4080f6
407fde:	53                   	push   %ebx
407fdf:	57                   	push   %edi
407fe0:	8d 45 d4             	lea    -0x2c(%ebp),%eax
407fe3:	50                   	push   %eax
407fe4:	8d 4d ec             	lea    -0x14(%ebp),%ecx
407fe7:	ff 15 3c 22 41 00    	call   *0x41223c
407fed:	c6 45 fc 03          	movb   $0x3,-0x4(%ebp)
407ff1:	57                   	push   %edi
407ff2:	8b 08                	mov    (%eax),%ecx
407ff4:	e8 f3 1c 00 00       	call   0x409cec
407ff9:	8b f0                	mov    %eax,%esi
407ffb:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
407fff:	8d 4d d4             	lea    -0x2c(%ebp),%ecx
408002:	ff 15 30 22 41 00    	call   *0x412230
408008:	85 f6                	test   %esi,%esi
40800a:	0f 84 59 fe ff ff    	je     0x407e69
408010:	53                   	push   %ebx
408011:	57                   	push   %edi
408012:	8d 45 d4             	lea    -0x2c(%ebp),%eax
408015:	50                   	push   %eax
408016:	8d 4d ec             	lea    -0x14(%ebp),%ecx
408019:	ff 15 3c 22 41 00    	call   *0x41223c
40801f:	c6 45 fc 04          	movb   $0x4,-0x4(%ebp)
408023:	8b 08                	mov    (%eax),%ecx
408025:	e8 0b 1c 00 00       	call   0x409c35
40802a:	8b d8                	mov    %eax,%ebx
40802c:	89 5d dc             	mov    %ebx,-0x24(%ebp)
40802f:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
408033:	8d 4d d4             	lea    -0x2c(%ebp),%ecx
408036:	ff 15 30 22 41 00    	call   *0x412230
40803c:	8b 45 d8             	mov    -0x28(%ebp),%eax
40803f:	40                   	inc    %eax
408040:	50                   	push   %eax
408041:	8d 45 d4             	lea    -0x2c(%ebp),%eax
408044:	50                   	push   %eax
408045:	8d 4d ec             	lea    -0x14(%ebp),%ecx
408048:	ff 15 0c 22 41 00    	call   *0x41220c
40804e:	c6 45 fc 05          	movb   $0x5,-0x4(%ebp)
408052:	50                   	push   %eax
408053:	8d 4d ec             	lea    -0x14(%ebp),%ecx
408056:	ff 15 24 22 41 00    	call   *0x412224
40805c:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
408060:	8d 4d d4             	lea    -0x2c(%ebp),%ecx
408063:	ff 15 30 22 41 00    	call   *0x412230
408069:	6a 2e                	push   $0x2e
40806b:	8d 4d ec             	lea    -0x14(%ebp),%ecx
40806e:	ff 15 10 22 41 00    	call   *0x412210
408074:	89 45 d8             	mov    %eax,-0x28(%ebp)
408077:	83 f8 ff             	cmp    $0xffffffff,%eax
40807a:	75 1d                	jne    0x408099
40807c:	57                   	push   %edi
40807d:	8b 4d ec             	mov    -0x14(%ebp),%ecx
408080:	e8 67 1c 00 00       	call   0x409cec
408085:	85 c0                	test   %eax,%eax
408087:	0f 84 dc fd ff ff    	je     0x407e69
40808d:	8b 4d ec             	mov    -0x14(%ebp),%ecx
408090:	e8 a0 1b 00 00       	call   0x409c35
408095:	8b f8                	mov    %eax,%edi
408097:	eb 5d                	jmp    0x4080f6
408099:	50                   	push   %eax
40809a:	57                   	push   %edi
40809b:	8d 45 d4             	lea    -0x2c(%ebp),%eax
40809e:	50                   	push   %eax
40809f:	8d 4d ec             	lea    -0x14(%ebp),%ecx
4080a2:	ff 15 3c 22 41 00    	call   *0x41223c
4080a8:	c6 45 fc 06          	movb   $0x6,-0x4(%ebp)
4080ac:	57                   	push   %edi
4080ad:	8b 08                	mov    (%eax),%ecx
4080af:	e8 38 1c 00 00       	call   0x409cec
4080b4:	8b f0                	mov    %eax,%esi
4080b6:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
4080ba:	8d 4d d4             	lea    -0x2c(%ebp),%ecx
4080bd:	ff 15 30 22 41 00    	call   *0x412230
4080c3:	85 f6                	test   %esi,%esi
4080c5:	0f 84 9e fd ff ff    	je     0x407e69
4080cb:	ff 75 d8             	push   -0x28(%ebp)
4080ce:	57                   	push   %edi
4080cf:	8d 45 d4             	lea    -0x2c(%ebp),%eax
4080d2:	50                   	push   %eax
4080d3:	8d 4d ec             	lea    -0x14(%ebp),%ecx
4080d6:	ff 15 3c 22 41 00    	call   *0x41223c
4080dc:	c6 45 fc 07          	movb   $0x7,-0x4(%ebp)
4080e0:	8b 08                	mov    (%eax),%ecx
4080e2:	e8 4e 1b 00 00       	call   0x409c35
4080e7:	8b f8                	mov    %eax,%edi
4080e9:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
4080ed:	8d 4d d4             	lea    -0x2c(%ebp),%ecx
4080f0:	ff 15 30 22 41 00    	call   *0x412230
4080f6:	69 f3 e8 03 00 00    	imul   $0x3e8,%ebx,%esi
4080fc:	03 f7                	add    %edi,%esi
4080fe:	89 75 d0             	mov    %esi,-0x30(%ebp)
408101:	83 4d fc ff          	orl    $0xffffffff,-0x4(%ebp)
408105:	8d 4d ec             	lea    -0x14(%ebp),%ecx
408108:	ff 15 30 22 41 00    	call   *0x412230
40810e:	8b c6                	mov    %esi,%eax
408110:	e9 63 fd ff ff       	jmp    0x407e78
408115:	8b 45 cc             	mov    -0x34(%ebp),%eax
408118:	8b 48 04             	mov    0x4(%eax),%ecx
40811b:	e8 ea f7 ff ff       	call   0x40790a
408120:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
408123:	85 c9                	test   %ecx,%ecx
408125:	74 17                	je     0x40813e
408127:	8b 01                	mov    (%ecx),%eax
408129:	51                   	push   %ecx
40812a:	8b 70 08             	mov    0x8(%eax),%esi
40812d:	8b ce                	mov    %esi,%ecx
40812f:	ff 15 20 23 41 00    	call   *0x412320
408135:	ff d6                	call   *%esi
408137:	33 ff                	xor    %edi,%edi
408139:	89 7d e4             	mov    %edi,-0x1c(%ebp)
40813c:	eb 02                	jmp    0x408140
40813e:	33 ff                	xor    %edi,%edi
408140:	8b 4d e8             	mov    -0x18(%ebp),%ecx
408143:	85 c9                	test   %ecx,%ecx
408145:	74 13                	je     0x40815a
408147:	8b 01                	mov    (%ecx),%eax
408149:	51                   	push   %ecx
40814a:	8b 70 08             	mov    0x8(%eax),%esi
40814d:	8b ce                	mov    %esi,%ecx
40814f:	ff 15 20 23 41 00    	call   *0x412320
408155:	ff d6                	call   *%esi
408157:	89 7d e8             	mov    %edi,-0x18(%ebp)
40815a:	b8 60 81 40 00       	mov    $0x408160,%eax
40815f:	c3                   	ret
408160:	e9 04 fd ff ff       	jmp    0x407e69
408165:	b9 06 10 04 80       	mov    $0x80041006,%ecx
40816a:	e8 9b f7 ff ff       	call   0x40790a
40816f:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
408172:	85 c9                	test   %ecx,%ecx
408174:	74 17                	je     0x40818d
408176:	8b 01                	mov    (%ecx),%eax
408178:	51                   	push   %ecx
408179:	8b 70 08             	mov    0x8(%eax),%esi
40817c:	8b ce                	mov    %esi,%ecx
40817e:	ff 15 20 23 41 00    	call   *0x412320
408184:	ff d6                	call   *%esi
408186:	33 ff                	xor    %edi,%edi
408188:	89 7d e4             	mov    %edi,-0x1c(%ebp)
40818b:	eb 02                	jmp    0x40818f
40818d:	33 ff                	xor    %edi,%edi
40818f:	8b 4d e8             	mov    -0x18(%ebp),%ecx
408192:	85 c9                	test   %ecx,%ecx
408194:	74 13                	je     0x4081a9
408196:	8b 01                	mov    (%ecx),%eax
408198:	51                   	push   %ecx
408199:	8b 70 08             	mov    0x8(%eax),%esi
40819c:	8b ce                	mov    %esi,%ecx
40819e:	ff 15 20 23 41 00    	call   *0x412320
4081a4:	ff d6                	call   *%esi
4081a6:	89 7d e8             	mov    %edi,-0x18(%ebp)
4081a9:	b8 69 7e 40 00       	mov    $0x407e69,%eax
4081ae:	c3                   	ret
4081af:	8b ce                	mov    %esi,%ecx
4081b1:	e8 6b 05 00 00       	call   0x408721
4081b6:	cc                   	int3
4081b7:	6a 20                	push   $0x20
4081b9:	b8 08 fc 40 00       	mov    $0x40fc08,%eax
4081be:	e8 8c 71 00 00       	call   0x40f34f
4081c3:	89 55 d8             	mov    %edx,-0x28(%ebp)
4081c6:	8b d9                	mov    %ecx,%ebx
4081c8:	8d 4d e8             	lea    -0x18(%ebp),%ecx
4081cb:	ff 15 f8 21 41 00    	call   *0x4121f8
4081d1:	33 ff                	xor    %edi,%edi
4081d3:	89 7d fc             	mov    %edi,-0x4(%ebp)
4081d6:	89 7d e0             	mov    %edi,-0x20(%ebp)
4081d9:	89 7d e4             	mov    %edi,-0x1c(%ebp)
4081dc:	89 7d ec             	mov    %edi,-0x14(%ebp)
4081df:	85 db                	test   %ebx,%ebx
4081e1:	75 1f                	jne    0x408202
4081e3:	b9 08 10 04 80       	mov    $0x80041008,%ecx
4081e8:	e8 1d f7 ff ff       	call   0x40790a
4081ed:	83 4d fc ff          	orl    $0xffffffff,-0x4(%ebp)
4081f1:	8d 4d e8             	lea    -0x18(%ebp),%ecx
4081f4:	ff 15 30 22 41 00    	call   *0x412230
4081fa:	33 c0                	xor    %eax,%eax
4081fc:	e8 f8 70 00 00       	call   0x40f2f9
408201:	c3                   	ret
408202:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
408206:	68 84 17 40 00       	push   $0x401784
40820b:	8d 4d dc             	lea    -0x24(%ebp),%ecx
40820e:	e8 c6 d7 ff ff       	call   0x4059d9
408213:	c6 45 fc 02          	movb   $0x2,-0x4(%ebp)
408217:	8b 00                	mov    (%eax),%eax
408219:	85 c0                	test   %eax,%eax
40821b:	74 04                	je     0x408221
40821d:	8b 00                	mov    (%eax),%eax
40821f:	eb 02                	jmp    0x408223
408221:	8b c7                	mov    %edi,%eax
408223:	8b 33                	mov    (%ebx),%esi
408225:	8d 4d ec             	lea    -0x14(%ebp),%ecx
408228:	51                   	push   %ecx
408229:	57                   	push   %edi
40822a:	57                   	push   %edi
40822b:	50                   	push   %eax
40822c:	53                   	push   %ebx
40822d:	8b 4e 48             	mov    0x48(%esi),%ecx
408230:	ff 15 20 23 41 00    	call   *0x412320
408236:	ff 56 48             	call   *0x48(%esi)
408239:	8b f0                	mov    %eax,%esi
40823b:	c6 45 fc 01          	movb   $0x1,-0x4(%ebp)
40823f:	8d 4d dc             	lea    -0x24(%ebp),%ecx
408242:	e8 08 d7 ff ff       	call   0x40594f
408247:	85 f6                	test   %esi,%esi
408249:	0f 88 e4 01 00 00    	js     0x408433
40824f:	8b 55 d8             	mov    -0x28(%ebp),%edx
408252:	8b 4d ec             	mov    -0x14(%ebp),%ecx
408255:	e8 6f f3 ff ff       	call   0x4075c9
40825a:	85 c0                	test   %eax,%eax
40825c:	79 07                	jns    0x408265
40825e:	8b c8                	mov    %eax,%ecx
408260:	e9 d0 01 00 00       	jmp    0x408435
408265:	8b 45 ec             	mov    -0x14(%ebp),%eax
408268:	8b 30                	mov    (%eax),%esi
40826a:	8d 4d e0             	lea    -0x20(%ebp),%ecx
40826d:	51                   	push   %ecx
40826e:	8d 4d e4             	lea    -0x1c(%ebp),%ecx
408271:	51                   	push   %ecx
408272:	6a 01                	push   $0x1
408274:	83 cb ff             	or     $0xffffffff,%ebx
408277:	53                   	push   %ebx
408278:	50                   	push   %eax
408279:	8b 4e 10             	mov    0x10(%esi),%ecx
40827c:	ff 15 20 23 41 00    	call   *0x412320
408282:	ff 56 10             	call   *0x10(%esi)
408285:	85 c0                	test   %eax,%eax
408287:	78 d5                	js     0x40825e
408289:	83 7d e0 00          	cmpl   $0x0,-0x20(%ebp)
40828d:	75 44                	jne    0x4082d3
40828f:	33 c9                	xor    %ecx,%ecx
408291:	41                   	inc    %ecx
408292:	e8 73 f6 ff ff       	call   0x40790a
408297:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
40829a:	85 c9                	test   %ecx,%ecx
40829c:	74 13                	je     0x4082b1
40829e:	8b 01                	mov    (%ecx),%eax
4082a0:	51                   	push   %ecx
4082a1:	8b 70 08             	mov    0x8(%eax),%esi
4082a4:	8b ce                	mov    %esi,%ecx
4082a6:	ff 15 20 23 41 00    	call   *0x412320
4082ac:	ff d6                	call   *%esi
4082ae:	89 7d e4             	mov    %edi,-0x1c(%ebp)
4082b1:	8b 4d ec             	mov    -0x14(%ebp),%ecx
4082b4:	85 c9                	test   %ecx,%ecx
4082b6:	74 13                	je     0x4082cb
4082b8:	8b 01                	mov    (%ecx),%eax
4082ba:	51                   	push   %ecx
4082bb:	8b 70 08             	mov    0x8(%eax),%esi
4082be:	8b ce                	mov    %esi,%ecx
4082c0:	ff 15 20 23 41 00    	call   *0x412320
4082c6:	ff d6                	call   *%esi
4082c8:	89 7d ec             	mov    %edi,-0x14(%ebp)
4082cb:	89 5d fc             	mov    %ebx,-0x4(%ebp)
4082ce:	e9 1e ff ff ff       	jmp    0x4081f1
4082d3:	b9 8d 13 00 00       	mov    $0x138d,%ecx
4082d8:	e8 74 17 00 00       	call   0x409a51
4082dd:	50                   	push   %eax
4082de:	8d 45 e8             	lea    -0x18(%ebp),%eax
4082e1:	50                   	push   %eax
4082e2:	ba b0 17 40 00       	mov    $0x4017b0,%edx
4082e7:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
4082ea:	e8 d3 f8 ff ff       	call   0x407bc2
4082ef:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
4082f2:	85 c0                	test   %eax,%eax
4082f4:	74 a4                	je     0x40829a
4082f6:	85 c9                	test   %ecx,%ecx
4082f8:	74 13                	je     0x40830d
4082fa:	8b 01                	mov    (%ecx),%eax
4082fc:	51                   	push   %ecx
4082fd:	8b 70 08             	mov    0x8(%eax),%esi
408300:	8b ce                	mov    %esi,%ecx
408302:	ff 15 20 23 41 00    	call   *0x412320
408308:	ff d6                	call   *%esi
40830a:	89 7d e4             	mov    %edi,-0x1c(%ebp)
40830d:	8b 4d ec             	mov    -0x14(%ebp),%ecx
408310:	85 c9                	test   %ecx,%ecx
408312:	74 13                	je     0x408327
408314:	8b 01                	mov    (%ecx),%eax
408316:	51                   	push   %ecx
408317:	8b 70 08             	mov    0x8(%eax),%esi
40831a:	8b ce                	mov    %esi,%ecx
40831c:	ff 15 20 23 41 00    	call   *0x412320
408322:	ff d6                	call   *%esi
408324:	89 7d ec             	mov    %edi,-0x14(%ebp)
408327:	68 c8 17 40 00       	push   $0x4017c8
40832c:	8d 4d e8             	lea    -0x18(%ebp),%ecx
40832f:	ff 15 28 22 41 00    	call   *0x412228
408335:	3b c3                	cmp    %ebx,%eax
408337:	74 14                	je     0x40834d
408339:	89 5d fc             	mov    %ebx,-0x4(%ebp)
40833c:	8d 4d e8             	lea    -0x18(%ebp),%ecx
40833f:	ff 15 30 22 41 00    	call   *0x412230
408345:	33 c0                	xor    %eax,%eax
408347:	40                   	inc    %eax
408348:	e9 af fe ff ff       	jmp    0x4081fc
40834d:	68 d0 17 40 00       	push   $0x4017d0
408352:	8d 4d e8             	lea    -0x18(%ebp),%ecx
408355:	ff 15 28 22 41 00    	call   *0x412228
40835b:	3b c3                	cmp    %ebx,%eax
40835d:	74 14                	je     0x408373
40835f:	89 5d fc             	mov    %ebx,-0x4(%ebp)
408362:	8d 4d e8             	lea    -0x18(%ebp),%ecx
408365:	ff 15 30 22 41 00    	call   *0x412230
40836b:	6a 02                	push   $0x2
40836d:	58                   	pop    %eax
40836e:	e9 89 fe ff ff       	jmp    0x4081fc
408373:	68 dc 17 40 00       	push   $0x4017dc
408378:	8d 4d e8             	lea    -0x18(%ebp),%ecx
40837b:	ff 15 28 22 41 00    	call   *0x412228
408381:	3b c3                	cmp    %ebx,%eax
408383:	0f 84 42 ff ff ff    	je     0x4082cb
408389:	89 5d fc             	mov    %ebx,-0x4(%ebp)
40838c:	8d 4d e8             	lea    -0x18(%ebp),%ecx
40838f:	ff 15 30 22 41 00    	call   *0x412230
408395:	6a 03                	push   $0x3
408397:	eb d4                	jmp    0x40836d
408399:	8b 45 d4             	mov    -0x2c(%ebp),%eax
40839c:	8b 48 04             	mov    0x4(%eax),%ecx
40839f:	e8 66 f5 ff ff       	call   0x40790a
4083a4:	8b 4d e4             	mov    -0x1c(%ebp),%ecx
4083a7:	85 c9                	test   %ecx,%ecx
4083a9:	74 17                	je     0x4083c2
4083ab:	8b 01                	mov    (%ecx),%eax
4083ad:	51                   	push   %ecx
4083ae:	8b 70 08             	mov    0x8(%eax),%esi
4083b1:	8b ce                	mov    %esi,%ecx
4083b3:	ff 15 20 23 41 00    	call   *0x412320
4083b9:	ff d6                	call   *%esi
4083bb:	33 ff                	xor    %edi,%edi
4083bd:	89 7d e4             	mov    %edi,-0x1c(%ebp)
4083c0:	eb 02                	jmp    0x4083c4