40aad8:	68 c8 00 00 00       	push   $0xc8
40aadd:	68 38 8f 40 00       	push   $0x408f38
40aae2:	56                   	push   %esi
40aae3:	50                   	push   %eax
40aae4:	ff d3                	call   *%ebx
40aae6:	8d 4d d0             	lea    -0x30(%ebp),%ecx
40aae9:	ff 15 8c 11 40 00    	call   *0x40118c
40aaef:	b8 02 00 00 00       	mov    $0x2,%eax
40aaf4:	89 45 c8             	mov    %eax,-0x38(%ebp)
40aaf7:	89 45 c0             	mov    %eax,-0x40(%ebp)
40aafa:	8d 45 c0             	lea    -0x40(%ebp),%eax
40aafd:	50                   	push   %eax
40aafe:	ff 15 fc 10 40 00    	call   *0x4010fc
40ab04:	8b d0                	mov    %eax,%edx
40ab06:	8d 4d e0             	lea    -0x20(%ebp),%ecx
40ab09:	ff 15 70 11 40 00    	call   *0x401170
40ab0f:	8d 4d c0             	lea    -0x40(%ebp),%ecx
40ab12:	ff 15 18 10 40 00    	call   *0x401018
40ab18:	39 3d c8 d6 40 00    	cmp    %edi,0x40d6c8
40ab1e:	75 10                	jne    0x40ab30
40ab20:	68 c8 d6 40 00       	push   $0x40d6c8
40ab25:	68 28 8f 40 00       	push   $0x408f28
40ab2a:	ff 15 14 11 40 00    	call   *0x401114
40ab30:	8b 35 c8 d6 40 00    	mov    0x40d6c8,%esi
40ab36:	8b 0e                	mov    (%esi),%ecx
40ab38:	8d 55 d0             	lea    -0x30(%ebp),%edx
40ab3b:	52                   	push   %edx
40ab3c:	56                   	push   %esi
40ab3d:	ff 51 14             	call   *0x14(%ecx)
40ab40:	db e2                	fnclex
40ab42:	3b c7                	cmp    %edi,%eax
40ab44:	7d 0b                	jge    0x40ab51
40ab46:	6a 14                	push   $0x14
40ab48:	68 18 8f 40 00       	push   $0x408f18
40ab4d:	56                   	push   %esi
40ab4e:	50                   	push   %eax
40ab4f:	ff d3                	call   *%ebx
40ab51:	8b 45 d0             	mov    -0x30(%ebp),%eax
40ab54:	8b 08                	mov    (%eax),%ecx
40ab56:	8d 55 d8             	lea    -0x28(%ebp),%edx
40ab59:	52                   	push   %edx
40ab5a:	50                   	push   %eax
40ab5b:	8b f0                	mov    %eax,%esi
40ab5d:	ff 51 60             	call   *0x60(%ecx)
40ab60:	db e2                	fnclex
40ab62:	3b c7                	cmp    %edi,%eax
40ab64:	7d 0b                	jge    0x40ab71
40ab66:	6a 60                	push   $0x60
40ab68:	68 38 8f 40 00       	push   $0x408f38
40ab6d:	56                   	push   %esi
40ab6e:	50                   	push   %eax
40ab6f:	ff d3                	call   *%ebx
40ab71:	8b 55 d8             	mov    -0x28(%ebp),%edx
40ab74:	8d 4d e4             	lea    -0x1c(%ebp),%ecx
40ab77:	89 7d d8             	mov    %edi,-0x28(%ebp)
40ab7a:	ff 15 70 11 40 00    	call   *0x401170
40ab80:	8d 4d d0             	lea    -0x30(%ebp),%ecx
40ab83:	ff 15 8c 11 40 00    	call   *0x40118c
40ab89:	68 de ab 40 00       	push   $0x40abde
40ab8e:	eb 38                	jmp    0x40abc8
40ab90:	8d 45 d4             	lea    -0x2c(%ebp),%eax
40ab93:	50                   	push   %eax
40ab94:	8d 4d d8             	lea    -0x28(%ebp),%ecx
40ab97:	51                   	push   %ecx
40ab98:	6a 02                	push   $0x2
40ab9a:	ff 15 3c 11 40 00    	call   *0x40113c
40aba0:	83 c4 0c             	add    $0xc,%esp
40aba3:	8d 4d d0             	lea    -0x30(%ebp),%ecx
40aba6:	ff 15 8c 11 40 00    	call   *0x40118c
40abac:	8d 55 90             	lea    -0x70(%ebp),%edx
40abaf:	52                   	push   %edx
40abb0:	8d 45 a0             	lea    -0x60(%ebp),%eax
40abb3:	50                   	push   %eax
40abb4:	8d 4d b0             	lea    -0x50(%ebp),%ecx
40abb7:	51                   	push   %ecx
40abb8:	8d 55 c0             	lea    -0x40(%ebp),%edx
40abbb:	52                   	push   %edx
40abbc:	6a 04                	push   $0x4
40abbe:	ff 15 20 10 40 00    	call   *0x401020
40abc4:	83 c4 14             	add    $0x14,%esp
40abc7:	c3                   	ret
40abc8:	8b 35 90 11 40 00    	mov    0x401190,%esi
40abce:	8d 4d e4             	lea    -0x1c(%ebp),%ecx
40abd1:	ff d6                	call   *%esi
40abd3:	8d 4d e0             	lea    -0x20(%ebp),%ecx
40abd6:	ff d6                	call   *%esi
40abd8:	8d 4d dc             	lea    -0x24(%ebp),%ecx
40abdb:	ff d6                	call   *%esi
40abdd:	c3                   	ret
40abde:	8b 45 08             	mov    0x8(%ebp),%eax
40abe1:	8b 08                	mov    (%eax),%ecx
40abe3:	50                   	push   %eax
40abe4:	ff 51 08             	call   *0x8(%ecx)
40abe7:	8b 45 fc             	mov    -0x4(%ebp),%eax
40abea:	8b 4d ec             	mov    -0x14(%ebp),%ecx
40abed:	5f                   	pop    %edi
40abee:	5e                   	pop    %esi
40abef:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
40abf6:	5b                   	pop    %ebx
40abf7:	8b e5                	mov    %ebp,%esp
40abf9:	5d                   	pop    %ebp
40abfa:	c2 28 00             	ret    $0x28
40abfd:	90                   	nop
40abfe:	90                   	nop
40abff:	90                   	nop
40ac00:	55                   	push   %ebp
40ac01:	8b ec                	mov    %esp,%ebp
40ac03:	83 ec 0c             	sub    $0xc,%esp
40ac06:	68 76 12 40 00       	push   $0x401276
40ac0b:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
40ac11:	50                   	push   %eax
40ac12:	64 89 25 00 00 00 00 	mov    %esp,%fs:0x0
40ac19:	83 ec 5c             	sub    $0x5c,%esp
40ac1c:	53                   	push   %ebx
40ac1d:	56                   	push   %esi
40ac1e:	57                   	push   %edi
40ac1f:	89 65 f4             	mov    %esp,-0xc(%ebp)
40ac22:	c7 45 f8 d8 11 40 00 	movl   $0x4011d8,-0x8(%ebp)
40ac29:	33 db                	xor    %ebx,%ebx
40ac2b:	89 5d fc             	mov    %ebx,-0x4(%ebp)
40ac2e:	8b 75 08             	mov    0x8(%ebp),%esi
40ac31:	8b 06                	mov    (%esi),%eax
40ac33:	56                   	push   %esi
40ac34:	ff 50 04             	call   *0x4(%eax)
40ac37:	8b 55 14             	mov    0x14(%ebp),%edx
40ac3a:	8d 4d dc             	lea    -0x24(%ebp),%ecx
40ac3d:	89 5d e8             	mov    %ebx,-0x18(%ebp)
40ac40:	89 5d dc             	mov    %ebx,-0x24(%ebp)
40ac43:	89 5d d0             	mov    %ebx,-0x30(%ebp)
40ac46:	89 5d cc             	mov    %ebx,-0x34(%ebp)
40ac49:	89 5d bc             	mov    %ebx,-0x44(%ebp)
40ac4c:	89 5d a8             	mov    %ebx,-0x58(%ebp)
40ac4f:	ff 15 2c 11 40 00    	call   *0x40112c
40ac55:	8b 0e                	mov    (%esi),%ecx
40ac57:	8d 55 d0             	lea    -0x30(%ebp),%edx
40ac5a:	52                   	push   %edx
40ac5b:	56                   	push   %esi
40ac5c:	ff 91 a8 00 00 00    	call   *0xa8(%ecx)
40ac62:	db e2                	fnclex
40ac64:	3b c3                	cmp    %ebx,%eax
40ac66:	7d 16                	jge    0x40ac7e
40ac68:	8b 3d 44 10 40 00    	mov    0x401044,%edi
40ac6e:	68 a8 00 00 00       	push   $0xa8
40ac73:	68 7c 8d 40 00       	push   $0x408d7c
40ac78:	56                   	push   %esi
40ac79:	50                   	push   %eax
40ac7a:	ff d7                	call   *%edi
40ac7c:	eb 06                	jmp    0x40ac84
40ac7e:	8b 3d 44 10 40 00    	mov    0x401044,%edi
40ac84:	8b 45 d0             	mov    -0x30(%ebp),%eax
40ac87:	50                   	push   %eax
40ac88:	53                   	push   %ebx
40ac89:	ff 15 90 10 40 00    	call   *0x401090
40ac8f:	8b f0                	mov    %eax,%esi
40ac91:	f7 de                	neg    %esi
40ac93:	1b f6                	sbb    %esi,%esi
40ac95:	46                   	inc    %esi
40ac96:	8d 4d d0             	lea    -0x30(%ebp),%ecx
40ac99:	f7 de                	neg    %esi
40ac9b:	ff 15 90 11 40 00    	call   *0x401190
40aca1:	66 3b f3             	cmp    %bx,%si
40aca4:	74 70                	je     0x40ad16
40aca6:	39 1d c8 d6 40 00    	cmp    %ebx,0x40d6c8
40acac:	75 14                	jne    0x40acc2
40acae:	8b 1d 14 11 40 00    	mov    0x401114,%ebx
40acb4:	68 c8 d6 40 00       	push   $0x40d6c8
40acb9:	68 28 8f 40 00       	push   $0x408f28
40acbe:	ff d3                	call   *%ebx
40acc0:	eb 06                	jmp    0x40acc8
40acc2:	8b 1d 14 11 40 00    	mov    0x401114,%ebx
40acc8:	8b 35 c8 d6 40 00    	mov    0x40d6c8,%esi
40acce:	8b 0e                	mov    (%esi),%ecx
40acd0:	8d 55 cc             	lea    -0x34(%ebp),%edx
40acd3:	52                   	push   %edx
40acd4:	56                   	push   %esi
40acd5:	ff 51 1c             	call   *0x1c(%ecx)
40acd8:	db e2                	fnclex
40acda:	85 c0                	test   %eax,%eax
40acdc:	7d 0b                	jge    0x40ace9
40acde:	6a 1c                	push   $0x1c
40ace0:	68 18 8f 40 00       	push   $0x408f18
40ace5:	56                   	push   %esi
40ace6:	50                   	push   %eax
40ace7:	ff d7                	call   *%edi
40ace9:	8b 45 cc             	mov    -0x34(%ebp),%eax
40acec:	8b 08                	mov    (%eax),%ecx
40acee:	8d 55 a8             	lea    -0x58(%ebp),%edx
40acf1:	52                   	push   %edx
40acf2:	6a 01                	push   $0x1
40acf4:	50                   	push   %eax
40acf5:	8b f0                	mov    %eax,%esi
40acf7:	ff 51 64             	call   *0x64(%ecx)
40acfa:	db e2                	fnclex
40acfc:	85 c0                	test   %eax,%eax
40acfe:	7d 0b                	jge    0x40ad0b
40ad00:	6a 64                	push   $0x64
40ad02:	68 30 90 40 00       	push   $0x409030
40ad07:	56                   	push   %esi
40ad08:	50                   	push   %eax
40ad09:	ff d7                	call   *%edi
40ad0b:	8d 4d cc             	lea    -0x34(%ebp),%ecx
40ad0e:	ff 15 8c 11 40 00    	call   *0x40118c
40ad14:	eb 06                	jmp    0x40ad1c
40ad16:	8b 1d 14 11 40 00    	mov    0x401114,%ebx
40ad1c:	8d 45 bc             	lea    -0x44(%ebp),%eax
40ad1f:	50                   	push   %eax
40ad20:	c7 45 c4 04 00 02 80 	movl   $0x80020004,-0x3c(%ebp)
40ad27:	c7 45 bc 0a 00 00 00 	movl   $0xa,-0x44(%ebp)
40ad2e:	ff 15 58 10 40 00    	call   *0x401058
40ad34:	dd d8                	fstp   %st(0)
40ad36:	8d 4d bc             	lea    -0x44(%ebp),%ecx
40ad39:	ff 15 18 10 40 00    	call   *0x401018
40ad3f:	a1 c8 d6 40 00       	mov    0x40d6c8,%eax
40ad44:	85 c0                	test   %eax,%eax
40ad46:	75 0c                	jne    0x40ad54
40ad48:	68 c8 d6 40 00       	push   $0x40d6c8
40ad4d:	68 28 8f 40 00       	push   $0x408f28
40ad52:	ff d3                	call   *%ebx
40ad54:	8b 35 c8 d6 40 00    	mov    0x40d6c8,%esi
40ad5a:	8b 0e                	mov    (%esi),%ecx
40ad5c:	8d 55 cc             	lea    -0x34(%ebp),%edx
40ad5f:	52                   	push   %edx
40ad60:	56                   	push   %esi
40ad61:	ff 51 14             	call   *0x14(%ecx)
40ad64:	db e2                	fnclex
40ad66:	85 c0                	test   %eax,%eax
40ad68:	7d 0b                	jge    0x40ad75
40ad6a:	6a 14                	push   $0x14
40ad6c:	68 18 8f 40 00       	push   $0x408f18
40ad71:	56                   	push   %esi
40ad72:	50                   	push   %eax
40ad73:	ff d7                	call   *%edi
40ad75:	8b 45 cc             	mov    -0x34(%ebp),%eax
40ad78:	8b 08                	mov    (%eax),%ecx
40ad7a:	8d 55 a8             	lea    -0x58(%ebp),%edx
40ad7d:	52                   	push   %edx
40ad7e:	50                   	push   %eax
40ad7f:	8b f0                	mov    %eax,%esi
40ad81:	ff 91 c0 00 00 00    	call   *0xc0(%ecx)
40ad87:	db e2                	fnclex
40ad89:	85 c0                	test   %eax,%eax
40ad8b:	7d 0e                	jge    0x40ad9b
40ad8d:	68 c0 00 00 00       	push   $0xc0
40ad92:	68 38 8f 40 00       	push   $0x408f38
40ad97:	56                   	push   %esi
40ad98:	50                   	push   %eax
40ad99:	ff d7                	call   *%edi
40ad9b:	8d 4d cc             	lea    -0x34(%ebp),%ecx
40ad9e:	ff 15 8c 11 40 00    	call   *0x40118c
40ada4:	a1 c8 d6 40 00       	mov    0x40d6c8,%eax
40ada9:	85 c0                	test   %eax,%eax
40adab:	75 0c                	jne    0x40adb9
40adad:	68 c8 d6 40 00       	push   $0x40d6c8
40adb2:	68 28 8f 40 00       	push   $0x408f28
40adb7:	ff d3                	call   *%ebx
40adb9:	8b 35 c8 d6 40 00    	mov    0x40d6c8,%esi
40adbf:	8b 06                	mov    (%esi),%eax
40adc1:	8d 4d cc             	lea    -0x34(%ebp),%ecx
40adc4:	51                   	push   %ecx
40adc5:	56                   	push   %esi
40adc6:	ff 50 14             	call   *0x14(%eax)
40adc9:	db e2                	fnclex
40adcb:	85 c0                	test   %eax,%eax
40adcd:	7d 0b                	jge    0x40adda
40adcf:	6a 14                	push   $0x14
40add1:	68 18 8f 40 00       	push   $0x408f18
40add6:	56                   	push   %esi
40add7:	50                   	push   %eax
40add8:	ff d7                	call   *%edi
40adda:	8b 45 cc             	mov    -0x34(%ebp),%eax
40addd:	8b 10                	mov    (%eax),%edx
40addf:	8d 4d a8             	lea    -0x58(%ebp),%ecx
40ade2:	51                   	push   %ecx
40ade3:	50                   	push   %eax
40ade4:	8b f0                	mov    %eax,%esi
40ade6:	ff 92 08 01 00 00    	call   *0x108(%edx)
40adec:	db e2                	fnclex
40adee:	85 c0                	test   %eax,%eax
40adf0:	7d 0e                	jge    0x40ae00
40adf2:	68 08 01 00 00       	push   $0x108
40adf7:	68 38 8f 40 00       	push   $0x408f38
40adfc:	56                   	push   %esi
40adfd:	50                   	push   %eax
40adfe:	ff d7                	call   *%edi
40ae00:	8d 4d cc             	lea    -0x34(%ebp),%ecx
40ae03:	ff 15 8c 11 40 00    	call   *0x40118c
40ae09:	a1 c8 d6 40 00       	mov    0x40d6c8,%eax
40ae0e:	85 c0                	test   %eax,%eax
40ae10:	75 0c                	jne    0x40ae1e
40ae12:	68 c8 d6 40 00       	push   $0x40d6c8
40ae17:	68 28 8f 40 00       	push   $0x408f28
40ae1c:	ff d3                	call   *%ebx
40ae1e:	8b 35 c8 d6 40 00    	mov    0x40d6c8,%esi
40ae24:	8b 16                	mov    (%esi),%edx
40ae26:	8d 45 cc             	lea    -0x34(%ebp),%eax
40ae29:	50                   	push   %eax
40ae2a:	56                   	push   %esi
40ae2b:	ff 52 14             	call   *0x14(%edx)
40ae2e:	db e2                	fnclex
40ae30:	85 c0                	test   %eax,%eax
40ae32:	7d 0b                	jge    0x40ae3f
40ae34:	6a 14                	push   $0x14
40ae36:	68 18 8f 40 00       	push   $0x408f18
40ae3b:	56                   	push   %esi
40ae3c:	50                   	push   %eax
40ae3d:	ff d7                	call   *%edi
40ae3f:	8b 45 cc             	mov    -0x34(%ebp),%eax
40ae42:	8b 08                	mov    (%eax),%ecx
40ae44:	8d 55 a8             	lea    -0x58(%ebp),%edx
40ae47:	52                   	push   %edx
40ae48:	50                   	push   %eax
40ae49:	8b f0                	mov    %eax,%esi
40ae4b:	ff 91 b8 00 00 00    	call   *0xb8(%ecx)
40ae51:	db e2                	fnclex
40ae53:	85 c0                	test   %eax,%eax
40ae55:	7d 0e                	jge    0x40ae65
40ae57:	68 b8 00 00 00       	push   $0xb8
40ae5c:	68 38 8f 40 00       	push   $0x408f38
40ae61:	56                   	push   %esi
40ae62:	50                   	push   %eax
40ae63:	ff d7                	call   *%edi
40ae65:	8d 4d cc             	lea    -0x34(%ebp),%ecx
40ae68:	ff 15 8c 11 40 00    	call   *0x40118c
40ae6e:	9b                   	fwait
40ae6f:	68 9c ae 40 00       	push   $0x40ae9c
40ae74:	eb 1c                	jmp    0x40ae92
40ae76:	8d 4d d0             	lea    -0x30(%ebp),%ecx
40ae79:	ff 15 90 11 40 00    	call   *0x401190
40ae7f:	8d 4d cc             	lea    -0x34(%ebp),%ecx
40ae82:	ff 15 8c 11 40 00    	call   *0x40118c
40ae88:	8d 4d bc             	lea    -0x44(%ebp),%ecx
40ae8b:	ff 15 18 10 40 00    	call   *0x401018
40ae91:	c3                   	ret
40ae92:	8d 4d dc             	lea    -0x24(%ebp),%ecx
40ae95:	ff 15 90 11 40 00    	call   *0x401190
40ae9b:	c3                   	ret
40ae9c:	8b 45 08             	mov    0x8(%ebp),%eax
40ae9f:	8b 08                	mov    (%eax),%ecx
40aea1:	50                   	push   %eax
40aea2:	ff 51 08             	call   *0x8(%ecx)
40aea5:	8b 45 e8             	mov    -0x18(%ebp),%eax
40aea8:	8b 55 28             	mov    0x28(%ebp),%edx
40aeab:	89 02                	mov    %eax,(%edx)
40aead:	8b 45 fc             	mov    -0x4(%ebp),%eax
40aeb0:	8b 4d ec             	mov    -0x14(%ebp),%ecx
40aeb3:	5f                   	pop    %edi
40aeb4:	5e                   	pop    %esi
40aeb5:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
40aebc:	5b                   	pop    %ebx
40aebd:	8b e5                	mov    %ebp,%esp