40aca8:	ff 15 08 f0 40 00    	call   *0x40f008
40acae:	85 c0                	test   %eax,%eax
40acb0:	75 6a                	jne    0x40ad1c
40acb2:	8b 8d 94 f9 ff ff    	mov    -0x66c(%ebp),%ecx
40acb8:	8d 85 50 f9 ff ff    	lea    -0x6b0(%ebp),%eax
40acbe:	50                   	push   %eax
40acbf:	8b 46 04             	mov    0x4(%esi),%eax
40acc2:	68 cc 16 40 00       	push   $0x4016cc
40acc7:	ff 74 01 08          	push   0x8(%ecx,%eax,1)
40accb:	ff 15 04 f0 40 00    	call   *0x40f004
40acd1:	85 c0                	test   %eax,%eax
40acd3:	74 07                	je     0x40acdc
40acd5:	b9 a2 00 00 00       	mov    $0xa2,%ecx
40acda:	eb 28                	jmp    0x40ad04
40acdc:	8b 8d 94 f9 ff ff    	mov    -0x66c(%ebp),%ecx
40ace2:	8d 85 50 f9 ff ff    	lea    -0x6b0(%ebp),%eax
40ace8:	50                   	push   %eax
40ace9:	8b 46 04             	mov    0x4(%esi),%eax
40acec:	68 8c 16 40 00       	push   $0x40168c
40acf1:	ff 74 01 08          	push   0x8(%ecx,%eax,1)
40acf5:	ff 15 04 f0 40 00    	call   *0x40f004
40acfb:	85 c0                	test   %eax,%eax
40acfd:	74 10                	je     0x40ad0f
40acff:	b9 a3 00 00 00       	mov    $0xa3,%ecx
40ad04:	8d 95 90 f9 ff ff    	lea    -0x670(%ebp),%edx
40ad0a:	e8 a0 f8 ff ff       	call   0x40a5af
40ad0f:	8d 85 90 f9 ff ff    	lea    -0x670(%ebp),%eax
40ad15:	50                   	push   %eax
40ad16:	ff 15 0c f0 40 00    	call   *0x40f00c
40ad1c:	8b 56 04             	mov    0x4(%esi),%edx
40ad1f:	8b 85 94 f9 ff ff    	mov    -0x66c(%ebp),%eax
40ad25:	89 bd 70 f9 ff ff    	mov    %edi,-0x690(%ebp)
40ad2b:	39 7c 10 0c          	cmp    %edi,0xc(%eax,%edx,1)
40ad2f:	0f 86 ec 02 00 00    	jbe    0x40b021
40ad35:	89 95 6c f9 ff ff    	mov    %edx,-0x694(%ebp)
40ad3b:	89 bd 84 f9 ff ff    	mov    %edi,-0x67c(%ebp)
40ad41:	8b 4c 02 10          	mov    0x10(%edx,%eax,1),%ecx
40ad45:	89 8d 8c f9 ff ff    	mov    %ecx,-0x674(%ebp)
40ad4b:	8b 8d 84 f9 ff ff    	mov    -0x67c(%ebp),%ecx
40ad51:	8b 85 8c f9 ff ff    	mov    -0x674(%ebp),%eax
40ad57:	8b 04 08             	mov    (%eax,%ecx,1),%eax
40ad5a:	89 85 80 f9 ff ff    	mov    %eax,-0x680(%ebp)
40ad60:	8b 85 8c f9 ff ff    	mov    -0x674(%ebp),%eax
40ad66:	83 3c 08 01          	cmpl   $0x1,(%eax,%ecx,1)
40ad6a:	8b 85 94 f9 ff ff    	mov    -0x66c(%ebp),%eax
40ad70:	0f 85 b3 00 00 00    	jne    0x40ae29
40ad76:	8b 8d 94 f9 ff ff    	mov    -0x66c(%ebp),%ecx
40ad7c:	89 bd 68 f9 ff ff    	mov    %edi,-0x698(%ebp)
40ad82:	8b 46 04             	mov    0x4(%esi),%eax
40ad85:	8b 44 01 10          	mov    0x10(%ecx,%eax,1),%eax
40ad89:	8d 8d 68 f9 ff ff    	lea    -0x698(%ebp),%ecx
40ad8f:	51                   	push   %ecx
40ad90:	8b 8d 84 f9 ff ff    	mov    -0x67c(%ebp),%ecx
40ad96:	57                   	push   %edi
40ad97:	68 04 00 00 40       	push   $0x40000004
40ad9c:	ff 74 08 04          	push   0x4(%eax,%ecx,1)
40ada0:	ff 74 08 08          	push   0x8(%eax,%ecx,1)
40ada4:	ff 15 04 00 41 00    	call   *0x410004
40adaa:	85 c0                	test   %eax,%eax
40adac:	0f 84 b3 02 00 00    	je     0x40b065
40adb2:	8b 85 68 f9 ff ff    	mov    -0x698(%ebp),%eax
40adb8:	03 c0                	add    %eax,%eax
40adba:	50                   	push   %eax
40adbb:	57                   	push   %edi
40adbc:	ff 15 64 f0 40 00    	call   *0x40f064
40adc2:	8b d0                	mov    %eax,%edx
40adc4:	89 95 90 f9 ff ff    	mov    %edx,-0x670(%ebp)
40adca:	85 d2                	test   %edx,%edx
40adcc:	0f 84 86 02 00 00    	je     0x40b058
40add2:	8b 4e 04             	mov    0x4(%esi),%ecx
40add5:	8b 85 94 f9 ff ff    	mov    -0x66c(%ebp),%eax
40addb:	8b 4c 08 10          	mov    0x10(%eax,%ecx,1),%ecx
40addf:	8d 85 68 f9 ff ff    	lea    -0x698(%ebp),%eax
40ade5:	50                   	push   %eax
40ade6:	8b 85 84 f9 ff ff    	mov    -0x67c(%ebp),%eax
40adec:	52                   	push   %edx
40aded:	68 04 00 00 40       	push   $0x40000004
40adf2:	ff 74 01 04          	push   0x4(%ecx,%eax,1)
40adf6:	ff 74 01 08          	push   0x8(%ecx,%eax,1)
40adfa:	ff 15 04 00 41 00    	call   *0x410004
40ae00:	85 c0                	test   %eax,%eax
40ae02:	0f 84 5d 02 00 00    	je     0x40b065
40ae08:	8d 95 90 f9 ff ff    	lea    -0x670(%ebp),%edx
40ae0e:	b9 8f 00 00 00       	mov    $0x8f,%ecx
40ae13:	e8 97 f7 ff ff       	call   0x40a5af
40ae18:	ff b5 90 f9 ff ff    	push   -0x670(%ebp)
40ae1e:	ff 15 68 f0 40 00    	call   *0x40f068
40ae24:	e9 c4 01 00 00       	jmp    0x40afed
40ae29:	8b 7c 02 10          	mov    0x10(%edx,%eax,1),%edi
40ae2d:	6a 00                	push   $0x0
40ae2f:	89 bd 74 f9 ff ff    	mov    %edi,-0x68c(%ebp)
40ae35:	83 3c 0f 02          	cmpl   $0x2,(%edi,%ecx,1)
40ae39:	5f                   	pop    %edi
40ae3a:	0f 85 f0 00 00 00    	jne    0x40af30
40ae40:	8b 85 74 f9 ff ff    	mov    -0x68c(%ebp),%eax
40ae46:	8b 44 08 08          	mov    0x8(%eax,%ecx,1),%eax
40ae4a:	89 85 5c f9 ff ff    	mov    %eax,-0x6a4(%ebp)
40ae50:	89 85 80 f9 ff ff    	mov    %eax,-0x680(%ebp)
40ae56:	8b 85 74 f9 ff ff    	mov    -0x68c(%ebp),%eax
40ae5c:	8b 4c 08 04          	mov    0x4(%eax,%ecx,1),%ecx
40ae60:	8b 85 94 f9 ff ff    	mov    -0x66c(%ebp),%eax
40ae66:	89 8d 74 f9 ff ff    	mov    %ecx,-0x68c(%ebp)
40ae6c:	83 f9 02             	cmp    $0x2,%ecx
40ae6f:	0f 86 7e 01 00 00    	jbe    0x40aff3
40ae75:	8b c1                	mov    %ecx,%eax
40ae77:	8b 8d 80 f9 ff ff    	mov    -0x680(%ebp),%ecx
40ae7d:	d1 e8                	shr    $1,%eax
40ae7f:	66 39 7c 41 fe       	cmp    %di,-0x2(%ecx,%eax,2)
40ae84:	8b 8d 74 f9 ff ff    	mov    -0x68c(%ebp),%ecx
40ae8a:	74 69                	je     0x40aef5
40ae8c:	b8 00 04 00 00       	mov    $0x400,%eax
40ae91:	3b c8                	cmp    %eax,%ecx
40ae93:	76 08                	jbe    0x40ae9d
40ae95:	8b c8                	mov    %eax,%ecx
40ae97:	89 85 74 f9 ff ff    	mov    %eax,-0x68c(%ebp)
40ae9d:	8b 85 8c f9 ff ff    	mov    -0x674(%ebp),%eax
40aea3:	51                   	push   %ecx
40aea4:	8b 8d 84 f9 ff ff    	mov    -0x67c(%ebp),%ecx
40aeaa:	ff 74 08 08          	push   0x8(%eax,%ecx,1)
40aeae:	8d 85 ac f9 ff ff    	lea    -0x654(%ebp),%eax
40aeb4:	50                   	push   %eax
40aeb5:	e8 49 b9 ff ff       	call   0x406803
40aeba:	8b 8d 74 f9 ff ff    	mov    -0x68c(%ebp),%ecx
40aec0:	83 c4 0c             	add    $0xc,%esp
40aec3:	8b c1                	mov    %ecx,%eax
40aec5:	83 e0 fe             	and    $0xfffffffe,%eax
40aec8:	3d 02 04 00 00       	cmp    $0x402,%eax
40aecd:	0f 83 22 02 00 00    	jae    0x40b0f5
40aed3:	33 d2                	xor    %edx,%edx
40aed5:	66 89 94 05 ac f9 ff 	mov    %dx,-0x654(%ebp,%eax,1)
40aedc:	ff
40aedd:	8d 85 ac f9 ff ff    	lea    -0x654(%ebp),%eax
40aee3:	8b 95 6c f9 ff ff    	mov    -0x694(%ebp),%edx
40aee9:	89 85 5c f9 ff ff    	mov    %eax,-0x6a4(%ebp)
40aeef:	89 85 80 f9 ff ff    	mov    %eax,-0x680(%ebp)
40aef5:	8b 85 94 f9 ff ff    	mov    -0x66c(%ebp),%eax
40aefb:	83 3c 02 04          	cmpl   $0x4,(%edx,%eax,1)
40aeff:	75 24                	jne    0x40af25
40af01:	83 f9 02             	cmp    $0x2,%ecx
40af04:	76 1f                	jbe    0x40af25
40af06:	8b 85 80 f9 ff ff    	mov    -0x680(%ebp),%eax
40af0c:	83 c1 fd             	add    $0xfffffffd,%ecx
40af0f:	d1 e9                	shr    $1,%ecx
40af11:	41                   	inc    %ecx
40af12:	66 39 38             	cmp    %di,(%eax)
40af15:	75 06                	jne    0x40af1d
40af17:	6a 3b                	push   $0x3b
40af19:	5a                   	pop    %edx
40af1a:	66 89 10             	mov    %dx,(%eax)
40af1d:	83 c0 02             	add    $0x2,%eax
40af20:	83 e9 01             	sub    $0x1,%ecx
40af23:	75 ed                	jne    0x40af12
40af25:	8d 95 5c f9 ff ff    	lea    -0x6a4(%ebp),%edx
40af2b:	e9 b3 00 00 00       	jmp    0x40afe3
40af30:	8b 95 74 f9 ff ff    	mov    -0x68c(%ebp),%edx
40af36:	83 3c 0a 03          	cmpl   $0x3,(%edx,%ecx,1)
40af3a:	75 51                	jne    0x40af8d
40af3c:	8d 45 d0             	lea    -0x30(%ebp),%eax
40af3f:	89 85 6c f9 ff ff    	mov    %eax,-0x694(%ebp)
40af45:	83 7c 0a 04 01       	cmpl   $0x1,0x4(%edx,%ecx,1)
40af4a:	0f 85 2e 01 00 00    	jne    0x40b07e
40af50:	8b 85 8c f9 ff ff    	mov    -0x674(%ebp),%eax
40af56:	ff 74 08 04          	push   0x4(%eax,%ecx,1)
40af5a:	ff 74 08 08          	push   0x8(%eax,%ecx,1)
40af5e:	8d 85 7b f9 ff ff    	lea    -0x685(%ebp),%eax
40af64:	50                   	push   %eax
40af65:	e8 99 b8 ff ff       	call   0x406803
40af6a:	ff b5 80 f9 ff ff    	push   -0x680(%ebp)
40af70:	0f b6 85 7b f9 ff ff 	movzbl -0x685(%ebp),%eax
40af77:	50                   	push   %eax
40af78:	68 38 16 40 00       	push   $0x401638
40af7d:	8d 45 d0             	lea    -0x30(%ebp),%eax
40af80:	6a 12                	push   $0x12
40af82:	50                   	push   %eax
40af83:	e8 21 19 00 00       	call   0x40c8a9
40af88:	83 c4 20             	add    $0x20,%esp
40af8b:	eb 48                	jmp    0x40afd5
40af8d:	83 3c 0a 04          	cmpl   $0x4,(%edx,%ecx,1)
40af91:	8b 95 80 f9 ff ff    	mov    -0x680(%ebp),%edx
40af97:	74 05                	je     0x40af9e
40af99:	83 fa 05             	cmp    $0x5,%edx
40af9c:	75 5b                	jne    0x40aff9
40af9e:	8d 45 b4             	lea    -0x4c(%ebp),%eax
40afa1:	89 85 6c f9 ff ff    	mov    %eax,-0x694(%ebp)
40afa7:	8b 85 8c f9 ff ff    	mov    -0x674(%ebp),%eax
40afad:	83 7c 08 04 08       	cmpl   $0x8,0x4(%eax,%ecx,1)
40afb2:	0f 85 c6 00 00 00    	jne    0x40b07e
40afb8:	8b 44 08 08          	mov    0x8(%eax,%ecx,1),%eax
40afbc:	52                   	push   %edx
40afbd:	ff 70 04             	push   0x4(%eax)
40afc0:	ff 30                	push   (%eax)
40afc2:	8d 45 b4             	lea    -0x4c(%ebp),%eax
40afc5:	68 50 16 40 00       	push   $0x401650
40afca:	6a 20                	push   $0x20
40afcc:	50                   	push   %eax
40afcd:	e8 d7 18 00 00       	call   0x40c8a9
40afd2:	83 c4 18             	add    $0x18,%esp
40afd5:	85 c0                	test   %eax,%eax
40afd7:	0f 88 a1 00 00 00    	js     0x40b07e
40afdd:	8d 95 6c f9 ff ff    	lea    -0x694(%ebp),%edx
40afe3:	b9 8f 00 00 00       	mov    $0x8f,%ecx
40afe8:	e8 c2 f5 ff ff       	call   0x40a5af
40afed:	8b 85 94 f9 ff ff    	mov    -0x66c(%ebp),%eax
40aff3:	8b 8d 84 f9 ff ff    	mov    -0x67c(%ebp),%ecx
40aff9:	8b 56 04             	mov    0x4(%esi),%edx
40affc:	83 c1 0c             	add    $0xc,%ecx
40afff:	ff 85 70 f9 ff ff    	incl   -0x690(%ebp)
40b005:	89 8d 84 f9 ff ff    	mov    %ecx,-0x67c(%ebp)
40b00b:	8b 8d 70 f9 ff ff    	mov    -0x690(%ebp),%ecx
40b011:	89 95 6c f9 ff ff    	mov    %edx,-0x694(%ebp)
40b017:	3b 4c 10 0c          	cmp    0xc(%eax,%edx,1),%ecx
40b01b:	0f 82 20 fd ff ff    	jb     0x40ad41
40b021:	8b 8d 58 f9 ff ff    	mov    -0x6a8(%ebp),%ecx
40b027:	83 c0 14             	add    $0x14,%eax
40b02a:	41                   	inc    %ecx
40b02b:	89 85 94 f9 ff ff    	mov    %eax,-0x66c(%ebp)
40b031:	89 8d 58 f9 ff ff    	mov    %ecx,-0x6a8(%ebp)
40b037:	3b 0e                	cmp    (%esi),%ecx
40b039:	0f 82 51 fa ff ff    	jb     0x40aa90
40b03f:	83 bd 88 f9 ff ff 04 	cmpl   $0x4,-0x678(%ebp)
40b046:	0f 85 03 f7 ff ff    	jne    0x40a74f
40b04c:	33 d2                	xor    %edx,%edx
40b04e:	b9 99 00 00 00       	mov    $0x99,%ecx
40b053:	e9 ca f9 ff ff       	jmp    0x40aa22
40b058:	ff 15 40 f0 40 00    	call   *0x40f040
40b05e:	b9 f8 15 40 00       	mov    $0x4015f8,%ecx
40b063:	eb 0b                	jmp    0x40b070
40b065:	ff 15 40 f0 40 00    	call   *0x40f040
40b06b:	b9 90 15 40 00       	mov    $0x401590,%ecx
40b070:	8b d8                	mov    %eax,%ebx
40b072:	8b d3                	mov    %ebx,%edx
40b074:	e8 07 d9 ff ff       	call   0x408980
40b079:	e9 d1 f6 ff ff       	jmp    0x40a74f
40b07e:	6a 0d                	push   $0xd
40b080:	5b                   	pop    %ebx
40b081:	33 d2                	xor    %edx,%edx
40b083:	b9 ab 00 00 00       	mov    $0xab,%ecx
40b088:	e9 95 f9 ff ff       	jmp    0x40aa22
40b08d:	83 fe 0c             	cmp    $0xc,%esi
40b090:	0f 85 b3 f6 ff ff    	jne    0x40a749
40b096:	8b b5 94 f9 ff ff    	mov    -0x66c(%ebp),%esi
40b09c:	8d 95 8c f9 ff ff    	lea    -0x674(%ebp),%edx
40b0a2:	8b 85 7c f9 ff ff    	mov    -0x684(%ebp),%eax
40b0a8:	89 85 8c f9 ff ff    	mov    %eax,-0x674(%ebp)
40b0ae:	8b 06                	mov    (%esi),%eax
40b0b0:	2b c7                	sub    %edi,%eax
40b0b2:	74 37                	je     0x40b0eb
40b0b4:	83 e8 01             	sub    $0x1,%eax
40b0b7:	74 28                	je     0x40b0e1
40b0b9:	83 e8 01             	sub    $0x1,%eax
40b0bc:	74 19                	je     0x40b0d7
40b0be:	83 e8 01             	sub    $0x1,%eax
40b0c1:	74 0a                	je     0x40b0cd
40b0c3:	b9 b1 00 00 00       	mov    $0xb1,%ecx
40b0c8:	e9 55 f9 ff ff       	jmp    0x40aa22
40b0cd:	b9 b0 00 00 00       	mov    $0xb0,%ecx
40b0d2:	e9 4b f9 ff ff       	jmp    0x40aa22
40b0d7:	b9 af 00 00 00       	mov    $0xaf,%ecx
40b0dc:	e9 41 f9 ff ff       	jmp    0x40aa22
40b0e1:	b9 ae 00 00 00       	mov    $0xae,%ecx
40b0e6:	e9 37 f9 ff ff       	jmp    0x40aa22
40b0eb:	b9 ad 00 00 00       	mov    $0xad,%ecx
40b0f0:	e9 2d f9 ff ff       	jmp    0x40aa22
40b0f5:	e8 6e b0 ff ff       	call   0x406168
40b0fa:	cc                   	int3
40b0fb:	8b ff                	mov    %edi,%edi
40b0fd:	55                   	push   %ebp
40b0fe:	8b ec                	mov    %esp,%ebp
40b100:	51                   	push   %ecx
40b101:	56                   	push   %esi
40b102:	6a 75                	push   $0x75
40b104:	5e                   	pop    %esi
40b105:	33 c9                	xor    %ecx,%ecx
40b107:	8d 45 fc             	lea    -0x4(%ebp),%eax
40b10a:	51                   	push   %ecx
40b10b:	6a 02                	push   $0x2
40b10d:	50                   	push   %eax
40b10e:	51                   	push   %ecx
40b10f:	6a 6f                	push   $0x6f
40b111:	51                   	push   %ecx
40b112:	68 00 29 00 00       	push   $0x2900
40b117:	ff 15 78 f0 40 00    	call   *0x40f078
40b11d:	85 c0                	test   %eax,%eax
40b11f:	74 0d                	je     0x40b12e
40b121:	8b 4d fc             	mov    -0x4(%ebp),%ecx
40b124:	51                   	push   %ecx
40b125:	0f b7 31             	movzwl (%ecx),%esi
40b128:	ff 15 68 f0 40 00    	call   *0x40f068
40b12e:	8b c6                	mov    %esi,%eax
40b130:	5e                   	pop    %esi
40b131:	c9                   	leave
40b132:	c3                   	ret
40b133:	8b ff                	mov    %edi,%edi
40b135:	55                   	push   %ebp
40b136:	8b ec                	mov    %esp,%ebp
40b138:	81 ec b8 00 00 00    	sub    $0xb8,%esp
40b13e:	a1 04 e0 40 00       	mov    0x40e004,%eax
40b143:	33 c5                	xor    %ebp,%eax
40b145:	89 45 fc             	mov    %eax,-0x4(%ebp)
40b148:	8b 45 08             	mov    0x8(%ebp),%eax
40b14b:	53                   	push   %ebx
40b14c:	56                   	push   %esi
40b14d:	8b 75 0c             	mov    0xc(%ebp),%esi
40b150:	8b da                	mov    %edx,%ebx
40b152:	89 8d 5c ff ff ff    	mov    %ecx,-0xa4(%ebp)
40b158:	33 c9                	xor    %ecx,%ecx
40b15a:	89 9d 48 ff ff ff    	mov    %ebx,-0xb8(%ebp)
40b160:	89 85 58 ff ff ff    	mov    %eax,-0xa8(%ebp)
40b166:	89 8d 4c ff ff ff    	mov    %ecx,-0xb4(%ebp)
40b16c:	89 8d 50 ff ff ff    	mov    %ecx,-0xb0(%ebp)
40b172:	57                   	push   %edi
40b173:	85 c0                	test   %eax,%eax
40b175:	74 2b                	je     0x40b1a2
40b177:	50                   	push   %eax
40b178:	51                   	push   %ecx
40b179:	ff 15 64 f0 40 00    	call   *0x40f064
40b17f:	8b f8                	mov    %eax,%edi
40b181:	89 bd 64 ff ff ff    	mov    %edi,-0x9c(%ebp)
40b187:	85 ff                	test   %edi,%edi
40b189:	75 1f                	jne    0x40b1aa
40b18b:	ff 15 40 f0 40 00    	call   *0x40f040
40b191:	8b d0                	mov    %eax,%edx
40b193:	b9 50 4c 40 00       	mov    $0x404c50,%ecx
40b198:	e8 e3 d7 ff ff       	call   0x408980
40b19d:	e9 e8 03 00 00       	jmp    0x40b58a
40b1a2:	8b f9                	mov    %ecx,%edi
40b1a4:	89 bd 64 ff ff ff    	mov    %edi,-0x9c(%ebp)
40b1aa:	6a 01                	push   $0x1
40b1ac:	53                   	push   %ebx
40b1ad:	ff b5 5c ff ff ff    	push   -0xa4(%ebp)
40b1b3:	ff 15 3c 00 41 00    	call   *0x41003c
40b1b9:	89 06                	mov    %eax,(%esi)
40b1bb:	85 c0                	test   %eax,%eax
40b1bd:	75 19                	jne    0x40b1d8
40b1bf:	ff 15 40 f0 40 00    	call   *0x40f040
40b1c5:	8b d0                	mov    %eax,%edx
40b1c7:	b9 88 14 40 00       	mov    $0x401488,%ecx
40b1cc:	e8 af d7 ff ff       	call   0x408980
40b1d1:	8b d8                	mov    %eax,%ebx
40b1d3:	e9 a9 03 00 00       	jmp    0x40b581
40b1d8:	8d 8d 54 ff ff ff    	lea    -0xac(%ebp),%ecx
40b1de:	51                   	push   %ecx
40b1df:	6a 04                	push   $0x4
40b1e1:	8d 8d 50 ff ff ff    	lea    -0xb0(%ebp),%ecx
40b1e7:	51                   	push   %ecx
40b1e8:	6a 03                	push   $0x3
40b1ea:	50                   	push   %eax
40b1eb:	ff 15 54 00 41 00    	call   *0x410054
40b1f1:	85 c0                	test   %eax,%eax
40b1f3:	75 1e                	jne    0x40b213