406a36:	8b ce                	mov    %esi,%ecx
406a38:	ff 75 0c             	push   0xc(%ebp)
406a3b:	ff 75 08             	push   0x8(%ebp)
406a3e:	ff 15 78 64 42 00    	call   *0x426478
406a44:	ff d6                	call   *%esi
406a46:	5e                   	pop    %esi
406a47:	5d                   	pop    %ebp
406a48:	c2 0c 00             	ret    $0xc
406a4b:	8b ff                	mov    %edi,%edi
406a4d:	56                   	push   %esi
406a4e:	8b f1                	mov    %ecx,%esi
406a50:	85 f6                	test   %esi,%esi
406a52:	78 04                	js     0x406a58
406a54:	33 c0                	xor    %eax,%eax
406a56:	5e                   	pop    %esi
406a57:	c3                   	ret
406a58:	81 fe 17 00 00 c0    	cmp    $0xc0000017,%esi
406a5e:	75 07                	jne    0x406a67
406a60:	b8 0e 00 07 80       	mov    $0x8007000e,%eax
406a65:	5e                   	pop    %esi
406a66:	c3                   	ret
406a67:	57                   	push   %edi
406a68:	8b 3d e0 4c 42 00    	mov    0x424ce0,%edi
406a6e:	85 ff                	test   %edi,%edi
406a70:	74 24                	je     0x406a96
406a72:	56                   	push   %esi
406a73:	8b cf                	mov    %edi,%ecx
406a75:	ff 15 78 64 42 00    	call   *0x426478
406a7b:	ff d7                	call   *%edi
406a7d:	85 c0                	test   %eax,%eax
406a7f:	74 15                	je     0x406a96
406a81:	3d 3d 01 00 00       	cmp    $0x13d,%eax
406a86:	74 0e                	je     0x406a96
406a88:	85 c0                	test   %eax,%eax
406a8a:	7e 12                	jle    0x406a9e
406a8c:	0f b7 c0             	movzwl %ax,%eax
406a8f:	0d 00 00 07 80       	or     $0x80070000,%eax
406a94:	eb 08                	jmp    0x406a9e
406a96:	81 ce 00 00 00 10    	or     $0x10000000,%esi
406a9c:	8b c6                	mov    %esi,%eax
406a9e:	5f                   	pop    %edi
406a9f:	5e                   	pop    %esi
406aa0:	c3                   	ret
406aa1:	8b ff                	mov    %edi,%edi
406aa3:	55                   	push   %ebp
406aa4:	8b ec                	mov    %esp,%ebp
406aa6:	56                   	push   %esi
406aa7:	57                   	push   %edi
406aa8:	8b f2                	mov    %edx,%esi
406aaa:	8b f9                	mov    %ecx,%edi
406aac:	ff 15 70 61 42 00    	call   *0x426170
406ab2:	85 c0                	test   %eax,%eax
406ab4:	75 1d                	jne    0x406ad3
406ab6:	68 9c 02 07 80       	push   $0x8007029c
406abb:	6a 02                	push   $0x2
406abd:	ff 75 14             	push   0x14(%ebp)
406ac0:	8b d6                	mov    %esi,%edx
406ac2:	8b cf                	mov    %edi,%ecx
406ac4:	50                   	push   %eax
406ac5:	50                   	push   %eax
406ac6:	ff 75 08             	push   0x8(%ebp)
406ac9:	e8 01 04 00 00       	call   0x406ecf
406ace:	b8 9c 02 00 00       	mov    $0x29c,%eax
406ad3:	5f                   	pop    %edi
406ad4:	5e                   	pop    %esi
406ad5:	5d                   	pop    %ebp
406ad6:	c2 10 00             	ret    $0x10
406ad9:	8b ff                	mov    %edi,%edi
406adb:	55                   	push   %ebp
406adc:	8b ec                	mov    %esp,%ebp
406ade:	ff 75 04             	push   0x4(%ebp)
406ae1:	33 d2                	xor    %edx,%edx
406ae3:	51                   	push   %ecx
406ae4:	51                   	push   %ecx
406ae5:	6a 00                	push   $0x0
406ae7:	33 c9                	xor    %ecx,%ecx
406ae9:	e8 b3 ff ff ff       	call   0x406aa1
406aee:	85 c0                	test   %eax,%eax
406af0:	7e 08                	jle    0x406afa
406af2:	0f b7 c0             	movzwl %ax,%eax
406af5:	0d 00 00 07 80       	or     $0x80070000,%eax
406afa:	5d                   	pop    %ebp
406afb:	c3                   	ret
406afc:	85 c9                	test   %ecx,%ecx
406afe:	75 04                	jne    0x406b04
406b00:	6a 02                	push   $0x2
406b02:	58                   	pop    %eax
406b03:	c3                   	ret
406b04:	8d 51 02             	lea    0x2(%ecx),%edx
406b07:	66 8b 01             	mov    (%ecx),%ax
406b0a:	83 c1 02             	add    $0x2,%ecx
406b0d:	66 85 c0             	test   %ax,%ax
406b10:	75 f5                	jne    0x406b07
406b12:	2b ca                	sub    %edx,%ecx
406b14:	d1 f9                	sar    $1,%ecx
406b16:	8d 04 4d 02 00 00 00 	lea    0x2(,%ecx,2),%eax
406b1d:	c3                   	ret
406b1e:	80 3d d0 4c 42 00 00 	cmpb   $0x0,0x424cd0
406b25:	53                   	push   %ebx
406b26:	75 23                	jne    0x406b4b
406b28:	56                   	push   %esi
406b29:	8b 35 c0 4c 42 00    	mov    0x424cc0,%esi
406b2f:	33 db                	xor    %ebx,%ebx
406b31:	85 f6                	test   %esi,%esi
406b33:	74 0f                	je     0x406b44
406b35:	8b ce                	mov    %esi,%ecx
406b37:	ff 15 78 64 42 00    	call   *0x426478
406b3d:	ff d6                	call   *%esi
406b3f:	0f b6 c0             	movzbl %al,%eax
406b42:	eb 02                	jmp    0x406b46
406b44:	8b c3                	mov    %ebx,%eax
406b46:	5e                   	pop    %esi
406b47:	85 c0                	test   %eax,%eax
406b49:	74 02                	je     0x406b4d
406b4b:	b3 01                	mov    $0x1,%bl
406b4d:	8a c3                	mov    %bl,%al
406b4f:	5b                   	pop    %ebx
406b50:	c3                   	ret
406b51:	8b ff                	mov    %edi,%edi
406b53:	56                   	push   %esi
406b54:	8b 35 d4 4c 42 00    	mov    0x424cd4,%esi
406b5a:	85 f6                	test   %esi,%esi
406b5c:	74 0b                	je     0x406b69
406b5e:	51                   	push   %ecx
406b5f:	8b ce                	mov    %esi,%ecx
406b61:	ff 15 78 64 42 00    	call   *0x426478
406b67:	ff d6                	call   *%esi
406b69:	5e                   	pop    %esi
406b6a:	c3                   	ret
406b6b:	8b ff                	mov    %edi,%edi
406b6d:	55                   	push   %ebp
406b6e:	8b ec                	mov    %esp,%ebp
406b70:	83 ec 0c             	sub    $0xc,%esp
406b73:	53                   	push   %ebx
406b74:	8b 5d 28             	mov    0x28(%ebp),%ebx
406b77:	33 c0                	xor    %eax,%eax
406b79:	56                   	push   %esi
406b7a:	57                   	push   %edi
406b7b:	8b 7d 1c             	mov    0x1c(%ebp),%edi
406b7e:	66 89 03             	mov    %ax,(%ebx)
406b81:	8b 45 30             	mov    0x30(%ebp),%eax
406b84:	89 55 f8             	mov    %edx,-0x8(%ebp)
406b87:	89 4d f4             	mov    %ecx,-0xc(%ebp)
406b8a:	c6 00 00             	movb   $0x0,(%eax)
406b8d:	33 c0                	xor    %eax,%eax
406b8f:	89 45 fc             	mov    %eax,-0x4(%ebp)
406b92:	8b 45 18             	mov    0x18(%ebp),%eax
406b95:	83 e8 00             	sub    $0x0,%eax
406b98:	74 46                	je     0x406be0
406b9a:	83 e8 01             	sub    $0x1,%eax
406b9d:	74 38                	je     0x406bd7
406b9f:	83 e8 01             	sub    $0x1,%eax
406ba2:	74 0d                	je     0x406bb1
406ba4:	83 e8 01             	sub    $0x1,%eax
406ba7:	75 41                	jne    0x406bea
406ba9:	57                   	push   %edi
406baa:	e8 01 fd ff ff       	call   0x4068b0
406baf:	eb 36                	jmp    0x406be7
406bb1:	85 ff                	test   %edi,%edi
406bb3:	78 19                	js     0x406bce
406bb5:	bf 9c 02 07 80       	mov    $0x8007029c,%edi
406bba:	57                   	push   %edi
406bbb:	6a 02                	push   $0x2
406bbd:	ff 75 14             	push   0x14(%ebp)
406bc0:	ff 75 10             	push   0x10(%ebp)
406bc3:	ff 75 0c             	push   0xc(%ebp)
406bc6:	ff 75 08             	push   0x8(%ebp)
406bc9:	e8 01 03 00 00       	call   0x406ecf
406bce:	8b cf                	mov    %edi,%ecx
406bd0:	e8 c0 fc ff ff       	call   0x406895
406bd5:	eb 10                	jmp    0x406be7
406bd7:	8b cf                	mov    %edi,%ecx
406bd9:	e8 a4 fc ff ff       	call   0x406882
406bde:	eb 07                	jmp    0x406be7
406be0:	8b cf                	mov    %edi,%ecx
406be2:	e8 88 fc ff ff       	call   0x40686f
406be7:	89 45 fc             	mov    %eax,-0x4(%ebp)
406bea:	8b 75 38             	mov    0x38(%ebp),%esi
406bed:	8b 45 18             	mov    0x18(%ebp),%eax
406bf0:	89 06                	mov    %eax,(%esi)
406bf2:	33 c0                	xor    %eax,%eax
406bf4:	89 7e 04             	mov    %edi,0x4(%esi)
406bf7:	40                   	inc    %eax
406bf8:	f0 0f c1 05 80 4d 42 	lock xadd %eax,0x424d80
406bff:	00
406c00:	40                   	inc    %eax
406c01:	89 46 08             	mov    %eax,0x8(%esi)
406c04:	8b 45 20             	mov    0x20(%ebp),%eax
406c07:	85 c0                	test   %eax,%eax
406c09:	74 07                	je     0x406c12
406c0b:	33 c9                	xor    %ecx,%ecx
406c0d:	66 39 08             	cmp    %cx,(%eax)
406c10:	75 02                	jne    0x406c14
406c12:	33 c0                	xor    %eax,%eax
406c14:	89 46 0c             	mov    %eax,0xc(%esi)
406c17:	ff 15 7c 61 42 00    	call   *0x42617c
406c1d:	89 46 10             	mov    %eax,0x10(%esi)
406c20:	8d 7e 2c             	lea    0x2c(%esi),%edi
406c23:	8b 45 08             	mov    0x8(%ebp),%eax
406c26:	33 d2                	xor    %edx,%edx
406c28:	89 46 1c             	mov    %eax,0x1c(%esi)
406c2b:	8b 45 f8             	mov    -0x8(%ebp),%eax
406c2e:	89 46 20             	mov    %eax,0x20(%esi)
406c31:	8b 45 fc             	mov    -0x4(%ebp),%eax
406c34:	89 46 24             	mov    %eax,0x24(%esi)
406c37:	8b 45 10             	mov    0x10(%ebp),%eax
406c3a:	89 46 14             	mov    %eax,0x14(%esi)
406c3d:	8b 45 0c             	mov    0xc(%ebp),%eax
406c40:	89 46 18             	mov    %eax,0x18(%esi)
406c43:	8b 45 14             	mov    0x14(%ebp),%eax
406c46:	89 46 48             	mov    %eax,0x48(%esi)
406c49:	8b 45 f4             	mov    -0xc(%ebp),%eax
406c4c:	89 46 4c             	mov    %eax,0x4c(%esi)
406c4f:	33 c0                	xor    %eax,%eax
406c51:	6a 06                	push   $0x6
406c53:	59                   	pop    %ecx
406c54:	89 56 28             	mov    %edx,0x28(%esi)
406c57:	f3 ab                	rep stos %eax,%es:(%edi)
406c59:	8b 3d dc 4c 42 00    	mov    0x424cdc,%edi
406c5f:	85 ff                	test   %edi,%edi
406c61:	74 0a                	je     0x406c6d
406c63:	8b cf                	mov    %edi,%ecx
406c65:	ff 15 78 64 42 00    	call   *0x426478
406c6b:	ff d7                	call   *%edi
406c6d:	8b 3d bc 4c 42 00    	mov    0x424cbc,%edi
406c73:	89 46 44             	mov    %eax,0x44(%esi)
406c76:	85 ff                	test   %edi,%edi
406c78:	74 13                	je     0x406c8d
406c7a:	68 00 04 00 00       	push   $0x400
406c7f:	ff 75 30             	push   0x30(%ebp)
406c82:	8b cf                	mov    %edi,%ecx
406c84:	56                   	push   %esi
406c85:	ff 15 78 64 42 00    	call   *0x426478
406c8b:	ff d7                	call   *%edi
406c8d:	8b 3d b4 4c 42 00    	mov    0x424cb4,%edi
406c93:	85 ff                	test   %edi,%edi
406c95:	74 0b                	je     0x406ca2
406c97:	56                   	push   %esi
406c98:	8b cf                	mov    %edi,%ecx
406c9a:	ff 15 78 64 42 00    	call   *0x426478
406ca0:	ff d7                	call   *%edi
406ca2:	8b 3d cc 4c 42 00    	mov    0x424ccc,%edi
406ca8:	85 ff                	test   %edi,%edi
406caa:	74 0b                	je     0x406cb7
406cac:	56                   	push   %esi
406cad:	8b cf                	mov    %edi,%ecx
406caf:	ff 15 78 64 42 00    	call   *0x426478
406cb5:	ff d7                	call   *%edi
406cb7:	33 c0                	xor    %eax,%eax
406cb9:	39 46 04             	cmp    %eax,0x4(%esi)
406cbc:	7c 11                	jl     0x406ccf
406cbe:	83 7d 18 03          	cmpl   $0x3,0x18(%ebp)
406cc2:	0f 85 bc 00 00 00    	jne    0x406d84
406cc8:	c7 46 04 ff ff 00 80 	movl   $0x8000ffff,0x4(%esi)
406ccf:	38 05 9c 4c 42 00    	cmp    %al,0x424c9c
406cd5:	75 4a                	jne    0x406d21
406cd7:	8b 3d 94 4c 42 00    	mov    0x424c94,%edi
406cdd:	85 ff                	test   %edi,%edi
406cdf:	74 0f                	je     0x406cf0
406ce1:	8b cf                	mov    %edi,%ecx
406ce3:	ff 15 78 64 42 00    	call   *0x426478
406ce9:	ff d7                	call   *%edi
406ceb:	0f b6 c0             	movzbl %al,%eax
406cee:	eb 0c                	jmp    0x406cfc
406cf0:	ff 15 88 60 42 00    	call   *0x426088
406cf6:	f7 d8                	neg    %eax
406cf8:	1b c0                	sbb    %eax,%eax
406cfa:	f7 d8                	neg    %eax
406cfc:	85 c0                	test   %eax,%eax
406cfe:	75 21                	jne    0x406d21
406d00:	8b 3d a0 4c 42 00    	mov    0x424ca0,%edi
406d06:	85 ff                	test   %edi,%edi
406d08:	74 56                	je     0x406d60
406d0a:	38 05 ac 4c 42 00    	cmp    %al,0x424cac
406d10:	75 4e                	jne    0x406d60
406d12:	50                   	push   %eax
406d13:	50                   	push   %eax
406d14:	56                   	push   %esi
406d15:	8b cf                	mov    %edi,%ecx
406d17:	ff 15 78 64 42 00    	call   *0x426478
406d1d:	ff d7                	call   *%edi
406d1f:	eb 3f                	jmp    0x406d60
406d21:	8b 3d a0 4c 42 00    	mov    0x424ca0,%edi
406d27:	85 ff                	test   %edi,%edi
406d29:	74 1a                	je     0x406d45
406d2b:	80 3d ac 4c 42 00 00 	cmpb   $0x0,0x424cac
406d32:	75 11                	jne    0x406d45
406d34:	68 00 08 00 00       	push   $0x800
406d39:	53                   	push   %ebx
406d3a:	56                   	push   %esi
406d3b:	8b cf                	mov    %edi,%ecx
406d3d:	ff 15 78 64 42 00    	call   *0x426478
406d43:	ff d7                	call   *%edi
406d45:	33 c0                	xor    %eax,%eax
406d47:	66 39 03             	cmp    %ax,(%ebx)
406d4a:	75 0d                	jne    0x406d59
406d4c:	56                   	push   %esi
406d4d:	ba 00 08 00 00       	mov    $0x800,%edx
406d52:	8b cb                	mov    %ebx,%ecx
406d54:	e8 c7 f8 ff ff       	call   0x406620
406d59:	53                   	push   %ebx
406d5a:	ff 15 68 61 42 00    	call   *0x426168
406d60:	80 3d a4 4c 42 00 00 	cmpb   $0x0,0x424ca4
406d67:	74 14                	je     0x406d7d
406d69:	8b 35 c4 4c 42 00    	mov    0x424cc4,%esi
406d6f:	85 f6                	test   %esi,%esi
406d71:	74 0a                	je     0x406d7d
406d73:	8b ce                	mov    %esi,%ecx
406d75:	ff 15 78 64 42 00    	call   *0x426478
406d7b:	ff d6                	call   *%esi
406d7d:	5f                   	pop    %edi
406d7e:	5e                   	pop    %esi
406d7f:	5b                   	pop    %ebx
406d80:	c9                   	leave
406d81:	c2 34 00             	ret    $0x34
406d84:	e8 71 02 00 00       	call   0x406ffa
406d89:	cc                   	int3
406d8a:	8b ff                	mov    %edi,%edi
406d8c:	55                   	push   %ebp
406d8d:	8b ec                	mov    %esp,%ebp
406d8f:	83 ec 50             	sub    $0x50,%esp
406d92:	56                   	push   %esi
406d93:	57                   	push   %edi
406d94:	8b 3d e4 4c 42 00    	mov    0x424ce4,%edi
406d9a:	8b f1                	mov    %ecx,%esi
406d9c:	85 ff                	test   %edi,%edi
406d9e:	74 0b                	je     0x406dab
406da0:	56                   	push   %esi
406da1:	8b cf                	mov    %edi,%ecx
406da3:	ff 15 78 64 42 00    	call   *0x426478
406da9:	ff d7                	call   *%edi
406dab:	6a 50                	push   $0x50
406dad:	8d 45 b0             	lea    -0x50(%ebp),%eax
406db0:	6a 00                	push   $0x0
406db2:	50                   	push   %eax
406db3:	e8 90 ba 01 00       	call   0x422848
406db8:	8b 4e 48             	mov    0x48(%esi),%ecx
406dbb:	33 c0                	xor    %eax,%eax
406dbd:	40                   	inc    %eax
406dbe:	c7 45 b0 09 04 00 c0 	movl   $0xc0000409,-0x50(%ebp)
406dc5:	83 c4 0c             	add    $0xc,%esp
406dc8:	89 45 c0             	mov    %eax,-0x40(%ebp)
406dcb:	89 45 b4             	mov    %eax,-0x4c(%ebp)
406dce:	c7 45 c4 07 00 00 00 	movl   $0x7,-0x3c(%ebp)
406dd5:	85 c9                	test   %ecx,%ecx
406dd7:	75 09                	jne    0x406de2
406dd9:	50                   	push   %eax
406dda:	8d 4d b0             	lea    -0x50(%ebp),%ecx
406ddd:	e8 e2 fa ff ff       	call   0x4068c4
406de2:	8b 46 04             	mov    0x4(%esi),%eax