408d86:	e8 a5 83 ff ff       	call   0x401130
408d8b:	53                   	push   %ebx
408d8c:	56                   	push   %esi
408d8d:	57                   	push   %edi
408d8e:	be 00 08 00 00       	mov    $0x800,%esi
408d93:	89 4d f0             	mov    %ecx,-0x10(%ebp)
408d96:	56                   	push   %esi
408d97:	33 db                	xor    %ebx,%ebx
408d99:	8d 85 f0 ef ff ff    	lea    -0x1010(%ebp),%eax
408d9f:	53                   	push   %ebx
408da0:	50                   	push   %eax
408da1:	e8 ac 82 ff ff       	call   0x401052
408da6:	83 c4 0c             	add    $0xc,%esp
408da9:	8d 85 f0 df ff ff    	lea    -0x2010(%ebp),%eax
408daf:	56                   	push   %esi
408db0:	53                   	push   %ebx
408db1:	50                   	push   %eax
408db2:	e8 9b 82 ff ff       	call   0x401052
408db7:	8b 3d 14 20 41 00    	mov    0x412014,%edi
408dbd:	8d 45 fc             	lea    -0x4(%ebp),%eax
408dc0:	83 c4 0c             	add    $0xc,%esp
408dc3:	be 3f 00 0f 00       	mov    $0xf003f,%esi
408dc8:	50                   	push   %eax
408dc9:	56                   	push   %esi
408dca:	53                   	push   %ebx
408dcb:	68 58 30 41 00       	push   $0x413058
408dd0:	68 01 00 00 80       	push   $0x80000001
408dd5:	ff d7                	call   *%edi
408dd7:	85 c0                	test   %eax,%eax
408dd9:	75 07                	jne    0x408de2
408ddb:	68 08 31 41 00       	push   $0x413108
408de0:	eb 56                	jmp    0x408e38
408de2:	8d 45 fc             	lea    -0x4(%ebp),%eax
408de5:	50                   	push   %eax
408de6:	56                   	push   %esi
408de7:	53                   	push   %ebx
408de8:	68 c0 31 41 00       	push   $0x4131c0
408ded:	68 01 00 00 80       	push   $0x80000001
408df2:	ff d7                	call   *%edi
408df4:	85 c0                	test   %eax,%eax
408df6:	75 07                	jne    0x408dff
408df8:	68 c0 31 41 00       	push   $0x4131c0
408dfd:	eb 39                	jmp    0x408e38
408dff:	8d 45 fc             	lea    -0x4(%ebp),%eax
408e02:	50                   	push   %eax
408e03:	56                   	push   %esi
408e04:	53                   	push   %ebx
408e05:	68 b8 32 41 00       	push   $0x4132b8
408e0a:	68 01 00 00 80       	push   $0x80000001
408e0f:	ff d7                	call   *%edi
408e11:	85 c0                	test   %eax,%eax
408e13:	75 07                	jne    0x408e1c
408e15:	68 b8 32 41 00       	push   $0x4132b8
408e1a:	eb 1c                	jmp    0x408e38
408e1c:	8d 45 fc             	lea    -0x4(%ebp),%eax
408e1f:	50                   	push   %eax
408e20:	56                   	push   %esi
408e21:	53                   	push   %ebx
408e22:	be 70 33 41 00       	mov    $0x413370,%esi
408e27:	56                   	push   %esi
408e28:	68 01 00 00 80       	push   $0x80000001
408e2d:	ff d7                	call   *%edi
408e2f:	85 c0                	test   %eax,%eax
408e31:	0f 85 02 01 00 00    	jne    0x408f39
408e37:	56                   	push   %esi
408e38:	8b 35 cc 21 41 00    	mov    0x4121cc,%esi
408e3e:	8d 85 f0 ef ff ff    	lea    -0x1010(%ebp),%eax
408e44:	50                   	push   %eax
408e45:	ff d6                	call   *%esi
408e47:	53                   	push   %ebx
408e48:	53                   	push   %ebx
408e49:	53                   	push   %ebx
408e4a:	53                   	push   %ebx
408e4b:	53                   	push   %ebx
408e4c:	53                   	push   %ebx
408e4d:	8d 45 f8             	lea    -0x8(%ebp),%eax
408e50:	50                   	push   %eax
408e51:	8d 45 f4             	lea    -0xc(%ebp),%eax
408e54:	50                   	push   %eax
408e55:	53                   	push   %ebx
408e56:	53                   	push   %ebx
408e57:	53                   	push   %ebx
408e58:	ff 75 fc             	push   -0x4(%ebp)
408e5b:	ff 15 1c 20 41 00    	call   *0x41201c
408e61:	85 c0                	test   %eax,%eax
408e63:	0f 85 d0 00 00 00    	jne    0x408f39
408e69:	39 5d f4             	cmp    %ebx,-0xc(%ebp)
408e6c:	0f 86 c2 00 00 00    	jbe    0x408f34
408e72:	33 c0                	xor    %eax,%eax
408e74:	c7 45 f8 00 08 00 00 	movl   $0x800,-0x8(%ebp)
408e7b:	50                   	push   %eax
408e7c:	50                   	push   %eax
408e7d:	50                   	push   %eax
408e7e:	50                   	push   %eax
408e7f:	8d 45 f8             	lea    -0x8(%ebp),%eax
408e82:	50                   	push   %eax
408e83:	8d 85 f0 cf ff ff    	lea    -0x3010(%ebp),%eax
408e89:	50                   	push   %eax
408e8a:	53                   	push   %ebx
408e8b:	ff 75 fc             	push   -0x4(%ebp)
408e8e:	ff 15 0c 20 41 00    	call   *0x41200c
408e94:	85 c0                	test   %eax,%eax
408e96:	0f 85 9d 00 00 00    	jne    0x408f39
408e9c:	ff 75 fc             	push   -0x4(%ebp)
408e9f:	ff 15 20 20 41 00    	call   *0x412020
408ea5:	8d 85 f0 ef ff ff    	lea    -0x1010(%ebp),%eax
408eab:	50                   	push   %eax
408eac:	8d 85 f0 df ff ff    	lea    -0x2010(%ebp),%eax
408eb2:	50                   	push   %eax
408eb3:	ff d6                	call   *%esi
408eb5:	68 44 26 41 00       	push   $0x412644
408eba:	8d 85 f0 df ff ff    	lea    -0x2010(%ebp),%eax
408ec0:	50                   	push   %eax
408ec1:	ff 15 04 22 41 00    	call   *0x412204
408ec7:	8d 85 f0 cf ff ff    	lea    -0x3010(%ebp),%eax
408ecd:	50                   	push   %eax
408ece:	8d 85 f0 df ff ff    	lea    -0x2010(%ebp),%eax
408ed4:	50                   	push   %eax
408ed5:	ff 15 04 22 41 00    	call   *0x412204
408edb:	8d 45 fc             	lea    -0x4(%ebp),%eax
408ede:	50                   	push   %eax
408edf:	68 3f 00 0f 00       	push   $0xf003f
408ee4:	6a 00                	push   $0x0
408ee6:	8d 85 f0 df ff ff    	lea    -0x2010(%ebp),%eax
408eec:	50                   	push   %eax
408eed:	68 01 00 00 80       	push   $0x80000001
408ef2:	ff d7                	call   *%edi
408ef4:	85 c0                	test   %eax,%eax
408ef6:	75 41                	jne    0x408f39
408ef8:	51                   	push   %ecx
408ef9:	ff 75 fc             	push   -0x4(%ebp)
408efc:	8b 4d f0             	mov    -0x10(%ebp),%ecx
408eff:	e8 3c 00 00 00       	call   0x408f40
408f04:	ff 75 fc             	push   -0x4(%ebp)
408f07:	ff 15 20 20 41 00    	call   *0x412020
408f0d:	8d 45 fc             	lea    -0x4(%ebp),%eax
408f10:	50                   	push   %eax
408f11:	68 3f 00 0f 00       	push   $0xf003f
408f16:	6a 00                	push   $0x0
408f18:	8d 85 f0 ef ff ff    	lea    -0x1010(%ebp),%eax
408f1e:	50                   	push   %eax
408f1f:	68 01 00 00 80       	push   $0x80000001
408f24:	ff d7                	call   *%edi
408f26:	85 c0                	test   %eax,%eax
408f28:	75 0f                	jne    0x408f39
408f2a:	43                   	inc    %ebx
408f2b:	3b 5d f4             	cmp    -0xc(%ebp),%ebx
408f2e:	0f 82 3e ff ff ff    	jb     0x408e72
408f34:	33 c0                	xor    %eax,%eax
408f36:	40                   	inc    %eax
408f37:	eb 02                	jmp    0x408f3b
408f39:	33 c0                	xor    %eax,%eax
408f3b:	5f                   	pop    %edi
408f3c:	5e                   	pop    %esi
408f3d:	5b                   	pop    %ebx
408f3e:	c9                   	leave
408f3f:	c3                   	ret
408f40:	55                   	push   %ebp
408f41:	8b ec                	mov    %esp,%ebp
408f43:	b8 34 43 00 00       	mov    $0x4334,%eax
408f48:	e8 e3 81 ff ff       	call   0x401130
408f4d:	53                   	push   %ebx
408f4e:	56                   	push   %esi
408f4f:	57                   	push   %edi
408f50:	33 ff                	xor    %edi,%edi
408f52:	c7 45 fc 00 10 00 00 	movl   $0x1000,-0x4(%ebp)
408f59:	be 04 01 00 00       	mov    $0x104,%esi
408f5e:	89 7d ec             	mov    %edi,-0x14(%ebp)
408f61:	56                   	push   %esi
408f62:	8d 85 e0 fe ff ff    	lea    -0x120(%ebp),%eax
408f68:	89 7d f0             	mov    %edi,-0x10(%ebp)
408f6b:	57                   	push   %edi
408f6c:	50                   	push   %eax
408f6d:	8b d9                	mov    %ecx,%ebx
408f6f:	89 7d f4             	mov    %edi,-0xc(%ebp)
408f72:	e8 db 80 ff ff       	call   0x401052
408f77:	56                   	push   %esi
408f78:	8d 85 d8 fd ff ff    	lea    -0x228(%ebp),%eax
408f7e:	57                   	push   %edi
408f7f:	50                   	push   %eax
408f80:	e8 cd 80 ff ff       	call   0x401052
408f85:	56                   	push   %esi
408f86:	8d 85 d0 fc ff ff    	lea    -0x330(%ebp),%eax
408f8c:	57                   	push   %edi
408f8d:	50                   	push   %eax
408f8e:	e8 bf 80 ff ff       	call   0x401052
408f93:	ff 75 fc             	push   -0x4(%ebp)
408f96:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
408f9c:	57                   	push   %edi
408f9d:	50                   	push   %eax
408f9e:	e8 af 80 ff ff       	call   0x401052
408fa3:	8b 75 08             	mov    0x8(%ebp),%esi
408fa6:	8d 45 fc             	lea    -0x4(%ebp),%eax
408fa9:	83 c4 30             	add    $0x30,%esp
408fac:	50                   	push   %eax
408fad:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
408fb3:	50                   	push   %eax
408fb4:	57                   	push   %edi
408fb5:	57                   	push   %edi
408fb6:	8b 3d 18 20 41 00    	mov    0x412018,%edi
408fbc:	68 78 2f 41 00       	push   $0x412f78
408fc1:	56                   	push   %esi
408fc2:	ff d7                	call   *%edi
408fc4:	85 c0                	test   %eax,%eax
408fc6:	75 0f                	jne    0x408fd7
408fc8:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
408fce:	50                   	push   %eax
408fcf:	8d 4d f0             	lea    -0x10(%ebp),%ecx
408fd2:	e8 55 a1 ff ff       	call   0x40312c
408fd7:	68 00 10 00 00       	push   $0x1000
408fdc:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
408fe2:	c7 45 fc 00 10 00 00 	movl   $0x1000,-0x4(%ebp)
408fe9:	6a 00                	push   $0x0
408feb:	50                   	push   %eax
408fec:	e8 61 80 ff ff       	call   0x401052
408ff1:	83 c4 0c             	add    $0xc,%esp
408ff4:	8d 45 fc             	lea    -0x4(%ebp),%eax
408ff7:	50                   	push   %eax
408ff8:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
408ffe:	50                   	push   %eax
408fff:	6a 00                	push   $0x0
409001:	6a 00                	push   $0x0
409003:	68 94 2f 41 00       	push   $0x412f94
409008:	56                   	push   %esi
409009:	ff d7                	call   *%edi
40900b:	85 c0                	test   %eax,%eax
40900d:	75 0f                	jne    0x40901e
40900f:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
409015:	50                   	push   %eax
409016:	8d 4d f0             	lea    -0x10(%ebp),%ecx
409019:	e8 0e a1 ff ff       	call   0x40312c
40901e:	b8 00 10 00 00       	mov    $0x1000,%eax
409023:	50                   	push   %eax
409024:	89 45 fc             	mov    %eax,-0x4(%ebp)
409027:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
40902d:	6a 00                	push   $0x0
40902f:	50                   	push   %eax
409030:	e8 1d 80 ff ff       	call   0x401052
409035:	83 c4 0c             	add    $0xc,%esp
409038:	8d 45 fc             	lea    -0x4(%ebp),%eax
40903b:	50                   	push   %eax
40903c:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
409042:	50                   	push   %eax
409043:	6a 00                	push   $0x0
409045:	6a 00                	push   $0x0
409047:	68 a0 2f 41 00       	push   $0x412fa0
40904c:	56                   	push   %esi
40904d:	ff d7                	call   *%edi
40904f:	85 c0                	test   %eax,%eax
409051:	75 0f                	jne    0x409062
409053:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
409059:	50                   	push   %eax
40905a:	8d 4d ec             	lea    -0x14(%ebp),%ecx
40905d:	e8 ca a0 ff ff       	call   0x40312c
409062:	b8 00 10 00 00       	mov    $0x1000,%eax
409067:	50                   	push   %eax
409068:	89 45 fc             	mov    %eax,-0x4(%ebp)
40906b:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
409071:	6a 00                	push   $0x0
409073:	50                   	push   %eax
409074:	e8 d9 7f ff ff       	call   0x401052
409079:	83 c4 0c             	add    $0xc,%esp
40907c:	8d 45 fc             	lea    -0x4(%ebp),%eax
40907f:	50                   	push   %eax
409080:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
409086:	50                   	push   %eax
409087:	6a 00                	push   $0x0
409089:	6a 00                	push   $0x0
40908b:	68 b8 2f 41 00       	push   $0x412fb8
409090:	56                   	push   %esi
409091:	ff d7                	call   *%edi
409093:	85 c0                	test   %eax,%eax
409095:	75 0f                	jne    0x4090a6
409097:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
40909d:	50                   	push   %eax
40909e:	8d 4d f0             	lea    -0x10(%ebp),%ecx
4090a1:	e8 86 a0 ff ff       	call   0x40312c
4090a6:	b8 00 10 00 00       	mov    $0x1000,%eax
4090ab:	50                   	push   %eax
4090ac:	89 45 fc             	mov    %eax,-0x4(%ebp)
4090af:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
4090b5:	6a 00                	push   $0x0
4090b7:	50                   	push   %eax
4090b8:	e8 95 7f ff ff       	call   0x401052
4090bd:	83 c4 0c             	add    $0xc,%esp
4090c0:	8d 45 fc             	lea    -0x4(%ebp),%eax
4090c3:	50                   	push   %eax
4090c4:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
4090ca:	50                   	push   %eax
4090cb:	6a 00                	push   $0x0
4090cd:	6a 00                	push   $0x0
4090cf:	68 cc 2f 41 00       	push   $0x412fcc
4090d4:	56                   	push   %esi
4090d5:	ff d7                	call   *%edi
4090d7:	85 c0                	test   %eax,%eax
4090d9:	75 0f                	jne    0x4090ea
4090db:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
4090e1:	50                   	push   %eax
4090e2:	8d 4d ec             	lea    -0x14(%ebp),%ecx
4090e5:	e8 42 a0 ff ff       	call   0x40312c
4090ea:	b8 00 10 00 00       	mov    $0x1000,%eax
4090ef:	50                   	push   %eax
4090f0:	89 45 fc             	mov    %eax,-0x4(%ebp)
4090f3:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
4090f9:	6a 00                	push   $0x0
4090fb:	50                   	push   %eax
4090fc:	e8 51 7f ff ff       	call   0x401052
409101:	83 c4 0c             	add    $0xc,%esp
409104:	8d 45 fc             	lea    -0x4(%ebp),%eax
409107:	50                   	push   %eax
409108:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
40910e:	50                   	push   %eax
40910f:	6a 00                	push   $0x0
409111:	6a 00                	push   $0x0
409113:	68 e4 2f 41 00       	push   $0x412fe4
409118:	56                   	push   %esi
409119:	ff d7                	call   *%edi
40911b:	85 c0                	test   %eax,%eax
40911d:	75 38                	jne    0x409157
40911f:	68 00 10 00 00       	push   $0x1000
409124:	50                   	push   %eax
409125:	8d 85 d0 bc ff ff    	lea    -0x4330(%ebp),%eax
40912b:	50                   	push   %eax
40912c:	e8 21 7f ff ff       	call   0x401052
409131:	ff 75 fc             	push   -0x4(%ebp)
409134:	8d 95 d0 bc ff ff    	lea    -0x4330(%ebp),%edx
40913a:	8d 8d d0 dc ff ff    	lea    -0x2330(%ebp),%ecx
409140:	e8 93 01 00 00       	call   0x4092d8
409145:	83 c4 10             	add    $0x10,%esp
409148:	8d 85 d0 bc ff ff    	lea    -0x4330(%ebp),%eax
40914e:	8d 4d f4             	lea    -0xc(%ebp),%ecx
409151:	50                   	push   %eax
409152:	e8 d5 9f ff ff       	call   0x40312c
409157:	b8 00 10 00 00       	mov    $0x1000,%eax
40915c:	50                   	push   %eax
40915d:	89 45 fc             	mov    %eax,-0x4(%ebp)
409160:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
409166:	6a 00                	push   $0x0
409168:	50                   	push   %eax
409169:	e8 e4 7e ff ff       	call   0x401052
40916e:	83 c4 0c             	add    $0xc,%esp
409171:	8d 45 fc             	lea    -0x4(%ebp),%eax
409174:	50                   	push   %eax
409175:	8d 85 d0 dc ff ff    	lea    -0x2330(%ebp),%eax
40917b:	50                   	push   %eax
40917c:	6a 00                	push   $0x0
40917e:	6a 00                	push   $0x0
409180:	68 00 30 41 00       	push   $0x413000
409185:	56                   	push   %esi
409186:	ff d7                	call   *%edi