407299:	83 7e 14 08          	cmpl   $0x8,0x14(%esi)
40729d:	73 17                	jae    0x4072b6
40729f:	8b 46 10             	mov    0x10(%esi),%eax
4072a2:	83 c0 01             	add    $0x1,%eax
4072a5:	74 16                	je     0x4072bd
4072a7:	03 c0                	add    %eax,%eax
4072a9:	50                   	push   %eax
4072aa:	56                   	push   %esi
4072ab:	57                   	push   %edi
4072ac:	e8 7b 74 00 00       	call   0x40e72c
4072b1:	83 c4 0c             	add    $0xc,%esp
4072b4:	eb 07                	jmp    0x4072bd
4072b6:	8b 06                	mov    (%esi),%eax
4072b8:	89 07                	mov    %eax,(%edi)
4072ba:	83 26 00             	andl   $0x0,(%esi)
4072bd:	8b 46 10             	mov    0x10(%esi),%eax
4072c0:	89 47 10             	mov    %eax,0x10(%edi)
4072c3:	8b 46 14             	mov    0x14(%esi),%eax
4072c6:	89 47 14             	mov    %eax,0x14(%edi)
4072c9:	83 66 10 00          	andl   $0x0,0x10(%esi)
4072cd:	33 c0                	xor    %eax,%eax
4072cf:	c7 46 14 07 00 00 00 	movl   $0x7,0x14(%esi)
4072d6:	66 89 06             	mov    %ax,(%esi)
4072d9:	8b c7                	mov    %edi,%eax
4072db:	5f                   	pop    %edi
4072dc:	5e                   	pop    %esi
4072dd:	5d                   	pop    %ebp
4072de:	c2 04 00             	ret    $0x4
4072e1:	8b 01                	mov    (%ecx),%eax
4072e3:	c3                   	ret
4072e4:	8b ff                	mov    %edi,%edi
4072e6:	55                   	push   %ebp
4072e7:	8b ec                	mov    %esp,%ebp
4072e9:	6a 00                	push   $0x0
4072eb:	6a 04                	push   $0x4
4072ed:	8d 45 14             	lea    0x14(%ebp),%eax
4072f0:	50                   	push   %eax
4072f1:	6a 11                	push   $0x11
4072f3:	68 c0 24 40 00       	push   $0x4024c0
4072f8:	6a 0a                	push   $0xa
4072fa:	68 0c 26 40 00       	push   $0x40260c
4072ff:	6a 2b                	push   $0x2b
407301:	ff 75 0c             	push   0xc(%ebp)
407304:	ff 75 08             	push   0x8(%ebp)
407307:	ff 15 08 22 41 00    	call   *0x412208
40730d:	83 c4 28             	add    $0x28,%esp
407310:	5d                   	pop    %ebp
407311:	c2 10 00             	ret    $0x10
407314:	6a 14                	push   $0x14
407316:	b8 53 ee 40 00       	mov    $0x40ee53,%eax
40731b:	e8 2e 73 00 00       	call   0x40e64e
407320:	8b fa                	mov    %edx,%edi
407322:	8b d9                	mov    %ecx,%ebx
407324:	33 d2                	xor    %edx,%edx
407326:	66 39 17             	cmp    %dx,(%edi)
407329:	0f 84 e3 00 00 00    	je     0x407412
40732f:	8b f7                	mov    %edi,%esi
407331:	8d 4e 02             	lea    0x2(%esi),%ecx
407334:	66 8b 06             	mov    (%esi),%ax
407337:	83 c6 02             	add    $0x2,%esi
40733a:	66 3b c2             	cmp    %dx,%ax
40733d:	75 f5                	jne    0x407334
40733f:	2b f1                	sub    %ecx,%esi
407341:	53                   	push   %ebx
407342:	d1 fe                	sar    $1,%esi
407344:	ff 15 8c 20 41 00    	call   *0x41208c
40734a:	83 f8 02             	cmp    $0x2,%eax
40734d:	75 46                	jne    0x407395
40734f:	8d 45 ec             	lea    -0x14(%ebp),%eax
407352:	50                   	push   %eax
407353:	53                   	push   %ebx
407354:	ff 15 54 20 41 00    	call   *0x412054
40735a:	85 c0                	test   %eax,%eax
40735c:	74 37                	je     0x407395
40735e:	85 f6                	test   %esi,%esi
407360:	0f 8e ac 00 00 00    	jle    0x407412
407366:	6a 00                	push   $0x0
407368:	8d 45 f0             	lea    -0x10(%ebp),%eax
40736b:	50                   	push   %eax
40736c:	56                   	push   %esi
40736d:	57                   	push   %edi
40736e:	53                   	push   %ebx
40736f:	ff 15 58 20 41 00    	call   *0x412058
407375:	85 c0                	test   %eax,%eax
407377:	0f 85 95 00 00 00    	jne    0x407412
40737d:	ff 15 70 20 41 00    	call   *0x412070
407383:	85 c0                	test   %eax,%eax
407385:	0f 8e 89 00 00 00    	jle    0x407414
40738b:	0f b7 c0             	movzwl %ax,%eax
40738e:	0d 00 00 07 80       	or     $0x80070000,%eax
407393:	eb 7f                	jmp    0x407414
407395:	80 3d 04 17 41 00 00 	cmpb   $0x0,0x411704
40739c:	75 7c                	jne    0x40741a
40739e:	33 c0                	xor    %eax,%eax
4073a0:	89 45 e0             	mov    %eax,-0x20(%ebp)
4073a3:	89 45 e4             	mov    %eax,-0x1c(%ebp)
4073a6:	89 45 e8             	mov    %eax,-0x18(%ebp)
4073a9:	89 45 fc             	mov    %eax,-0x4(%ebp)
4073ac:	8b cf                	mov    %edi,%ecx
4073ae:	8d 45 e0             	lea    -0x20(%ebp),%eax
4073b1:	50                   	push   %eax
4073b2:	e8 56 64 00 00       	call   0x40d80d
4073b7:	8b 7d e0             	mov    -0x20(%ebp),%edi
4073ba:	8b f0                	mov    %eax,%esi
4073bc:	85 f6                	test   %esi,%esi
4073be:	78 36                	js     0x4073f6
4073c0:	8b cf                	mov    %edi,%ecx
4073c2:	8d 51 01             	lea    0x1(%ecx),%edx
4073c5:	8a 01                	mov    (%ecx),%al
4073c7:	41                   	inc    %ecx
4073c8:	84 c0                	test   %al,%al
4073ca:	75 f9                	jne    0x4073c5
4073cc:	6a 00                	push   $0x0
4073ce:	8d 45 f0             	lea    -0x10(%ebp),%eax
4073d1:	2b ca                	sub    %edx,%ecx
4073d3:	50                   	push   %eax
4073d4:	51                   	push   %ecx
4073d5:	57                   	push   %edi
4073d6:	53                   	push   %ebx
4073d7:	ff 15 88 20 41 00    	call   *0x412088
4073dd:	85 c0                	test   %eax,%eax
4073df:	75 25                	jne    0x407406
4073e1:	ff 15 70 20 41 00    	call   *0x412070
4073e7:	8b f0                	mov    %eax,%esi
4073e9:	85 f6                	test   %esi,%esi
4073eb:	7e 09                	jle    0x4073f6
4073ed:	0f b7 f6             	movzwl %si,%esi
4073f0:	81 ce 00 00 07 80    	or     $0x80070000,%esi
4073f6:	85 ff                	test   %edi,%edi
4073f8:	74 08                	je     0x407402
4073fa:	57                   	push   %edi
4073fb:	ff 15 e4 21 41 00    	call   *0x4121e4
407401:	59                   	pop    %ecx
407402:	8b c6                	mov    %esi,%eax
407404:	eb 0e                	jmp    0x407414
407406:	85 ff                	test   %edi,%edi
407408:	74 08                	je     0x407412
40740a:	57                   	push   %edi
40740b:	ff 15 e4 21 41 00    	call   *0x4121e4
407411:	59                   	pop    %ecx
407412:	33 c0                	xor    %eax,%eax
407414:	e8 03 72 00 00       	call   0x40e61c
407419:	c3                   	ret
40741a:	6a 00                	push   $0x0
40741c:	8d 45 f0             	lea    -0x10(%ebp),%eax
40741f:	50                   	push   %eax
407420:	8d 04 36             	lea    (%esi,%esi,1),%eax
407423:	50                   	push   %eax
407424:	57                   	push   %edi
407425:	53                   	push   %ebx
407426:	ff 15 88 20 41 00    	call   *0x412088
40742c:	e9 44 ff ff ff       	jmp    0x407375
407431:	8b ff                	mov    %edi,%edi
407433:	55                   	push   %ebp
407434:	8b ec                	mov    %esp,%ebp
407436:	8b 55 0c             	mov    0xc(%ebp),%edx
407439:	8d 45 10             	lea    0x10(%ebp),%eax
40743c:	8b 4d 08             	mov    0x8(%ebp),%ecx
40743f:	50                   	push   %eax
407440:	e8 03 00 00 00       	call   0x407448
407445:	59                   	pop    %ecx
407446:	5d                   	pop    %ebp
407447:	c3                   	ret
407448:	6a 0c                	push   $0xc
40744a:	b8 78 ec 40 00       	mov    $0x40ec78,%eax
40744f:	e8 fa 71 00 00       	call   0x40e64e
407454:	8b d9                	mov    %ecx,%ebx
407456:	33 c0                	xor    %eax,%eax
407458:	89 45 e8             	mov    %eax,-0x18(%ebp)
40745b:	89 45 ec             	mov    %eax,-0x14(%ebp)
40745e:	89 45 f0             	mov    %eax,-0x10(%ebp)
407461:	ff 75 08             	push   0x8(%ebp)
407464:	8d 4d e8             	lea    -0x18(%ebp),%ecx
407467:	89 45 fc             	mov    %eax,-0x4(%ebp)
40746a:	e8 e6 62 00 00       	call   0x40d755
40746f:	8b 75 e8             	mov    -0x18(%ebp),%esi
407472:	8b f8                	mov    %eax,%edi
407474:	59                   	pop    %ecx
407475:	85 ff                	test   %edi,%edi
407477:	75 1f                	jne    0x407498
407479:	8b 45 ec             	mov    -0x14(%ebp),%eax
40747c:	2b c6                	sub    %esi,%eax
40747e:	a9 fe ff ff ff       	test   $0xfffffffe,%eax
407483:	74 11                	je     0x407496
407485:	85 f6                	test   %esi,%esi
407487:	74 0d                	je     0x407496
407489:	8b d6                	mov    %esi,%edx
40748b:	8b cb                	mov    %ebx,%ecx
40748d:	e8 82 fe ff ff       	call   0x407314
407492:	8b f8                	mov    %eax,%edi
407494:	eb 02                	jmp    0x407498
407496:	33 ff                	xor    %edi,%edi
407498:	85 f6                	test   %esi,%esi
40749a:	74 08                	je     0x4074a4
40749c:	56                   	push   %esi
40749d:	ff 15 e4 21 41 00    	call   *0x4121e4
4074a3:	59                   	pop    %ecx
4074a4:	8b c7                	mov    %edi,%eax
4074a6:	e8 71 71 00 00       	call   0x40e61c
4074ab:	c3                   	ret
4074ac:	6a 3c                	push   $0x3c
4074ae:	b8 7e ee 40 00       	mov    $0x40ee7e,%eax
4074b3:	e8 c9 71 00 00       	call   0x40e681
4074b8:	8b f1                	mov    %ecx,%esi
4074ba:	83 65 e8 00          	andl   $0x0,-0x18(%ebp)
4074be:	33 c0                	xor    %eax,%eax
4074c0:	c7 45 ec 07 00 00 00 	movl   $0x7,-0x14(%ebp)
4074c7:	66 89 45 d8          	mov    %ax,-0x28(%ebp)
4074cb:	21 45 fc             	and    %eax,-0x4(%ebp)
4074ce:	8d 4d d8             	lea    -0x28(%ebp),%ecx
4074d1:	52                   	push   %edx
4074d2:	e8 ca ef ff ff       	call   0x4064a1
4074d7:	89 75 d4             	mov    %esi,-0x2c(%ebp)
4074da:	c7 45 fc 01 00 00 00 	movl   $0x1,-0x4(%ebp)
4074e1:	8b 15 00 10 41 00    	mov    0x411000,%edx
4074e7:	81 fa 00 10 41 00    	cmp    $0x411000,%edx
4074ed:	74 21                	je     0x407510
4074ef:	f6 42 1c 01          	testb  $0x1,0x1c(%edx)
4074f3:	74 1b                	je     0x407510
4074f5:	80 7a 19 02          	cmpb   $0x2,0x19(%edx)
4074f9:	72 15                	jb     0x407510
4074fb:	8d 4d d4             	lea    -0x2c(%ebp),%ecx
4074fe:	e8 de fd ff ff       	call   0x4072e1
407503:	50                   	push   %eax
407504:	51                   	push   %ecx
407505:	ff 72 14             	push   0x14(%edx)
407508:	ff 72 10             	push   0x10(%edx)
40750b:	e8 d4 fd ff ff       	call   0x4072e4
407510:	8d 45 d4             	lea    -0x2c(%ebp),%eax
407513:	50                   	push   %eax
407514:	8d 4d b8             	lea    -0x48(%ebp),%ecx
407517:	e8 0f 00 00 00       	call   0x40752b
40751c:	68 50 03 41 00       	push   $0x410350
407521:	8d 45 b8             	lea    -0x48(%ebp),%eax
407524:	50                   	push   %eax
407525:	e8 ec 70 00 00       	call   0x40e616
40752a:	cc                   	int3
40752b:	8b ff                	mov    %edi,%edi
40752d:	55                   	push   %ebp
40752e:	8b ec                	mov    %esp,%ebp
407530:	8b 55 08             	mov    0x8(%ebp),%edx
407533:	56                   	push   %esi
407534:	8b f1                	mov    %ecx,%esi
407536:	8b 02                	mov    (%edx),%eax
407538:	89 06                	mov    %eax,(%esi)
40753a:	8d 4e 04             	lea    0x4(%esi),%ecx
40753d:	8d 42 04             	lea    0x4(%edx),%eax
407540:	50                   	push   %eax
407541:	e8 37 fd ff ff       	call   0x40727d
407546:	8b c6                	mov    %esi,%eax
407548:	5e                   	pop    %esi
407549:	5d                   	pop    %ebp
40754a:	c2 04 00             	ret    $0x4
40754d:	cc                   	int3
40754e:	cc                   	int3
40754f:	cc                   	int3
407550:	8b ff                	mov    %edi,%edi
407552:	55                   	push   %ebp
407553:	8b ec                	mov    %esp,%ebp
407555:	51                   	push   %ecx
407556:	8b 55 08             	mov    0x8(%ebp),%edx
407559:	56                   	push   %esi
40755a:	8b f1                	mov    %ecx,%esi
40755c:	6a ff                	push   $0xffffffff
40755e:	8b 02                	mov    (%edx),%eax
407560:	89 75 fc             	mov    %esi,-0x4(%ebp)
407563:	89 06                	mov    %eax,(%esi)
407565:	8d 4e 04             	lea    0x4(%esi),%ecx
407568:	83 61 10 00          	andl   $0x0,0x10(%ecx)
40756c:	33 c0                	xor    %eax,%eax
40756e:	c7 41 14 07 00 00 00 	movl   $0x7,0x14(%ecx)
407575:	50                   	push   %eax
407576:	66 89 01             	mov    %ax,(%ecx)
407579:	8d 42 04             	lea    0x4(%edx),%eax
40757c:	50                   	push   %eax
40757d:	e8 94 ec ff ff       	call   0x406216
407582:	8b c6                	mov    %esi,%eax
407584:	5e                   	pop    %esi
407585:	c9                   	leave
407586:	c2 04 00             	ret    $0x4
407589:	6a 10                	push   $0x10
40758b:	b8 ab ee 40 00       	mov    $0x40eeab,%eax
407590:	e8 b9 70 00 00       	call   0x40e64e
407595:	8b f1                	mov    %ecx,%esi
407597:	33 ff                	xor    %edi,%edi
407599:	8d 45 f0             	lea    -0x10(%ebp),%eax
40759c:	57                   	push   %edi
40759d:	57                   	push   %edi
40759e:	50                   	push   %eax
40759f:	68 00 04 00 00       	push   $0x400
4075a4:	89 7d f0             	mov    %edi,-0x10(%ebp)
4075a7:	ff 15 70 20 41 00    	call   *0x412070
4075ad:	50                   	push   %eax
4075ae:	57                   	push   %edi
4075af:	68 00 13 00 00       	push   $0x1300
4075b4:	ff 15 c4 20 41 00    	call   *0x4120c4
4075ba:	85 c0                	test   %eax,%eax
4075bc:	75 0c                	jne    0x4075ca
4075be:	ba d4 24 40 00       	mov    $0x4024d4,%edx
4075c3:	8b ce                	mov    %esi,%ecx
4075c5:	e8 e2 fe ff ff       	call   0x4074ac
4075ca:	ff 75 f0             	push   -0x10(%ebp)
4075cd:	8b 15 a8 20 41 00    	mov    0x4120a8,%edx
4075d3:	8d 4d e4             	lea    -0x1c(%ebp),%ecx
4075d6:	e8 03 eb ff ff       	call   0x4060de
4075db:	89 7d fc             	mov    %edi,-0x4(%ebp)
4075de:	8b 55 f0             	mov    -0x10(%ebp),%edx
4075e1:	eb e0                	jmp    0x4075c3
4075e3:	6a 0c                	push   $0xc
4075e5:	b8 78 ec 40 00       	mov    $0x40ec78,%eax
4075ea:	e8 5f 70 00 00       	call   0x40e64e
4075ef:	8b f1                	mov    %ecx,%esi
4075f1:	8d 4d e8             	lea    -0x18(%ebp),%ecx
4075f4:	e8 a1 e8 ff ff       	call   0x405e9a
4075f9:	83 65 fc 00          	andl   $0x0,-0x4(%ebp)
4075fd:	e8 86 62 00 00       	call   0x40d888
407602:	51                   	push   %ecx
407603:	8d 4d e8             	lea    -0x18(%ebp),%ecx
407606:	e8 85 e8 ff ff       	call   0x405e90
40760b:	8b d0                	mov    %eax,%edx
40760d:	8b ce                	mov    %esi,%ecx
40760f:	e8 98 fe ff ff       	call   0x4074ac
407614:	cc                   	int3
407615:	6a 14                	push   $0x14
407617:	b8 ce ee 40 00       	mov    $0x40eece,%eax
40761c:	e8 2d 70 00 00       	call   0x40e64e
407621:	33 db                	xor    %ebx,%ebx
407623:	53                   	push   %ebx
407624:	ff 15 b0 20 41 00    	call   *0x4120b0
40762a:	8b f8                	mov    %eax,%edi
40762c:	89 5d e4             	mov    %ebx,-0x1c(%ebp)
40762f:	89 5d e8             	mov    %ebx,-0x18(%ebp)
407632:	89 5d ec             	mov    %ebx,-0x14(%ebp)
407635:	89 5d fc             	mov    %ebx,-0x4(%ebp)
407638:	6a 40                	push   $0x40
40763a:	eb 2a                	jmp    0x407666
40763c:	89 5d f0             	mov    %ebx,-0x10(%ebp)
40763f:	ff 15 70 20 41 00    	call   *0x412070
407645:	85 c0                	test   %eax,%eax
407647:	74 05                	je     0x40764e
407649:	83 f8 7a             	cmp    $0x7a,%eax
40764c:	75 5a                	jne    0x4076a8
40764e:	b8 00 00 01 00       	mov    $0x10000,%eax
407653:	3b f0                	cmp    %eax,%esi
407655:	73 51                	jae    0x4076a8
407657:	81 fe 00 80 00 00    	cmp    $0x8000,%esi
40765d:	72 04                	jb     0x407663
40765f:	8b f0                	mov    %eax,%esi
407661:	eb 02                	jmp    0x407665
407663:	03 f6                	add    %esi,%esi