6db674:	8b 11                	mov    (%ecx),%edx
6db676:	ff 52 04             	call   *0x4(%edx)
6db679:	8b 4d f4             	mov    -0xc(%ebp),%ecx
6db67c:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
6db683:	59                   	pop    %ecx
6db684:	8b e5                	mov    %ebp,%esp
6db686:	5d                   	pop    %ebp
6db687:	c3                   	ret
6db688:	cc                   	int3
6db689:	cc                   	int3
6db68a:	cc                   	int3
6db68b:	cc                   	int3
6db68c:	cc                   	int3
6db68d:	cc                   	int3
6db68e:	cc                   	int3
6db68f:	cc                   	int3
6db690:	cc                   	int3
6db691:	cc                   	int3
6db692:	cc                   	int3
6db693:	cc                   	int3
6db694:	cc                   	int3
6db695:	cc                   	int3
6db696:	cc                   	int3
6db697:	cc                   	int3
6db698:	cc                   	int3
6db699:	cc                   	int3
6db69a:	cc                   	int3
6db69b:	cc                   	int3
6db69c:	cc                   	int3
6db69d:	cc                   	int3
6db69e:	cc                   	int3
6db69f:	cc                   	int3
6db6a0:	55                   	push   %ebp
6db6a1:	8b ec                	mov    %esp,%ebp
6db6a3:	6a ff                	push   $0xffffffff
6db6a5:	68 76 da b7 00       	push   $0xb7da76
6db6aa:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
6db6b0:	50                   	push   %eax
6db6b1:	56                   	push   %esi
6db6b2:	a1 24 f6 d5 00       	mov    0xd5f624,%eax
6db6b7:	33 c5                	xor    %ebp,%eax
6db6b9:	50                   	push   %eax
6db6ba:	8d 45 f4             	lea    -0xc(%ebp),%eax
6db6bd:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
6db6c3:	8b 55 08             	mov    0x8(%ebp),%edx
6db6c6:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
6db6cd:	8b 4a 0c             	mov    0xc(%edx),%ecx
6db6d0:	8b 42 08             	mov    0x8(%edx),%eax
6db6d3:	c1 e0 02             	shl    $0x2,%eax
6db6d6:	50                   	push   %eax
6db6d7:	8b 31                	mov    (%ecx),%esi
6db6d9:	ff 32                	push   (%edx)
6db6db:	ff 56 04             	call   *0x4(%esi)
6db6de:	8b 4d f4             	mov    -0xc(%ebp),%ecx
6db6e1:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
6db6e8:	59                   	pop    %ecx
6db6e9:	5e                   	pop    %esi
6db6ea:	8b e5                	mov    %ebp,%esp
6db6ec:	5d                   	pop    %ebp
6db6ed:	c2 04 00             	ret    $0x4
6db6f0:	cc                   	int3
6db6f1:	cc                   	int3
6db6f2:	cc                   	int3
6db6f3:	cc                   	int3
6db6f4:	cc                   	int3
6db6f5:	cc                   	int3
6db6f6:	cc                   	int3
6db6f7:	cc                   	int3
6db6f8:	cc                   	int3
6db6f9:	cc                   	int3
6db6fa:	cc                   	int3
6db6fb:	cc                   	int3
6db6fc:	cc                   	int3
6db6fd:	cc                   	int3
6db6fe:	cc                   	int3
6db6ff:	cc                   	int3
6db700:	cc                   	int3
6db701:	cc                   	int3
6db702:	cc                   	int3
6db703:	cc                   	int3
6db704:	cc                   	int3
6db705:	cc                   	int3
6db706:	cc                   	int3
6db707:	cc                   	int3
6db708:	cc                   	int3
6db709:	cc                   	int3
6db70a:	cc                   	int3
6db70b:	cc                   	int3
6db70c:	cc                   	int3
6db70d:	cc                   	int3
6db70e:	cc                   	int3
6db70f:	cc                   	int3
6db710:	55                   	push   %ebp
6db711:	8b ec                	mov    %esp,%ebp
6db713:	6a ff                	push   $0xffffffff
6db715:	68 a6 da b7 00       	push   $0xb7daa6
6db71a:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
6db720:	50                   	push   %eax
6db721:	56                   	push   %esi
6db722:	a1 24 f6 d5 00       	mov    0xd5f624,%eax
6db727:	33 c5                	xor    %ebp,%eax
6db729:	50                   	push   %eax
6db72a:	8d 45 f4             	lea    -0xc(%ebp),%eax
6db72d:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
6db733:	8b 55 08             	mov    0x8(%ebp),%edx
6db736:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
6db73d:	8b 4a 0c             	mov    0xc(%edx),%ecx
6db740:	8b 42 08             	mov    0x8(%edx),%eax
6db743:	c1 e0 02             	shl    $0x2,%eax
6db746:	50                   	push   %eax
6db747:	8b 31                	mov    (%ecx),%esi
6db749:	ff 32                	push   (%edx)
6db74b:	ff 56 04             	call   *0x4(%esi)
6db74e:	8b 4d f4             	mov    -0xc(%ebp),%ecx
6db751:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
6db758:	59                   	pop    %ecx
6db759:	5e                   	pop    %esi
6db75a:	8b e5                	mov    %ebp,%esp
6db75c:	5d                   	pop    %ebp
6db75d:	c2 04 00             	ret    $0x4
6db760:	cc                   	int3
6db761:	cc                   	int3
6db762:	cc                   	int3
6db763:	cc                   	int3
6db764:	cc                   	int3
6db765:	cc                   	int3
6db766:	cc                   	int3
6db767:	cc                   	int3
6db768:	cc                   	int3
6db769:	cc                   	int3
6db76a:	cc                   	int3
6db76b:	cc                   	int3
6db76c:	cc                   	int3
6db76d:	cc                   	int3
6db76e:	cc                   	int3
6db76f:	cc                   	int3
6db770:	cc                   	int3
6db771:	cc                   	int3
6db772:	cc                   	int3
6db773:	cc                   	int3
6db774:	cc                   	int3
6db775:	cc                   	int3
6db776:	cc                   	int3
6db777:	cc                   	int3
6db778:	cc                   	int3
6db779:	cc                   	int3
6db77a:	cc                   	int3
6db77b:	cc                   	int3
6db77c:	cc                   	int3
6db77d:	cc                   	int3
6db77e:	cc                   	int3
6db77f:	cc                   	int3
6db780:	55                   	push   %ebp
6db781:	8b ec                	mov    %esp,%ebp
6db783:	6a ff                	push   $0xffffffff
6db785:	68 d6 da b7 00       	push   $0xb7dad6
6db78a:	64 a1 00 00 00 00    	mov    %fs:0x0,%eax
6db790:	50                   	push   %eax
6db791:	56                   	push   %esi
6db792:	a1 24 f6 d5 00       	mov    0xd5f624,%eax
6db797:	33 c5                	xor    %ebp,%eax
6db799:	50                   	push   %eax
6db79a:	8d 45 f4             	lea    -0xc(%ebp),%eax
6db79d:	64 a3 00 00 00 00    	mov    %eax,%fs:0x0
6db7a3:	8b 55 0c             	mov    0xc(%ebp),%edx
6db7a6:	c7 45 fc 00 00 00 00 	movl   $0x0,-0x4(%ebp)
6db7ad:	8b 4a 0c             	mov    0xc(%edx),%ecx
6db7b0:	8b 42 08             	mov    0x8(%edx),%eax
6db7b3:	c1 e0 02             	shl    $0x2,%eax
6db7b6:	50                   	push   %eax
6db7b7:	8b 31                	mov    (%ecx),%esi
6db7b9:	ff 32                	push   (%edx)
6db7bb:	ff 56 04             	call   *0x4(%esi)
6db7be:	8b 4d f4             	mov    -0xc(%ebp),%ecx
6db7c1:	64 89 0d 00 00 00 00 	mov    %ecx,%fs:0x0
6db7c8:	59                   	pop    %ecx
6db7c9:	5e                   	pop    %esi
6db7ca:	8b e5                	mov    %ebp,%esp
6db7cc:	5d                   	pop    %ebp
6db7cd:	c3                   	ret
6db7ce:	cc                   	int3
6db7cf:	cc                   	int3
6db7d0:	cc                   	int3
6db7d1:	cc                   	int3
6db7d2:	cc                   	int3
6db7d3:	cc                   	int3
6db7d4:	cc                   	int3
6db7d5:	cc                   	int3
6db7d6:	cc                   	int3
6db7d7:	cc                   	int3
6db7d8:	cc                   	int3
6db7d9:	cc                   	int3
6db7da:	cc                   	int3
6db7db:	cc                   	int3
6db7dc:	cc                   	int3
6db7dd:	cc                   	int3
6db7de:	cc                   	int3
6db7df:	cc                   	int3
6db7e0:	cc                   	int3
6db7e1:	cc                   	int3
6db7e2:	cc                   	int3
6db7e3:	cc                   	int3
6db7e4:	cc                   	int3
6db7e5:	cc                   	int3
6db7e6:	cc                   	int3
6db7e7:	cc                   	int3
6db7e8:	cc                   	int3
6db7e9:	cc                   	int3
6db7ea:	cc                   	int3
6db7eb:	cc                   	int3
6db7ec:	cc                   	int3
6db7ed:	cc                   	int3
6db7ee:	cc                   	int3
6db7ef:	cc                   	int3
6db7f0:	8b 4c 24 04          	mov    0x4(%esp),%ecx
6db7f4:	e8 c0 47 d4 ff       	call   0x41ffb9
6db7f9:	c2 04 00             	ret    $0x4
6db7fc:	cc                   	int3
6db7fd:	cc                   	int3
6db7fe:	cc                   	int3
6db7ff:	cc                   	int3
6db800:	8b 4c 24 04          	mov    0x4(%esp),%ecx
6db804:	e8 b0 47 d4 ff       	call   0x41ffb9
6db809:	c2 04 00             	ret    $0x4
6db80c:	cc                   	int3
6db80d:	cc                   	int3
6db80e:	cc                   	int3
6db80f:	cc                   	int3
6db810:	8b 4c 24 08          	mov    0x8(%esp),%ecx
6db814:	e9 a0 47 d4 ff       	jmp    0x41ffb9
6db819:	cc                   	int3
6db81a:	cc                   	int3
6db81b:	cc                   	int3
6db81c:	cc                   	int3
6db81d:	cc                   	int3
6db81e:	cc                   	int3
6db81f:	cc                   	int3
6db820:	53                   	push   %ebx
6db821:	55                   	push   %ebp
6db822:	56                   	push   %esi
6db823:	8b 74 24 10          	mov    0x10(%esp),%esi
6db827:	b8 67 66 66 66       	mov    $0x66666667,%eax
6db82c:	33 ed                	xor    %ebp,%ebp
6db82e:	8b d9                	mov    %ecx,%ebx
6db830:	8b 56 04             	mov    0x4(%esi),%edx
6db833:	2b 16                	sub    (%esi),%edx
6db835:	f7 ea                	imul   %edx
6db837:	c1 fa 03             	sar    $0x3,%edx
6db83a:	8b c2                	mov    %edx,%eax
6db83c:	c1 e8 1f             	shr    $0x1f,%eax
6db83f:	03 c2                	add    %edx,%eax
6db841:	74 2e                	je     0x6db871
6db843:	57                   	push   %edi
6db844:	33 ff                	xor    %edi,%edi
6db846:	8b 06                	mov    (%esi),%eax
6db848:	8b cb                	mov    %ebx,%ecx
6db84a:	03 c7                	add    %edi,%eax
6db84c:	50                   	push   %eax
6db84d:	e8 79 db d3 ff       	call   0x4193cb
6db852:	8b 4e 04             	mov    0x4(%esi),%ecx
6db855:	b8 67 66 66 66       	mov    $0x66666667,%eax
6db85a:	2b 0e                	sub    (%esi),%ecx
6db85c:	45                   	inc    %ebp
6db85d:	f7 e9                	imul   %ecx
6db85f:	83 c7 14             	add    $0x14,%edi
6db862:	c1 fa 03             	sar    $0x3,%edx
6db865:	8b c2                	mov    %edx,%eax
6db867:	c1 e8 1f             	shr    $0x1f,%eax
6db86a:	03 c2                	add    %edx,%eax
6db86c:	3b e8                	cmp    %eax,%ebp
6db86e:	75 d6                	jne    0x6db846
6db870:	5f                   	pop    %edi
6db871:	5e                   	pop    %esi
6db872:	5d                   	pop    %ebp
6db873:	8b c3                	mov    %ebx,%eax
6db875:	5b                   	pop    %ebx
6db876:	c2 04 00             	ret    $0x4
6db879:	cc                   	int3
6db87a:	cc                   	int3
6db87b:	cc                   	int3
6db87c:	cc                   	int3
6db87d:	cc                   	int3
6db87e:	cc                   	int3
6db87f:	cc                   	int3
6db880:	cc                   	int3
6db881:	cc                   	int3
6db882:	cc                   	int3
6db883:	cc                   	int3
6db884:	cc                   	int3
6db885:	cc                   	int3
6db886:	cc                   	int3
6db887:	cc                   	int3
6db888:	cc                   	int3
6db889:	cc                   	int3
6db88a:	cc                   	int3
6db88b:	cc                   	int3
6db88c:	cc                   	int3
6db88d:	cc                   	int3
6db88e:	cc                   	int3
6db88f:	cc                   	int3
6db890:	53                   	push   %ebx
6db891:	8a 5c 24 08          	mov    0x8(%esp),%bl
6db895:	b8 08 00 00 00       	mov    $0x8,%eax
6db89a:	66 0f 1f 44 00 00    	nopw   0x0(%eax,%eax,1)
6db8a0:	8d 48 ff             	lea    -0x1(%eax),%ecx
6db8a3:	8a d3                	mov    %bl,%dl
6db8a5:	d2 ea                	shr    %cl,%dl
6db8a7:	f6 c2 01             	test   $0x1,%dl
6db8aa:	75 05                	jne    0x6db8b1
6db8ac:	83 e8 01             	sub    $0x1,%eax
6db8af:	75 ef                	jne    0x6db8a0
6db8b1:	5b                   	pop    %ebx
6db8b2:	c3                   	ret
6db8b3:	cc                   	int3
6db8b4:	cc                   	int3
6db8b5:	cc                   	int3
6db8b6:	cc                   	int3
6db8b7:	cc                   	int3
6db8b8:	cc                   	int3
6db8b9:	cc                   	int3
6db8ba:	cc                   	int3
6db8bb:	cc                   	int3
6db8bc:	cc                   	int3
6db8bd:	cc                   	int3
6db8be:	cc                   	int3
6db8bf:	cc                   	int3
6db8c0:	51                   	push   %ecx
6db8c1:	8b 54 24 08          	mov    0x8(%esp),%edx
6db8c5:	53                   	push   %ebx
6db8c6:	8b d9                	mov    %ecx,%ebx
6db8c8:	56                   	push   %esi
6db8c9:	57                   	push   %edi
6db8ca:	89 5c 24 0c          	mov    %ebx,0xc(%esp)
6db8ce:	c7 03 00 00 00 00    	movl   $0x0,(%ebx)
6db8d4:	c7 43 08 00 00 00 00 	movl   $0x0,0x8(%ebx)
6db8db:	c7 43 04 00 00 00 00 	movl   $0x0,0x4(%ebx)
6db8e2:	8b 42 0c             	mov    0xc(%edx),%eax
6db8e5:	89 43 0c             	mov    %eax,0xc(%ebx)
6db8e8:	8b 7a 04             	mov    0x4(%edx),%edi
6db8eb:	8b 32                	mov    (%edx),%esi
6db8ed:	57                   	push   %edi
6db8ee:	e8 a6 ce d5 ff       	call   0x438799
6db8f3:	3b 7b 04             	cmp    0x4(%ebx),%edi
6db8f6:	0f 47 7b 04          	cmova  0x4(%ebx),%edi
6db8fa:	57                   	push   %edi
6db8fb:	56                   	push   %esi
6db8fc:	ff 33                	push   (%ebx)
6db8fe:	e8 7f 32 d4 ff       	call   0x41eb82
6db903:	83 c4 0c             	add    $0xc,%esp
6db906:	8b c3                	mov    %ebx,%eax