Function at 0x1002e190
Capabilities:
Get system information on windows
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb8
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [esp + 8], eax
mov eax, dword [0x100a400c]
xor eax, ebp
mov dword [esp + 0xb0], eax
mov dword [esp + 0x18], ecx
test ecx, ecx
je 0x10033b96
mov eax, dword [0x100a4810]
cmp dword [ebp + 8], 0
je 0x1002e550
test eax, eax
je 0x10033bcd
mov eax, dword [ebp + 8]
mov edi, eax
and edi, 0xfff00000
cmp edi, eax
mov dword [esp + 0x10], edi
je 0x10032e32
shr eax, 0xc
movzx eax, al
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*4 + 0x18]
mov ebx, eax
and ebx, 0xfffff000
test al, 2
jne 0x1002e20f
mov eax, dword [ebx]
mov ebx, dword [eax + 8]
cmp ebx, 0xfd000
ja 0x10032e7d
mov eax, dword [edi]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
cmp eax, 0xfd000
ja 0x1003294e
cmp eax, 8
jbe 0x1002f0a7
cmp eax, 0x1f0
ja 0x1002e681
lea edi, [eax + 0xf]
and edi, 0xfffffff0
xor eax, eax
cmp edi, ebx
sete cl
cmp ebx, 0xfd001
jae 0x10030a9c
test cl, cl
jne 0x1002e8ba
lea ecx, [ebx - 0xf01]
cmp ecx, 0xfc100
setae cl
xor al, 1
or al, cl
mov dword [esp + 0x3c], ebx
je 0x1002eb8e
mov edi, dword [esp + 0x14]
cmp byte [edi + 0x41], 0
jne 0x1002e7a4
cmp dword [esp + 0x18], 0x1f1
jae 0x1002e79e
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x10033c7d
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov edi, dword [eax + 0xc]
test edi, edi
je 0x10033c87
mov eax, dword [esp + 0x18]
cmp eax, 9
jb 0x1002f0d3
cmp eax, 0x1f1
jae 0x1002e8f1
lea ecx, [eax + 0xf]
mov eax, ecx
and eax, 0xfffffff0
mov dword [esp + 0x38], eax
shr ecx, 4
shl ecx, 5
cmp byte [edi + 0x40], 0
mov dword [esp + 4], edi
mov dword [esp + 0xc], ecx
je 0x1002e319
cmp dword [edi + 0x44], 0
je 0x100335e0
lea eax, [edi + ecx]
add eax, 0x5c
lea esi, [edi + 0xc]
cmp dword [edi + 0x24], 0
jne 0x1002e337
push esi
mov ebx, eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, ebx
mov ecx, dword [esp + 0xc]
mov edx, dword [eax]
test edx, edx
mov dword [esp + 0x2c], esi
mov ebx, dword [esp + 0x3c]
je 0x1002e90d
cmp dword [edx + 8], 0
je 0x1002e90d
mov eax, dword [edx + 4]
mov dword [esp + 0x20], edx
mov edx, dword [edx + eax*4 + 0xc]
test edx, edx
je 0x1002eaa8
mov edi, dword [edi + 0x44]
test edi, edi
jne 0x1002e69d
tzcnt ebx, edx
mov edi, dword [esp + 4]
mov esi, eax
shl esi, 5
or esi, ebx
btc edx, ebx
imul esi, dword [edi + ecx + 0x64]
mov ebx, eax
mov eax, dword [edi + ecx + 0x70]
mov ecx, dword [esp + 0x20]
mov dword [ecx + ebx*4 + 0xc], edx
mov edx, ecx
add eax, ecx
add esi, eax
dec dword [edx + 8]
test esi, esi
je 0x10033d7b
mov eax, dword [esp + 0x38]
add dword [edi + 0x30], eax
xor ebx, ebx
cmp dword [edi + 0x24], 0
jne 0x1002e3c0
push dword [esp + 0x2c]
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test bl, bl
mov ebx, dword [esp + 0x3c]
jne 0x10034743
test esi, esi
je 0x10034743
mov eax, dword [esp + 0x18]
cmp ebx, eax
cmovb eax, ebx
push eax
mov edi, dword [ebp + 8]
push edi
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ebx, edi
and ebx, 0xfffff
je 0x100333bb
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp dword [ecx], eax
jne 0x10033be2
mov eax, ebx
shr eax, 0xc
mov dword [esp + 4], eax
lea edx, [eax + eax*2]
mov ecx, dword [ecx + edx*4 + 0x18]
mov eax, ecx
and eax, 0xfffff000
test cl, 2
jne 0x1002e42a
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], edx
lea ecx, [ecx + edx*4]
add ecx, 0x18
mov dword [esp + 0x18], ecx
push eax
push 0xe5
push dword [ebp + 8]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x14]
lea edi, [eax + 0xc]
cmp dword [eax + 0x24], 0
jne 0x1002e461
push edi
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
test al, 0x20
jne 0x10033bf7
mov dword [esp + 0xc], ebx
mov dword [esp + 0x3c], edi
test al, 1
je 0x10033c0c
mov ebx, eax
and ebx, 0xfffff000
test al, 2
mov dword [esp + 0x1c], esi
jne 0x1002ed17
mov edi, dword [ebx]
mov ecx, dword [edi + 8]
mov dword [esp + 0xc], ecx
mov ecx, dword [edi + 0x14]
add ecx, ebx
mov esi, dword [ebp + 8]
sub esi, ecx
mov dword [esp + 0x18], edi
movzx edx, word [edi + 0x1c]
imul edx, esi
mov ecx, edx
shr ecx, 0x11
shr edx, 0x16
cmp edx, dword [ebx + 4]
jb 0x1002eb10
mov esi, dword [ebx + edx*4 + 0xc]
mov edi, 1
shl edi, cl
bt esi, ecx
jb 0x10033c21
or esi, edi
mov dword [ebx + edx*4 + 0xc], esi
mov ecx, dword [ebx + 8]
lea edx, [ecx + 1]
mov dword [ebx + 8], edx
mov esi, dword [esp + 0x18]
cmp edx, dword [esi + 0xc]
mov edx, esi
je 0x1002f2d0
xor esi, esi
test ecx, ecx
je 0x1002e7c9
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
sub dword [edi + 0x30], eax
cmp dword [edi + 0x24], 0
jne 0x1002e51a
push ebx
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test esi, esi
jne 0x10032bc2
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov esi, eax
test eax, eax
je 0x10034743
mov ecx, dword [esp + 0xb0]
xor ecx, ebp
call fcn.1004f020
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
test eax, eax
je 0x10033714
cmp dword [esp + 0x18], 0x1f0
ja 0x1002fcc6
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x10033c36
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov esi, dword [eax + 0xc]
test esi, esi
je 0x10033c40
mov edx, dword [esp + 0x18]
cmp edx, 9
jb 0x1002f10e
add edx, 0xf
mov eax, edx
and eax, 0xfffffff0
mov dword [esp + 0x3c], eax
shr edx, 4
shl edx, 5
mov dword [esp + 0x18], edx
cmp byte [esi + 0x40], 0
mov dword [esp + 0x10], esi
je 0x1002e5d6
cmp dword [esi + 0x44], 0
je 0x1003366d
mov eax, dword [esp + 0x18]
lea ebx, [esi + eax]
add ebx, 0x5c
lea edi, [esi + 0xc]
cmp dword [esi + 0x24], 0
jne 0x1002e5f0
push edi
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov ecx, dword [ebx]
test ecx, ecx
mov dword [esp + 0x14], edi
je 0x1002e9d8
cmp dword [ecx + 8], 0
je 0x1002e9d8
mov eax, dword [ecx + 4]
mov edx, dword [ecx + eax*4 + 0xc]
test edx, edx
je 0x1002eb18
mov esi, dword [esi + 0x44]
test esi, esi
jne 0x1002e712
tzcnt ebx, edx
mov esi, dword [esp + 0x10]
mov edi, eax
shl edi, 5
or edi, ebx
btc edx, ebx
mov ebx, eax
mov eax, dword [esp + 0x18]
imul edi, dword [esi + eax + 0x64]
mov eax, dword [esi + eax + 0x70]
mov dword [ecx + ebx*4 + 0xc], edx
add eax, ecx
add edi, eax
dec dword [ecx + 8]
mov dword [esp + 8], edi
test edi, edi
je 0x10033db8
mov eax, dword [esp + 0x3c]
add dword [esi + 0x30], eax
xor ebx, ebx
mov edi, dword [esp + 0x14]
cmp dword [esi + 0x24], 0
jne 0x1002e674
push edi
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test bl, bl
je 0x1002e52a
jmp 0x10034743
cmp eax, 0xf00
ja 0x1002e78b
lea edi, [eax + 0xff]
and edi, 0xffffff00
jmp 0x1002e24a
mov dword [esp + 0x34], eax
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov ebx, eax
shld ebx, ecx, 0x17
mov esi, ecx
shl esi, 0x17
xor esi, ecx
mov ecx, dword [edi + 0xc]
xor ebx, eax
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, ebx
mov dword [esp + 0x1c], ebx
shr ebx, 0x11
xor ebx, eax
mov eax, dword [edi + 8]
mov dword [edi + 4], ecx
shld dword [esp + 0x1c], esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, dword [esp + 0x1c]
mov dword [edi], eax
mov dword [edi + 0xc], ebx
mov dword [edi + 8], ecx
add ecx, eax
mov esi, edx
ror esi, cl
test esi, esi
je 0x1002e8dd
tzcnt ebx, esi
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x34]
add ebx, ecx
and ebx, 0x1f
mov ecx, dword [esp + 0xc]
jmp 0x1002e379
mov dword [esp + 0xc], eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov ebx, eax
shld ebx, ecx, 0x17
mov edi, ecx
shl edi, 0x17
xor edi, ecx
mov ecx, dword [esi + 0xc]
xor ebx, eax
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, ebx
mov dword [esp + 8], ebx
shr ebx, 0x11
xor ebx, eax
mov eax, dword [esi + 8]
mov dword [esi + 4], ecx
shld dword [esp + 8], edi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, edi
xor ecx, dword [esp + 8]
mov dword [esi], eax
mov dword [esi + 0xc], ebx
mov dword [esi + 8], ecx
add ecx, eax
mov esi, edx
ror esi, cl
test esi, esi
je 0x1002e8e7
tzcnt ebx, esi
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
add ebx, ecx
and ebx, 0x1f
mov ecx, dword [esp + 0x1c]
jmp 0x1002e62a
lea edi, [eax + 0xfff]
and edi, 0x1ff000
mov al, 1
jmp 0x1002e24c
mov edi, dword [0x100a4744]
cmp dword [esp + 0x18], 0xf00
jbe 0x1002e2d7
mov ecx, edi
mov edx, dword [esp + 0x18]
push 0
call fcn.10035340
add esp, 4
mov esi, eax
jmp 0x1002e3cc
mov ecx, dword [edx]
cmp ecx, ebx
je 0x1002e4fe
test ecx, ecx
je 0x1002fe6c
cmp ebx, ecx
jae 0x1002ec54
cmp dword [ecx + 8], 0
je 0x1002fe6c
mov eax, ecx
and eax, 0xfff00000
shr ecx, 0xa
and ecx, 0x3fc
lea edi, [ecx + ecx*2]
or edi, eax
add edi, 0x10
mov eax, dword [edx + 4]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
test eax, eax
je 0x1002f8e4
lea ecx, [esp + 0x88]
mov dword [esp + 8], 0
mov edx, dword [esp + 8]
mov dword [esp + 0x10], edx
mov dword [esp + 8], ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x1002e871
mov edx, dword [ecx + 4]
test dl, 1
je 0x1002e871
mov esi, edi
mov edi, dword [ecx]
test edi, edi
je 0x1002e859
test byte [edi + 4], 1
jne 0x1002e87d
mov ecx, eax
mov edi, esi
xor esi, esi
cmp ecx, edi
seta dl
jbe 0x1002e875
mov eax, dword [ecx]
test eax, eax
jne 0x1002e831
jmp 0x1002fdf5
mov ecx, eax
jmp 0x1002e85f
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
jmp 0x1002e868
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov dword [esp + 4], edx
mov edx, dword [ecx]
mov edi, dword [ecx + 4]
and edi, 1
add edi, dword [esp + 4]
mov dword [ecx + 4], edi
test edx, edx
je 0x10033ce2
and byte [edx + 4], 0xfe
mov edx, dword [esp + 8]
cmp dword [edx], eax
mov eax, edx
mov edi, esi
jne 0x1002fd6d
mov dword [eax], ecx
jmp 0x1002e85d
mov eax, dword [esp + 0x18]
sub ebx, eax
jbe 0x1002e52a
add eax, dword [ebp + 8]
push ebx
push 0xe5
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
jmp 0x1002e52a
mov ebx, 0x20
jmp 0x1002e6fc
mov ebx, 0x20
jmp 0x1002e775
lea ecx, [eax + 0xff]
mov eax, ecx
and eax, 0x1f00
mov dword [esp + 0x38], eax
shr ecx, 8
add ecx, 0x1e
jmp 0x1002e2fe
mov dword [esp + 0x34], eax
mov eax, dword [edi + ecx + 0x60]
test eax, eax
je 0x100302a3
add ecx, edi
add ecx, 0x60
mov dword [esp + 0x20], ecx
mov ecx, eax
nop dword [eax + eax]
mov edi, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x1002e930
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
xor edx, edx
dec edx
xor ecx, ecx
cmp eax, edi
setb cl
cmova ecx, edx
cmp ecx, 0xffffffff
jne 0x1002f2a6
mov edx, dword [eax]
test edx, edx
je 0x10033a37
mov ecx, dword [edx + 4]
mov dword [esp + 0x24], 0
test cl, 1
jne 0x10034990
mov esi, dword [edx]
test esi, esi
je 0x1002e98e
test byte [esi + 4], 1
jne 0x10034990
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10033a0d
mov edx, dword [ecx]
test edx, edx
je 0x1002e9b4
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10030a1e
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x88]
mov dword [eax], edx
jmp 0x10034990
mov ecx, dword [esp + 0x18]
mov eax, dword [esi + ecx + 0x60]
test eax, eax
mov dword [esp + 8], ebx
je 0x1003032d
add ecx, esi
add ecx, 0x60
mov dword [esp + 0x1c], ecx
mov ecx, eax
nop word [eax + eax]
mov esi, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x1002ea00
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
xor edx, edx
dec edx
xor ecx, ecx
cmp eax, esi
setb cl
cmova ecx, edx
cmp ecx, 0xffffffff
jne 0x1002f4f7
mov edx, dword [eax]
test edx, edx
je 0x10033a46
mov ecx, dword [edx + 4]
mov dword [esp + 0xc], 0
test cl, 1
jne 0x10034f09
mov edi, dword [edx]
test edi, edi
je 0x1002ea5e
test byte [edi + 4], 1
jne 0x10034f09
or ecx, 1
mov dword [edx + 4], ecx
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
je 0x10033a22
mov edx, dword [ecx]
test edx, edx
je 0x1002ea84
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10030af2
or edi, 1
mov dword [eax + 4], edi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x88]
mov dword [eax], edx
jmp 0x10034f09
mov ecx, dword [edi + ecx + 0x6c]
mov dword [esp + 0x1c], ecx
mov esi, eax
shl esi, 5
mov edx, dword [esp + 0x20]
inc eax
cmp eax, dword [esp + 0x1c]
jae 0x10033d78
mov ecx, dword [edx + eax*4 + 0xc]
add esi, 0x20
mov dword [esp + 0x24], ecx
test ecx, ecx
je 0x1002eab9
mov dword [esp + 0x34], eax
mov ebx, dword [edi + 0x44]
test ebx, ebx
jne 0x1002f16b
mov ecx, dword [esp + 0x24]
tzcnt ebx, ecx
add esi, ebx
mov eax, dword [esp + 0xc]
imul esi, dword [edi + eax + 0x64]
mov eax, dword [edi + eax + 0x70]
add eax, edx
add esi, eax
btc ecx, ebx
mov eax, dword [esp + 0x34]
mov dword [edx + eax*4 + 0xc], ecx
mov dword [edx + 4], eax
jmp 0x1002e39c
mov dword [ebx + 4], edx
jmp 0x1002e4c2
mov dword [esp + 0x1c], ecx
mov edx, eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + eax + 0x6c]
mov eax, edx
mov edi, edx
shl edi, 5
inc eax
cmp eax, ecx
jae 0x10033db1
mov edx, eax
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + edx*4 + 0xc]
add edi, 0x20
mov dword [esp + 8], eax
test eax, eax
mov eax, edx
je 0x1002eb2d
mov dword [esp + 0xc], eax
mov ebx, dword [esi + 0x44]
test ebx, ebx
jne 0x1002f1e0
mov edx, dword [esp + 8]
tzcnt ebx, edx
add edi, ebx
mov eax, dword [esp + 0x18]
imul edi, dword [esi + eax + 0x64]
mov eax, dword [esi + eax + 0x70]
mov ecx, dword [esp + 0x1c]
add eax, ecx
add edi, eax
btc edx, ebx
mov eax, dword [esp + 0xc]
mov dword [ecx + eax*4 + 0xc], edx
mov dword [ecx + 4], eax
jmp 0x1002e64b
mov eax, edi
sub eax, ebx
mov dword [esp + 0xc], eax
jb 0x1002f84c
mov eax, dword [ebp + 8]
shr eax, 0xc
movzx eax, al
mov dword [esp + 0x1c], eax
shr ebx, 0xc
mov eax, dword [esp + 0x14]
lea ecx, [eax + 0xc]
cmp dword [eax + 0x24], 0
jne 0x1002ebc4
push ecx
mov esi, ecx
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov ecx, esi
add ebx, dword [esp + 0x1c]
cmp ebx, 0xfe
ja 0x1002f14b
lea esi, [ebx + ebx*2]
mov eax, dword [esp + 0x10]
mov eax, dword [eax + esi*4 + 0x18]
test al, 1
jne 0x1002f14b
and eax, 0xfffff000
mov edx, dword [esp + 0xc]
cmp eax, edx
jb 0x1002f14b
mov eax, edx
mov dword [esp + 0x20], esi
mov dword [esp + 4], ecx
shl ebx, 0xc
mov esi, dword [esp + 0x10]
add ebx, esi
mov ecx, dword [esp + 0x14]
mov edx, ebx
mov ebx, eax
push eax
call fcn.10037020
add esp, 4
test al, al
je 0x10033ef1
or edi, 3
mov eax, dword [esp + 0x1c]
lea eax, [eax + eax*2]
mov dword [esi + eax*4 + 0x18], edi
mov eax, dword [esp + 0x20]
lea eax, [esi + eax*4]
add eax, 0x18
mov dword [eax], 3
mov eax, dword [esp + 0x14]
add dword [eax + 0x34], ebx
mov bl, 1
mov ecx, dword [esp + 4]
jmp 0x1002f14d
mov ecx, dword [esp + 0x10]
sub eax, ecx
shr eax, 0xc
lea eax, [eax + eax*2]
lea edi, [ecx + eax*4]
add edi, 0x10
mov eax, dword [edx + 4]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
test eax, eax
je 0x1002fbec
lea ecx, [esp + 0x88]
mov dword [esp + 8], 0
mov ebx, dword [esp + 8]
mov dword [esp + 0x10], ebx
mov dword [esp + 8], ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x1002ecd2
mov ebx, dword [ecx + 4]
test bl, 1
je 0x1002ecd2
mov esi, edi
mov edi, dword [ecx]
test edi, edi
je 0x1002ecba
test byte [edi + 4], 1
jne 0x1002ecde
mov ecx, eax
mov edi, esi
xor esi, esi
cmp ecx, edi
seta bl
jbe 0x1002ecd6
mov eax, dword [ecx]
test eax, eax
jne 0x1002ec92
jmp 0x10030021
mov ecx, eax
jmp 0x1002ecc0
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
jmp 0x1002ecc9
and ebx, 0xfffffffe
mov dword [eax], ebx
mov edi, eax
and edi, 0xfffffffe
mov ebx, dword [ecx]
mov edx, dword [ecx + 4]
and edx, 1
or edx, edi
mov dword [ecx + 4], edx
test ebx, ebx
je 0x10033d0f
and byte [ebx + 4], 0xfe
mov ebx, dword [esp + 8]
cmp dword [ebx], eax
mov edx, dword [esp + 0x18]
mov edi, esi
jne 0x1002ffa5
mov dword [ebx], ecx
jmp 0x1002ecbe
mov eax, dword [esp + 0x14]
sub dword [eax + 0x34], ebx
mov ebx, dword [esp + 0xc]
cmp ebx, 0xff000
jae 0x10033dd6
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
test al, 2
je 0x1002f74f
mov edi, eax
and edi, 0xfffff000
shr eax, 0xc
test eax, eax
je 0x1002edfb
lea ecx, [eax - 1]
movd xmm0, ecx
pshufd xmm0, xmm0, 0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
lea ecx, [ecx + edx*4]
add ecx, 0x3c
lea edx, [eax*4 + 0xc]
and edx, 0xfffffff0
lea edx, [edx + edx*2]
movdqa xmm1, xmmword [0x10092120]
xor esi, esi
movdqa xmm2, xmmword [0x10092130]
pxor xmm0, xmm2
pcmpeqd xmm3, xmm3
movdqa xmm4, xmmword [0x10092140]
movdqa xmm5, xmm1
pxor xmm5, xmm2
pcmpgtd xmm5, xmm0
movd ebx, xmm5
not ebx
test bl, 1
je 0x1002edb7
mov dword [ecx + esi - 0x24], 8
pxor xmm5, xmm3
pextrw ebx, xmm5, 2
test bl, 1
je 0x1002edcd
mov dword [ecx + esi - 0x18], 8
pextrw ebx, xmm5, 4
test bl, 1
je 0x1002eddf
mov dword [ecx + esi - 0xc], 8
pextrw ebx, xmm5, 6
test bl, 1
je 0x1002edf0
mov dword [ecx + esi], 8
paddd xmm1, xmm4
add esi, 0x30
cmp edx, esi
jne 0x1002ed98
mov esi, dword [esp + 0x10]
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x1002fb15
add ecx, eax
mov dword [esi + 0xc], ecx
mov ecx, dword [esp + 0x14]
add dword [ecx + 0x48], eax
mov edx, 0xfff
mov ebx, edi
mov edi, dword [esp + 0x18]
mov ecx, dword [edi]
and ecx, edx
or ecx, ebx
mov dword [edi], ecx
mov edi, ebx
add eax, dword [esp + 4]
lea ecx, [eax + eax*2]
and edx, dword [esi + ecx*4 + 0xc]
or edx, ebx
mov dword [esi + ecx*4 + 0xc], edx
cmp eax, 0xfe
ja 0x10030a15
mov eax, dword [esi + ecx*4 + 0x18]
test al, 1
mov ebx, dword [esp + 0xc]
je 0x1002f535
cmp ebx, 0x3000
jb 0x1002ee73
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
mov eax, dword [eax + ecx*4 + 0xc]
test al, 1
je 0x1002f8fd
mov eax, dword [esp + 4]
lea eax, [eax + eax*2]
mov edx, dword [esp + 0x10]
lea ecx, [edx + eax*4]
add ecx, 0x10
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 0x58]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], 0
test ecx, ecx
je 0x1002fca9
lea ebx, [esp + 0x88]
lea eax, [edx + eax*4]
add eax, 0x18
mov dword [esp + 0x18], eax
xor esi, esi
mov eax, esi
mov esi, ebx
mov ebx, dword [ecx]
test ebx, ebx
je 0x1002eeda
mov edx, dword [ebx + 4]
test dl, 1
je 0x1002eeda
mov edi, dword [ebx]
test edi, edi
je 0x1002eeda
test byte [edi + 4], 1
jne 0x1002ef3c
mov ebx, ecx
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov edx, eax
and edx, 0xfffff000
mov edi, dword [ebx + 8]
mov ecx, 0xfffff000
and edi, ecx
xor ecx, ecx
cmp edx, edi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
cmp ecx, 0xffffffff
je 0x1002ef21
test ecx, ecx
jne 0x1002ef2f
test al, 0x10
mov eax, 0
cmove eax, dword [esp + 8]
xor edx, edx
cmp eax, ebx
seta al
jae 0x1002ef6e
mov ecx, dword [ebx]
xor edx, edx
dec edx
test ecx, ecx
jne 0x1002eebc
jmp 0x1002f009
mov edx, 1
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
jmp 0x1002ef26
mov dword [esp + 0xc], eax
and edx, 0xfffffffe
mov dword [ecx], edx
mov edi, ecx
and edi, 0xfffffffe
mov edx, dword [ebx]
mov eax, dword [ebx + 4]
and eax, 1
or eax, edi
mov dword [ebx + 4], eax
test edx, edx
je 0x10033d2d
and byte [edx + 4], 0xfe
cmp dword [esi], ecx
jne 0x1002ef72
mov dword [esi], ebx
jmp 0x1002eedc
mov dl, al
jmp 0x1002ef34
and ebx, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
lea eax, [ecx + ebx]
mov dword [esi + 4], eax
test ebx, ebx
je 0x10033d1e
mov eax, dword [ebx]
and eax, 0xfffffffe
or eax, ecx
mov dword [esi + 4], eax
mov dword [ebx], esi
mov eax, dword [esi + 4]
and eax, 1
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
or byte [esi + 4], 1
mov eax, dword [esp + 0xc]
test eax, eax
je 0x10033974
cmp dword [eax], esi
je 0x1002fe73
jmp 0x1002ff17
mov eax, dword [esp + 0x18]
mov edx, dword [eax]
mov eax, edx
mov ecx, 0xfffff000
and eax, ecx
mov esi, dword [ebx + 8]
and esi, ecx
xor ecx, ecx
cmp eax, esi
seta cl
mov eax, 0xffffffff
cmovb ecx, eax
test ecx, ecx
jne 0x1002fc98
jmp 0x10030188
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
mov eax, dword [esp + 0xc]
mov esi, ebx
test ecx, ecx
jne 0x1002eec0
mov esi, eax
mov eax, dword [esp + 8]
mov dword [eax], 0
mov dword [eax + 4], 1
cmp edx, 1
je 0x1002f253
mov dword [ebx], eax
mov eax, dword [esp + 0x88]
test eax, eax
je 0x10033deb
mov ecx, dword [esp + 0x14]
lea edx, [ecx + 0x58]
and byte [eax + 4], 0xfe
mov dword [edx], eax
mov eax, 0xfffff001
mov ecx, dword [esp + 0x10]
and eax, dword [ecx + 0x30]
xor ebx, ebx
mov esi, 0
cmp eax, 0xfd000
je 0x10032674
mov ecx, dword [0x100a4758]
test ecx, ecx
je 0x1002f086
setle al
movzx eax, al
mov edx, dword [esp + 0x14]
mov eax, dword [edx + eax*4 + 0x50]
test eax, eax
cmovne ecx, eax
test ecx, ecx
js 0x100323d3
mov ebx, ecx
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x4c]
mov ecx, ebx
shl edx, cl
cmp dword [eax + 0x48], edx
mov ebx, dword [esp + 0x3c]
ja 0x10031feb
mov edi, dword [esp + 0x14]
jmp 0x1002e50d
dec eax
je 0x1002f521
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor edi, edi
inc edi
shl edi, cl
cmp edi, 9
mov eax, 8
cmovb edi, eax
cmp dword [esp + 0x18], 2
cmovb edi, eax
jmp 0x1002e24a
dec eax
je 0x1002f52b
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor edx, edx
inc edx
shl edx, cl
cmp edx, 9
mov eax, 8
cmovb edx, eax
cmp dword [esp + 0x18], 2
cmovb edx, eax
mov dword [esp + 0x38], edx
mov eax, edx
shr eax, 3
or eax, 1
bsr ecx, eax
jmp 0x1002e2fe
mov eax, edx
dec eax
je 0x1002f745
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor edx, edx
inc edx
shl edx, cl
cmp edx, 9
mov eax, 8
cmovb edx, eax
cmp dword [esp + 0x18], 2
cmovb edx, eax
mov dword [esp + 0x3c], edx
mov eax, edx
shr eax, 3
or eax, 1
bsr edx, eax
jmp 0x1002e5bb
xor ebx, ebx
cmp dword [ecx + 0x18], 0
jne 0x1002f15a
push ecx
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test bl, bl
mov ebx, dword [esp + 0x3c]
je 0x1002e282
jmp 0x1002e52a
mov dword [esp + 0x1c], esi
mov eax, dword [ebx]
mov edi, dword [ebx + 4]
mov edx, edi
shld edx, eax, 0x17
mov esi, eax
shl esi, 0x17
xor esi, eax
mov ecx, dword [ebx + 0xc]
xor edx, edi
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, edx
mov edi, edx
shr edx, 0x11
xor edx, eax
mov eax, dword [ebx + 8]
mov dword [ebx + 4], ecx
shld edi, esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, edi
mov dword [ebx], eax
mov dword [ebx + 0xc], edx
mov dword [ebx + 8], ecx
add ecx, eax
mov edx, dword [esp + 0x24]
ror edx, cl
test edx, edx
je 0x1002f7f7
tzcnt ebx, edx
mov esi, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
add ebx, ecx
and ebx, 0x1f
mov edi, dword [esp + 4]
mov ecx, dword [esp + 0x24]
jmp 0x1002eaea
mov eax, dword [ebx]
mov edx, dword [ebx + 4]
mov dword [esp + 4], edx
shld edx, eax, 0x17
mov esi, eax
shl esi, 0x17
xor esi, eax
mov ecx, dword [ebx + 0xc]
xor edx, dword [esp + 4]
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, edx
mov dword [esp + 4], edx
shr edx, 0x11
xor edx, eax
mov eax, dword [ebx + 8]
mov dword [ebx + 4], ecx
shld dword [esp + 4], esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, dword [esp + 4]
mov dword [ebx], eax
mov dword [ebx + 0xc], edx
mov dword [ebx + 8], ecx
add ecx, eax
mov edx, dword [esp + 8]
ror edx, cl
test edx, edx
je 0x1002f8da
tzcnt ebx, edx
add ebx, ecx
and ebx, 0x1f
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 8]
jmp 0x1002eb64
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, eax
or ecx, dword [esp + 8]
mov dword [ebx + 4], ecx
mov ecx, dword [esp + 8]
mov ecx, dword [ecx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
mov eax, dword [esp + 8]
mov dword [eax], ebx
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, dword [esp + 8]
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov eax, dword [esp + 8]
mov dword [eax + 4], ecx
mov eax, dword [esp + 8]
or byte [ebx + 4], 1
cmp dword [esi], ebx
jne 0x1002fbcd
mov dword [esi], eax
jmp 0x1002f025
test ecx, ecx
jne 0x1002fcf9
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x1003264d
mov ecx, dword [eax]
test ecx, ecx
jne 0x1003254e
mov dword [esp + 0x88], ecx
jmp 0x10034adb
cmp dword [edx], ebx
je 0x100301a9
test ecx, ecx
je 0x1002f830
mov ecx, dword [esp + 0x10]
sub eax, ecx
shr eax, 0xc
lea eax, [eax + eax*2]
lea edi, [ecx + eax*4]
add edi, 0x10
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], 0
xor ecx, ecx
dec ecx
xor eax, eax
cmp edx, edi
setb al
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x1003059e
test edx, edx
je 0x10033b54
mov ecx, dword [edx]
test ecx, ecx
je 0x10033b54
mov eax, dword [ecx + 4]
mov dword [esp + 0x10], 0
test al, 1
je 0x1003009d
mov dword [esp + 8], edx
xor esi, esi
dec esi
mov edx, ecx
xor eax, eax
cmp edx, edi
setb al
cmova eax, esi
cmp eax, 0xffffffff
jne 0x1002f3d8
test edx, edx
je 0x100324ec
mov ecx, dword [edx]
test ecx, ecx
je 0x100324ec
mov eax, dword [ecx + 4]
test al, 1
jne 0x1002f3cf
mov esi, dword [ecx]
test esi, esi
je 0x1002f37f
test byte [esi + 4], 1
jne 0x1002f342
mov dword [esp + 4], edi
or eax, 1
mov dword [ecx + 4], eax
mov eax, dword [edx + 4]
mov esi, eax
and esi, 0xfffffffe
je 0x10033a55
mov edi, dword [esi]
test edi, edi
jne 0x1002f3f8
or eax, 1
mov dword [edx + 4], eax
mov eax, dword [esi]
or eax, 1
mov dword [edx + 4], eax
mov dword [esi], edx
mov edi, esi
mov eax, dword [esp + 8]
cmp dword [eax], edx
mov edx, eax
mov esi, 0xffffffff
jne 0x10033ef8
mov dword [edx], edi
mov edx, edi
mov edi, dword [esp + 4]
jmp 0x1002f34b
mov dword [esp + 8], edx
jmp 0x1002f349
test eax, eax
jne 0x1002f409
xor ecx, ecx
test edx, edx
je 0x1002f80b
mov esi, dword [edx + 4]
mov eax, dword [esp + 8]
cmp esi, 1
jbe 0x1002f801
jmp 0x1002f418
mov ecx, dword [edi + 4]
mov dword [esp + 0x20], ecx
test cl, 1
je 0x1002f39d
jmp 0x10030867
test edx, edx
je 0x10033e36
mov esi, dword [edx + 4]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], eax
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002f433
mov eax, dword [ecx]
test eax, eax
je 0x1002f433
test byte [eax + 4], 1
jne 0x1002f342
mov eax, dword [edx]
test eax, eax
je 0x10033e36
mov ecx, dword [eax + 4]
test cl, 1
je 0x10030c0c
mov dword [esp + 0x20], eax
and ecx, 0xfffffffe
je 0x10033e45
mov eax, dword [ecx]
test eax, eax
je 0x1002f466
test byte [eax + 4], 1
jne 0x10032035
and esi, 1
or esi, ecx
mov eax, dword [esp + 0x20]
mov dword [eax + 4], esi
or byte [ecx + 4], 1
mov ecx, dword [edx]
test ecx, ecx
je 0x10033e5e
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov dword [esp + 0x20], esi
and esi, 0xfffffffe
je 0x10033e73
mov eax, dword [esi]
and eax, 0xfffffffe
mov dword [esp + 4], eax
mov eax, dword [esp + 0x20]
and eax, 1
add eax, dword [esp + 4]
mov dword [edx + 4], eax
mov dword [esi], edx
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
or byte [edx + 4], 1
mov eax, dword [esp + 8]
cmp dword [eax], edx
mov edx, eax
je 0x100300fe
mov eax, ecx
and eax, 0xfffffffe
mov esi, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov dword [esi + 4], edx
mov edx, esi
jmp 0x1002f342
test ecx, ecx
jne 0x1002fe7a
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x100326a6
mov ecx, dword [eax]
test ecx, ecx
jne 0x100325f6
mov dword [esp + 0x88], ecx
jmp 0x100348f5
mov ecx, 0x20
jmp 0x1002f0b4
mov ecx, 0x20
jmp 0x1002f0e0
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0x10]
lea esi, [edi + ecx*4]
add esi, 0x18
mov edx, 0xfffff000
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x58]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
mov dword [esp + 8], esi
mov ebx, dword [esi]
mov dword [esp + 0x24], ebx
and ebx, edx
mov esi, dword [eax + 8]
and esi, edx
xor edx, edx
cmp ebx, esi
seta dl
lea ecx, [edi + ecx*4 + 0x10]
mov dword [esp + 0x38], ecx
mov ecx, 0xffffffff
cmovb edx, ecx
test edx, edx
je 0x1003057e
cmp edx, 0xffffffff
jne 0x1002ff29
mov edx, dword [eax]
test edx, edx
je 0x10033f93
mov ecx, dword [edx + 4]
mov dword [esp + 0x24], 0
test cl, 1
je 0x1003012e
mov edi, eax
mov eax, edx
mov ecx, dword [esp + 8]
mov edx, dword [ecx]
mov ebx, edx
mov ecx, 0xfffff000
and ebx, ecx
mov esi, dword [eax + 8]
and esi, ecx
xor ecx, ecx
cmp ebx, esi
seta cl
mov esi, 0xffffffff
cmovb ecx, esi
test ecx, ecx
mov ebx, dword [esp + 0xc]
je 0x1002f617
cmp ecx, 0xffffffff
jne 0x1002f631
mov edx, dword [eax]
test edx, edx
je 0x10030c4e
mov ecx, dword [edx + 4]
test cl, 1
jne 0x1002f5bc
mov esi, dword [edx]
test esi, esi
je 0x1002f6fe
test byte [esi + 4], 1
jne 0x1002f5bc
jmp 0x1002f6fe
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 0x38]
xor ecx, ecx
cmp edx, eax
seta dl
jb 0x1002f5f0
mov cl, dl
jmp 0x1002f5eb
test ecx, ecx
je 0x1002f6ed
mov esi, dword [eax + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x1002f653
mov ecx, dword [edx]
test ecx, ecx
je 0x1002f653
test byte [ecx + 4], 1
jne 0x1002f5bc
mov ecx, dword [eax]
test ecx, ecx
je 0x10033f42
mov edx, dword [ecx + 4]
test dl, 1
je 0x10030544
and edx, 0xfffffffe
je 0x100339a4
mov ebx, dword [edx]
test ebx, ebx
je 0x1002f682
test byte [ebx + 4], 1
jne 0x10030d6d
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x10033f0f
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10033f24
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
cmp dword [edi], eax
jne 0x10030791
mov dword [edi], edx
mov eax, edi
jmp 0x1002f5bc
mov esi, dword [eax + 4]
mov dword [esp + 0x24], edi
cmp esi, 1
jbe 0x1002f762
jmp 0x1002f63c
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10033947
mov edx, dword [ecx]
test edx, edx
je 0x1002f724
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10030bbd
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
cmp dword [edi], eax
jne 0x10034062
mov dword [edi], edx
jmp 0x1002f5be
mov ecx, 0x20
jmp 0x1002f11d
mov eax, dword [ebp + 8]
mov eax, dword [eax]
movzx eax, byte [eax + 0x1e]
mov edi, eax
shl edi, 0xc
jmp 0x1002ed47
mov ecx, dword [eax]
test ecx, ecx
je 0x1002f793
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
cmp dword [edi], eax
jne 0x1003030a
mov dword [edi], ecx
mov edx, dword [esp + 0x88]
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x14]
mov dword [eax + 0x58], edx
xor eax, eax
mov ecx, dword [esp + 0x38]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x34]
mov ecx, 0xfffff000
and eax, ecx
add edi, eax
mov eax, 0xfff
mov edx, dword [esp + 0x18]
mov ecx, dword [edx]
and ecx, eax
or ecx, edi
mov dword [edx], ecx
mov ecx, edi
shr ecx, 0xc
add ecx, dword [esp + 4]
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x10]
and eax, dword [edx + ecx*4 + 0xc]
or eax, edi
mov dword [edx + ecx*4 + 0xc], eax
jmp 0x1002ee57
mov ebx, 0x20
jmp 0x1002f1c6
mov esi, dword [edx]
test esi, esi
jne 0x10030c9f
mov eax, dword [esp + 8]
cmp dword [eax], edx
mov edx, eax
jne 0x10031770
mov dword [edx], ecx
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x88]
mov dword [edx + 4], eax
xor eax, eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x14]
mov edi, edx
mov edx, ebx
push 1
call fcn.1003aac0
add esp, 4
mov esi, eax
dec dword [edi + 0x18]
jmp 0x1002e4fe
mov ecx, dword [esp + 0x18]
sub ebx, ecx
add ecx, dword [ebp + 8]
push ebx
push 0xe5
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x14]
lea ebx, [eax + 0xc]
cmp dword [eax + 0x24], 0
jne 0x1002f878
push ebx
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [ebp + 8]
shr eax, 0xc
movzx eax, al
mov ecx, edi
or ecx, 3
lea edx, [eax + eax*2]
mov esi, dword [esp + 0x10]
mov dword [esi + edx*4 + 0x18], ecx
mov ecx, edi
shr ecx, 0xc
add ecx, eax
mov edx, dword [esp + 0x3c]
sub edx, edi
or edx, 3
lea eax, [ecx + ecx*2]
mov dword [esi + eax*4 + 0x18], edx
add edi, dword [ebp + 8]
mov esi, dword [esp + 0x14]
mov ecx, esi
mov edx, edi
push 1
call fcn.1003aac0
add esp, 4
mov eax, dword [esp + 0xc]
add dword [esi + 0x34], eax
cmp dword [ebx + 0x18], 0
jne 0x1002e52a
push ebx
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
jmp 0x1002e52a
mov ebx, 0x20
jmp 0x1002f241
mov dword [edi], 0
mov dword [edi + 4], 1
lea ecx, [esp + 0x88]
jmp 0x1002fe54
mov edx, 0xfffff000
mov dword [esp + 8], eax
shr eax, 0xc
mov ecx, dword [esp + 4]
sub ecx, eax
mov dword [esp + 4], ecx
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + 0x10]
lea ecx, [ecx + eax*4]
add ecx, 0x10
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x58]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
mov dword [esp + 0x18], ecx
mov ebx, dword [ecx + 8]
mov dword [esp + 0xc], ebx
and ebx, edx
mov esi, dword [eax + 8]
and esi, edx
xor edx, edx
dec edx
xor ecx, ecx
cmp ebx, esi
seta cl
cmovb ecx, edx
test ecx, ecx
mov dword [esp + 0x2c], edi
je 0x100307f5
cmp ecx, 0xffffffff
jne 0x100301b4
mov edx, dword [eax]
test edx, edx
je 0x10034077
mov ecx, dword [edx + 4]
mov dword [esp + 0xc], 0
test cl, 1
je 0x1003022d
mov edi, eax
mov eax, edx
mov ecx, dword [esp + 0x18]
mov ebx, dword [ecx + 8]
mov ecx, ebx
mov edx, 0xfffff000
and ecx, edx
mov esi, dword [eax + 8]
and esi, edx
xor edx, edx
cmp ecx, esi
seta dl
mov ecx, 0xffffffff
cmovb edx, ecx
test edx, edx
je 0x1002f9e3
cmp edx, 0xffffffff
jne 0x1002f9fd
mov edx, dword [eax]
test edx, edx
je 0x10030e7f
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1002f98b
mov ecx, dword [edx]
test ecx, ecx
je 0x1002face
test byte [ecx + 4], 1
jne 0x1002f98b
jmp 0x1002face
test bl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x18]
xor edx, edx
cmp ecx, eax
seta cl
jb 0x1002f9bc
mov dl, cl
jmp 0x1002f9b7
test edx, edx
je 0x1002fab9
mov esi, dword [eax + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x1002fa1f
mov ecx, dword [edx]
test ecx, ecx
je 0x1002fa1f
test byte [ecx + 4], 1
jne 0x1002f98b
mov ebx, dword [eax]
test ebx, ebx
je 0x10033fd5
mov edx, dword [ebx + 4]
test dl, 1
je 0x100307bb
and edx, 0xfffffffe
je 0x100339fb
mov ecx, dword [edx]
test ecx, ecx
je 0x1002fa4e
test byte [ecx + 4], 1
jne 0x10030f08
and esi, 1
or esi, edx
mov dword [ebx + 4], esi
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x10033fa2
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
je 0x10033fb7
mov ecx, dword [esi]
and ecx, 0xfffffffe
and ebx, 1
or ebx, ecx
mov dword [eax + 4], ebx
mov dword [esi], eax
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, esi
mov dword [edx + 4], ecx
or byte [eax + 4], 1
cmp dword [edi], eax
jne 0x100308e1
mov dword [edi], edx
mov eax, edi
jmp 0x1002f98b
mov esi, dword [eax + 4]
mov dword [esp + 0xc], edi
cmp esi, 1
jbe 0x1002fc05
jmp 0x1002fa08
or ebx, 1
mov dword [edx + 4], ebx
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
je 0x10033962
mov edx, dword [esi]
test edx, edx
je 0x1002faf4
mov ecx, dword [edx + 4]
test cl, 1
jne 0x10030e30
or ebx, 1
mov dword [eax + 4], ebx
mov ecx, dword [esi]
or ecx, 1
mov dword [eax + 4], ecx
mov dword [esi], eax
mov edx, esi
cmp dword [edi], eax
jne 0x10034086
mov dword [edi], edx
jmp 0x1002f98d
mov ecx, dword [esp + 0x14]
mov ebx, dword [ecx + 0x38]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], 0
test ebx, ebx
je 0x1003038e
lea ecx, [esp + 0x88]
xor esi, esi
mov dword [esp + 0x2c], edi
mov dword [esp + 8], esi
mov esi, ecx
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x1002fb6d
mov edx, dword [ecx + 8]
test dl, 1
je 0x1002fb6d
mov edi, dword [ecx + 4]
test edi, edi
je 0x1002fb65
test byte [edi + 8], 1
jne 0x1002fb8c
mov ecx, ebx
mov edi, dword [esp + 0x2c]
jmp 0x1002fb6f
mov ecx, ebx
cmp ecx, dword [esp + 0x10]
seta dl
jbe 0x1002fb84
mov ebx, dword [ecx + 4]
test ebx, ebx
jne 0x1002fb43
jmp 0x1003096f
mov ebx, dword [ecx + 8]
and ebx, 0xfffffffe
jmp 0x1002fb7b
and edx, 0xfffffffe
mov dword [ebx + 4], edx
mov edx, ebx
and edx, 0xfffffffe
mov dword [esp + 0x38], edx
mov edx, dword [ecx + 4]
mov edi, dword [ecx + 8]
and edi, 1
add edi, dword [esp + 0x38]
mov dword [ecx + 8], edi
test edx, edx
je 0x10033e18
and byte [edx + 8], 0xfe
mov edx, esi
cmp dword [esi + 4], ebx
mov edi, dword [esp + 0x2c]
jne 0x100308f8
mov dword [edx + 4], ecx
mov esi, edx
jmp 0x1002fb6f
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp ebx, ecx
jne 0x1002f025
and eax, 1
or eax, dword [esp + 8]
mov dword [esi + 4], eax
jmp 0x1002f025
mov dword [edi], 0
mov dword [edi + 4], 1
lea ecx, [esp + 0x88]
jmp 0x1003007c
mov edx, dword [eax]
test edx, edx
je 0x1002fc36
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
and dword [edx + 4], 1
cmp dword [edi], eax
jne 0x100307a8
mov dword [edi], edx
mov edx, dword [esp + 0x88]
mov edi, dword [esp + 0x2c]
mov ebx, 0xfffff000
mov esi, dword [esp + 8]
and esi, ebx
add esi, edi
mov eax, dword [esp + 0x14]
mov dword [eax + 0x58], edx
xor eax, eax
mov edx, dword [esp + 0x18]
mov dword [edx], eax
mov dword [edx + 4], eax
mov eax, 0xfff
mov ecx, dword [edx + 8]
and ecx, eax
or ecx, esi
mov dword [edx + 8], ecx
mov ecx, esi
shr ecx, 0xc
add ecx, dword [esp + 4]
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x10]
and eax, dword [edx + ecx*4 + 0xc]
or eax, esi
mov dword [edx + ecx*4 + 0xc], eax
jmp 0x1002ee73
xor edx, edx
inc edx
cmp ecx, 0xffffffff
jne 0x1002eff3
jmp 0x10030780
mov eax, dword [esp + 8]
mov dword [eax], 0
mov dword [eax + 4], 1
lea ebx, [esp + 0x88]
jmp 0x1002f023
mov esi, dword [0x100a4744]
mov edx, dword [esp + 0x18]
cmp edx, 0xf01
jb 0x10030287
mov ecx, esi
cmp edx, 0xfd000
ja 0x10030ed0
push 0
call fcn.10035340
add esp, 4
jmp 0x1002e526
mov ecx, dword [eax + 4]
mov dword [esp + 0x24], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x1002fd1b
mov esi, dword [edx]
test esi, esi
je 0x1002fd1b
test byte [esi + 4], 1
jne 0x10034990
mov edx, dword [eax]
test edx, edx
je 0x100341b5
test byte [edx + 4], 1
jne 0x10030ef4
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1002fd47
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1003237e
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003427f
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1002e9ca
and ecx, 0xfffffffe
mov esi, eax
mov eax, dword [eax + 4]
and eax, 1
lea edx, [eax + ecx]
mov dword [esp + 8], esi
mov dword [esi + 4], edx
test ecx, ecx
mov esi, 0
je 0x10033cd3
mov edx, dword [ecx]
and edx, 0xfffffffe
or edx, eax
mov eax, dword [esp + 8]
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, dword [eax + 4]
and edx, 1
mov dword [esp + 4], edx
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
add edx, dword [esp + 4]
mov dword [ecx + 4], edx
or byte [eax + 4], 1
mov edx, dword [esp + 0x10]
test edx, edx
je 0x10033cc4
cmp dword [edx], eax
jne 0x1003031d
mov dword [edx], ecx
cmp edi, ecx
setb dl
jb 0x10030779
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [esp + 8], ecx
test eax, eax
jne 0x1002e83d
mov eax, dword [esp + 0x10]
mov dword [esp + 8], eax
mov dword [edi], 0
mov dword [edi + 4], 1
test dl, dl
jne 0x1002fe50
cmp ecx, edi
mov edx, dword [esp + 0x18]
jae 0x1002fe54
mov eax, dword [ecx + 4]
and eax, 1
mov edx, eax
or edx, edi
mov dword [ecx + 4], edx
mov edx, dword [edi]
and edx, 0xfffffffe
or edx, eax
mov dword [ecx + 4], edx
mov dword [edi], ecx
mov eax, dword [ecx + 4]
and eax, 1
mov edx, dword [edi + 4]
and edx, 0xfffffffe
or edx, eax
mov dword [edi + 4], edx
or byte [ecx + 4], 1
mov eax, dword [esp + 8]
cmp dword [eax], ecx
jne 0x1002feee
mov dword [eax], edi
mov edx, dword [esp + 0x18]
jmp 0x1002fe56
mov edx, dword [esp + 0x18]
mov dword [ecx], edi
mov eax, dword [esp + 0x88]
test eax, eax
je 0x10033d84
and byte [eax + 4], 0xfe
mov dword [edx + 4], eax
mov dword [edx], ebx
jmp 0x1002e4fe
mov dword [eax], ebx
jmp 0x1002efc3
mov ecx, dword [eax + 4]
mov dword [esp + 0xc], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x1002fe9c
mov edi, dword [edx]
test edi, edi
je 0x1002fe9c
test byte [edi + 4], 1
jne 0x10034f09
mov edx, dword [eax]
test edx, edx
je 0x100341ca
test byte [edx + 4], 1
jne 0x10030f76
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1002fec8
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10032445
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003428e
mov edi, dword [edx]
and edi, 0xfffffffe
and ecx, 1
or ecx, edi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1002ea9a
mov dword [esp + 8], eax
mov eax, dword [eax + 4]
mov edx, eax
and edx, 0xfffffffe
cmp ecx, edx
mov edx, dword [esp + 0x18]
jne 0x1002fe56
and eax, 1
or eax, edi
mov ecx, dword [esp + 8]
mov dword [ecx + 4], eax
jmp 0x1002fe56
mov ecx, eax
mov eax, dword [eax + 4]
and eax, 1
or eax, ebx
mov dword [ecx + 4], eax
jmp 0x1002efc3
test edx, edx
je 0x10030815
mov ecx, dword [eax + 4]
mov dword [esp + 0x24], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x1002ff53
mov esi, dword [edx]
test esi, esi
je 0x1002ff53
test byte [esi + 4], 1
jne 0x1002f5bc
mov edx, dword [eax]
test edx, edx
je 0x10033b0c
test byte [edx + 4], 1
jne 0x100320ad
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1002ff7f
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100325a1
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10034249
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1003017a
and ecx, 0xfffffffe
mov eax, dword [ebx + 4]
and eax, 1
lea edx, [eax + ecx]
mov dword [ebx + 4], edx
test ecx, ecx
mov esi, 0
je 0x10033d00
mov edx, dword [ecx]
and edx, 0xfffffffe
or edx, eax
mov dword [ebx + 4], edx
mov dword [ecx], ebx
mov eax, dword [ebx + 4]
and eax, 1
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
or edx, eax
mov dword [ecx + 4], edx
or byte [ebx + 4], 1
mov eax, dword [esp + 0x10]
test eax, eax
je 0x10033cf1
cmp dword [eax], ebx
mov edx, dword [esp + 0x18]
jne 0x10030761
mov dword [eax], ecx
cmp edi, ecx
setb bl
jb 0x1003078a
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [esp + 8], ecx
test eax, eax
jne 0x1002ec9e
mov eax, dword [esp + 0x10]
mov dword [esp + 8], eax
mov dword [edi], 0
mov dword [edi + 4], 1
test bl, bl
jne 0x1003007c
cmp ecx, edi
mov ebx, dword [esp + 0x3c]
jae 0x10030080
mov eax, dword [ecx + 4]
and eax, 1
mov edx, eax
or edx, edi
mov dword [ecx + 4], edx
mov edx, dword [edi]
and edx, 0xfffffffe
or edx, eax
mov dword [ecx + 4], edx
mov dword [edi], ecx
mov eax, dword [ecx + 4]
and eax, 1
mov edx, dword [edi + 4]
and edx, 0xfffffffe
or edx, eax
mov dword [edi + 4], edx
or byte [ecx + 4], 1
mov eax, dword [esp + 8]
cmp dword [eax], ecx
jne 0x10030105
mov dword [eax], edi
mov edx, dword [esp + 0x18]
jmp 0x10030082
mov ebx, dword [esp + 0x3c]
mov dword [ecx], edi
mov eax, dword [esp + 0x88]
test eax, eax
je 0x10033dc7
and byte [eax + 4], 0xfe
mov dword [edx + 4], eax
jmp 0x1002e502
mov esi, dword [ecx]
test esi, esi
je 0x100300ad
test byte [esi + 4], 1
jne 0x1002f342
or eax, 1
mov dword [ecx + 4], eax
mov ecx, dword [edx + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10033b21
mov dword [esp + 8], ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x100300dd
mov esi, dword [ecx + 4]
mov dword [esp + 0x20], esi
test byte [esp + 0x20], 1
jne 0x10032c52
mov ecx, dword [esp + 8]
or ecx, 1
mov dword [edx + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
and byte [ecx + 4], 0xfe
lea edx, [esp + 0x88]
mov dword [edx], ecx
jmp 0x1002f342
mov dword [esp + 8], eax
mov eax, dword [eax + 4]
mov edx, eax
and edx, 0xfffffffe
cmp ecx, edx
mov edx, dword [esp + 0x18]
jne 0x10030082
and eax, 1
or eax, edi
mov ecx, dword [esp + 8]
mov dword [ecx + 4], eax
jmp 0x10030082
mov esi, dword [edx]
test esi, esi
je 0x1003013e
test byte [esi + 4], 1
jne 0x1002f5bc
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10033992
mov edx, dword [ecx]
test edx, edx
je 0x10030164
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10032700
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x88]
mov dword [eax], edx
jmp 0x1002f5bc
test dl, 0x10
mov eax, 0
cmove eax, dword [esp + 8]
xor edx, edx
cmp eax, ebx
seta cl
jb 0x10030780
mov dl, cl
jmp 0x1002eff3
mov dword [edx], 0
jmp 0x1002f830
test ecx, ecx
je 0x10030aa3
mov ecx, dword [eax + 4]
mov dword [esp + 0xc], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x100301de
mov esi, dword [edx]
test esi, esi
je 0x100301de
test byte [esi + 4], 1
jne 0x1002f98b
mov edx, dword [eax]
test edx, edx
je 0x10033b63
test byte [edx + 4], 1
jne 0x10032431
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1003020a
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100328f2
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003429d
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x10030279
mov esi, dword [edx]
test esi, esi
je 0x1003023d
test byte [esi + 4], 1
jne 0x1002f98b
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x100339e6
mov edx, dword [ecx]
test edx, edx
je 0x10030263
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10032b73
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x88]
mov dword [eax], edx
jmp 0x1002f98b
add edx, 0xff
mov eax, edx
and eax, 0x1f00
mov dword [esp + 0x3c], eax
shr edx, 8
add edx, 0x1e
jmp 0x1002e5bb
movzx eax, byte [edi + ecx + 0x7a]
mov dword [esp + 0x40], eax
lea eax, [edi + 0x58]
mov dword [esp + 0x4c], eax
mov ecx, dword [edi + 0x58]
test ecx, ecx
je 0x10032174
mov edx, dword [esp + 0x40]
shl edx, 0xc
xor eax, eax
mov edi, ebx
mov esi, dword [ecx + 8]
mov ebx, 0xfffff000
and esi, ebx
xor ebx, ebx
cmp edx, esi
seta bl
mov esi, 0xffffffff
cmovb ebx, esi
lea esi, [ebx + 1]
cmp esi, 2
jae 0x100302f9
mov eax, ecx
mov ecx, dword [ecx]
mov ebx, edi
test ecx, ecx
jne 0x100302c7
jmp 0x100303ac
cmp ebx, 1
jne 0x10034110
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
jmp 0x100302ee
and ecx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
or eax, ecx
mov dword [edi + 4], eax
jmp 0x1002f79d
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1002fdd0
movzx eax, byte [esi + ecx + 0x7a]
mov dword [esp + 0x38], eax
lea eax, [esi + 0x58]
mov dword [esp + 0x40], eax
mov ecx, dword [esi + 0x58]
test ecx, ecx
je 0x100322e5
mov edx, dword [esp + 0x38]
shl edx, 0xc
xor eax, eax
xor edi, edi
dec edi
mov esi, dword [ecx + 8]
mov ebx, 0xfffff000
and esi, ebx
xor ebx, ebx
cmp edx, esi
seta bl
cmovb ebx, edi
lea esi, [ebx + 1]
cmp esi, 2
jae 0x1003037d
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x10030354
jmp 0x100305ce
cmp ebx, 1
jne 0x1003418c
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
jmp 0x10030374
mov ebx, dword [esp + 0x10]
mov dword [ebx + 4], 0
mov dword [ebx + 8], 1
lea ecx, [esp + 0x88]
jmp 0x100309d0
test eax, eax
mov edi, dword [esp + 4]
je 0x10032174
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
and edx, 0xfffffff8
shl edx, 9
add edx, ecx
mov ecx, edx
and ecx, 0xfff00000
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x60], eax
mov eax, edx
shr eax, 0xc
movzx esi, al
lea eax, [esi*4]
lea eax, [eax + eax*2]
or eax, ecx
mov dword [esp + 0x28], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x58], eax
mov edi, dword [esp + 0x40]
test edi, edi
mov dword [esp + 0x30], ecx
mov dword [esp + 0x54], esi
mov dword [esp + 0x20], edx
je 0x10030f8a
xor eax, eax
inc eax
cmp edi, 2
cmovae eax, edi
mov dword [esp + 0x44], eax
lea eax, [esi + esi*2]
lea eax, [ecx + eax*4]
add eax, 0x18
mov dword [esp + 0x48], 0
xor esi, esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x54]
lea edi, [esi + eax]
lea eax, [edi + edi*2]
test byte [ecx + eax*4 + 0x18], 0x60
jne 0x10030479
inc esi
cmp esi, dword [esp + 0x40]
setae al
mov dword [esp + 0x48], eax
mov edi, dword [esp + 0x24]
dec edi
mov eax, dword [esp + 0x1c]
add eax, 0xc
cmp esi, dword [esp + 0x44]
jne 0x1003043d
jmp 0x10030f90
mov dword [esp + 0x5c], edi
mov dword [esp + 0x6c], esi
cmp esi, dword [esp + 0x40]
jae 0x100327fc
xor edx, edx
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x24]
mov ecx, dword [eax]
test cl, 0x60
je 0x100304ab
and ecx, 0xffffff9f
mov dword [eax], ecx
inc edx
add eax, 0xc
cmp esi, edx
jne 0x10030495
mov edx, esi
mov dword [esp + 0x50], edx
mov edi, edx
shl edi, 0xc
jne 0x100321c9
jmp 0x100304f4
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esp + 0x5c], eax
push 4
push 0x1000
push ebx
push esi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x10033abe
add esi, ebx
sub edi, ebx
mov eax, 0x100000
cmp edi, eax
mov ebx, 0x100000
cmovb ebx, edi
test edi, edi
jne 0x100304bc
mov al, 1
cmp dword [esp + 0x50], 0
je 0x1003051c
test al, al
mov ecx, 0x20
mov edx, 4
cmovne ecx, edx
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0x50]
or dword [edx], ecx
add edx, 0xc
dec esi
jne 0x10030514
test al, al
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x30]
je 0x100315a0
mov eax, dword [esp + 4]
mov esi, dword [esp + 0x50]
add dword [eax + 0x2c], esi
mov esi, dword [esp + 0x6c]
jmp 0x10030456
or edx, 1
mov dword [ecx + 4], edx
mov ecx, dword [ecx]
test ecx, ecx
je 0x1003055c
mov edx, dword [ecx + 4]
test dl, 1
jne 0x10030b68
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10033f51
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1002f6dc
xor ecx, ecx
test byte [esp + 0x24], 0x10
cmove ecx, dword [esp + 0x38]
xor edx, edx
cmp ecx, eax
seta cl
jb 0x1002f59e
mov dl, cl
jmp 0x1002f595
test eax, eax
jne 0x10030cd9
xor ecx, ecx
test edx, edx
je 0x100305c2
mov eax, dword [edx + 4]
cmp eax, 1
ja 0x10033351
mov eax, dword [edx]
test eax, eax
jne 0x100332dc
mov dword [esp + 0x88], ecx
jmp 0x1002f81b
test eax, eax
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
je 0x100322e5
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
and edx, 0xfffffff8
shl edx, 9
add edx, ecx
mov ecx, edx
mov edx, ecx
and edx, 0xfff00000
mov eax, dword [edx + 0xc]
mov dword [esp + 0x54], eax
mov eax, ecx
shr eax, 0xc
movzx ebx, al
lea eax, [ebx*4]
lea eax, [eax + eax*2]
or eax, edx
mov dword [esp + 0x20], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x30], eax
mov esi, dword [esp + 0x38]
test esi, esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x2c], ebx
je 0x100317bd
xor eax, eax
inc eax
cmp esi, 2
cmovae eax, esi
mov dword [esp + 0x28], eax
lea eax, [ebx + ebx*2]
lea eax, [edx + eax*4]
add eax, 0x18
xor edx, edx
mov dword [esp + 0x24], esi
xor esi, esi
mov dword [esp + 0x34], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
lea edx, [esi + eax]
lea eax, [edx + edx*2]
mov ebx, dword [esp + 0xc]
test byte [ebx + eax*4 + 0x18], 0x60
jne 0x1003069e
inc esi
cmp esi, dword [esp + 0x38]
setae dl
dec dword [esp + 0x24]
mov eax, dword [esp + 4]
add eax, 0xc
cmp esi, dword [esp + 0x28]
jne 0x10030663
jmp 0x100317bf
mov dword [esp + 0x48], edx
mov dword [esp + 0x44], esi
cmp esi, dword [esp + 0x38]
jae 0x10032947
xor esi, esi
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x24]
mov ecx, dword [eax]
test cl, 0x60
je 0x100306d0
and ecx, 0xffffff9f
mov dword [eax], ecx
inc esi
add eax, 0xc
cmp edx, esi
jne 0x100306ba
mov esi, edx
mov ebx, esi
shl ebx, 0xc
jne 0x1003233e
jmp 0x1003071a
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esp + 0x4c], eax
push 4
push 0x1000
push edi
push dword [esp + 0x54]
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x10033ae3
add dword [esp + 0x48], edi
sub ebx, edi
mov eax, 0x100000
cmp ebx, eax
mov edi, 0x100000
cmovb edi, ebx
test ebx, ebx
jne 0x100306dd
mov al, 1
test esi, esi
je 0x1003073d
test al, al
mov ecx, 0x20
mov edx, 4
cmovne ecx, edx
mov edx, dword [esp + 4]
mov edi, esi
or dword [edx], ecx
add edx, 0xc
dec edi
jne 0x10030735
test al, al
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0x1c]
je 0x10031df2
mov eax, dword [esp + 0x10]
add dword [eax + 0x2c], esi
mov esi, dword [esp + 0x44]
jmp 0x10030680
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
and eax, 1
or eax, ecx
mov ebx, dword [esp + 0x10]
mov dword [ebx + 4], eax
jmp 0x1002fffc
mov eax, dword [ecx]
jmp 0x1002fde1
mov ecx, dword [ebx]
xor edx, edx
dec edx
jmp 0x1002eff9
mov eax, dword [ecx]
jmp 0x1003000d
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov eax, edi
jmp 0x1002f5bc
and edx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
or eax, edx
mov dword [edi + 4], eax
jmp 0x1002fc40
or edx, 1
mov dword [ebx + 4], edx
mov edx, dword [ebx]
test edx, edx
je 0x100307d3
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10030ddb
mov esi, dword [eax + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x10033fe4
mov ecx, dword [edx]
and ecx, 0xfffffffe
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
jmp 0x1002faa8
xor esi, esi
test byte [esp + 0xc], 0x10
cmove esi, dword [esp + 0x18]
xor ecx, ecx
cmp esi, eax
seta dl
jb 0x1002f96d
mov cl, dl
jmp 0x1002f964
mov ecx, dword [eax + 4]
cmp ecx, 1
mov edi, dword [esp + 0x2c]
mov ebx, dword [esp + 0xc]
ja 0x10032cdb
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
je 0x1002f7a8
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x1002f7a8
mov eax, dword [esp + 0x20]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, dword [edi + 4]
and eax, 1
or eax, esi
mov dword [edi + 4], eax
and edi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + edi]
mov dword [edx + 4], esi
test edi, edi
je 0x10033d69
mov esi, dword [edi]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [edi], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x10030a94
mov ecx, dword [eax + 4]
test cl, 1
je 0x10030a94
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x10033d5a
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [edi], eax
jmp 0x1002f3af
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov eax, edi
jmp 0x1002f98b
and ecx, 0xfffffffe
mov esi, dword [edx + 8]
and esi, 1
lea edi, [esi + ecx]
mov dword [edx + 8], edi
test ecx, ecx
je 0x10033dfa
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
or edi, esi
mov dword [edx + 8], edi
mov dword [ecx + 4], edx
mov esi, dword [edx + 8]
and esi, 1
mov edi, dword [ecx + 8]
and edi, 0xfffffffe
or edi, esi
mov dword [ecx + 8], edi
or byte [edx + 8], 1
mov esi, dword [esp + 8]
test esi, esi
je 0x10033e09
cmp dword [esi + 4], edx
mov edi, dword [esp + 0x2c]
jne 0x10030ee4
mov dword [esi + 4], ecx
cmp ecx, dword [esp + 0x10]
seta dl
ja 0x100320c1
mov ebx, dword [ecx + 8]
and ebx, 0xfffffffe
mov esi, ecx
test ebx, ebx
jne 0x1002fb49
mov esi, dword [esp + 8]
mov ebx, dword [esp + 0x10]
test ebx, ebx
je 0x10034035
cmp ecx, ebx
setae dh
mov dword [ebx + 4], 0
mov dword [ebx + 8], 1
or dl, dh
jne 0x100309d0
mov edx, dword [ecx + 8]
and edx, 1
mov edi, edx
or edi, ebx
mov dword [ecx + 8], edi
mov edi, dword [ebx + 4]
and edi, 0xfffffffe
or edi, edx
mov dword [ecx + 8], edi
mov dword [ebx + 4], ecx
mov edx, dword [ecx + 8]
and edx, 1
mov edi, dword [ebx + 8]
and edi, 0xfffffffe
or edi, edx
mov dword [ebx + 8], edi
or byte [ecx + 8], 1
cmp dword [esi + 4], ecx
jne 0x100309f9
mov dword [esi + 4], ebx
mov edi, dword [esp + 0x2c]
jmp 0x100309d3
mov dword [ecx + 4], ebx
mov ecx, dword [esp + 0x8c]
test ecx, ecx
je 0x10033f84
and byte [ecx + 8], 0xfe
mov edx, dword [esp + 0x14]
mov dword [edx + 0x38], ecx
mov esi, dword [esp + 0x10]
mov ecx, dword [esi + 0xc]
jmp 0x1002ee0a
mov edx, dword [esi + 8]
mov edi, edx
and edi, 0xfffffffe
cmp ecx, edi
mov edi, dword [esp + 0x2c]
jne 0x100309d3
and edx, 1
or edx, dword [esp + 0x10]
mov dword [esi + 8], edx
jmp 0x100309d3
mov ebx, dword [esp + 0xc]
jmp 0x1002ee57
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1003422b
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10030cd1
mov ebx, dword [ecx + 4]
test bl, 1
je 0x10030cd1
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x100342e2
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x1002e9c6
mov dword [edx + 4], eax
jmp 0x1002f3af
xor ecx, ecx
jmp 0x1002e25d
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x10032e22
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
mov ebx, 0xfffff000
je 0x1002fc50
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x1002fc50
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov edi, dword [edx + 4]
and edi, 1
or edi, ecx
mov dword [edx + 4], edi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea edi, [ecx + edx]
mov dword [eax + 4], edi
test edx, edx
je 0x1003423a
mov edi, dword [edx]
and edi, 0xfffffffe
or edi, ecx
mov dword [eax + 4], edi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10030d65
mov ebx, dword [ecx + 4]
test bl, 1
je 0x10030d65
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov edi, ecx
or edi, 1
mov dword [eax + 4], edi
and ecx, 0xfffffffe
je 0x10034315
mov edi, dword [ecx]
or edi, 1
mov dword [eax + 4], edi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x1002ea96
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x10033f60
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10033f75
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
jmp 0x1002f6dc
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x10033d4b
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10030c04
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10032961
mov dword [eax + 4], ecx
jmp 0x1002f736
mov dword [esp + 4], edi
or ecx, 1
mov dword [eax + 4], ecx
mov eax, dword [eax]
test eax, eax
je 0x10030c28
mov ecx, dword [eax + 4]
test cl, 1
jne 0x10032290
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x10033e82
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
mov edi, dword [esp + 4]
jmp 0x1002f4d0
mov edx, dword [esp + 0x24]
test edx, edx
je 0x10034258
mov ecx, dword [esp + 0x38]
cmp dword [edx], ecx
jne 0x1003265d
mov dword [edx], eax
mov esi, dword [esp + 0x38]
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
cmp dword [edi], eax
jne 0x10034267
mov dword [edi], 0
jmp 0x1002f79d
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
or byte [edx + 4], 1
and dword [esi + 4], 1
mov ecx, esi
jmp 0x1002f80b
mov dword [eax + 4], ecx
jmp 0x1002e9c6
test edx, edx
je 0x10034270
mov eax, dword [edx + 4]
mov dword [esp + 0x10], 0
mov ecx, eax
and ecx, 0xfffffffe
je 0x10030d03
mov esi, dword [ecx]
test esi, esi
je 0x10030d03
test byte [esi + 4], 1
jne 0x1002f342
mov dword [esp + 4], edi
mov ecx, dword [edx]
test ecx, ecx
je 0x100343c0
test byte [ecx + 4], 1
jne 0x10032f78
or eax, 1
mov dword [edx + 4], eax
mov edi, dword [ecx]
test edi, edi
je 0x10030d32
mov eax, dword [edi + 4]
test al, 1
jne 0x10033249
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1003446d
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
lea edx, [esp + 0x88]
mov dword [edx], ecx
mov edi, dword [esp + 4]
jmp 0x1002f342
mov dword [eax + 4], ecx
jmp 0x1002ea96
and esi, 1
mov dword [esp + 0x28], ebx
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, esi
mov dword [edx + 4], ebx
mov edx, dword [esp + 0x28]
and byte [edx + 4], 0xfe
mov esi, dword [ecx + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x10033f33
mov ebx, dword [edx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [ecx + 4], esi
mov dword [edx], ecx
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
jne 0x1002f6be
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and ebx, 0xfffffffe
mov dword [edx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x10033ff3
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
je 0x10034008
mov ecx, dword [esi]
and ecx, 0xfffffffe
and ebx, 1
or ebx, ecx
mov dword [eax + 4], ebx
mov dword [esi], eax
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, esi
mov dword [edx + 4], ecx
jmp 0x1002faa8
and ecx, 0xfffffffe
mov dword [esi], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, esi
mov dword [edx + 4], ecx
and edx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
lea ecx, [esi + edx]
mov dword [eax + 4], ecx
test edx, edx
je 0x10033da2
mov ecx, dword [edx]
and ecx, 0xfffffffe
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
mov esi, dword [eax + 4]
and esi, 0xfffffffe
je 0x10030e77
mov ecx, dword [esi + 4]
test cl, 1
jne 0x10032d51
mov dword [eax + 4], esi
jmp 0x1002fb06
mov esi, dword [esp + 0xc]
test esi, esi
je 0x100342ac
mov ecx, dword [esp + 0x18]
cmp dword [esi], ecx
jne 0x10032a52
mov dword [esi], eax
mov esi, dword [esp + 0x18]
mov ecx, dword [esi]
mov dword [eax], ecx
mov edx, dword [esi + 4]
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
or ecx, edx
mov dword [eax + 4], ecx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, edx
mov dword [eax + 4], ecx
cmp dword [edi], eax
jne 0x100342bb
mov dword [edi], 0
jmp 0x1002fc40
push 0
push 0x100000
call fcn.100023d0
add esp, 8
jmp 0x1002e526
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [esi + 8], edx
jmp 0x1003094e
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, eax
call fcn.10001010
mov edx, dword [esi]
jmp 0x1002e9ca
and esi, 1
mov dword [esp + 0x20], ecx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
or ecx, esi
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
and byte [ecx + 4], 0xfe
mov esi, dword [ebx + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x10033fc6
mov ecx, dword [edx]
and ecx, 0xfffffffe
and esi, 1
or esi, ecx
mov dword [ebx + 4], esi
mov dword [edx], ebx
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
jne 0x1002fa8a
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
lea edi, [esp + 0x70]
mov ecx, edi
mov edx, eax
call fcn.10001010
mov edx, dword [edi]
jmp 0x1002ea9a
mov al, 1
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x28]
lea eax, [ecx + 0x10]
mov dword [esp + 0x24], eax
add ecx, 0x18
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
mov dword [esp + 0x28], ecx
mov edx, dword [ecx]
mov esi, 0xfffff000
mov ebx, edx
and ebx, esi
and esi, dword [eax + 8]
xor edi, edi
dec edi
xor ecx, ecx
cmp ebx, esi
seta cl
cmovb ecx, edi
test ecx, ecx
je 0x10031fc9
cmp ecx, 0xffffffff
mov edi, dword [esp + 4]
jne 0x1003163f
mov edx, dword [eax]
test edx, edx
je 0x10034197
mov ecx, dword [edx + 4]
mov dword [esp + 0x44], 0
test cl, 1
je 0x100316b8
mov dword [esp + 0x1c], eax
mov eax, edx
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx]
mov ebx, edx
mov ecx, 0xfffff000
and ebx, ecx
mov esi, dword [eax + 8]
and esi, ecx
xor ecx, ecx
cmp ebx, esi
seta cl
mov esi, 0xffffffff
cmovb ecx, esi
test ecx, ecx
je 0x10031061
cmp ecx, 0xffffffff
jne 0x1003107b
mov edx, dword [eax]
test edx, edx
je 0x10032a67
mov ecx, dword [edx + 4]
test cl, 1
jne 0x10031008
mov esi, dword [edx]
test esi, esi
je 0x10031154
test byte [esi + 4], 1
jne 0x10031008
jmp 0x10031154
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 0x24]
xor ecx, ecx
cmp edx, eax
seta dl
jb 0x1003103a
mov cl, dl
jmp 0x10031035
test ecx, ecx
je 0x1003113f
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003109d
mov esi, dword [edx]
test esi, esi
je 0x1003109d
test byte [esi + 4], 1
jne 0x10031008
mov edi, dword [eax]
test edi, edi
je 0x100340ce
mov edx, dword [edi + 4]
test dl, 1
je 0x10031783
and edx, 0xfffffffe
je 0x10033a7f
mov esi, dword [edx]
test esi, esi
je 0x100310cc
test byte [esi + 4], 1
jne 0x10032bec
and ecx, 1
or ecx, edx
mov dword [edi + 4], ecx
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x1003409b
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
je 0x100340b0
mov esi, dword [ecx]
and esi, 0xfffffffe
and edi, 1
or edi, esi
mov dword [eax + 4], edi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], eax
mov eax, ecx
mov edi, dword [esp + 4]
jne 0x10032277
mov dword [eax], edx
jmp 0x10031008
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x44], edx
cmp ecx, 1
jbe 0x100311a1
jmp 0x10031086
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x100339bf
mov edx, dword [ecx]
test edx, edx
je 0x1003117a
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1003289f
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], eax
mov eax, ecx
jne 0x100341ee
mov dword [eax], edx
jmp 0x1003100c
mov ecx, dword [eax]
test ecx, ecx
je 0x100311d2
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, dword [esp + 0x1c]
cmp dword [edx], eax
mov eax, edx
jne 0x1003175b
mov dword [eax], ecx
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x58]
shr ecx, 0xc
mov ebx, dword [esp + 0x4c]
mov dword [ebx], edx
xor eax, eax
mov edx, dword [esp + 0x24]
mov dword [edx], eax
mov dword [edx + 4], eax
mov edx, dword [esp + 0x40]
cmp ecx, edx
jne 0x10031394
test dl, dl
je 0x10031254
mov eax, dword [esp + 0x20]
or eax, 1
xor ecx, ecx
inc ecx
cmp edx, 2
cmovae ecx, edx
shl ecx, 2
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x54]
lea edx, [edx + edx*2]
mov esi, dword [esp + 0x30]
lea edx, [esi + edx*4]
add edx, 0x18
xor esi, esi
mov ebx, dword [esp + 0x30]
test byte [edx + esi], 8
je 0x1003124a
dec dword [ebx + 0xc]
dec dword [edi + 0x48]
mov dword [edx + esi], eax
add esi, 0xc
cmp ecx, esi
jne 0x1003123e
mov ecx, dword [esp + 0x30]
cmp dword [ecx + 0xc], 0
jne 0x10031598
cmp dword [esp + 0x60], 0
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x20]
je 0x100315a0
mov ebx, dword [edi + 0x38]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], 0
xor edx, edx
dec edx
xor eax, eax
cmp ebx, ecx
setb al
cmova eax, edx
cmp eax, 0xffffffff
je 0x100326b6
test eax, eax
je 0x10032f8a
test ebx, ebx
je 0x10033b78
mov ecx, dword [ebx + 8]
xor esi, esi
mov eax, ecx
and eax, 0xfffffffe
je 0x10032ecc
mov edx, dword [eax + 4]
test edx, edx
je 0x10032ecc
test byte [edx + 8], 1
je 0x10032ecc
mov edi, ebx
mov ecx, dword [esp + 0x30]
mov ebx, eax
xor eax, eax
cmp ebx, ecx
setb al
mov edx, 0xffffffff
cmova eax, edx
cmp eax, 0xffffffff
jne 0x10031324
test ebx, ebx
je 0x10033400
mov eax, dword [ebx + 4]
test eax, eax
je 0x10033400
test byte [eax + 8], 1
je 0x1003130e
mov edi, ebx
jmp 0x100312db
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1003304c
test byte [ecx + 8], 1
jne 0x100312d5
jmp 0x1003304c
test eax, eax
jne 0x10031342
xor ecx, ecx
test ebx, ebx
je 0x1003211e
mov eax, dword [ebx + 8]
mov esi, edi
cmp eax, 1
jbe 0x100320e9
jmp 0x10031349
test ebx, ebx
je 0x1003135f
mov eax, dword [ebx + 8]
and eax, 0xfffffffe
je 0x1003135f
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1003135f
test byte [ecx + 8], 1
jne 0x100312d5
lea ecx, [esp + 0x80]
mov edx, ebx
call fcn.1003cd70
mov eax, dword [esp + 0x80]
cmp dword [edi + 4], ebx
je 0x1003330e
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [edi + 8], edx
mov ebx, edi
jmp 0x100312d5
mov eax, dword [esp + 0x54]
lea esi, [eax + ecx]
mov dword [esp + 0x1c], esi
sub ecx, edx
shl ecx, 0xc
add eax, edx
lea ebx, [eax + eax*2]
mov edi, dword [esp + 0x30]
lea eax, [edi + ebx*4]
add eax, 0x10
mov edx, 0xfff
mov esi, dword [eax + 8]
and esi, edx
or esi, ecx
mov dword [esp + 0x24], eax
mov dword [eax + 8], esi
mov eax, dword [esp + 0x1c]
lea esi, [eax + eax*2]
and edx, dword [edi + esi*4 + 0xc]
or edx, ecx
mov dword [edi + esi*4 + 0xc], edx
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], 0
test ecx, ecx
je 0x100327aa
lea eax, [edi + ebx*4]
add eax, 0x18
mov dword [esp + 0x1c], eax
lea edi, [esp + 0x88]
xor edx, edx
mov ebx, edx
mov edx, edi
mov edi, dword [ecx]
test edi, edi
je 0x10031427
mov eax, dword [edi + 4]
test al, 1
je 0x10031427
mov esi, dword [edi]
test esi, esi
je 0x10031427
test byte [esi + 4], 1
jne 0x1003147c
mov edi, ecx
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov eax, ecx
mov ebx, 0xfffff000
and eax, ebx
mov esi, dword [edi + 8]
and esi, ebx
xor ebx, ebx
cmp eax, esi
seta bl
mov eax, 0xffffffff
cmovb ebx, eax
cmp ebx, 0xffffffff
je 0x1003146e
xor eax, eax
inc eax
test ebx, ebx
jne 0x100314b0
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x24]
xor eax, eax
cmp ecx, edi
seta cl
jae 0x100314ae
mov ecx, dword [edi]
xor eax, eax
dec eax
test ecx, ecx
jne 0x1003140a
jmp 0x10031552
mov dword [esp + 0x28], ebx
and eax, 0xfffffffe
mov dword [ecx], eax
mov esi, ecx
and esi, 0xfffffffe
mov eax, dword [edi]
mov ebx, dword [edi + 4]
and ebx, 1
or ebx, esi
mov dword [edi + 4], ebx
test eax, eax
je 0x10034017
and byte [eax + 4], 0xfe
cmp dword [edx], ecx
jne 0x100314b8
mov dword [edx], edi
jmp 0x10031429
mov al, cl
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
jmp 0x10031473
and edi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + edi]
mov dword [edx + 4], ecx
test edi, edi
je 0x10034026
mov ecx, dword [edi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [edi], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
or byte [edx + 4], 1
cmp dword [esp + 0x28], 0
je 0x10033b36
mov eax, dword [esp + 0x28]
cmp dword [eax], edx
je 0x100329f4
jmp 0x10032ad2
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov esi, dword [edi + 8]
and esi, ecx
xor ecx, ecx
cmp edx, esi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x10032799
jmp 0x10032d7c
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
mov edx, edi
test ecx, ecx
mov ebx, dword [esp + 0x28]
jne 0x1003140e
mov edx, ebx
mov ecx, dword [esp + 0x24]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x10031716
mov eax, dword [esp + 0x24]
mov dword [edi], eax
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x88]
test eax, eax
mov edi, dword [esp + 4]
je 0x100341df
and byte [eax + 4], 0xfe
mov dword [ecx], eax
mov edx, dword [esp + 0x40]
jmp 0x1003120d
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x20]
test byte [esp + 0x48], 1
je 0x10032163
test edx, edx
je 0x10032163
cmp dword [eax], edx
je 0x10033989
mov dword [edx], eax
mov ecx, dword [esp + 4]
mov edi, edx
mov edx, dword [esp + 0xc]
cmp dword [ecx + edx + 0x6c], 1
mov edx, 0
je 0x100315f2
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xc]
add ecx, edx
add ecx, 0x6c
xor edx, edx
mov dword [edi + edx*4 + 0xc], 0xffffffff
inc edx
mov esi, dword [ecx]
dec esi
cmp edx, esi
jb 0x100315e2
mov esi, edi
mov edi, dword [esp + 4]
mov eax, dword [esp + 0xc]
mov ebx, dword [edi + eax + 0x68]
and ebx, 0x1f
mov ecx, ebx
neg cl
xor eax, eax
dec eax
shr eax, cl
mov ecx, dword [esp + 0xc]
cmp ebx, 1
mov ebx, 0
sbb ebx, ebx
or ebx, eax
mov dword [esi + edx*4 + 0xc], ebx
mov dword [esi + 4], 0
mov eax, dword [edi + ecx + 0x68]
mov dword [esi + 8], eax
inc dword [edi + ecx + 0x74]
mov eax, dword [esp + 0x34]
mov dword [eax], esi
mov edx, esi
jmp 0x1002e353
test ecx, ecx
je 0x100323e3
mov ecx, dword [eax + 4]
mov dword [esp + 0x44], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x10031669
mov esi, dword [edx]
test esi, esi
je 0x10031669
test byte [esi + 4], 1
jne 0x10031008
mov edx, dword [eax]
test edx, edx
je 0x10033ba3
test byte [edx + 4], 1
jne 0x10032ea4
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10031695
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100330a4
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x100343d5
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x10031704
mov esi, dword [edx]
test esi, esi
je 0x100316c8
test byte [esi + 4], 1
jne 0x10031008
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10033a6a
mov edx, dword [ecx]
test edx, edx
je 0x100316ee
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10033180
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x88]
mov dword [eax], edx
mov edi, dword [esp + 4]
jmp 0x10031008
mov eax, dword [edi + 4]
and eax, 1
mov ecx, eax
mov ebx, dword [esp + 0x24]
or ecx, ebx
mov dword [edi + 4], ecx
mov ecx, dword [ebx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
mov dword [ebx], edi
mov eax, dword [edi + 4]
and eax, 1
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
or byte [edi + 4], 1
cmp dword [edx], edi
jne 0x1003257e
mov eax, dword [esp + 0x24]
mov dword [edx], eax
jmp 0x10031572
and ecx, 0xfffffffe
mov edx, eax
mov eax, dword [eax + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x100311e2
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1002f81b
or edx, 1
mov dword [edi + 4], edx
mov ecx, dword [edi]
test ecx, ecx
je 0x1003179b
mov edx, dword [ecx + 4]
test dl, 1
jne 0x10032826
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x100340dd
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x10031126
mov dl, 1
mov dword [esp + 0x34], edx
mov ecx, dword [esp + 0x20]
lea eax, [ecx + 0x10]
mov dword [esp + 0x24], eax
add ecx, 0x18
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
mov dword [esp + 0x20], ecx
mov ebx, dword [ecx]
mov esi, 0xfffff000
mov dword [esp + 4], ebx
and ebx, esi
and esi, dword [eax + 8]
xor edx, edx
dec edx
xor ecx, ecx
cmp ebx, esi
seta cl
cmovb ecx, edx
test ecx, ecx
je 0x100320c9
cmp ecx, 0xffffffff
jne 0x10031e8c
mov edx, dword [eax]
test edx, edx
je 0x100341a6
mov ecx, dword [edx + 4]
mov dword [esp + 0x28], 0
test cl, 1
je 0x10031f05
mov dword [esp + 4], eax
mov eax, edx
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
mov ebx, edx
mov ecx, 0xfffff000
and ebx, ecx
mov esi, dword [eax + 8]
and esi, ecx
xor ecx, ecx
cmp ebx, esi
seta cl
mov esi, 0xffffffff
cmovb ecx, esi
test ecx, ecx
mov ebx, dword [esp + 8]
je 0x10031896
cmp ecx, 0xffffffff
jne 0x100318b0
mov edx, dword [eax]
test edx, edx
je 0x10032b04
mov ecx, dword [edx + 4]
test cl, 1
jne 0x10031839
mov esi, dword [edx]
test esi, esi
je 0x10031989
test byte [esi + 4], 1
jne 0x10031839
jmp 0x10031989
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 0x24]
xor ecx, ecx
cmp edx, eax
seta dl
jb 0x1003186f
mov cl, dl
jmp 0x1003186a
test ecx, ecx
je 0x10031974
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x100318d2
mov esi, dword [edx]
test esi, esi
je 0x100318d2
test byte [esi + 4], 1
jne 0x10031839
mov esi, dword [eax]
test esi, esi
je 0x1003414a
mov edx, dword [esi + 4]
test dl, 1
je 0x10031ffb
and edx, 0xfffffffe
je 0x10033aa9
mov edi, dword [edx]
test edi, edi
je 0x10031901
test byte [edi + 4], 1
jne 0x10032ceb
and ecx, 1
or ecx, edx
mov dword [esi + 4], ecx
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x10034117
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1003412c
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
mov ecx, dword [esp + 4]
cmp dword [ecx], eax
mov eax, ecx
mov edi, dword [esp + 0x14]
jne 0x10032365
mov dword [eax], edx
jmp 0x10031839
mov ecx, dword [eax + 4]
mov edx, dword [esp + 4]
mov dword [esp + 0x28], edx
cmp ecx, 1
jbe 0x100319d6
jmp 0x100318bb
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x100339d1
mov edx, dword [ecx]
test edx, edx
je 0x100319af
mov ebx, dword [edx + 4]
test bl, 1
jne 0x100329ff
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
mov ecx, dword [esp + 4]
cmp dword [ecx], eax
mov eax, ecx
jne 0x10034214
mov dword [eax], edx
jmp 0x1003183d
mov ecx, dword [eax]
test ecx, ecx
je 0x10031a07
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, dword [esp + 4]
cmp dword [edx], eax
mov eax, edx
jne 0x10031fb4
mov dword [eax], ecx
mov edx, dword [esp + 0x88]
mov esi, dword [esp + 0x30]
shr esi, 0xc
mov ecx, dword [esp + 0x40]
mov dword [ecx], edx
xor eax, eax
mov edx, dword [esp + 0x24]
mov dword [edx], eax
mov dword [edx + 4], eax
mov edx, dword [esp + 0x38]
cmp esi, edx
jne 0x10031bcd
test dl, dl
je 0x10031a91
mov eax, dword [esp + 0x1c]
or eax, 1
xor ecx, ecx
inc ecx
cmp edx, 2
cmovae ecx, edx
shl ecx, 2
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x2c]
lea edx, [edx + edx*2]
mov esi, dword [esp + 0xc]
lea edx, [esi + edx*4]
add edx, 0x18
xor esi, esi
test byte [edx + esi], 8
je 0x10031a87
mov edi, dword [esp + 0xc]
dec dword [edi + 0xc]
mov edi, dword [esp + 0x10]
dec dword [edi + 0x48]
mov edi, dword [esp + 0x14]
mov dword [edx + esi], eax
add esi, 0xc
cmp ecx, esi
jne 0x10031a6f
mov edx, dword [esp + 0xc]
cmp dword [edx + 0xc], 0
jne 0x10031dee
cmp dword [esp + 0x54], 0
mov ecx, dword [esp + 0x1c]
je 0x10031df2
mov eax, dword [esp + 0x10]
mov edi, dword [eax + 0x38]
mov dword [esp + 0x8c], edi
mov dword [esp + 0x90], 0
xor ecx, ecx
dec ecx
xor eax, eax
cmp edi, edx
setb al
cmova eax, ecx
cmp eax, 0xffffffff
je 0x1003274f
test eax, eax
je 0x10032feb
test edi, edi
je 0x10033b87
mov ecx, dword [edi + 8]
xor ebx, ebx
mov eax, ecx
and eax, 0xfffffffe
je 0x10032f22
mov edx, dword [eax + 4]
test edx, edx
je 0x10032f22
test byte [edx + 8], 1
je 0x10032f22
mov esi, edi
mov ecx, dword [esp + 0xc]
mov edi, eax
xor eax, eax
cmp edi, ecx
setb al
mov ecx, 0xffffffff
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x10031b5d
test edi, edi
je 0x10033466
mov eax, dword [edi + 4]
test eax, eax
je 0x10033466
test byte [eax + 8], 1
jne 0x10031b12
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10033078
test byte [ecx + 8], 1
jne 0x10031b12
jmp 0x10033078
test eax, eax
jne 0x10031b7b
xor ecx, ecx
test edi, edi
je 0x10032221
mov eax, dword [edi + 8]
mov ebx, esi
cmp eax, 1
jbe 0x100321ec
jmp 0x10031b82
test edi, edi
je 0x10031b98
mov eax, dword [edi + 8]
and eax, 0xfffffffe
je 0x10031b98
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10031b98
test byte [ecx + 8], 1
jne 0x10031b12
lea ecx, [esp + 0x80]
mov edx, edi
call fcn.1003cd70
mov eax, dword [esp + 0x80]
cmp dword [esi + 4], edi
je 0x10033347
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [esi + 8], edx
mov edi, esi
jmp 0x10031b12
mov eax, esi
mov ecx, esi
mov eax, dword [esp + 0x2c]
add esi, eax
mov dword [esp + 0x20], esi
sub ecx, edx
shl ecx, 0xc
add eax, edx
lea edx, [eax + eax*2]
mov dword [esp + 0x24], edx
mov eax, dword [esp + 0xc]
lea edx, [eax + edx*4 + 0x10]
mov dword [esp + 4], edx
mov edx, 0xfff
mov esi, dword [esp + 4]
mov esi, dword [esi + 8]
and esi, edx
or esi, ecx
mov eax, dword [esp + 4]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x20]
lea esi, [esi + esi*2]
mov eax, dword [esp + 0xc]
and edx, dword [eax + esi*4 + 0xc]
or edx, ecx
mov dword [eax + esi*4 + 0xc], edx
mov ecx, dword [esp + 0x40]
mov ecx, dword [ecx]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], 0
test ecx, ecx
je 0x10032809
mov edx, dword [esp + 0x24]
lea eax, [eax + edx*4]
add eax, 0x18
mov dword [esp + 0x20], eax
lea esi, [esp + 0x88]
xor edx, edx
mov dword [esp + 0x24], edx
mov edx, esi
mov esi, dword [ecx]
test esi, esi
je 0x10031c77
mov eax, dword [esi + 4]
test al, 1
je 0x10031c77
mov edi, dword [esi]
test edi, edi
je 0x10031c77
test byte [edi + 4], 1
jne 0x10031cd4
mov esi, ecx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov eax, ecx
mov ebx, 0xfffff000
and eax, ebx
mov edi, dword [esi + 8]
and edi, ebx
xor ebx, ebx
cmp eax, edi
seta bl
mov eax, 0xffffffff
cmovb ebx, eax
cmp ebx, 0xffffffff
mov edi, dword [esp + 0x14]
je 0x10031cc2
xor eax, eax
inc eax
test ebx, ebx
jne 0x10031d04
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 4]
xor eax, eax
cmp ecx, esi
seta cl
jae 0x10031d02
mov ecx, dword [esi]
xor eax, eax
dec eax
test ecx, ecx
mov ebx, dword [esp + 8]
jne 0x10031c58
jmp 0x10031dac
and eax, 0xfffffffe
mov dword [ecx], eax
mov edi, ecx
and edi, 0xfffffffe
mov eax, dword [esi]
mov ebx, dword [esi + 4]
and ebx, 1
or ebx, edi
mov dword [esi + 4], ebx
test eax, eax
je 0x10034044
and byte [eax + 4], 0xfe
cmp dword [edx], ecx
jne 0x10031d0c
mov dword [edx], esi
jmp 0x10031c79
mov al, cl
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
jmp 0x10031cc7
and esi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + esi]
mov dword [edx + 4], ecx
test esi, esi
je 0x10034053
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [esi], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
or byte [edx + 4], 1
cmp dword [esp + 0x24], 0
je 0x10033b45
mov eax, dword [esp + 0x24]
cmp dword [eax], edx
je 0x10032af9
jmp 0x10032bd8
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov edi, dword [esi + 8]
and edi, ecx
xor ecx, ecx
cmp edx, edi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x100327c7
jmp 0x10032ddd
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, esi
test ecx, ecx
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 8]
jne 0x10031c5e
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 4]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x10031f63
mov eax, dword [esp + 4]
mov dword [esi], eax
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x88]
test eax, eax
je 0x10034205
and byte [eax + 4], 0xfe
mov dword [ecx], eax
mov edx, dword [esp + 0x38]
jmp 0x10031a42
mov ecx, dword [esp + 0x1c]
test byte [esp + 0x34], 1
mov esi, dword [esp + 0x10]
je 0x1003226a
test ecx, ecx
je 0x1003226a
cmp dword [ebx], ecx
je 0x10034911
mov dword [ecx], ebx
xor eax, eax
mov edi, ecx
mov ecx, dword [esp + 0x18]
cmp dword [esi + ecx + 0x6c], 1
mov edx, 0
je 0x10031e46
mov ecx, dword [esp + 0x18]
add ecx, esi
add ecx, 0x6c
xor edx, edx
mov dword [edi + edx*4 + 0xc], 0xffffffff
inc edx
mov esi, dword [ecx]
dec esi
cmp edx, esi
mov esi, dword [esp + 0x10]
jb 0x10031e32
mov ecx, dword [esp + 0x18]
mov ebx, dword [esi + ecx + 0x68]
and ebx, 0x1f
mov ecx, ebx
neg cl
xor esi, esi
dec esi
shr esi, cl
cmp ebx, 1
sbb eax, eax
or eax, esi
mov esi, dword [esp + 0x10]
mov dword [edi + edx*4 + 0xc], eax
mov dword [edi + 4], 0
mov ecx, dword [esp + 0x18]
mov eax, dword [esi + ecx + 0x68]
mov dword [edi + 8], eax
inc dword [esi + ecx + 0x74]
mov eax, dword [esp + 8]
mov dword [eax], edi
mov ecx, edi
jmp 0x1002e608
test ecx, ecx
je 0x1003249a
mov ecx, dword [eax + 4]
mov dword [esp + 0x28], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x10031eb6
mov esi, dword [edx]
test esi, esi
je 0x10031eb6
test byte [esi + 4], 1
jne 0x10031839
mov edx, dword [eax]
test edx, edx
je 0x10033bb8
test byte [edx + 4], 1
jne 0x10032eb8
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10031ee2
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100330f9
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10034408
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x10031f51
mov esi, dword [edx]
test esi, esi
je 0x10031f15
test byte [esi + 4], 1
jne 0x10031839
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10033a94
mov edx, dword [ecx]
test edx, edx
je 0x10031f3b
mov ebx, dword [edx + 4]
test bl, 1
jne 0x100331fa
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x88]
mov dword [eax], edx
mov edi, dword [esp + 0x14]
jmp 0x10031839
mov eax, dword [esi + 4]
and eax, 1
mov ecx, eax
or ecx, dword [esp + 4]
mov dword [esi + 4], ecx
mov ecx, dword [esp + 4]
mov ecx, dword [ecx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [esp + 4]
mov dword [eax], esi
mov ecx, dword [esi + 4]
and ecx, 1
mov dword [esp + 0x20], ecx
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
add ecx, dword [esp + 0x20]
mov dword [eax + 4], ecx
or byte [esi + 4], 1
cmp dword [edx], esi
jne 0x1003262a
mov eax, dword [esp + 4]
mov dword [edx], eax
jmp 0x10031dcc
and ecx, 0xfffffffe
mov edx, eax
mov eax, dword [eax + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10031a17
xor esi, esi
test dl, 0x10
cmove esi, dword [esp + 0x24]
xor ecx, ecx
cmp esi, eax
seta dl
mov edi, dword [esp + 4]
jb 0x10030fea
mov cl, dl
jmp 0x10030fdd
mov edi, dword [esp + 0x14]
mov ecx, edi
call fcn.1003c610
jmp 0x1002e50d
or edx, 1
mov dword [esi + 4], edx
mov ecx, dword [esi]
test ecx, ecx
je 0x10032013
mov edx, dword [ecx + 4]
test dl, 1
jne 0x1003299f
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10034159
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1003195b
mov dword [esp + 4], edi
and esi, 1
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
or edi, esi
mov dword [ecx + 4], edi
and byte [eax + 4], 0xfe
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x10033e27
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov esi, dword [esp + 0x20]
mov dword [esi + 4], eax
mov dword [ecx], esi
mov dword [edx], ecx
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov dword [esp + 0x20], esi
and esi, 0xfffffffe
mov edi, dword [esp + 4]
jne 0x1002f4a8
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, eax
call fcn.1003c3d0
mov edx, dword [esi]
jmp 0x1003017a
mov ebx, dword [ecx + 4]
jmp 0x10030961
xor esi, esi
test byte [esp + 4], 0x10
cmove esi, dword [esp + 0x24]
xor ecx, ecx
cmp esi, eax
seta dl
jb 0x1003181b
mov cl, dl
jmp 0x10031812
mov eax, dword [ebx + 4]
test eax, eax
je 0x1003211e
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [ebx + 8], 1
and dword [eax + 8], 1
mov ecx, eax
cmp dword [edi + 4], ebx
jne 0x1003298c
mov dword [edi + 4], ecx
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 4]
mov dword [ecx + 0x38], eax
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x100342c4
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov edx, dword [esp + 0x20]
test edx, edx
setne al
test byte [esp + 0x48], al
mov eax, dword [esp + 0x34]
jne 0x100315b3
mov dword [eax], 0
mov bl, 1
mov edi, dword [esp + 4]
jmp 0x1002e3b0
mov edx, dword [edi + 0x3c]
test edx, edx
jne 0x100327d8
lea eax, [esp + 0x88]
mov ecx, 0x100000
mov edx, 0x100000
push eax
push 0
call fcn.10050150
add esp, 8
test eax, eax
je 0x100343a6
mov esi, eax
movzx eax, byte [esp + 0x88]
mov ecx, dword [esp + 4]
mov edx, esi
push eax
call fcn.10050070
mov edx, esi
add esp, 4
add edx, 0x2000
jmp 0x100303d7
mov esi, dword [esp + 0x5c]
shl esi, 0xc
mov eax, esi
and eax, 0xff000
mov ebx, 0x100000
sub ebx, eax
cmp ebx, edi
cmovae ebx, edi
add esi, dword [esp + 0x30]
jmp 0x100304bc
mov eax, dword [edi + 4]
test eax, eax
je 0x10032221
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [edi + 8], 1
and dword [eax + 8], 1
mov ecx, eax
cmp dword [esi + 4], edi
jne 0x10032ae6
mov dword [esi + 4], ecx
mov eax, dword [esp + 0x8c]
mov esi, dword [esp + 0x10]
mov dword [esi + 0x38], eax
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x100342d3
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov ecx, dword [esp + 0x1c]
test ecx, ecx
setne al
test byte [esp + 0x34], al
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 8]
jne 0x10031e09
mov dword [ebx], 0
mov bl, 1
jmp 0x1002e667
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov eax, esi
jmp 0x10031008
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10033e91
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x10033ea6
mov edi, dword [eax]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [edx + 4], esi
mov dword [eax], edx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
jmp 0x10030c45
mov edx, dword [esi + 0x3c]
test edx, edx
jne 0x1003287b
lea eax, [esp + 0x88]
mov ecx, 0x100000
mov edx, 0x100000
push eax
push 0
call fcn.10050150
add esp, 8
test eax, eax
je 0x100343af
mov esi, eax
movzx eax, byte [esp + 0x88]
mov ecx, dword [esp + 0x10]
mov edx, esi
push eax
call fcn.10050070
mov ecx, esi
add esp, 4
add ecx, 0x2000
mov edi, dword [esp + 0x14]
jmp 0x100305ff
mov ecx, dword [esp + 0x48]
shl ecx, 0xc
mov eax, ecx
and eax, 0xff000
mov edi, 0x100000
sub edi, eax
cmp edi, ebx
cmovae edi, ebx
add ecx, dword [esp + 0xc]
mov dword [esp + 0x48], ecx
jmp 0x100306dd
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov eax, esi
jmp 0x10031839
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x100342f1
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10034306
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1002e9ca
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x4c]
neg cl
shr edx, cl
jmp 0x1002f091
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x100333cc
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
mov edi, dword [esp + 4]
je 0x100311e9
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x100311e9
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, eax
call fcn.1003c3d0
mov edx, dword [esi]
jmp 0x10030279
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x10034324
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov edi, dword [edx + 4]
and edi, 1
or edi, ecx
mov dword [edx + 4], edi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
je 0x10034339
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and edi, 1
or edi, ebx
mov dword [eax + 4], edi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1002ea9a
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x100333e0
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 8]
je 0x10031a1e
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x10031a1e
cmp dword [esp + 0x10], 0
je 0x10034348
mov eax, dword [esp + 0x10]
cmp dword [eax], edi
jne 0x10032e09
mov eax, dword [esp + 0x10]
mov dword [eax], edx
test edx, edx
je 0x10034357
mov esi, edi
mov eax, dword [edi]
mov dword [edx], eax
mov eax, dword [edi + 4]
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov eax, dword [esp + 8]
cmp dword [eax], edx
jne 0x10034366
mov eax, dword [esp + 8]
mov dword [eax], 0
jmp 0x1002f81b
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
jmp 0x1002f2c4
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp edi, ecx
mov ecx, dword [esp + 0x4c]
jne 0x10031576
and eax, 1
or eax, dword [esp + 0x24]
mov dword [edx + 4], eax
jmp 0x10031576
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x10034373
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10034388
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1003017a
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov edi, dword [ecx + 4]
and edi, 1
or edi, edx
mov dword [ecx + 4], edi
mov edi, dword [eax + 4]
and edi, 1
or edi, edx
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x14]
or byte [eax + 4], 1
and dword [ecx + 4], 1
jmp 0x1002f515
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp esi, ecx
mov ecx, dword [esp + 0x40]
jne 0x10031dd0
and eax, 1
or eax, dword [esp + 4]
mov dword [edx + 4], eax
jmp 0x10031dd0
lea edx, [esp + 0x88]
mov dword [esp + 0x24], edx
jmp 0x1002fd04
mov ecx, eax
and ecx, 0xfffffffe
mov esi, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x10030c68
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x3c]
test edx, edx
jne 0x10032d9c
mov edi, dword [esp + 0x10]
lea edx, [edi + 0x28]
mov ecx, dword [esp + 0x18]
call fcn.10005ae0
mov eax, dword [esp + 0x14]
mov esi, dword [eax + 0x3c]
mov dword [eax + 0x3c], edi
jmp 0x1002f05f
lea edx, [esp + 0x88]
mov dword [esp + 0xc], edx
jmp 0x1002fe85
test ebx, ebx
je 0x100326de
mov eax, dword [ebx + 4]
test eax, eax
je 0x100326de
xor esi, esi
test byte [eax + 8], 1
jne 0x100312d5
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x100326de
test byte [ecx + 8], 1
jne 0x100312d5
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, ebx
call fcn.1003cc60
mov eax, dword [esi]
test eax, eax
je 0x10034578
and byte [eax + 8], 0xfe
xor esi, esi
jmp 0x100332af
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x10034397
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10032747
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100331cf
mov dword [eax + 4], ecx
jmp 0x10030176
test edi, edi
je 0x10032777
mov eax, dword [edi + 4]
test eax, eax
je 0x10032777
xor ebx, ebx
test byte [eax + 8], 1
jne 0x10031b12
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10032777
test byte [ecx + 8], 1
jne 0x10031b12
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, edi
call fcn.1003cc60
mov eax, dword [esi]
test eax, eax
je 0x10034596
and byte [eax + 8], 0xfe
xor ebx, ebx
jmp 0x100332cd
xor eax, eax
inc eax
cmp ecx, 0xffffffff
jne 0x1003153c
jmp 0x10032fe1
mov eax, dword [esp + 0x24]
mov dword [eax], 0
mov dword [eax + 4], 1
lea edi, [esp + 0x88]
jmp 0x1003156c
xor eax, eax
inc eax
cmp ecx, 0xffffffff
jne 0x10031d90
jmp 0x10033042
mov eax, dword [esp + 4]
mov dword [eax + 0x3c], 0
lea esi, [edx + 0x2000]
add edx, 0x28
mov ecx, dword [esp + 0x4c]
call fcn.100505c0
mov edx, esi
jmp 0x100303d7
mov dword [esp + 0x50], 0
jmp 0x10030530
mov eax, dword [esp + 4]
mov dword [eax], 0
mov dword [eax + 4], 1
lea esi, [esp + 0x88]
jmp 0x10031dc6
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x100340ec
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10034101
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
jmp 0x10031126
mov eax, dword [esp + 0x10]
mov dword [eax + 0x3c], 0
lea esi, [edx + 0x2000]
add edx, 0x28
mov ecx, dword [esp + 0x40]
call fcn.100505c0
mov ecx, esi
jmp 0x10032335
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x10033ec4
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x100328e6
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10033318
mov dword [eax + 4], ecx
mov edi, dword [esp + 4]
jmp 0x1003118c
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x100343e4
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x100343f9
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10030279
xor esi, esi
jmp 0x10030751
mov ecx, dword [esp + 0x14]
mov edx, dword [ebp + 8]
push ebx
push eax
call fcn.10002c30
jmp 0x10030edc
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x10033d3c
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x1002f736
and ecx, 0xfffffffe
mov eax, dword [edi + 8]
and eax, 1
or eax, ecx
mov dword [edi + 8], eax
jmp 0x1003212a
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x10034168
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1003417d
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
jmp 0x1003195b
mov eax, dword [esp + 0x28]
mov dword [eax], edi
jmp 0x1003150c
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x10033ee2
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10032a46
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10033361
mov dword [eax + 4], ecx
mov edi, dword [esp + 0x14]
jmp 0x100319c1
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x10030e99
cmp dword [esp + 0x44], 0
je 0x10034417
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x44]
cmp dword [edx], ecx
jne 0x1003314e
mov ecx, dword [esp + 0x44]
mov dword [ecx], eax
mov esi, dword [esp + 0x24]
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov ecx, dword [esp + 0x1c]
cmp dword [ecx], eax
jne 0x10034426
mov eax, dword [esp + 0x1c]
mov dword [eax], 0
mov edx, dword [esp + 0x88]
mov edi, dword [esp + 4]
jmp 0x100311e9
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx + 4]
and eax, 1
or eax, edi
mov dword [ecx + 4], eax
jmp 0x1003150c
and ecx, 0xfffffffe
mov eax, dword [esi + 8]
and eax, 1
or eax, ecx
mov dword [esi + 8], eax
jmp 0x1003222d
mov eax, dword [esp + 0x24]
mov dword [eax], esi
jmp 0x10031d60
cmp dword [esp + 0x28], 0
je 0x10034433
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
cmp dword [edx], ecx
jne 0x10033167
mov ecx, dword [esp + 0x28]
mov dword [ecx], eax
mov esi, dword [esp + 0x24]
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov ecx, dword [esp + 4]
cmp dword [ecx], eax
jne 0x10034442
mov eax, dword [esp + 4]
mov dword [eax], 0
mov edx, dword [esp + 0x88]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 8]
jmp 0x10031a1e
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1003444f
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10032bba
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10033390
mov dword [eax + 4], ecx
jmp 0x10030275
mov ecx, esi
mov edx, 0x100000
push 2
call fcn.10005780
add esp, 4
jmp 0x1002e522
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
jmp 0x10031d60
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
and byte [esi + 4], 0xfe
mov ecx, dword [edi + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x100340bf
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [edi + 4], ecx
mov dword [edx], edi
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
jne 0x10031108
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [esp + 4], edi
mov esi, dword [esp + 0x20]
and esi, 0xfffffffe
mov dword [eax], esi
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x1003445e
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov edi, dword [edx + 4]
and edi, 0xfffffffe
je 0x10032dfd
mov eax, dword [edi + 4]
mov dword [esp + 8], eax
test al, 1
je 0x10032dfd
mov esi, dword [esp + 8]
and esi, 0xfffffffe
mov dword [edi + 4], esi
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x10034536
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
mov edi, dword [esp + 4]
jmp 0x100300f3
lea edx, [esp + 0x88]
mov dword [esp + 0x24], edx
jmp 0x1002ff3c
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
and byte [edi + 4], 0xfe
mov ecx, dword [esi + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003413b
mov edi, dword [edx]
and edi, 0xfffffffe
and ecx, 1
or ecx, edi
mov dword [esi + 4], ecx
mov dword [edx], esi
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
jne 0x1003193d
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and ecx, 0xfffffffe
mov dword [esi + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
or ecx, 1
mov dword [eax + 4], ecx
and esi, 0xfffffffe
je 0x10033d93
mov ecx, dword [esi]
or ecx, 1
mov dword [eax + 4], ecx
mov dword [esi], eax
mov dword [edx], esi
jmp 0x1002fb06
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x24]
xor eax, eax
cmp ecx, edi
seta cl
jb 0x10032fe1
mov al, cl
jmp 0x1003153c
cmp dword [edx + 0xc], 0
je 0x100333f4
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
add ecx, 0x38
call fcn.1003c7b0
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0x2c]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + 0xc]
sub dword [esi + 0x48], edx
sub eax, dword [ecx + 0xc]
mov ecx, dword [esp + 0x14]
add dword [ecx + 0x28], 0xfff00000
add eax, 0xfffffffe
mov dword [ecx + 0x2c], eax
jmp 0x10032687
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp + 4]
xor eax, eax
cmp ecx, esi
seta cl
jb 0x10033042
mov al, cl
jmp 0x10031d90
mov dword [edx + 4], edi
mov edi, dword [esp + 4]
jmp 0x100300f3
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [esp + 0x10]
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x10032509
lea edx, [esp + 0x88]
mov dword [esp + 0xc], edx
jmp 0x100301c7
push 0x100a477c
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov edi, dword [0x100a4794]
xor eax, eax
dec eax
xor ecx, ecx
mov edx, dword [ebp + 8]
cmp dword [edi + 0x10], edx
setb cl
cmova ecx, eax
test ecx, ecx
je 0x10032e6a
cmp ecx, 0xffffffff
jne 0x10032e62
mov edi, dword [edi + 8]
jmp 0x10032e46
mov edi, dword [edi + 0xc]
and edi, 0xfffffffe
jmp 0x10032e46
mov ebx, dword [edi + 0x14]
push 0x100a477c
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
jmp 0x1002e20f
mov eax, dword [edi]
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x14], ecx
cmp eax, dword [ecx + 8]
je 0x1002e221
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode__mArenaId__mNode__mArena__mId_
int3
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, eax
call fcn.1003c3d0
mov edx, dword [esi]
jmp 0x10031704
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, eax
call fcn.1003c3d0
mov edx, dword [esi]
jmp 0x10031f51
mov eax, dword [ebx + 4]
test eax, eax
je 0x1003447c
test byte [eax + 8], 1
jne 0x100332a0
or ecx, 1
mov dword [ebx + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10032efa
mov edx, dword [ecx + 8]
test dl, 1
jne 0x100334cc
or byte [eax + 8], 1
mov ecx, dword [ebx + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x10034587
mov edx, dword [eax + 4]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [ebx + 8], ecx
mov dword [eax + 4], ebx
jmp 0x100332af
mov eax, dword [edi + 4]
test eax, eax
je 0x10034491
test byte [eax + 8], 1
jne 0x100332be
or ecx, 1
mov dword [edi + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10032f50
mov edx, dword [ecx + 8]
test dl, 1
jne 0x10033525
or byte [eax + 8], 1
mov ecx, dword [edi + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x100345a5
mov edx, dword [eax + 4]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [edi + 8], ecx
mov dword [eax + 4], edi
jmp 0x100332cd
lea esi, [esp + 0x70]
mov ecx, esi
call fcn.10001010
mov ecx, dword [esi]
jmp 0x10030d53
xor edx, edx
test ebx, ebx
je 0x10032fd1
mov ecx, dword [ebx + 8]
cmp ecx, 1
ja 0x100335d4
mov eax, dword [ebx + 4]
test eax, eax
je 0x10032fd1
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [ebx + 8], 1
and dword [eax + 8], 1
mov edx, eax
mov eax, dword [esp + 4]
mov dword [eax + 0x38], edx
mov ecx, dword [esp + 0x30]
jmp 0x10032144
mov ecx, dword [edi]
xor eax, eax
dec eax
jmp 0x10031542
xor edx, edx
test edi, edi
je 0x10033032
mov ecx, dword [edi + 8]
cmp ecx, 1
ja 0x10033661
mov eax, dword [edi + 4]
test eax, eax
je 0x10033032
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [edi + 8], 1
and dword [eax + 8], 1
mov edx, eax
mov esi, dword [esp + 0x10]
mov dword [esi + 0x38], edx
mov ecx, dword [esp + 0xc]
jmp 0x10032247
mov ecx, dword [esi]
xor eax, eax
dec eax
jmp 0x10031d96
lea ecx, [esp + 0x84]
mov edx, ebx
call fcn.1003cc60
mov eax, dword [esp + 0x84]
cmp dword [edi + 4], ebx
jne 0x100344a6
mov dword [edi + 4], eax
mov ebx, eax
mov ecx, dword [esp + 0x30]
jmp 0x100312dd
lea ecx, [esp + 0x84]
mov edx, edi
call fcn.1003cc60
mov eax, dword [esp + 0x84]
cmp dword [esi + 4], edi
jne 0x100344bb
mov dword [esi + 4], eax
mov edi, eax
mov ecx, dword [esp + 0xc]
jmp 0x10031b1a
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x100344d0
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x100344e5
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10031704
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x100344f4
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10034509
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10031f51
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [esp + 0x44]
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x10032a88
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [esp + 0x28]
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x10032b25
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x10034518
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x100331c7
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1003357e
mov dword [eax + 4], ecx
jmp 0x10031700
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x10034527
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x10030176
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x10034545
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10033241
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100335a9
mov dword [eax + 4], ecx
jmp 0x10031f4d
mov esi, eax
and esi, 0xfffffffe
mov dword [edi + 4], esi
mov ecx, dword [edx]
test ecx, ecx
je 0x10034554
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x10034569
mov edi, dword [eax]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [edx + 4], esi
mov dword [eax], edx
mov edx, dword [ecx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x10030d53
lea edi, [esp + 0x70]
mov ecx, edi
mov edx, ebx
call fcn.1003cd70
mov eax, dword [edi]
lea ebx, [esp + 0x88]
mov dword [ebx + 4], eax
jmp 0x100312d5
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, edi
call fcn.1003cd70
mov eax, dword [esi]
lea edi, [esp + 0x88]
mov dword [edi + 4], eax
jmp 0x10031b12
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
or byte [edx + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x100305c2
mov dword [edi + 4], eax
mov ebx, edi
jmp 0x100312d5
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x10033eb5
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
mov edi, dword [esp + 4]
jmp 0x1003118c
mov dword [esi + 4], eax
mov edi, esi
jmp 0x10031b12
lea ecx, [esp + 0x88]
mov dword [esp + 0x10], ecx
jmp 0x10030cec
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x10033ed3
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
mov edi, dword [esp + 0x14]
jmp 0x100319c1
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x100345b4
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x10030275
mov ecx, dword [ebp + 8]
mov edx, dword [esp + 0x14]
call fcn.10005680
jmp 0x1002e538
lea edx, [esp + 0x88]
mov dword [esp + 0x44], edx
mov edi, dword [esp + 4]
jmp 0x10031652
lea edx, [esp + 0x88]
mov dword [esp + 0x28], edx
mov edi, dword [esp + 0x14]
jmp 0x10031e9f
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x2c]
jmp 0x10032dc7
test esi, esi
je 0x100345c3
mov eax, dword [esp + 0x30]
cmp dword [esi + 4], eax
jne 0x100336ea
mov dword [esi + 4], ebx
cmp dword [esp + 0x30], 0
je 0x100345de
test ebx, ebx
je 0x100345f4
mov edx, dword [esp + 0x30]
mov eax, dword [edx + 4]
mov dword [ebx + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [ebx + 8]
and ecx, 1
or ecx, eax
mov dword [ebx + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [ebx + 8], ecx
cmp dword [edi + 4], ebx
jne 0x10034603
mov dword [edi + 4], 0
jmp 0x1003212a
test ebx, ebx
je 0x1003460c
mov eax, dword [esp + 0xc]
cmp dword [ebx + 4], eax
jne 0x100336ff
mov dword [ebx + 4], edi
cmp dword [esp + 0xc], 0
je 0x10034627
test edi, edi
je 0x1003463d
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 4]
mov dword [edi + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [edi + 8]
and ecx, 1
or ecx, eax
mov dword [edi + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [edi + 8], ecx
cmp dword [esi + 4], edi
jne 0x1003464c
mov dword [esi + 4], 0
jmp 0x1003222d
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov eax, dword [ebx + 4]
test eax, eax
je 0x10034655
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [ebx + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1003466b
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
and edx, 1
or edx, edi
mov dword [ebx + 8], edx
mov dword [ecx + 4], ebx
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x100332af
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov eax, dword [edi + 4]
test eax, eax
je 0x1003467a
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x10034690
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
and edx, 1
or edx, esi
mov dword [edi + 8], edx
mov dword [ecx + 4], edi
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x100332cd
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1003469f
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x10031700
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x100346ae
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x10031f4d
lea esi, [esp + 0x88]
jmp 0x100312b5
mov byte [edi + 0x40], 0
lea eax, [esp + 0x88]
push eax
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
lea esi, [esp + 0x70]
push esi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
mov ecx, 0x10
call fcn.100123e0
xor edx, edx
cmp byte [esi + 8], 0
mov ecx, 0
mov esi, 0
je 0x10033625
mov ecx, dword [esp + 0x74]
mov esi, dword [esp + 0x70]
cmp byte [esp + 0x90], 0
mov edi, 0
je 0x10033642
mov edx, dword [esp + 0x8c]
mov edi, dword [esp + 0x88]
mov dword [eax], edi
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], ecx
mov edi, dword [esp + 4]
mov dword [edi + 0x44], eax
mov byte [edi + 0x40], 1
mov ecx, dword [esp + 0xc]
jmp 0x1002e319
lea ebx, [esp + 0x88]
jmp 0x10031af2
mov byte [esi + 0x40], 0
lea eax, [esp + 0x88]
push eax
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
lea esi, [esp + 0x70]
push esi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
mov ecx, 0x10
call fcn.100123e0
xor edx, edx
cmp byte [esi + 8], 0
mov ecx, 0
mov esi, 0
je 0x100336b2
mov ecx, dword [esp + 0x74]
mov esi, dword [esp + 0x70]
cmp byte [esp + 0x90], 0
mov edi, 0
je 0x100336cf
mov edx, dword [esp + 0x8c]
mov edi, dword [esp + 0x88]
mov dword [eax], edi
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], ecx
mov esi, dword [esp + 0x10]
mov dword [esi + 0x44], eax
mov byte [esi + 0x40], 1
jmp 0x1002e5d6
mov eax, ebx
and eax, 0xfffffffe
mov ecx, dword [esi + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
jmp 0x10033418
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [ebx + 8]
and ecx, 1
or ecx, eax
mov dword [ebx + 8], ecx
jmp 0x1003347e
push 0x100a4814
call dword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
cmp dword [0x100a4810], 0
jne 0x10033937
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x100346e5
mov eax, dword [0x100a481c]
mov ecx, dword [0x100a43c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jle 0x1003379e
push 0x100a481c
call fcn.1004f02e
add esp, 4
cmp dword [0x100a481c], 0xffffffff
jne 0x1003379e
lea esi, [esp + 0x88]
push esi
call dword [sym.imp.kernel32.dll_GetSystemInfo]
mov eax, dword [esi + 4]
mov dword [0x100a4818], eax
push 0x100a481c
call fcn.1004f02e
add esp, 4
mov eax, 0x1000
xor edx, edx
div dword [0x100a4818]
test edx, edx
jne 0x100346ef
mov edi, 0x100a4820
push 0x40
push edi
push str.MALLOC_OPTIONS
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
test eax, eax
cmove edi, eax
je 0x10033809
mov al, byte [edi]
test al, al
je 0x10033809
xor ebx, ebx
movsx eax, al
add eax, 0xffffffd0
cmp eax, 9
jbe 0x10034756
xor esi, esi
inc esi
mov al, byte [edi + ebx]
movsx ecx, al
cmp ecx, 0x72
jne 0x100346bd
mov byte [0x100a4778], 1
dec esi
jne 0x100337e7
mov al, byte [edi + ebx + 1]
inc ebx
test al, al
jne 0x100337d5
xor ebx, ebx
mov dword [0x100a47dc], ebx
mov edi, 0x1388
mov esi, dword [sym.imp.kernel32.dll_InitializeCriticalSectionAndSpinCount]
push edi
push 0x100a47bc
call esi
mov dword [0x100a47d4], ebx
mov dword [0x100a47d8], ebx
push edi
push 0x100a477c
call esi
mov dword [0x100a4794], ebx
mov dword [0x100a4798], ebx
mov dword [0x100a479c], ebx
push edi
push 0x100a47e0
call esi
mov dword [0x100a480c], ebx
mov dword [0x100a4804], ebx
mov dword [0x100a474c], ebx
mov dword [0x100a4750], ebx
mov dword [0x100a4754], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x94], ebx
mov eax, dword [0x100a4024]
mov dword [esp + 0x88], eax
push edi
push 0x100a472c
call esi
test eax, eax
je 0x10034713
lea edx, [esp + 0x88]
xor ecx, ecx
call fcn.10040920
mov dword [0x100a4744], eax
test eax, eax
je 0x10034738
mov ecx, dword [0x100a43c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp byte [ecx + 8], 0
je 0x1003471f
mov ecx, dword [0x100a43c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
mov dword [ecx + 0xc], eax
push 0x1388
push 0x100a47a0
call dword [sym.imp.kernel32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x4000
call fcn.100123e0
test eax, eax
je 0x1003472e
mov esi, eax
push 0x4000
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [0x100a47b8], esi
xor eax, eax
inc eax
xchg dword [0x100a4810], eax
call fcn.10001250
push 0x100a4814
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
jmp 0x1002e558
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
or ebx, 1
mov dword [eax + 4], ebx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
mov ecx, dword [esp + 0xc]
jmp 0x10034924
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and esi, 1
mov dword [ecx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and esi, 1
mov dword [ebx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
or edi, 1
mov dword [eax + 4], edi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and ecx, 1
mov dword [edi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and ecx, 1
mov dword [esi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [esp + 0x64], ebx
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x100347f8
cmp eax, 8
je 0x100347f8
xor eax, eax
jmp 0x100304f6
mov dword [esp + 0x58], edi
mov edi, dword [esp + 0x48]
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x1003484f
cmp eax, 8
je 0x1003484f
xor eax, eax
jmp 0x1003071c
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
or ecx, 1
mov dword [edx + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [esp + 0x18], 1
jmp 0x1002e1c3
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_malloc_initialized_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__aArena__arena__aArena_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x20U____0___Freeing_in_decommitted_page._
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x01U_____0___Double_free__
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__run__mRegionsMask_elm____1U____bit____0___Double_free__
int3
call fcn.1004eb54
jmp 0x1002e582
mov esi, dword [0x100a4744]
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
jne 0x10033c63
call fcn.1004eb54
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov dword [eax + 0xc], esi
jmp 0x1002e59f
call fcn.1004eb54
jmp 0x1002e2ba
mov edi, dword [0x100a4744]
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
jne 0x10033caa
call fcn.1004eb54
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov dword [eax + 0xc], edi
jmp 0x1002e2d7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
dec dword [edx + 8]
mov bl, 1
xor esi, esi
jmp 0x1002e3b0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov eax, dword [esp + 0x1c]
dec dword [eax + 8]
mov bl, 1
mov dword [esp + 8], 0
jmp 0x1002e663
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_run_ind___gChunkNumPages___1_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
and esi, 1
mov eax, dword [esp + 0x20]
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
xor ebx, ebx
jmp 0x1002ec4b
mov eax, edi
and eax, 0xfffffffe
mov ecx, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x1002f3c4
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
jmp 0x1002f5be
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
jmp 0x1002f98d
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov eax, ecx
jmp 0x100303b8
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov eax, ecx
mov edi, dword [esp + 0x14]
jmp 0x100305de
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x1003100c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x1003183d
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
and dword [edi + 4], 1
jmp 0x1002f79d
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
and dword [edi + 4], 1
jmp 0x1002fc40
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov eax, dword [esp + 8]
and dword [eax + 4], 1
jmp 0x1002f81b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov eax, dword [esp + 0x34]
jmp 0x10032163
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 8]
jmp 0x1003226a
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov eax, dword [esp + 0x1c]
and dword [eax + 4], 1
jmp 0x10032ac2
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov eax, dword [esp + 4]
and dword [eax + 4], 1
jmp 0x10032b5f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
or ecx, 1
mov dword [edi + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [edi + 8], edx
jmp 0x1003306d
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [esi + 8], edx
jmp 0x10033099
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test ebx, ebx
je 0x100345f4
mov dword [ebx + 4], 0
and dword [ebx + 8], 1
xor ecx, ecx
jmp 0x1003344e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and dword [edi + 8], 1
jmp 0x1003212a
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test edi, edi
je 0x1003463d
mov dword [edi + 4], 0
and dword [edi + 8], 1
xor ecx, ecx
jmp 0x100334b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and dword [esi + 8], 1
jmp 0x1003222d
mov dword [ebx + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [edi + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
cmp ecx, 0x46
jne 0x10034779
mov eax, dword [0x100a4024]
test eax, eax
je 0x1003479a
add eax, eax
je 0x100337fd
mov dword [0x100a4024], eax
jmp 0x100337fd
call fcn.1004eb54
jmp 0x10033748
mov ecx, str._jemalloc_
mov edx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.10054100
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_CRASH__
int3
mov dword [0x100a4744], 0
jmp 0x10034738
call fcn.1004eb54
mov eax, dword [0x100a4744]
jmp 0x100338d9
mov dword [0x100a47b8], 0
push 0x100a4814
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [eax], 0xc
xor esi, esi
jmp 0x1002e538
xor esi, esi
lea ecx, [esi + esi*4]
lea esi, [eax + ecx*2]
movsx eax, byte [edi + ebx + 1]
inc ebx
add eax, 0xffffffd0
cmp eax, 0xa
jb 0x10034758
test esi, esi
je 0x10033800
jmp 0x100337e7
cmp ecx, 0x52
jne 0x1003478a
mov byte [0x100a4778], 0
jmp 0x100337fd
cmp ecx, 0x66
jne 0x100347a9
shr dword [0x100a4024], 1
jmp 0x100337fd
mov dword [0x100a4024], 1
jmp 0x100337fd
lea ecx, [esp + 0x88]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov eax, 2
push 0xa
push str._jemalloc_
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
push 0x35
push str.:__malloc__Unsupported_character_in_malloc_options:_
mov eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
lea ecx, [esp + 0x88]
mov edx, 0x1009a0a1
call fcn.10054100
jmp 0x100337fd
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea ebx, [eax + eax*4]
add ebx, 5
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
push 4
push 0x1000
push dword [esp + 0x6c]
push esi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov dword [esp + 0x68], eax
call dword [sym.imp.kernel32.dll_GetLastError]
cmp dword [esp + 0x68], 0
jne 0x100348ad
cmp eax, 0x5af
je 0x10034845
cmp eax, 8
jne 0x10033adc
xor eax, eax
dec ebx
jne 0x1003480a
jmp 0x100304f6
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea eax, [eax + eax*4]
add eax, 5
mov dword [esp + 0x50], eax
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
push 4
push 0x1000
push dword [esp + 0x60]
push edi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov dword [esp + 0x60], eax
call dword [sym.imp.kernel32.dll_GetLastError]
cmp dword [esp + 0x60], 0
jne 0x100348d1
cmp eax, 0x5af
je 0x100348a0
cmp eax, 8
jne 0x10033b05
xor eax, eax
dec dword [esp + 0x50]
jne 0x10034865
jmp 0x1003071c
cmp eax, 0x5af
mov ebx, dword [esp + 0x64]
mov ecx, dword [esp + 0x5c]
je 0x100348c5
cmp eax, 8
jne 0x100304dd
push ecx
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x100304dd
cmp eax, 0x5af
mov edi, dword [esp + 0x58]
mov ecx, dword [esp + 0x4c]
je 0x100348e9
cmp eax, 8
jne 0x10030701
push ecx
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x10030701
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov ecx, 0xfffff000
and ecx, dword [esi + 8]
mov dword [ebx], ecx
test ecx, ecx
mov esi, dword [esp + 0x10]
jne 0x1002e608
jmp 0x10032270
mov eax, dword [esp + 0x34]
mov dword [eax], edx
test edx, edx
mov edi, dword [esp + 4]
jne 0x1002e353
mov bl, 1
jmp 0x1002e3b0
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
nop dword [eax]
mov eax, edx
xor ecx, ecx
cmp edx, edi
setb cl
mov edx, 0xffffffff
cmova ecx, edx
cmp ecx, 0xffffffff
jne 0x10034994
test eax, eax
je 0x10034c11
mov edx, dword [eax]
test edx, edx
je 0x10034c11
mov ecx, dword [edx + 4]
test cl, 1
jne 0x10034990
mov dword [esp + 0x1c], esi
mov esi, dword [edx]
test esi, esi
je 0x100349b4
test byte [esi + 4], 1
je 0x100349b4
mov esi, eax
jmp 0x10034950
test ecx, ecx
jne 0x100349ff
xor edx, edx
test eax, eax
je 0x10034ad1
mov ecx, dword [eax + 4]
mov dword [esp + 0x24], esi
cmp ecx, 1
jbe 0x10034acb
jmp 0x10034a0a
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10034d40
mov edx, dword [ecx]
test edx, edx
je 0x100349da
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10034b37
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
mov esi, dword [esp + 0x1c]
cmp dword [esi], eax
jne 0x1003493d
mov dword [esi], edx
jmp 0x10034950
test eax, eax
je 0x10034d73
mov ecx, dword [eax + 4]
mov dword [esp + 0x1c], esi
mov edx, ecx
and edx, 0xfffffffe
je 0x10034a25
mov esi, dword [edx]
test esi, esi
je 0x10034a25
test byte [esi + 4], 1
jne 0x10034990
mov esi, dword [eax]
test esi, esi
je 0x10034d73
mov edx, dword [esi + 4]
test dl, 1
je 0x10034bad
mov dword [esp + 0x28], esi
and edx, 0xfffffffe
je 0x10034d82
mov esi, dword [edx]
test esi, esi
je 0x10034a58
test byte [esi + 4], 1
jne 0x10034c62
and ecx, 1
or ecx, edx
mov esi, dword [esp + 0x28]
mov dword [esi + 4], ecx
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x10034d9b
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [eax + 4]
mov ecx, ebx
and ecx, 0xfffffffe
je 0x10034db0
mov esi, dword [ecx]
and esi, 0xfffffffe
and ebx, 1
or ebx, esi
mov dword [eax + 4], ebx
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
mov esi, dword [esp + 0x1c]
cmp dword [esi], eax
jne 0x10034bfa
mov dword [esi], edx
mov eax, esi
jmp 0x10034990
mov ecx, dword [eax]
test ecx, ecx
jne 0x10034b00
cmp dword [esi], eax
jne 0x10034be7
mov dword [esi], edx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x20]
mov dword [edx], eax
xor eax, eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov edx, 0xfffff000
and edx, dword [edi + 8]
jmp 0x10034924
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov dword [esp + 0x1c], esi
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [esp + 0x1c]
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x10034ad1
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x10034d64
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10034ba5
mov ebx, dword [ecx + 4]
test bl, 1
je 0x10034ba5
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x10034d55
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x100349ec
mov dword [eax + 4], ecx
jmp 0x100349ec
or edx, 1
mov dword [esi + 4], edx
mov ecx, dword [esi]
test ecx, ecx
je 0x10034bc5
mov edx, dword [ecx + 4]
test dl, 1
jne 0x10034ccc
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10034dbf
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x10034ab6
and edx, 0xfffffffe
mov eax, dword [esi + 4]
and eax, 1
or eax, edx
mov dword [esi + 4], eax
jmp 0x10034adb
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov eax, esi
jmp 0x10034990
mov edx, dword [esp + 0x24]
test edx, edx
je 0x10034e01
cmp dword [edx], edi
jne 0x10034d21
mov dword [edx], eax
test eax, eax
je 0x10034e10
mov ecx, dword [edi]
mov dword [eax], ecx
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [edi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
cmp dword [esi], eax
jne 0x10034e1f
mov dword [esi], 0
jmp 0x10034adb
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
and byte [esi + 4], 0xfe
mov ebx, dword [esp + 0x28]
mov ecx, dword [ebx + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10034dce
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [ebx + 4], ecx
mov dword [edx], ebx
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [eax + 4]
mov ecx, ebx
and ecx, 0xfffffffe
jne 0x10034a98
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x10034ddd
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10034df2
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
jmp 0x10034ab6
mov ecx, eax
and ecx, 0xfffffffe
mov dword [esp + 0x1c], esi
mov esi, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
mov esi, dword [esp + 0x1c]
jmp 0x10034c27
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
and ecx, 1
mov eax, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and dword [esi + 4], 1
jmp 0x10034adb
xor ecx, ecx
cmp eax, esi
setb cl
mov edx, 0xffffffff
cmova ecx, edx
cmp ecx, 0xffffffff
jne 0x10034ec2
test eax, eax
je 0x100350fa
mov edx, dword [eax]
test edx, edx
je 0x100350fa
mov ecx, dword [edx + 4]
test cl, 1
jne 0x10034eb9
mov ebx, dword [edx]
test ebx, ebx
je 0x10034e6e
test byte [ebx + 4], 1
jne 0x10034f09
mov dword [esp + 4], edi
or ecx, 1
mov dword [edx + 4], ecx
mov ebx, dword [eax + 4]
mov ecx, ebx
and ecx, 0xfffffffe
je 0x10035243
mov edi, dword [ecx]
test edi, edi
jne 0x10034eda
or ebx, 1
mov dword [eax + 4], ebx
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edi, ecx
mov edx, dword [esp + 4]
cmp dword [edx], eax
mov ebx, dword [esp + 8]
jne 0x10035304
mov dword [edx], edi
mov eax, edi
mov edi, edx
jmp 0x10034e30
mov edi, eax
mov eax, edx
jmp 0x10034e30
test ecx, ecx
jne 0x10034eeb
xor edx, edx
test eax, eax
je 0x10034f1b
mov ecx, dword [eax + 4]
mov dword [esp + 0xc], edi
cmp ecx, 1
jbe 0x10034f11
jmp 0x10034ef6
mov edx, dword [edi + 4]
mov dword [esp + 0x20], edx
test dl, 1
je 0x10034e8c
jmp 0x1003501c
test eax, eax
je 0x100352e6
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10034f2e
mov ebx, dword [edx]
test ebx, ebx
je 0x10034f2e
test byte [ebx + 4], 1
je 0x10034f2e
mov edi, eax
mov ebx, dword [esp + 8]
jmp 0x10034ebb
mov ecx, dword [eax]
test ecx, ecx
jne 0x10034fe6
cmp dword [edi], eax
jne 0x100350d0
mov dword [edi], edx
mov edi, dword [esp + 0x14]
jmp 0x100348f5
mov ebx, dword [eax]
test ebx, ebx
je 0x100352e6
mov edx, dword [ebx + 4]
test dl, 1
je 0x10035096
mov dword [esp + 4], ebx
and edx, 0xfffffffe
je 0x10035285
mov ebx, dword [edx]
mov dword [esp + 0x20], ebx
test ebx, ebx
je 0x10034f69
mov ebx, dword [esp + 0x20]
test byte [ebx + 4], 1
jne 0x1003514b
and ecx, 1
or ecx, edx
mov ebx, dword [esp + 4]
mov dword [ebx + 4], ecx
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x1003529e
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov ebx, dword [edx + 4]
and ebx, 1
or ebx, ecx
mov dword [edx + 4], ebx
mov ecx, dword [eax + 4]
mov dword [esp + 0x20], ecx
and ecx, 0xfffffffe
je 0x100352b3
mov ebx, dword [ecx]
mov dword [esp + 4], ebx
and dword [esp + 4], 0xfffffffe
mov ebx, dword [esp + 0x20]
and ebx, 1
add ebx, dword [esp + 4]
mov dword [eax + 4], ebx
mov dword [ecx], eax
mov ebx, dword [edx + 4]
and ebx, 1
or ebx, ecx
mov dword [edx + 4], ebx
or byte [eax + 4], 1
cmp dword [edi], eax
jne 0x100350e3
mov dword [edi], edx
mov eax, edi
jmp 0x10034f09
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov ebx, dword [ecx + 4]
and ebx, 1
or ebx, edx
mov dword [ecx + 4], ebx
mov ebx, dword [eax + 4]
and ebx, 1
or ebx, edx
mov dword [ecx + 4], ebx
mov ebx, dword [esp + 8]
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x10034f1b
mov edx, dword [esp + 0x20]
and edx, 0xfffffffe
mov dword [ecx], edx
mov ebx, dword [edi + 4]
and ebx, 1
or ebx, ecx
mov dword [edi + 4], ebx
and edi, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea ebx, [ecx + edi]
mov dword [eax + 4], ebx
test edi, edi
je 0x10035267
mov ebx, dword [edi]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [eax + 4], ebx
mov dword [edi], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1003508e
mov ebx, dword [ecx + 4]
test bl, 1
je 0x1003508e
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov ebx, ecx
or ebx, 1
mov dword [eax + 4], ebx
and ecx, 0xfffffffe
je 0x10035258
mov ebx, dword [ecx]
or ebx, 1
mov dword [eax + 4], ebx
mov dword [ecx], eax
mov dword [edi], ecx
jmp 0x10034e9e
mov dword [eax + 4], ecx
jmp 0x10034e9e
or edx, 1
mov dword [ebx + 4], edx
mov ecx, dword [ebx]
test ecx, ecx
je 0x100350ae
mov edx, dword [ecx + 4]
test dl, 1
jne 0x100351bf
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x100352f5
mov ebx, dword [edx]
and ebx, 0xfffffffe
and ecx, 1
or ecx, ebx
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x10034fd5
and edx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
or eax, edx
mov dword [edi + 4], eax
jmp 0x10034f25
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov eax, edi
jmp 0x10034f09
mov edx, dword [esp + 0xc]
test edx, edx
je 0x10035319
cmp dword [edx], esi
jne 0x10035222
mov dword [edx], eax
test eax, eax
je 0x10035328
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
cmp dword [edi], eax
jne 0x10035337
mov dword [edi], 0
jmp 0x10034f25
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
mov ecx, dword [esp + 0x20]
and byte [ecx + 4], 0xfe
mov ecx, dword [esp + 4]
mov ecx, dword [ecx + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10035276
mov ebx, dword [edx]
and ebx, 0xfffffffe
and ecx, 1
or ecx, ebx
mov ebx, dword [esp + 4]
mov dword [ebx + 4], ecx
mov dword [edx], ebx
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov ebx, dword [edx + 4]
and ebx, 1
or ebx, ecx
mov dword [edx + 4], ebx
mov ecx, dword [eax + 4]
mov dword [esp + 0x20], ecx
and ecx, 0xfffffffe
jne 0x10034fab
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x100352c2
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov ebx, dword [edx + 4]
and ebx, 1
or ebx, ecx
mov dword [edx + 4], ebx
mov ecx, dword [eax + 4]
mov dword [esp + 0x20], ecx
and ecx, 0xfffffffe
je 0x100352d7
mov ebx, dword [ecx]
mov dword [esp + 4], ebx
and dword [esp + 4], 0xfffffffe
mov ebx, dword [esp + 0x20]
and ebx, 1
add ebx, dword [esp + 4]
mov dword [eax + 4], ebx
mov dword [ecx], eax
mov ebx, dword [edx + 4]
and ebx, 1
or ebx, ecx
mov dword [edx + 4], ebx
jmp 0x10034fd5
mov ecx, eax
and ecx, 0xfffffffe
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0xc]
mov edx, dword [edx + 4]
and edx, 1
or edx, ecx
mov ecx, dword [esp + 0xc]
mov dword [ecx + 4], edx
jmp 0x10035110
or ebx, 1
mov dword [eax + 4], ebx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and ecx, 1
mov eax, dword [esp + 4]
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100339b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x10034eb0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1003397e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10033957
and dword [edi + 4], 1
jmp 0x10034f25