Function at 0x10026f40
Capabilities:
Get system information on windows
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb8
mov dword [esp + 4], edx
mov edi, ecx
mov ecx, dword [ebp + 8]
mov eax, dword [0x100a400c]
xor eax, ebp
mov dword [esp + 0xb0], eax
mov dword [esp + 0x18], ecx
test ecx, ecx
je 0x1002d199
mov eax, dword [0x100a4810]
cmp dword [esp + 4], 0
je 0x1002730f
test eax, eax
je 0x1002d1d0
mov eax, dword [esp + 4]
mov ebx, eax
and ebx, 0xfff00000
cmp ebx, eax
mov dword [esp + 0x10], ebx
je 0x1002c400
shr eax, 0xc
movzx eax, al
lea eax, [eax + eax*2]
mov eax, dword [ebx + eax*4 + 0x18]
mov edx, eax
and edx, 0xfffff000
test al, 2
jne 0x10026fc0
mov eax, dword [edx]
mov edx, dword [eax + 8]
cmp edx, 0xfd000
ja 0x1002c439
mov eax, dword [ebx]
mov dword [esp + 0x14], eax
mov eax, dword [edi]
test eax, eax
je 0x10026fe2
cmp dword [esp + 0x14], eax
jne 0x1002d280
mov eax, dword [esp + 0x18]
cmp eax, 0xfd000
ja 0x1002bf19
cmp eax, 8
jbe 0x100281de
cmp eax, 0x1f0
ja 0x10027454
lea edi, [eax + 0xf]
and edi, 0xfffffff0
xor eax, eax
cmp edi, edx
sete cl
cmp edx, 0xfd001
jae 0x1002a088
test cl, cl
jne 0x10027689
lea ecx, [edx - 0xf01]
cmp ecx, 0xfc100
setae cl
xor al, 1
or al, cl
mov dword [esp + 0x2c], edx
je 0x10027c6d
mov edi, dword [esp + 0x14]
cmp byte [edi + 0x41], 0
jne 0x10027573
cmp dword [esp + 0x18], 0x1f1
jae 0x1002756d
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x1002d295
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov edi, dword [eax + 0xc]
test edi, edi
je 0x1002d29f
mov eax, dword [esp + 0x18]
cmp eax, 9
jb 0x10028268
cmp eax, 0x1f1
jae 0x100276c1
lea ecx, [eax + 0xf]
mov eax, ecx
and eax, 0xfffffff0
mov dword [esp + 0x30], eax
shr ecx, 4
shl ecx, 5
cmp byte [edi + 0x40], 0
mov dword [esp + 8], edi
mov dword [esp + 0xc], ecx
je 0x100270da
cmp dword [edi + 0x44], 0
je 0x1002cbae
add ecx, edi
add ecx, 0x5c
lea esi, [edi + 0xc]
cmp dword [edi + 0x24], 0
jne 0x100270f3
push esi
mov ebx, ecx
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov ecx, ebx
mov edx, dword [ecx]
test edx, edx
mov dword [esp + 0x3c], esi
je 0x100276f9
cmp dword [edx + 8], 0
je 0x100276f9
mov eax, dword [edx + 4]
mov dword [esp + 0x20], edx
mov edx, dword [edx + eax*4 + 0xc]
test edx, edx
je 0x10027b85
mov edi, dword [edi + 0x44]
test edi, edi
jne 0x10027470
tzcnt ebx, edx
mov edi, dword [esp + 8]
mov esi, eax
shl esi, 5
or esi, ebx
btc edx, ebx
mov ebx, eax
mov eax, dword [esp + 0xc]
imul esi, dword [edi + eax + 0x64]
mov eax, dword [edi + eax + 0x70]
mov ecx, dword [esp + 0x20]
mov dword [ecx + ebx*4 + 0xc], edx
mov edx, ecx
add eax, ecx
add esi, eax
dec dword [edx + 8]
test esi, esi
je 0x1002d52d
mov eax, dword [esp + 0x30]
add dword [edi + 0x30], eax
xor ebx, ebx
cmp dword [edi + 0x24], 0
jne 0x1002717c
push dword [esp + 0x3c]
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test bl, bl
jne 0x1002df3d
test esi, esi
je 0x1002df3d
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
cmp ecx, eax
cmovb eax, ecx
push eax
mov edi, dword [esp + 8]
push edi
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ebx, edi
and ebx, 0xfffff
je 0x1002c98c
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp dword [ecx], eax
jne 0x1002d1e5
mov eax, ebx
shr eax, 0xc
mov dword [esp + 8], eax
lea edx, [eax + eax*2]
mov ecx, dword [ecx + edx*4 + 0x18]
mov eax, ecx
and eax, 0xfffff000
test cl, 2
jne 0x100271e7
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], edx
lea ecx, [ecx + edx*4]
add ecx, 0x18
mov dword [esp + 0x18], ecx
push eax
push 0xe5
push dword [esp + 0xc]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x14]
lea edi, [eax + 0xc]
cmp dword [eax + 0x24], 0
jne 0x1002721f
push edi
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
test al, 0x20
jne 0x1002d1fa
mov dword [esp + 0xc], ebx
mov dword [esp + 0x2c], edi
test al, 1
je 0x1002d20f
mov ebx, eax
and ebx, 0xfffff000
test al, 2
mov dword [esp + 0x24], esi
jne 0x10027df3
mov edx, dword [ebx]
mov ecx, dword [edx + 8]
mov dword [esp + 0x18], ecx
mov ecx, dword [edx + 0x14]
add ecx, ebx
mov esi, dword [esp + 4]
sub esi, ecx
mov dword [esp + 4], edx
movzx edx, word [edx + 0x1c]
imul edx, esi
mov ecx, edx
shr ecx, 0x11
shr edx, 0x16
cmp edx, dword [ebx + 4]
jb 0x10027bef
mov esi, dword [ebx + edx*4 + 0xc]
mov edi, 1
shl edi, cl
bt esi, ecx
jb 0x1002d224
or esi, edi
mov dword [ebx + edx*4 + 0xc], esi
mov ecx, dword [ebx + 8]
lea edx, [ecx + 1]
mov dword [ebx + 8], edx
mov esi, dword [esp + 4]
cmp edx, dword [esi + 0xc]
mov edx, esi
je 0x1002845f
xor esi, esi
test ecx, ecx
je 0x10027598
mov ebx, dword [esp + 0x2c]
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
sub dword [edi + 0x30], eax
cmp dword [edi + 0x24], 0
jne 0x100272d9
push ebx
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test esi, esi
jne 0x1002c190
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
mov esi, eax
test eax, eax
je 0x1002df3d
mov ecx, dword [esp + 0xb0]
xor ecx, ebp
call fcn.1004f020
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
test eax, eax
je 0x1002cce2
mov esi, dword [edi]
test esi, esi
jne 0x1002900f
cmp dword [esp + 0x18], 0x1f1
jae 0x10029009
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x1002d239
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov esi, dword [eax + 0xc]
test esi, esi
je 0x1002d243
mov eax, dword [esp + 0x18]
cmp eax, 9
jb 0x100282a3
cmp eax, 0x1f1
jae 0x100276dd
add eax, 0xf
mov ecx, eax
and ecx, 0xfffffff0
mov dword [esp + 0x10], ecx
shr eax, 4
shl eax, 5
mov dword [esp + 0x18], eax
cmp byte [esi + 0x40], 0
mov dword [esp + 0x14], esi
je 0x100273aa
cmp dword [esi + 0x44], 0
je 0x1002cc3b
mov eax, dword [esp + 0x18]
lea ebx, [esi + eax]
add ebx, 0x5c
lea edi, [esi + 0xc]
cmp dword [esi + 0x24], 0
jne 0x100273c4
push edi
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov ecx, dword [ebx]
test ecx, ecx
mov dword [esp + 0x24], edi
je 0x100278f8
cmp dword [ecx + 8], 0
je 0x100278f8
mov eax, dword [ecx + 4]
mov edx, dword [ecx + eax*4 + 0xc]
test edx, edx
je 0x10027bf7
mov esi, dword [esi + 0x44]
test esi, esi
jne 0x100274e1
tzcnt ebx, edx
mov esi, dword [esp + 0x14]
mov edi, eax
shl edi, 5
or edi, ebx
btc edx, ebx
mov ebx, eax
mov eax, dword [esp + 0x18]
imul edi, dword [esi + eax + 0x64]
mov eax, dword [esi + eax + 0x70]
mov dword [ecx + ebx*4 + 0xc], edx
add eax, ecx
add edi, eax
dec dword [ecx + 8]
mov dword [esp + 4], edi
test edi, edi
je 0x1002d56a
mov eax, dword [esp + 0x10]
add dword [esi + 0x30], eax
xor ebx, ebx
cmp dword [esi + 0x24], 0
jne 0x10027447
push dword [esp + 0x24]
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test bl, bl
je 0x100272e9
jmp 0x1002df3d
cmp eax, 0xf00
ja 0x1002755a
lea edi, [eax + 0xff]
and edi, 0xffffff00
jmp 0x1002700b
mov dword [esp + 0x28], eax
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov ebx, eax
shld ebx, ecx, 0x17
mov esi, ecx
shl esi, 0x17
xor esi, ecx
mov ecx, dword [edi + 0xc]
xor ebx, eax
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, ebx
mov dword [esp + 0x24], ebx
shr ebx, 0x11
xor ebx, eax
mov eax, dword [edi + 8]
mov dword [edi + 4], ecx
shld dword [esp + 0x24], esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, dword [esp + 0x24]
mov dword [edi], eax
mov dword [edi + 0xc], ebx
mov dword [edi + 8], ecx
add ecx, eax
mov esi, edx
ror esi, cl
test esi, esi
je 0x100276ad
tzcnt ebx, esi
mov edi, dword [esp + 8]
mov eax, dword [esp + 0x28]
add ebx, ecx
and ebx, 0x1f
jmp 0x10027131
mov dword [esp + 0xc], eax
mov dword [esp + 0x2c], ecx
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov ebx, eax
shld ebx, ecx, 0x17
mov edi, ecx
shl edi, 0x17
xor edi, ecx
mov ecx, dword [esi + 0xc]
xor ebx, eax
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, ebx
mov dword [esp + 4], ebx
shr ebx, 0x11
xor ebx, eax
mov eax, dword [esi + 8]
mov dword [esi + 4], ecx
shld dword [esp + 4], edi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, edi
xor ecx, dword [esp + 4]
mov dword [esi], eax
mov dword [esi + 0xc], ebx
mov dword [esi + 8], ecx
add ecx, eax
mov esi, edx
ror esi, cl
test esi, esi
je 0x100276b7
tzcnt ebx, esi
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
add ebx, ecx
and ebx, 0x1f
mov ecx, dword [esp + 0x2c]
jmp 0x100273fe
lea edi, [eax + 0xfff]
and edi, 0x1ff000
mov al, 1
jmp 0x1002700d
mov edi, dword [0x100a4744]
cmp dword [esp + 0x18], 0xf00
jbe 0x10027098
mov ecx, edi
mov edx, dword [esp + 0x18]
push 0
call fcn.10035340
add esp, 4
mov esi, eax
jmp 0x10027184
mov ecx, dword [edx]
cmp ecx, ebx
je 0x100272bd
test ecx, ecx
je 0x100291f0
cmp ebx, ecx
jae 0x10027d30
cmp dword [ecx + 8], 0
je 0x100291f0
mov eax, ecx
and eax, 0xfff00000
shr ecx, 0xa
and ecx, 0x3fc
lea edi, [ecx + ecx*2]
or edi, eax
add edi, 0x10
mov eax, dword [edx + 4]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
test eax, eax
je 0x10028afb
lea ecx, [esp + 0x88]
mov dword [esp + 0x10], 0
mov edx, dword [esp + 0x10]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x10027640
mov edx, dword [ecx + 4]
test dl, 1
je 0x10027640
mov esi, edi
mov edi, dword [ecx]
test edi, edi
je 0x10027628
test byte [edi + 4], 1
jne 0x1002764c
mov ecx, eax
mov edi, esi
xor esi, esi
cmp ecx, edi
seta dl
jbe 0x10027644
mov eax, dword [ecx]
test eax, eax
jne 0x10027600
jmp 0x10029179
mov ecx, eax
jmp 0x1002762e
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
jmp 0x10027637
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov dword [esp + 8], edx
mov edx, dword [ecx]
mov edi, dword [ecx + 4]
and edi, 1
add edi, dword [esp + 8]
mov dword [ecx + 4], edi
test edx, edx
je 0x1002d336
and byte [edx + 4], 0xfe
mov edx, dword [esp + 0x10]
cmp dword [edx], eax
mov eax, edx
mov edi, esi
jne 0x100290f1
mov dword [eax], ecx
jmp 0x1002762c
mov eax, dword [esp + 0x18]
sub edx, eax
jbe 0x100272e9
add eax, dword [esp + 4]
push edx
push 0xe5
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
jmp 0x100272e9
mov ebx, 0x20
jmp 0x100274cf
mov ebx, 0x20
jmp 0x10027544
lea ecx, [eax + 0xff]
mov eax, ecx
and eax, 0x1f00
mov dword [esp + 0x30], eax
shr ecx, 8
add ecx, 0x1e
jmp 0x100270bf
add eax, 0xff
mov ecx, eax
and ecx, 0x1f00
mov dword [esp + 0x10], ecx
shr eax, 8
add eax, 0x1e
jmp 0x1002738f
mov eax, dword [esp + 0xc]
mov edx, dword [edi + eax + 0x60]
test edx, edx
mov dword [esp + 0x28], ecx
je 0x1002979e
lea ebx, [edi + eax]
add ebx, 0x60
mov eax, edx
mov edi, eax
mov eax, dword [eax]
test eax, eax
jne 0x10027715
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], 0
xor esi, esi
dec esi
xor eax, eax
cmp edx, edi
setb al
cmova eax, esi
cmp eax, 0xffffffff
jne 0x10028435
mov ecx, dword [edx]
test ecx, ecx
je 0x1002d042
mov eax, dword [ecx + 4]
mov dword [esp + 0x20], 0
test al, 1
je 0x1002817c
mov dword [esp + 0x24], edx
xor esi, esi
dec esi
mov edx, ecx
xor eax, eax
cmp ecx, edi
setb al
cmova eax, esi
cmp eax, 0xffffffff
jne 0x100277f3
test edx, edx
je 0x10029ccc
mov ecx, dword [edx]
test ecx, ecx
je 0x10029ccc
mov eax, dword [ecx + 4]
test al, 1
je 0x10027799
mov dword [esp + 0x24], edx
jmp 0x10027769
mov esi, dword [ecx]
test esi, esi
je 0x100277a5
test byte [esi + 4], 1
jne 0x10027762
mov dword [esp + 0x1c], ebx
or eax, 1
mov dword [ecx + 4], eax
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1002cf4f
mov ecx, dword [eax]
test ecx, ecx
jne 0x10027813
or esi, 1
mov dword [edx + 4], esi
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
cmp dword [eax], edx
mov edx, eax
mov esi, 0xffffffff
jne 0x1002d4ac
mov dword [edx], ecx
jmp 0x10027769
test eax, eax
jne 0x10027820
xor ecx, ecx
test edx, edx
je 0x10027afd
mov eax, dword [edx + 4]
mov esi, dword [esp + 0x24]
cmp eax, 1
jbe 0x10027af3
jmp 0x1002782f
mov ebx, dword [ecx + 4]
test bl, 1
je 0x100277c3
jmp 0x10028a85
test edx, edx
je 0x1002d3c3
mov eax, dword [edx + 4]
mov esi, dword [esp + 0x20]
mov dword [esp + 0x20], esi
mov ecx, eax
and ecx, 0xfffffffe
je 0x1002784a
mov esi, dword [ecx]
test esi, esi
je 0x1002784a
test byte [esi + 4], 1
jne 0x10027762
mov esi, dword [edx]
test esi, esi
je 0x1002d3c3
mov ecx, dword [esi + 4]
test cl, 1
je 0x10028f46
mov dword [esp + 0x34], esi
and ecx, 0xfffffffe
je 0x1002d3d2
mov esi, dword [ecx]
test esi, esi
mov dword [esp + 0x1c], ebx
je 0x10027881
test byte [esi + 4], 1
jne 0x10029617
and eax, 1
or eax, ecx
mov esi, dword [esp + 0x34]
mov dword [esi + 4], eax
or byte [ecx + 4], 1
mov ecx, dword [edx]
test ecx, ecx
je 0x1002d39f
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov ebx, dword [edx + 4]
mov eax, ebx
and eax, 0xfffffffe
je 0x1002d3b4
mov esi, dword [eax]
and esi, 0xfffffffe
and ebx, 1
or ebx, esi
mov dword [edx + 4], ebx
mov dword [eax], edx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
or byte [edx + 4], 1
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
cmp dword [eax], edx
mov edx, eax
jne 0x100292b8
mov dword [edx], ecx
jmp 0x10027762
mov eax, dword [esp + 0x18]
mov edx, dword [esi + eax + 0x60]
test edx, edx
mov dword [esp + 0xc], ebx
je 0x10029877
lea ecx, [esi + eax]
add ecx, 0x60
mov eax, edx
mov esi, eax
mov eax, dword [eax]
test eax, eax
jne 0x10027914
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], 0
xor edi, edi
dec edi
xor eax, eax
cmp edx, esi
setb al
cmova eax, edi
cmp eax, 0xffffffff
mov dword [esp + 0x2c], ecx
jne 0x10028686
mov ecx, dword [edx]
test ecx, ecx
je 0x1002d051
mov eax, dword [ecx + 4]
mov dword [esp + 8], 0
test al, 1
je 0x1002820a
mov dword [esp + 4], edx
xor edi, edi
dec edi
mov edx, ecx
xor eax, eax
cmp ecx, esi
setb al
cmova eax, edi
cmp eax, 0xffffffff
jne 0x100279f2
test edx, edx
je 0x10029d28
mov ecx, dword [edx]
test ecx, ecx
je 0x10029d28
mov eax, dword [ecx + 4]
test al, 1
je 0x1002799c
mov dword [esp + 4], edx
jmp 0x1002796c
mov edi, dword [ecx]
test edi, edi
je 0x100279a8
test byte [edi + 4], 1
jne 0x10027965
or eax, 1
mov dword [ecx + 4], eax
mov edi, dword [edx + 4]
mov eax, edi
and eax, 0xfffffffe
je 0x1002cf61
mov ecx, dword [eax]
test ecx, ecx
jne 0x10027a12
or edi, 1
mov dword [edx + 4], edi
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 4]
cmp dword [eax], edx
mov edx, eax
mov edi, 0xffffffff
jne 0x1002d4cd
mov dword [edx], ecx
jmp 0x1002796c
test eax, eax
jne 0x10027a1f
xor ecx, ecx
test edx, edx
je 0x10027b46
mov eax, dword [edx + 4]
mov edi, dword [esp + 4]
cmp eax, 1
jbe 0x10027b3c
jmp 0x10027a2e
mov ebx, dword [ecx + 4]
test bl, 1
je 0x100279c2
jmp 0x10028b14
test edx, edx
je 0x1002d48e
mov eax, dword [edx + 4]
mov edi, dword [esp + 8]
mov dword [esp + 8], edi
mov ecx, eax
and ecx, 0xfffffffe
je 0x10027a49
mov edi, dword [ecx]
test edi, edi
je 0x10027a49
test byte [edi + 4], 1
jne 0x10027965
mov edi, dword [edx]
test edi, edi
je 0x1002d48e
mov ecx, dword [edi + 4]
test cl, 1
je 0x10028f9d
mov dword [esp + 0x20], edi
and ecx, 0xfffffffe
je 0x1002d42d
mov edi, dword [ecx]
test edi, edi
je 0x10027a7c
test byte [edi + 4], 1
jne 0x100296db
and eax, 1
or eax, ecx
mov edi, dword [esp + 0x20]
mov dword [edi + 4], eax
or byte [ecx + 4], 1
mov ecx, dword [edx]
test ecx, ecx
je 0x1002d446
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
mov ebx, dword [edx + 4]
mov eax, ebx
and eax, 0xfffffffe
je 0x1002d45b
mov edi, dword [eax]
and edi, 0xfffffffe
and ebx, 1
or ebx, edi
mov dword [edx + 4], ebx
mov dword [eax], edx
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
or byte [edx + 4], 1
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 4]
cmp dword [eax], edx
mov edx, eax
jne 0x100294ad
mov dword [edx], ecx
jmp 0x10027965
mov eax, dword [edx]
test eax, eax
jne 0x10028fd7
mov eax, dword [esp + 0x24]
cmp dword [eax], edx
mov edx, eax
jne 0x100295f1
mov dword [edx], ecx
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x88]
mov dword [ebx], eax
xor eax, eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov edx, 0xfffff000
and edx, dword [edi + 8]
mov dword [ecx], edx
test edx, edx
mov edi, dword [esp + 8]
jne 0x1002710b
jmp 0x1002b738
mov eax, dword [edx]
test eax, eax
jne 0x1002903c
mov eax, dword [esp + 4]
cmp dword [eax], edx
mov edx, eax
jne 0x10029604
mov dword [edx], ecx
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x88]
mov dword [ecx], eax
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov ecx, 0xfffff000
and ecx, dword [esi + 8]
mov dword [ebx], ecx
test ecx, ecx
mov esi, dword [esp + 0x14]
jne 0x100273dc
jmp 0x1002b83b
mov edx, eax
mov eax, dword [esp + 0xc]
mov ecx, dword [edi + eax + 0x6c]
mov eax, edx
mov esi, edx
shl esi, 5
mov edx, dword [esp + 0x20]
inc eax
cmp eax, ecx
jae 0x1002d52a
mov ebx, dword [edx + eax*4 + 0xc]
add esi, 0x20
mov dword [esp + 0x1c], ebx
test ebx, ebx
je 0x10027b9a
mov dword [esp + 0x28], eax
mov ebx, dword [edi + 0x44]
test ebx, ebx
jne 0x100282fa
mov ecx, dword [esp + 0x1c]
tzcnt ebx, ecx
add esi, ebx
mov eax, dword [esp + 0xc]
imul esi, dword [edi + eax + 0x64]
mov eax, dword [edi + eax + 0x70]
add eax, edx
add esi, eax
btc ecx, ebx
mov eax, dword [esp + 0x28]
mov dword [edx + eax*4 + 0xc], ecx
mov dword [edx + 4], eax
jmp 0x10027158
mov dword [ebx + 4], edx
jmp 0x10027281
mov dword [esp + 0x2c], ecx
mov edx, eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + eax + 0x6c]
mov eax, edx
mov edi, edx
shl edi, 5
inc eax
cmp eax, ecx
jae 0x1002d563
mov edx, eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + edx*4 + 0xc]
add edi, 0x20
mov dword [esp + 4], eax
test eax, eax
mov eax, edx
je 0x10027c0c
mov dword [esp + 0xc], eax
mov ebx, dword [esi + 0x44]
test ebx, ebx
jne 0x1002836f
mov edx, dword [esp + 4]
tzcnt ebx, edx
add edi, ebx
mov eax, dword [esp + 0x18]
imul edi, dword [esi + eax + 0x64]
mov eax, dword [esi + eax + 0x70]
mov ecx, dword [esp + 0x2c]
add eax, ecx
add edi, eax
btc edx, ebx
mov eax, dword [esp + 0xc]
mov dword [ecx + eax*4 + 0xc], edx
mov dword [ecx + 4], eax
jmp 0x1002741f
mov esi, edi
sub esi, edx
jb 0x100289dc
mov eax, dword [esp + 4]
shr eax, 0xc
movzx eax, al
mov dword [esp + 0x24], eax
shr edx, 0xc
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x14]
lea ecx, [eax + 0xc]
cmp dword [eax + 0x24], 0
jne 0x10027ca4
push ecx
mov ebx, ecx
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov ecx, ebx
mov edx, dword [esp + 0xc]
add edx, dword [esp + 0x24]
cmp edx, 0xfe
ja 0x100282de
lea ebx, [edx + edx*2]
mov eax, dword [esp + 0x10]
mov eax, dword [eax + ebx*4 + 0x18]
test al, 1
jne 0x100282de
and eax, 0xfffff000
cmp eax, esi
jb 0x100282de
mov dword [esp + 8], ecx
shl edx, 0xc
mov eax, esi
mov esi, dword [esp + 0x10]
add edx, esi
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xc], eax
push eax
call fcn.10037020
add esp, 4
test al, al
je 0x1002d6a3
or edi, 3
mov eax, dword [esp + 0x24]
lea eax, [eax + eax*2]
mov dword [esi + eax*4 + 0x18], edi
lea eax, [esi + ebx*4]
add eax, 0x18
mov dword [eax], 3
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
add dword [ecx + 0x34], eax
mov bl, 1
mov ecx, dword [esp + 8]
jmp 0x100282e0
mov ecx, dword [esp + 0x10]
sub eax, ecx
shr eax, 0xc
lea eax, [eax + eax*2]
lea edi, [ecx + eax*4]
add edi, 0x10
mov eax, dword [edx + 4]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
test eax, eax
je 0x10028e79
lea ecx, [esp + 0x88]
mov dword [esp + 0x10], 0
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x10027dae
mov ebx, dword [ecx + 4]
test bl, 1
je 0x10027dae
mov esi, edi
mov edi, dword [ecx]
test edi, edi
je 0x10027d96
test byte [edi + 4], 1
jne 0x10027dba
mov ecx, eax
mov edi, esi
xor esi, esi
cmp ecx, edi
seta bl
jbe 0x10027db2
mov eax, dword [ecx]
test eax, eax
jne 0x10027d6e
jmp 0x100293c9
mov ecx, eax
jmp 0x10027d9c
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
jmp 0x10027da5
and ebx, 0xfffffffe
mov dword [eax], ebx
mov edi, eax
and edi, 0xfffffffe
mov ebx, dword [ecx]
mov edx, dword [ecx + 4]
and edx, 1
or edx, edi
mov dword [ecx + 4], edx
test ebx, ebx
je 0x1002d363
and byte [ebx + 4], 0xfe
mov ebx, dword [esp + 0x10]
cmp dword [ebx], eax
mov edx, dword [esp + 4]
mov edi, esi
jne 0x1002934d
mov dword [ebx], ecx
jmp 0x10027d9a
mov eax, dword [esp + 0x14]
sub dword [eax + 0x34], ebx
mov ebx, dword [esp + 0xc]
cmp ebx, 0xff000
jae 0x1002d588
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
test al, 2
je 0x100288de
mov edi, eax
and edi, 0xfffff000
shr eax, 0xc
test eax, eax
je 0x10027ed7
lea ecx, [eax - 1]
movd xmm0, ecx
pshufd xmm0, xmm0, 0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
lea ecx, [ecx + edx*4]
add ecx, 0x3c
lea edx, [eax*4 + 0xc]
and edx, 0xfffffff0
lea edx, [edx + edx*2]
movdqa xmm1, xmmword [0x10092120]
xor esi, esi
movdqa xmm2, xmmword [0x10092130]
pxor xmm0, xmm2
pcmpeqd xmm3, xmm3
movdqa xmm4, xmmword [0x10092140]
movdqa xmm5, xmm1
pxor xmm5, xmm2
pcmpgtd xmm5, xmm0
movd ebx, xmm5
not ebx
test bl, 1
je 0x10027e93
mov dword [ecx + esi - 0x24], 8
pxor xmm5, xmm3
pextrw ebx, xmm5, 2
test bl, 1
je 0x10027ea9
mov dword [ecx + esi - 0x18], 8
pextrw ebx, xmm5, 4
test bl, 1
je 0x10027ebb
mov dword [ecx + esi - 0xc], 8
pextrw ebx, xmm5, 6
test bl, 1
je 0x10027ecc
mov dword [ecx + esi], 8
paddd xmm1, xmm4
add esi, 0x30
cmp edx, esi
jne 0x10027e74
mov esi, dword [esp + 0x10]
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x10028da2
add ecx, eax
mov dword [esi + 0xc], ecx
mov ecx, dword [esp + 0x14]
add dword [ecx + 0x48], eax
mov edx, 0xfff
mov ebx, edi
mov edi, dword [esp + 0x18]
mov ecx, dword [edi]
and ecx, edx
or ecx, ebx
mov dword [edi], ecx
mov edi, ebx
add eax, dword [esp + 8]
lea ecx, [eax + eax*2]
and edx, dword [esi + ecx*4 + 0xc]
or edx, ebx
mov dword [esi + ecx*4 + 0xc], edx
cmp eax, 0xfe
ja 0x1002a001
mov eax, dword [esi + ecx*4 + 0x18]
test al, 1
mov ebx, dword [esp + 0xc]
je 0x100286c4
cmp ebx, 0x3000
jb 0x10027f4f
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
mov eax, dword [eax + ecx*4 + 0xc]
test al, 1
je 0x10028b8a
mov eax, dword [esp + 8]
lea eax, [eax + eax*2]
mov edx, dword [esp + 0x10]
lea ecx, [edx + eax*4]
add ecx, 0x10
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 0x58]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], 0
test ecx, ecx
je 0x10028f80
lea ebx, [esp + 0x88]
lea eax, [edx + eax*4]
add eax, 0x18
mov dword [esp + 4], eax
xor esi, esi
mov eax, esi
mov esi, ebx
mov ebx, dword [ecx]
test ebx, ebx
je 0x10027fb6
mov edx, dword [ebx + 4]
test dl, 1
je 0x10027fb6
mov edi, dword [ebx]
test edi, edi
je 0x10027fb6
test byte [edi + 4], 1
jne 0x1002800b
mov ebx, ecx
mov eax, dword [esp + 4]
mov ecx, dword [eax]
mov edx, ecx
mov eax, 0xfffff000
and edx, eax
mov edi, dword [ebx + 8]
and edi, eax
xor eax, eax
cmp edx, edi
seta al
mov edx, 0xffffffff
cmovb eax, edx
cmp eax, 0xffffffff
je 0x10027ffd
xor edx, edx
inc edx
test eax, eax
jne 0x1002803f
test cl, 0x10
mov eax, 0
cmove eax, dword [esp + 0x18]
xor edx, edx
cmp eax, ebx
seta al
jae 0x1002803d
mov ecx, dword [ebx]
xor edx, edx
dec edx
test ecx, ecx
jne 0x10027f98
jmp 0x100280de
mov dword [esp + 0xc], eax
and edx, 0xfffffffe
mov dword [ecx], edx
mov edi, ecx
and edi, 0xfffffffe
mov edx, dword [ebx]
mov eax, dword [ebx + 4]
and eax, 1
or eax, edi
mov dword [ebx + 4], eax
test edx, edx
je 0x1002d381
and byte [edx + 4], 0xfe
cmp dword [esi], ecx
jne 0x10028047
mov dword [esi], ebx
jmp 0x10027fb8
mov dl, al
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
jmp 0x10028002
and ebx, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
lea eax, [ecx + ebx]
mov dword [esi + 4], eax
test ebx, ebx
je 0x1002d372
mov eax, dword [ebx]
and eax, 0xfffffffe
or eax, ecx
mov dword [esi + 4], eax
mov dword [ebx], esi
mov eax, dword [esi + 4]
and eax, 1
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
or byte [esi + 4], 1
mov eax, dword [esp + 0xc]
test eax, eax
je 0x1002cf85
cmp dword [eax], esi
je 0x100291f7
jmp 0x100292a6
mov eax, dword [esp + 4]
mov edx, dword [eax]
mov eax, edx
mov ecx, 0xfffff000
and eax, ecx
mov esi, dword [ebx + 8]
and esi, ecx
xor ecx, ecx
cmp eax, esi
seta cl
mov eax, 0xffffffff
cmovb ecx, eax
test ecx, ecx
jne 0x10028f35
jmp 0x10029549
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
mov eax, dword [esp + 0xc]
mov esi, ebx
test ecx, ecx
jne 0x10027f9c
mov esi, eax
mov eax, dword [esp + 0x18]
mov dword [eax], 0
mov dword [eax + 4], 1
cmp edx, 1
je 0x100283e2
mov dword [ebx], eax
mov eax, dword [esp + 0x88]
test eax, eax
je 0x1002d59d
mov ecx, dword [esp + 0x14]
lea edx, [ecx + 0x58]
and byte [eax + 4], 0xfe
mov dword [edx], eax
mov eax, 0xfffff001
mov ecx, dword [esp + 0x10]
and eax, dword [ecx + 0x30]
xor ebx, ebx
mov esi, 0
cmp eax, 0xfd000
je 0x1002bc39
mov ecx, dword [0x100a4758]
test ecx, ecx
je 0x1002815b
setle al
movzx eax, al
mov edx, dword [esp + 0x14]
mov eax, dword [edx + eax*4 + 0x50]
test eax, eax
cmovne ecx, eax
test ecx, ecx
js 0x1002b994
mov ebx, ecx
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x4c]
mov ecx, ebx
shl edx, cl
cmp dword [eax + 0x48], edx
mov ebx, dword [esp + 0x2c]
ja 0x1002b5bc
mov edi, dword [esp + 0x14]
jmp 0x100272cc
mov esi, dword [ecx]
test esi, esi
je 0x1002818c
test byte [esi + 4], 1
jne 0x10027762
mov dword [esp + 0x1c], ebx
or eax, 1
mov dword [ecx + 4], eax
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1002d018
mov ecx, dword [eax]
test ecx, ecx
je 0x100281b6
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002a00a
or esi, 1
mov dword [edx + 4], esi
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
and byte [ecx + 4], 0xfe
lea edx, [esp + 0x88]
mov dword [edx], ecx
mov ebx, dword [esp + 0x1c]
jmp 0x10027762
dec eax
je 0x100286b0
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor edi, edi
inc edi
shl edi, cl
cmp edi, 9
mov eax, 8
cmovb edi, eax
cmp dword [esp + 0x18], 2
cmovb edi, eax
jmp 0x1002700b
mov edi, dword [ecx]
test edi, edi
je 0x1002821a
test byte [edi + 4], 1
jne 0x10027965
or eax, 1
mov dword [ecx + 4], eax
mov edi, dword [edx + 4]
mov eax, edi
and eax, 0xfffffffe
je 0x1002d02d
mov ecx, dword [eax]
test ecx, ecx
je 0x10028240
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002a0de
or edi, 1
mov dword [edx + 4], edi
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
and byte [ecx + 4], 0xfe
lea edx, [esp + 0x88]
mov dword [edx], ecx
mov ebx, dword [esp + 0xc]
jmp 0x10027965
dec eax
je 0x100286ba
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor edx, edx
inc edx
shl edx, cl
cmp edx, 9
mov eax, 8
cmovb edx, eax
cmp dword [esp + 0x18], 2
cmovb edx, eax
mov dword [esp + 0x30], edx
mov eax, edx
shr eax, 3
or eax, 1
bsr ecx, eax
jmp 0x100270bf
dec eax
je 0x100288d4
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor edx, edx
inc edx
shl edx, cl
cmp edx, 9
mov eax, 8
cmovb edx, eax
cmp dword [esp + 0x18], 2
cmovb edx, eax
mov dword [esp + 0x10], edx
mov eax, edx
shr eax, 3
or eax, 1
bsr eax, eax
jmp 0x1002738f
xor ebx, ebx
cmp dword [ecx + 0x18], 0
jne 0x100282ed
push ecx
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test bl, bl
je 0x10027043
jmp 0x100272e9
mov dword [esp + 0x24], esi
mov eax, dword [ebx]
mov edi, dword [ebx + 4]
mov edx, edi
shld edx, eax, 0x17
mov esi, eax
shl esi, 0x17
xor esi, eax
mov ecx, dword [ebx + 0xc]
xor edx, edi
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, edx
mov edi, edx
shr edx, 0x11
xor edx, eax
mov eax, dword [ebx + 8]
mov dword [ebx + 4], ecx
shld edi, esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, edi
mov dword [ebx], eax
mov dword [ebx + 0xc], edx
mov dword [ebx + 8], ecx
add ecx, eax
mov edx, dword [esp + 0x1c]
ror edx, cl
test edx, edx
je 0x10028987
tzcnt ebx, edx
mov esi, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
add ebx, ecx
and ebx, 0x1f
mov edi, dword [esp + 8]
mov ecx, dword [esp + 0x1c]
jmp 0x10027bc9
mov eax, dword [ebx]
mov edx, dword [ebx + 4]
mov dword [esp + 8], edx
shld edx, eax, 0x17
mov esi, eax
shl esi, 0x17
xor esi, eax
mov ecx, dword [ebx + 0xc]
xor edx, dword [esp + 8]
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, edx
mov dword [esp + 8], edx
shr edx, 0x11
xor edx, eax
mov eax, dword [ebx + 8]
mov dword [ebx + 4], ecx
shld dword [esp + 8], esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, dword [esp + 8]
mov dword [ebx], eax
mov dword [ebx + 0xc], edx
mov dword [ebx + 8], ecx
add ecx, eax
mov edx, dword [esp + 4]
ror edx, cl
test edx, edx
je 0x10028a7b
tzcnt ebx, edx
add ebx, ecx
and ebx, 0x1f
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 4]
jmp 0x10027c43
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, eax
or ecx, dword [esp + 0x18]
mov dword [ebx + 4], ecx
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
mov eax, dword [esp + 0x18]
mov dword [eax], ebx
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov eax, dword [esp + 0x18]
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x18]
or byte [ebx + 4], 1
cmp dword [esi], ebx
jne 0x10028e5a
mov dword [esi], eax
jmp 0x100280fa
test eax, eax
jne 0x1002906e
mov eax, dword [edx + 4]
cmp eax, 1
ja 0x1002bc12
mov eax, dword [edx]
test eax, eax
jne 0x1002bb0f
mov dword [esp + 0x88], eax
jmp 0x10027b11
cmp dword [edx], ebx
je 0x1002956a
test ecx, ecx
je 0x100289c0
mov ecx, dword [esp + 0x10]
sub eax, ecx
shr eax, 0xc
lea eax, [eax + eax*2]
lea edi, [ecx + eax*4]
add edi, 0x10
mov edx, dword [edx + 4]
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], 0
xor ecx, ecx
dec ecx
xor eax, eax
cmp edx, edi
setb al
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x10029ae2
test edx, edx
je 0x1002d157
mov ecx, dword [edx]
test ecx, ecx
je 0x1002d157
mov eax, dword [ecx + 4]
mov dword [esp + 0xc], 0
test al, 1
je 0x10029445
mov dword [esp + 0x10], edx
xor esi, esi
dec esi
mov edx, ecx
xor eax, eax
cmp edx, edi
setb al
cmova eax, esi
cmp eax, 0xffffffff
jne 0x10028567
test edx, edx
je 0x1002baad
mov ecx, dword [edx]
test ecx, ecx
je 0x1002baad
mov eax, dword [ecx + 4]
test al, 1
jne 0x1002855e
mov esi, dword [ecx]
test esi, esi
je 0x1002850e
test byte [esi + 4], 1
jne 0x100284d1
mov dword [esp + 8], edi
or eax, 1
mov dword [ecx + 4], eax
mov eax, dword [edx + 4]
mov esi, eax
and esi, 0xfffffffe
je 0x1002d060
mov edi, dword [esi]
test edi, edi
jne 0x10028587
or eax, 1
mov dword [edx + 4], eax
mov eax, dword [esi]
or eax, 1
mov dword [edx + 4], eax
mov dword [esi], edx
mov edi, esi
mov eax, dword [esp + 0x10]
cmp dword [eax], edx
mov edx, eax
mov esi, 0xffffffff
jne 0x1002d6aa
mov dword [edx], edi
mov edx, edi
mov edi, dword [esp + 8]
jmp 0x100284da
mov dword [esp + 0x10], edx
jmp 0x100284d8
test eax, eax
jne 0x10028598
xor ecx, ecx
test edx, edx
je 0x1002899b
mov esi, dword [edx + 4]
mov eax, dword [esp + 0x10]
cmp esi, 1
jbe 0x10028991
jmp 0x100285a7
mov ecx, dword [edi + 4]
mov dword [esp + 0x20], ecx
test cl, 1
je 0x1002852c
jmp 0x10029e53
test edx, edx
je 0x1002d5d9
mov esi, dword [edx + 4]
mov eax, dword [esp + 0xc]
mov dword [esp + 0xc], eax
mov ecx, esi
and ecx, 0xfffffffe
je 0x100285c2
mov eax, dword [ecx]
test eax, eax
je 0x100285c2
test byte [eax + 4], 1
jne 0x100284d1
mov eax, dword [edx]
test eax, eax
je 0x1002d5d9
mov ecx, dword [eax + 4]
test cl, 1
je 0x1002a1f8
mov dword [esp + 0x20], eax
and ecx, 0xfffffffe
je 0x1002d5e8
mov eax, dword [ecx]
test eax, eax
je 0x100285f5
test byte [eax + 4], 1
jne 0x1002b606
and esi, 1
or esi, ecx
mov eax, dword [esp + 0x20]
mov dword [eax + 4], esi
or byte [ecx + 4], 1
mov ecx, dword [edx]
test ecx, ecx
je 0x1002d601
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov dword [esp + 0x20], esi
and esi, 0xfffffffe
je 0x1002d616
mov eax, dword [esi]
and eax, 0xfffffffe
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
and eax, 1
add eax, dword [esp + 8]
mov dword [edx + 4], eax
mov dword [esi], edx
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
or byte [edx + 4], 1
mov eax, dword [esp + 0x10]
cmp dword [eax], edx
mov edx, eax
je 0x100294a6
mov eax, ecx
and eax, 0xfffffffe
mov esi, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov dword [esi + 4], edx
mov edx, esi
jmp 0x100284d1
test eax, eax
jne 0x100291fe
mov eax, dword [edx + 4]
cmp eax, 1
ja 0x1002bc6b
mov eax, dword [edx]
test eax, eax
jne 0x1002bbbb
mov dword [esp + 0x88], eax
jmp 0x10027b5a
mov ecx, 0x20
jmp 0x100281eb
mov ecx, 0x20
jmp 0x10028275
mov dword [esp + 0x28], eax
mov dword [esp + 0x3c], edi
mov edi, dword [esp + 0x10]
lea esi, [edi + ecx*4]
add esi, 0x18
mov edx, 0xfffff000
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x58]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
mov dword [esp + 4], esi
mov ebx, dword [esi]
mov dword [esp + 0x1c], ebx
and ebx, edx
mov esi, dword [eax + 8]
and esi, edx
xor edx, edx
cmp ebx, esi
seta dl
lea ecx, [edi + ecx*4 + 0x10]
mov dword [esp + 0x30], ecx
mov ecx, 0xffffffff
cmovb edx, ecx
test edx, edx
je 0x10029ac2
cmp edx, 0xffffffff
jne 0x100292d1
mov edx, dword [eax]
test edx, edx
je 0x1002d745
mov ecx, dword [edx + 4]
mov dword [esp + 0x1c], 0
test cl, 1
je 0x100294ef
mov edi, eax
mov eax, edx
mov ecx, dword [esp + 4]
mov edx, dword [ecx]
mov ebx, edx
mov ecx, 0xfffff000
and ebx, ecx
mov esi, dword [eax + 8]
and esi, ecx
xor ecx, ecx
cmp ebx, esi
seta cl
mov esi, 0xffffffff
cmovb ecx, esi
test ecx, ecx
mov ebx, dword [esp + 0xc]
je 0x100287a6
cmp ecx, 0xffffffff
jne 0x100287c0
mov edx, dword [eax]
test edx, edx
je 0x1002a23a
mov ecx, dword [edx + 4]
test cl, 1
jne 0x1002874b
mov esi, dword [edx]
test esi, esi
je 0x1002888d
test byte [esi + 4], 1
jne 0x1002874b
jmp 0x1002888d
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 0x30]
xor ecx, ecx
cmp edx, eax
seta dl
jb 0x1002877f
mov cl, dl
jmp 0x1002877a
test ecx, ecx
je 0x1002887c
mov esi, dword [eax + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x100287e2
mov ecx, dword [edx]
test ecx, ecx
je 0x100287e2
test byte [ecx + 4], 1
jne 0x1002874b
mov ecx, dword [eax]
test ecx, ecx
je 0x1002d6f4
mov edx, dword [ecx + 4]
test dl, 1
je 0x10029a88
and edx, 0xfffffffe
je 0x1002cfac
mov ebx, dword [edx]
test ebx, ebx
je 0x10028811
test byte [ebx + 4], 1
jne 0x1002a359
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x1002d6c1
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002d6d6
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
cmp dword [edi], eax
jne 0x10029d7d
mov dword [edi], edx
mov eax, edi
jmp 0x1002874b
mov esi, dword [eax + 4]
mov dword [esp + 0x1c], edi
cmp esi, 1
jbe 0x100288f2
jmp 0x100287cb
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002cf34
mov edx, dword [ecx]
test edx, edx
je 0x100288b3
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1002a1a9
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
cmp dword [edi], eax
jne 0x1002d814
mov dword [edi], edx
jmp 0x1002874d
mov ecx, 0x20
jmp 0x100282b0
mov eax, dword [esp + 4]
mov eax, dword [eax]
movzx eax, byte [eax + 0x1e]
mov edi, eax
shl edi, 0xc
jmp 0x10027e23
mov ecx, dword [eax]
test ecx, ecx
je 0x10028923
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
cmp dword [edi], eax
jne 0x10029854
mov dword [edi], ecx
mov edx, dword [esp + 0x88]
mov edi, dword [esp + 0x3c]
mov eax, dword [esp + 0x14]
mov dword [eax + 0x58], edx
xor eax, eax
mov ecx, dword [esp + 0x30]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x28]
mov ecx, 0xfffff000
and eax, ecx
add edi, eax
mov eax, 0xfff
mov edx, dword [esp + 0x18]
mov ecx, dword [edx]
and ecx, eax
or ecx, edi
mov dword [edx], ecx
mov ecx, edi
shr ecx, 0xc
add ecx, dword [esp + 8]
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x10]
and eax, dword [edx + ecx*4 + 0xc]
or eax, edi
mov dword [edx + ecx*4 + 0xc], eax
jmp 0x10027f33
mov ebx, 0x20
jmp 0x10028355
mov esi, dword [edx]
test esi, esi
jne 0x1002a28b
mov eax, dword [esp + 0x10]
cmp dword [eax], edx
mov edx, eax
jne 0x1002ad6e
mov dword [edx], ecx
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x88]
mov dword [edx + 4], eax
xor eax, eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x14]
mov edi, edx
mov edx, ebx
push 1
call fcn.1003aac0
add esp, 4
mov esi, eax
dec dword [edi + 0x18]
jmp 0x100272bd
mov dword [esp + 0xc], esi
mov eax, edx
mov ecx, dword [esp + 0x18]
sub eax, ecx
add ecx, dword [esp + 4]
push eax
push 0xe5
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x14]
lea esi, [eax + 0xc]
cmp dword [eax + 0x24], 0
jne 0x10028a0f
push esi
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov ebx, dword [esp + 4]
mov eax, ebx
shr eax, 0xc
movzx eax, al
mov ecx, edi
or ecx, 3
lea edx, [eax + eax*2]
mov dword [esp + 0x18], esi
mov esi, dword [esp + 0x10]
mov dword [esi + edx*4 + 0x18], ecx
mov ecx, edi
shr ecx, 0xc
add ecx, eax
mov edx, dword [esp + 0x2c]
sub edx, edi
or edx, 3
lea eax, [ecx + ecx*2]
mov dword [esi + eax*4 + 0x18], edx
add edi, ebx
mov esi, dword [esp + 0x14]
mov ecx, esi
mov edx, edi
push 1
call fcn.1003aac0
add esp, 4
mov eax, dword [esp + 0xc]
add dword [esi + 0x34], eax
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x18], 0
jne 0x100272e9
push eax
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
jmp 0x100272e9
mov ebx, 0x20
jmp 0x100283d0
and ebx, 0xfffffffe
mov dword [eax], ebx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x1002d2eb
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x10028f25
mov ebx, dword [eax + 4]
test bl, 1
je 0x10028f25
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x1002d2dc
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
jmp 0x100277d5
mov dword [edi], 0
mov dword [edi + 4], 1
lea ecx, [esp + 0x88]
jmp 0x100291d8
and ebx, 0xfffffffe
mov dword [eax], ebx
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea edi, [eax + ecx]
mov dword [edx + 4], edi
test ecx, ecx
je 0x1002d309
mov edi, dword [ecx]
and edi, 0xfffffffe
or edi, eax
mov dword [edx + 4], edi
mov dword [ecx], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x10028f2d
mov ebx, dword [eax + 4]
test bl, 1
je 0x10028f2d
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov eax, dword [edx + 4]
mov edi, eax
or edi, 1
mov dword [edx + 4], edi
and eax, 0xfffffffe
je 0x1002d2fa
mov edi, dword [eax]
or edi, 1
mov dword [edx + 4], edi
mov dword [eax], edx
mov dword [ecx], eax
jmp 0x100279d4
mov edx, 0xfffff000
mov dword [esp + 0x18], eax
shr eax, 0xc
mov ecx, dword [esp + 8]
sub ecx, eax
mov dword [esp + 8], ecx
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + 0x10]
lea ecx, [ecx + eax*4]
add ecx, 0x10
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x58]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
mov dword [esp + 4], ecx
mov ebx, dword [ecx + 8]
mov dword [esp + 0xc], ebx
and ebx, edx
mov esi, dword [eax + 8]
and esi, edx
xor edx, edx
dec edx
xor ecx, ecx
cmp ebx, esi
seta cl
cmovb ecx, edx
test ecx, ecx
mov dword [esp + 0x3c], edi
je 0x10029de1
cmp ecx, 0xffffffff
jne 0x10029575
mov edx, dword [eax]
test edx, edx
je 0x1002d829
mov ecx, dword [edx + 4]
mov dword [esp + 0xc], 0
test cl, 1
je 0x10029681
mov edi, eax
mov eax, edx
mov ecx, dword [esp + 4]
mov ebx, dword [ecx + 8]
mov ecx, ebx
mov edx, 0xfffff000
and ecx, edx
mov esi, dword [eax + 8]
and esi, edx
xor edx, edx
cmp ecx, esi
seta dl
mov ecx, 0xffffffff
cmovb edx, ecx
test edx, edx
je 0x10028c70
cmp edx, 0xffffffff
jne 0x10028c8a
mov edx, dword [eax]
test edx, edx
je 0x1002a4a9
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10028c18
mov ecx, dword [edx]
test ecx, ecx
je 0x10028d5b
test byte [ecx + 4], 1
jne 0x10028c18
jmp 0x10028d5b
test bl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 4]
xor edx, edx
cmp ecx, eax
seta cl
jb 0x10028c49
mov dl, cl
jmp 0x10028c44
test edx, edx
je 0x10028d46
mov esi, dword [eax + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x10028cac
mov ecx, dword [edx]
test ecx, ecx
je 0x10028cac
test byte [ecx + 4], 1
jne 0x10028c18
mov ebx, dword [eax]
test ebx, ebx
je 0x1002d787
mov edx, dword [ebx + 4]
test dl, 1
je 0x10029da7
and edx, 0xfffffffe
je 0x1002d006
mov ecx, dword [edx]
test ecx, ecx
je 0x10028cdb
test byte [ecx + 4], 1
jne 0x1002a51c
and esi, 1
or esi, edx
mov dword [ebx + 4], esi
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x1002d754
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
je 0x1002d769
mov ecx, dword [esi]
and ecx, 0xfffffffe
and ebx, 1
or ebx, ecx
mov dword [eax + 4], ebx
mov dword [esi], eax
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, esi
mov dword [edx + 4], ecx
or byte [eax + 4], 1
cmp dword [edi], eax
jne 0x10029ecd
mov dword [edi], edx
mov eax, edi
jmp 0x10028c18
mov esi, dword [eax + 4]
mov dword [esp + 0xc], edi
cmp esi, 1
jbe 0x10028e92
jmp 0x10028c95
or ebx, 1
mov dword [edx + 4], ebx
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
je 0x1002cf73
mov edx, dword [esi]
test edx, edx
je 0x10028d81
mov ecx, dword [edx + 4]
test cl, 1
jne 0x1002a45a
or ebx, 1
mov dword [eax + 4], ebx
mov ecx, dword [esi]
or ecx, 1
mov dword [eax + 4], ecx
mov dword [esi], eax
mov edx, esi
cmp dword [edi], eax
jne 0x1002d838
mov dword [edi], edx
jmp 0x10028c1a
mov ecx, dword [esp + 0x14]
mov ebx, dword [ecx + 0x38]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], 0
test ebx, ebx
je 0x100298d8
lea ecx, [esp + 0x88]
xor esi, esi
mov dword [esp + 0x3c], edi
mov dword [esp + 4], esi
mov esi, ecx
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x10028dfa
mov edx, dword [ecx + 8]
test dl, 1
je 0x10028dfa
mov edi, dword [ecx + 4]
test edi, edi
je 0x10028df2
test byte [edi + 8], 1
jne 0x10028e19
mov ecx, ebx
mov edi, dword [esp + 0x3c]
jmp 0x10028dfc
mov ecx, ebx
cmp ecx, dword [esp + 0x10]
seta dl
jbe 0x10028e11
mov ebx, dword [ecx + 4]
test ebx, ebx
jne 0x10028dd0
jmp 0x10029f5b
mov ebx, dword [ecx + 8]
and ebx, 0xfffffffe
jmp 0x10028e08
and edx, 0xfffffffe
mov dword [ebx + 4], edx
mov edx, ebx
and edx, 0xfffffffe
mov dword [esp + 0x30], edx
mov edx, dword [ecx + 4]
mov edi, dword [ecx + 8]
and edi, 1
add edi, dword [esp + 0x30]
mov dword [ecx + 8], edi
test edx, edx
je 0x1002d5ac
and byte [edx + 8], 0xfe
mov edx, esi
cmp dword [esi + 4], ebx
mov edi, dword [esp + 0x3c]
jne 0x10029ee4
mov dword [edx + 4], ecx
mov esi, edx
jmp 0x10028dfc
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp ebx, ecx
jne 0x100280fa
and eax, 1
or eax, dword [esp + 0x18]
mov dword [esi + 4], eax
jmp 0x100280fa
mov dword [edi], 0
mov dword [edi + 4], 1
lea ecx, [esp + 0x88]
jmp 0x10029424
mov edx, dword [eax]
test edx, edx
je 0x10028ec3
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
and dword [edx + 4], 1
cmp dword [edi], eax
jne 0x10029d94
mov dword [edi], edx
mov edx, dword [esp + 0x88]
mov edi, dword [esp + 0x3c]
mov ebx, 0xfffff000
mov esi, dword [esp + 0x18]
and esi, ebx
add esi, edi
mov eax, dword [esp + 0x14]
mov dword [eax + 0x58], edx
xor eax, eax
mov edx, dword [esp + 4]
mov dword [edx], eax
mov dword [edx + 4], eax
mov eax, 0xfff
mov ecx, dword [edx + 8]
and ecx, eax
or ecx, esi
mov dword [edx + 8], ecx
mov ecx, esi
shr ecx, 0xc
add ecx, dword [esp + 8]
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x10]
and eax, dword [edx + ecx*4 + 0xc]
or eax, esi
mov dword [edx + ecx*4 + 0xc], eax
jmp 0x10027f4f
mov dword [edx + 4], eax
jmp 0x100277d5
mov dword [edx + 4], eax
jmp 0x100279d4
xor edx, edx
inc edx
cmp ecx, 0xffffffff
jne 0x100280c8
jmp 0x10029cc2
or ecx, 1
mov dword [esi + 4], ecx
mov eax, dword [esi]
test eax, eax
je 0x10028f5e
mov ecx, dword [eax + 4]
test cl, 1
jne 0x10029745
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1002d3eb
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
jmp 0x100278e3
mov eax, dword [esp + 0x18]
mov dword [eax], 0
mov dword [eax + 4], 1
lea ebx, [esp + 0x88]
jmp 0x100280f8
or ecx, 1
mov dword [edi + 4], ecx
mov eax, dword [edi]
test eax, eax
je 0x10028fb5
mov ecx, dword [eax + 4]
test cl, 1
jne 0x100297ff
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1002d49d
mov edi, dword [ecx]
and edi, 0xfffffffe
and eax, 1
or eax, edi
mov dword [edx + 4], eax
mov dword [ecx], edx
jmp 0x10027ade
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
or byte [edx + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x10027afd
mov esi, dword [0x100a4744]
mov edx, dword [esp + 0x18]
cmp edx, 0xf00
jbe 0x10027368
mov ecx, esi
cmp edx, 0xfd000
ja 0x1002a3dc
push 0
call fcn.10035340
add esp, 4
jmp 0x100272e5
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov edi, dword [eax + 4]
and edi, 1
or edi, ecx
mov dword [eax + 4], edi
mov edi, dword [edx + 4]
and edi, 1
or edi, ecx
mov dword [eax + 4], edi
or byte [edx + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x10027b46
mov eax, dword [edx + 4]
mov dword [esp + 0x20], 0
mov ecx, eax
and ecx, 0xfffffffe
je 0x10029090
mov esi, dword [ecx]
test esi, esi
je 0x10029090
test byte [esi + 4], 1
jne 0x10027762
mov ecx, dword [edx]
test ecx, ecx
je 0x1002d9b1
test byte [ecx + 4], 1
jne 0x1002a50a
mov dword [esp + 0x1c], ebx
or eax, 1
mov dword [edx + 4], eax
mov eax, dword [ecx]
test eax, eax
je 0x100290c0
mov ebx, dword [eax + 4]
test bl, 1
jne 0x1002b93f
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1002da79
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
mov ebx, dword [esp + 0x1c]
lea edx, [esp + 0x88]
jmp 0x100278f1
and ecx, 0xfffffffe
mov esi, eax
mov eax, dword [eax + 4]
and eax, 1
lea edx, [eax + ecx]
mov dword [esp + 0x10], esi
mov dword [esi + 4], edx
test ecx, ecx
mov esi, 0
je 0x1002d327
mov edx, dword [ecx]
and edx, 0xfffffffe
or edx, eax
mov eax, dword [esp + 0x10]
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, dword [eax + 4]
and edx, 1
mov dword [esp + 8], edx
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
add edx, dword [esp + 8]
mov dword [ecx + 4], edx
or byte [eax + 4], 1
mov edx, dword [esp + 0xc]
test edx, edx
je 0x1002d318
cmp dword [edx], eax
jne 0x10029867
mov dword [edx], ecx
cmp edi, ecx
setb dl
jb 0x10029cbb
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [esp + 0x10], ecx
test eax, eax
jne 0x1002760c
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10], eax
mov dword [edi], 0
mov dword [edi + 4], 1
test dl, dl
jne 0x100291d4
cmp ecx, edi
mov edx, dword [esp + 4]
jae 0x100291d8
mov eax, dword [ecx + 4]
and eax, 1
mov edx, eax
or edx, edi
mov dword [ecx + 4], edx
mov edx, dword [edi]
and edx, 0xfffffffe
or edx, eax
mov dword [ecx + 4], edx
mov dword [edi], ecx
mov eax, dword [ecx + 4]
and eax, 1
mov edx, dword [edi + 4]
and edx, 0xfffffffe
or edx, eax
mov dword [edi + 4], edx
or byte [ecx + 4], 1
mov eax, dword [esp + 0x10]
cmp dword [eax], ecx
jne 0x1002927d
mov dword [eax], edi
mov edx, dword [esp + 4]
jmp 0x100291da
mov edx, dword [esp + 4]
mov dword [ecx], edi
mov eax, dword [esp + 0x88]
test eax, eax
je 0x1002d536
and byte [eax + 4], 0xfe
mov dword [edx + 4], eax
mov dword [edx], ebx
jmp 0x100272bd
mov dword [eax], ebx
jmp 0x10028098
mov eax, dword [edx + 4]
mov dword [esp + 8], 0
mov ecx, eax
and ecx, 0xfffffffe
je 0x10029220
mov edi, dword [ecx]
test edi, edi
je 0x10029220
test byte [edi + 4], 1
jne 0x10027965
mov ecx, dword [edx]
test ecx, ecx
je 0x1002d9c6
test byte [ecx + 4], 1
jne 0x1002a58a
or eax, 1
mov dword [edx + 4], eax
mov eax, dword [ecx]
test eax, eax
je 0x1002924c
mov ebx, dword [eax + 4]
test bl, 1
jne 0x1002ba06
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1002da88
mov edi, dword [ecx]
and edi, 0xfffffffe
and eax, 1
or eax, edi
mov dword [edx + 4], eax
mov dword [ecx], edx
mov ebx, dword [esp + 0xc]
lea edx, [esp + 0x88]
jmp 0x10027aec
mov dword [esp + 0x10], eax
mov eax, dword [eax + 4]
mov edx, eax
and edx, 0xfffffffe
cmp ecx, edx
mov edx, dword [esp + 4]
jne 0x100291da
and eax, 1
or eax, edi
mov ecx, dword [esp + 0x10]
mov dword [ecx + 4], eax
jmp 0x100291da
mov ecx, eax
mov eax, dword [eax + 4]
and eax, 1
or eax, ebx
mov dword [ecx + 4], eax
jmp 0x10028098
mov eax, ecx
and eax, 0xfffffffe
mov esi, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov dword [esi + 4], edx
mov edx, esi
jmp 0x10027762
test edx, edx
je 0x10029e01
mov ecx, dword [eax + 4]
mov dword [esp + 0x1c], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x100292fb
mov esi, dword [edx]
test esi, esi
je 0x100292fb
test byte [esi + 4], 1
jne 0x1002874b
mov edx, dword [eax]
test edx, edx
je 0x1002d10f
test byte [edx + 4], 1
jne 0x1002b67e
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10029327
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002bb66
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1002da43
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1002953b
and ecx, 0xfffffffe
mov eax, dword [ebx + 4]
and eax, 1
lea edx, [eax + ecx]
mov dword [ebx + 4], edx
test ecx, ecx
mov esi, 0
je 0x1002d354
mov edx, dword [ecx]
and edx, 0xfffffffe
or edx, eax
mov dword [ebx + 4], edx
mov dword [ecx], ebx
mov eax, dword [ebx + 4]
and eax, 1
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
or edx, eax
mov dword [ecx + 4], edx
or byte [ebx + 4], 1
mov eax, dword [esp + 0xc]
test eax, eax
je 0x1002d345
cmp dword [eax], ebx
mov edx, dword [esp + 4]
jne 0x10029ca3
mov dword [eax], ecx
cmp edi, ecx
setb bl
jb 0x10029d21
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [esp + 0x10], ecx
test eax, eax
jne 0x10027d7a
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10], eax
mov dword [edi], 0
mov dword [edi + 4], 1
test bl, bl
jne 0x10029424
cmp ecx, edi
mov ebx, dword [esp + 0x2c]
jae 0x10029428
mov eax, dword [ecx + 4]
and eax, 1
mov edx, eax
or edx, edi
mov dword [ecx + 4], edx
mov edx, dword [edi]
and edx, 0xfffffffe
or edx, eax
mov dword [ecx + 4], edx
mov dword [edi], ecx
mov eax, dword [ecx + 4]
and eax, 1
mov edx, dword [edi + 4]
and edx, 0xfffffffe
or edx, eax
mov dword [edi + 4], edx
or byte [ecx + 4], 1
mov eax, dword [esp + 0x10]
cmp dword [eax], ecx
jne 0x100294c6
mov dword [eax], edi
mov edx, dword [esp + 4]
jmp 0x1002942a
mov ebx, dword [esp + 0x2c]
mov dword [ecx], edi
mov eax, dword [esp + 0x88]
test eax, eax
je 0x1002d579
and byte [eax + 4], 0xfe
mov dword [edx + 4], eax
jmp 0x100272c1
mov esi, dword [ecx]
test esi, esi
je 0x10029455
test byte [esi + 4], 1
jne 0x100284d1
or eax, 1
mov dword [ecx + 4], eax
mov ecx, dword [edx + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1002d124
mov dword [esp + 0x10], ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x10029485
mov esi, dword [ecx + 4]
mov dword [esp + 0x20], esi
test byte [esp + 0x20], 1
jne 0x1002c220
mov ecx, dword [esp + 0x10]
or ecx, 1
mov dword [edx + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
and byte [ecx + 4], 0xfe
lea edx, [esp + 0x88]
mov dword [edx], ecx
jmp 0x100284d1
mov eax, ecx
and eax, 0xfffffffe
mov edi, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov dword [edi + 4], edx
mov edx, edi
jmp 0x10027965
mov dword [esp + 0x10], eax
mov eax, dword [eax + 4]
mov edx, eax
and edx, 0xfffffffe
cmp ecx, edx
mov edx, dword [esp + 4]
jne 0x1002942a
and eax, 1
or eax, edi
mov ecx, dword [esp + 0x10]
mov dword [ecx + 4], eax
jmp 0x1002942a
mov esi, dword [edx]
test esi, esi
je 0x100294ff
test byte [esi + 4], 1
jne 0x1002874b
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002cf9a
mov edx, dword [ecx]
test edx, edx
je 0x10029525
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1002bcc5
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x88]
mov dword [eax], edx
jmp 0x1002874b
test dl, 0x10
mov eax, 0
cmove eax, dword [esp + 0x18]
xor edx, edx
cmp eax, ebx
seta cl
jb 0x10029cc2
mov dl, cl
jmp 0x100280c8
mov dword [edx], 0
jmp 0x100289c0
test ecx, ecx
je 0x1002a08f
mov ecx, dword [eax + 4]
mov dword [esp + 0xc], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x1002959f
mov esi, dword [edx]
test esi, esi
je 0x1002959f
test byte [esi + 4], 1
jne 0x10028c18
mov edx, dword [eax]
test edx, edx
je 0x1002d166
test byte [edx + 4], 1
jne 0x1002b9f2
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x100295cb
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002beb7
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1002da97
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x100296cd
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10027b0d
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10027b56
and eax, 1
mov ebx, dword [ecx + 4]
and ebx, 0xfffffffe
or ebx, eax
mov dword [ecx + 4], ebx
and byte [esi + 4], 0xfe
mov ebx, dword [esp + 0x34]
mov eax, dword [ebx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1002d390
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [ebx + 4], eax
mov dword [ecx], ebx
mov dword [edx], ecx
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov ebx, dword [edx + 4]
mov eax, ebx
and eax, 0xfffffffe
jne 0x100278c1
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov esi, dword [edx]
test esi, esi
je 0x10029691
test byte [esi + 4], 1
jne 0x10028c18
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002cff1
mov edx, dword [ecx]
test edx, edx
je 0x100296b7
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1002c141
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x88]
mov dword [eax], edx
jmp 0x10028c18
and eax, 1
mov ebx, dword [ecx + 4]
and ebx, 0xfffffffe
or ebx, eax
mov dword [ecx + 4], ebx
and byte [edi + 4], 0xfe
mov ebx, dword [esp + 0x20]
mov eax, dword [ebx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1002d41e
mov edi, dword [ecx]
and edi, 0xfffffffe
and eax, 1
or eax, edi
mov dword [ebx + 4], eax
mov dword [ecx], ebx
mov dword [edx], ecx
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
mov ebx, dword [edx + 4]
mov eax, ebx
and eax, 0xfffffffe
jne 0x10027abc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1002d3fa
mov dword [esp + 0x1c], ebx
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1002d40f
mov ebx, dword [eax]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [edx + 4], esi
mov dword [eax], edx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
jmp 0x100278df
movzx eax, byte [edi + eax + 0x7a]
mov dword [esp + 0x34], eax
lea eax, [edi + 0x58]
mov dword [esp + 0x48], eax
mov ecx, dword [edi + 0x58]
test ecx, ecx
je 0x1002b73f
mov edx, dword [esp + 0x34]
shl edx, 0xc
xor eax, eax
xor esi, esi
dec esi
mov edi, dword [ecx + 8]
mov ebx, 0xfffff000
and edi, ebx
xor ebx, ebx
cmp edx, edi
seta bl
cmovb ebx, esi
lea edi, [ebx + 1]
cmp edi, 2
jae 0x100297ee
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x100297c5
jmp 0x100298f6
cmp ebx, 1
jne 0x1002d8c2
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
jmp 0x100297e5
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1002d46a
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
mov edi, dword [edx + 4]
mov eax, edi
and eax, 0xfffffffe
je 0x1002d47f
mov ebx, dword [eax]
and ebx, 0xfffffffe
and edi, 1
or edi, ebx
mov dword [edx + 4], edi
mov dword [eax], edx
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
jmp 0x10027ada
and ecx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
or eax, ecx
mov dword [edi + 4], eax
jmp 0x1002892d
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10029154
movzx eax, byte [esi + eax + 0x7a]
mov dword [esp + 0x20], eax
lea eax, [esi + 0x58]
mov dword [esp + 0x34], eax
mov ecx, dword [esi + 0x58]
test ecx, ecx
je 0x1002b8ae
mov edx, dword [esp + 0x20]
shl edx, 0xc
xor eax, eax
xor edi, edi
dec edi
mov esi, dword [ecx + 8]
mov ebx, 0xfffff000
and esi, ebx
xor ebx, ebx
cmp edx, esi
seta bl
cmovb ebx, edi
lea esi, [ebx + 1]
cmp esi, 2
jae 0x100298c7
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x1002989e
jmp 0x10029b12
cmp ebx, 1
jne 0x1002d93e
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
jmp 0x100298be
mov ebx, dword [esp + 0x10]
mov dword [ebx + 4], 0
mov dword [ebx + 8], 1
lea ecx, [esp + 0x88]
jmp 0x10029fbc
test eax, eax
mov edi, dword [esp + 8]
je 0x1002b73f
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
and edx, 0xfffffff8
shl edx, 9
add edx, ecx
mov ecx, edx
and ecx, 0xfff00000
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x58], eax
mov eax, edx
shr eax, 0xc
movzx esi, al
lea eax, [esi*4]
lea eax, [eax + eax*2]
or eax, ecx
mov dword [esp + 0x1c], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x5c], eax
mov edi, dword [esp + 0x34]
test edi, edi
mov dword [esp + 0x38], ecx
mov dword [esp + 0x50], esi
mov dword [esp + 0x20], edx
je 0x1002a59c
xor eax, eax
inc eax
cmp edi, 2
cmovae eax, edi
mov dword [esp + 0x40], eax
lea eax, [esi + esi*2]
lea ebx, [ecx + eax*4]
add ebx, 0x18
mov dword [esp + 0x4c], 0
xor esi, esi
mov dword [esp + 0x24], edi
mov eax, dword [esp + 0x50]
lea edi, [esi + eax]
lea eax, [edi + edi*2]
test byte [ecx + eax*4 + 0x18], 0x60
jne 0x100299bb
inc esi
cmp esi, dword [esp + 0x34]
setae al
mov dword [esp + 0x4c], eax
mov edi, dword [esp + 0x24]
dec edi
add ebx, 0xc
cmp esi, dword [esp + 0x40]
jne 0x10029987
jmp 0x1002a5a2
mov dword [esp + 0x54], edi
mov dword [esp + 0x6c], esi
cmp esi, dword [esp + 0x34]
jae 0x1002bdc1
xor edx, edx
mov eax, ebx
mov esi, dword [esp + 0x24]
mov ecx, dword [eax]
test cl, 0x60
je 0x100299eb
and ecx, 0xffffff9f
mov dword [eax], ecx
inc edx
add eax, 0xc
cmp esi, edx
jne 0x100299d5
mov edx, esi
mov dword [esp + 0x44], edx
shl edx, 0xc
jne 0x1002b794
jmp 0x10029a3a
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esp + 0x68], eax
push 4
push 0x1000
push edi
push esi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x1002d0c9
add esi, edi
mov ecx, dword [esp + 0x54]
sub ecx, edi
mov eax, 0x100000
cmp ecx, eax
mov edi, 0x100000
cmovb edi, ecx
mov dword [esp + 0x54], ecx
test ecx, ecx
jne 0x100299fa
mov al, 1
cmp dword [esp + 0x44], 0
je 0x10029a60
test al, al
mov ecx, 0x20
mov edx, 4
cmovne ecx, edx
mov edx, ebx
mov esi, dword [esp + 0x44]
or dword [edx], ecx
add edx, 0xc
dec esi
jne 0x10029a58
test al, al
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
je 0x1002abac
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x44]
add dword [eax + 0x2c], ecx
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x6c]
jmp 0x1002999c
or edx, 1
mov dword [ecx + 4], edx
mov ecx, dword [ecx]
test ecx, ecx
je 0x10029aa0
mov edx, dword [ecx + 4]
test dl, 1
jne 0x1002a154
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1002d703
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1002886b
xor ecx, ecx
test byte [esp + 0x1c], 0x10
cmove ecx, dword [esp + 0x30]
xor edx, edx
cmp ecx, eax
seta cl
jb 0x1002872d
mov dl, cl
jmp 0x10028724
test eax, eax
jne 0x1002a2c5
xor ecx, ecx
test edx, edx
je 0x10029b06
mov eax, dword [edx + 4]
cmp eax, 1
ja 0x1002c922
mov eax, dword [edx]
test eax, eax
jne 0x1002c8ad
mov dword [esp + 0x88], ecx
jmp 0x100289ab
test eax, eax
mov esi, dword [esp + 0x14]
je 0x1002b8ae
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
and edx, 0xfffffff8
shl edx, 9
add edx, ecx
mov ecx, edx
mov edx, ecx
and edx, 0xfff00000
mov eax, dword [edx + 0xc]
mov dword [esp + 0x4c], eax
mov eax, ecx
shr eax, 0xc
movzx ebx, al
lea eax, [ebx*4]
lea eax, [eax + eax*2]
or eax, edx
mov dword [esp + 0x1c], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x50], eax
mov esi, dword [esp + 0x20]
test esi, esi
mov dword [esp + 0x30], edx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x3c], ebx
je 0x1002adbb
xor eax, eax
inc eax
cmp esi, 2
cmovae eax, esi
mov dword [esp + 0x28], eax
lea eax, [ebx + ebx*2]
lea eax, [edx + eax*4]
add eax, 0x18
xor ebx, ebx
xor edi, edi
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
lea esi, [edi + eax]
lea eax, [esi + esi*2]
test byte [edx + eax*4 + 0x18], 0x60
jne 0x10029bd7
inc edi
cmp edi, dword [esp + 0x20]
setae bl
mov esi, dword [esp + 8]
dec esi
mov eax, dword [esp + 4]
add eax, 0xc
cmp edi, dword [esp + 0x28]
jne 0x10029b9f
jmp 0x1002adbd
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], edi
cmp edi, dword [esp + 0x20]
jae 0x1002bf0c
mov dword [esp + 0x38], ebx
xor edx, edx
mov eax, dword [esp + 4]
mov esi, dword [esp + 8]
mov ecx, dword [eax]
test cl, 0x60
je 0x10029c0d
and ecx, 0xffffff9f
mov dword [eax], ecx
inc edx
add eax, 0xc
cmp esi, edx
jne 0x10029bf7
mov edx, esi
mov dword [esp + 0x40], edx
mov esi, edx
shl esi, 0xc
jne 0x1002b903
jmp 0x10029c56
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esp + 0x44], eax
push 4
push 0x1000
push ebx
push edi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x1002d0ee
add edi, ebx
sub esi, ebx
mov eax, 0x100000
cmp esi, eax
mov ebx, 0x100000
cmovb ebx, esi
test esi, esi
jne 0x10029c1e
mov al, 1
mov edi, dword [esp + 0x40]
test edi, edi
je 0x10029c7b
test al, al
mov ecx, 0x20
mov edx, 4
cmovne ecx, edx
mov edx, dword [esp + 4]
or dword [edx], ecx
add edx, 0xc
dec edi
jne 0x10029c73
test al, al
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
je 0x1002b42a
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x40]
add dword [eax + 0x2c], edi
mov edi, dword [esp + 0x48]
jmp 0x10029bb8
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 4]
and eax, 1
or eax, ecx
mov ebx, dword [esp + 0xc]
mov dword [ebx + 4], eax
jmp 0x100293a4
mov eax, dword [ecx]
jmp 0x10029165
mov ecx, dword [ebx]
xor edx, edx
dec edx
jmp 0x100280ce
mov esi, dword [esp + 0x20]
test esi, esi
je 0x1002d945
cmp dword [esi], edi
jne 0x1002a3c7
mov dword [esi], edx
test edx, edx
je 0x1002d954
mov eax, dword [edi]
mov dword [edx], eax
mov eax, dword [edi + 4]
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov eax, dword [esp + 0x24]
cmp dword [eax], edx
jne 0x1002d963
mov dword [eax], 0
jmp 0x10027b0d
mov eax, dword [ecx]
jmp 0x100293b5
mov edi, dword [esp + 8]
test edi, edi
je 0x1002d96c
cmp dword [edi], esi
jne 0x1002a3f0
mov dword [edi], edx
test edx, edx
je 0x1002d97b
mov eax, dword [esi]
mov dword [edx], eax
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov eax, dword [esp + 4]
cmp dword [eax], edx
jne 0x1002d98a
mov dword [eax], 0
jmp 0x10027b56
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov eax, edi
jmp 0x1002874b
and edx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
or eax, edx
mov dword [edi + 4], eax
jmp 0x10028ecd
or edx, 1
mov dword [ebx + 4], edx
mov edx, dword [ebx]
test edx, edx
je 0x10029dbf
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1002a405
mov esi, dword [eax + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x1002d796
mov ecx, dword [edx]
and ecx, 0xfffffffe
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
jmp 0x10028d35
xor esi, esi
test byte [esp + 0xc], 0x10
cmove esi, dword [esp + 4]
xor ecx, ecx
cmp esi, eax
seta dl
jb 0x10028bfa
mov cl, dl
jmp 0x10028bf1
mov ecx, dword [eax + 4]
cmp ecx, 1
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0xc]
ja 0x1002c2a9
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
je 0x10028938
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x10028938
mov eax, dword [esp + 0x20]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, dword [edi + 4]
and eax, 1
or eax, esi
mov dword [edi + 4], eax
and edi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + edi]
mov dword [edx + 4], esi
test edi, edi
je 0x1002d51b
mov esi, dword [edi]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [edi], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x1002a080
mov ecx, dword [eax + 4]
test cl, 1
je 0x1002a080
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x1002d50c
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [edi], eax
jmp 0x1002853e
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov eax, edi
jmp 0x10028c18
and ecx, 0xfffffffe
mov esi, dword [edx + 8]
and esi, 1
lea edi, [esi + ecx]
mov dword [edx + 8], edi
test ecx, ecx
je 0x1002d5bb
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
or edi, esi
mov dword [edx + 8], edi
mov dword [ecx + 4], edx
mov esi, dword [edx + 8]
and esi, 1
mov edi, dword [ecx + 8]
and edi, 0xfffffffe
or edi, esi
mov dword [ecx + 8], edi
or byte [edx + 8], 1
mov esi, dword [esp + 4]
test esi, esi
je 0x1002d5ca
cmp dword [esi + 4], edx
mov edi, dword [esp + 0x3c]
jne 0x1002a4fa
mov dword [esi + 4], ecx
cmp ecx, dword [esp + 0x10]
seta dl
ja 0x1002b692
mov ebx, dword [ecx + 8]
and ebx, 0xfffffffe
mov esi, ecx
test ebx, ebx
jne 0x10028dd6
mov esi, dword [esp + 4]
mov ebx, dword [esp + 0x10]
test ebx, ebx
je 0x1002d7e7
cmp ecx, ebx
setae dh
mov dword [ebx + 4], 0
mov dword [ebx + 8], 1
or dl, dh
jne 0x10029fbc
mov edx, dword [ecx + 8]
and edx, 1
mov edi, edx
or edi, ebx
mov dword [ecx + 8], edi
mov edi, dword [ebx + 4]
and edi, 0xfffffffe
or edi, edx
mov dword [ecx + 8], edi
mov dword [ebx + 4], ecx
mov edx, dword [ecx + 8]
and edx, 1
mov edi, dword [ebx + 8]
and edi, 0xfffffffe
or edi, edx
mov dword [ebx + 8], edi
or byte [ecx + 8], 1
cmp dword [esi + 4], ecx
jne 0x10029fe5
mov dword [esi + 4], ebx
mov edi, dword [esp + 0x3c]
jmp 0x10029fbf
mov dword [ecx + 4], ebx
mov ecx, dword [esp + 0x8c]
test ecx, ecx
je 0x1002d736
and byte [ecx + 8], 0xfe
mov edx, dword [esp + 0x14]
mov dword [edx + 0x38], ecx
mov esi, dword [esp + 0x10]
mov ecx, dword [esi + 0xc]
jmp 0x10027ee6
mov edx, dword [esi + 8]
mov edi, edx
and edi, 0xfffffffe
cmp ecx, edi
mov edi, dword [esp + 0x3c]
jne 0x10029fbf
and edx, 1
or edx, dword [esp + 0x10]
mov dword [esi + 8], edx
jmp 0x10029fbf
mov ebx, dword [esp + 0xc]
jmp 0x10027f33
and ebx, 0xfffffffe
mov dword [eax], ebx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x1002da25
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x1002a2bd
mov ebx, dword [eax + 4]
test bl, 1
je 0x1002a2bd
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x1002dadc
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
jmp 0x100281c8
mov dword [edx + 4], eax
jmp 0x1002853e
xor ecx, ecx
jmp 0x1002701e
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x1002c3f0
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
mov ebx, 0xfffff000
je 0x10028edd
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x10028edd
and ebx, 0xfffffffe
mov dword [eax], ebx
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea edi, [eax + ecx]
mov dword [edx + 4], edi
test ecx, ecx
je 0x1002da34
mov edi, dword [ecx]
and edi, 0xfffffffe
or edi, eax
mov dword [edx + 4], edi
mov dword [ecx], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x1002a351
mov ebx, dword [eax + 4]
test bl, 1
je 0x1002a351
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov eax, dword [edx + 4]
mov edi, eax
or edi, 1
mov dword [edx + 4], edi
and eax, 0xfffffffe
je 0x1002db0f
mov edi, dword [eax]
or edi, 1
mov dword [edx + 4], edi
mov dword [eax], edx
mov dword [ecx], eax
jmp 0x10028252
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x1002d712
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002d727
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
jmp 0x1002886b
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1002d4fd
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1002a1f0
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002bf2f
mov dword [eax + 4], ecx
jmp 0x100288c5
mov dword [esp + 8], edi
or ecx, 1
mov dword [eax + 4], ecx
mov eax, dword [eax]
test eax, eax
je 0x1002a214
mov ecx, dword [eax + 4]
test cl, 1
jne 0x1002b859
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1002d625
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
mov edi, dword [esp + 8]
jmp 0x1002865f
mov edx, dword [esp + 0x1c]
test edx, edx
je 0x1002da52
mov ecx, dword [esp + 0x30]
cmp dword [edx], ecx
jne 0x1002bc22
mov dword [edx], eax
mov esi, dword [esp + 0x30]
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
cmp dword [edi], eax
jne 0x1002da61
mov dword [edi], 0
jmp 0x1002892d
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
or byte [edx + 4], 1
and dword [esi + 4], 1
mov ecx, esi
jmp 0x1002899b
mov dword [edx + 4], eax
jmp 0x100281c8
test edx, edx
je 0x1002da6a
mov eax, dword [edx + 4]
mov dword [esp + 0xc], 0
mov ecx, eax
and ecx, 0xfffffffe
je 0x1002a2ef
mov esi, dword [ecx]
test esi, esi
je 0x1002a2ef
test byte [esi + 4], 1
jne 0x100284d1
mov dword [esp + 8], edi
mov ecx, dword [edx]
test ecx, ecx
je 0x1002dbba
test byte [ecx + 4], 1
jne 0x1002c549
or eax, 1
mov dword [edx + 4], eax
mov edi, dword [ecx]
test edi, edi
je 0x1002a31e
mov eax, dword [edi + 4]
test al, 1
jne 0x1002c81a
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1002dc67
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
lea edx, [esp + 0x88]
mov dword [edx], ecx
mov edi, dword [esp + 8]
jmp 0x100284d1
mov dword [edx + 4], eax
jmp 0x10028252
and esi, 1
mov dword [esp + 0x34], ebx
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, esi
mov dword [edx + 4], ebx
mov edx, dword [esp + 0x34]
and byte [edx + 4], 0xfe
mov esi, dword [ecx + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x1002d6e5
mov ebx, dword [edx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [ecx + 4], esi
mov dword [edx], ecx
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
jne 0x1002884d
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x10029ce2
push 0
push 0x100000
call fcn.100023d0
add esp, 8
jmp 0x100272e5
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
jmp 0x10029d3e
and ebx, 0xfffffffe
mov dword [edx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x1002d7a5
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
je 0x1002d7ba
mov ecx, dword [esi]
and ecx, 0xfffffffe
and ebx, 1
or ebx, ecx
mov dword [eax + 4], ebx
mov dword [esi], eax
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, esi
mov dword [edx + 4], ecx
jmp 0x10028d35
and ecx, 0xfffffffe
mov dword [esi], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, esi
mov dword [edx + 4], ecx
and edx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
lea ecx, [esi + edx]
mov dword [eax + 4], ecx
test edx, edx
je 0x1002d554
mov ecx, dword [edx]
and ecx, 0xfffffffe
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
mov esi, dword [eax + 4]
and esi, 0xfffffffe
je 0x1002a4a1
mov ecx, dword [esi + 4]
test cl, 1
jne 0x1002c31f
mov dword [eax + 4], esi
jmp 0x10028d93
mov esi, dword [esp + 0xc]
test esi, esi
je 0x1002daa6
mov ecx, dword [esp + 4]
cmp dword [esi], ecx
jne 0x1002c020
mov dword [esi], eax
mov esi, dword [esp + 4]
mov ecx, dword [esi]
mov dword [eax], ecx
mov edx, dword [esi + 4]
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
or ecx, edx
mov dword [eax + 4], ecx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, edx
mov dword [eax + 4], ecx
cmp dword [edi], eax
jne 0x1002dab5
mov dword [edi], 0
jmp 0x10028ecd
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [esi + 8], edx
jmp 0x10029f3a
lea esi, [esp + 0x70]
mov ecx, esi
call fcn.10001010
mov ecx, dword [esi]
jmp 0x100290e5
and esi, 1
mov dword [esp + 0x20], ecx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
or ecx, esi
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
and byte [ecx + 4], 0xfe
mov esi, dword [ebx + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x1002d778
mov ecx, dword [edx]
and ecx, 0xfffffffe
and esi, 1
or esi, ecx
mov dword [ebx + 4], esi
mov dword [edx], ebx
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
jne 0x10028d17
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
lea edi, [esp + 0x70]
mov ecx, edi
call fcn.10001010
mov ecx, dword [edi]
jmp 0x10029271
mov al, 1
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x1c]
lea eax, [ebx + 0x10]
mov dword [esp + 0x40], eax
add ebx, 0x18
mov eax, dword [esp + 0x48]
mov eax, dword [eax]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
mov dword [esp + 0x1c], ebx
mov edx, dword [ebx]
mov esi, 0xfffff000
mov ebx, edx
and ebx, esi
and esi, dword [eax + 8]
xor edi, edi
dec edi
xor ecx, ecx
cmp ebx, esi
seta cl
cmovb ecx, edi
test ecx, ecx
je 0x1002b59a
cmp ecx, 0xffffffff
mov edi, dword [esp + 8]
jne 0x1002ac3f
mov edx, dword [eax]
test edx, edx
je 0x1002d993
mov ecx, dword [edx + 4]
mov dword [esp + 0x44], 0
test cl, 1
je 0x1002acb8
mov dword [esp + 0x24], eax
mov eax, edx
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx]
mov ebx, edx
mov ecx, 0xfffff000
and ebx, ecx
mov esi, dword [eax + 8]
and esi, ecx
xor ecx, ecx
cmp ebx, esi
seta cl
mov esi, 0xffffffff
cmovb ecx, esi
test ecx, ecx
je 0x1002a673
cmp ecx, 0xffffffff
jne 0x1002a68d
mov edx, dword [eax]
test edx, edx
je 0x1002c035
mov ecx, dword [edx + 4]
test cl, 1
jne 0x1002a61a
mov esi, dword [edx]
test esi, esi
je 0x1002a766
test byte [esi + 4], 1
jne 0x1002a61a
jmp 0x1002a766
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 0x40]
xor ecx, ecx
cmp edx, eax
seta dl
jb 0x1002a64c
mov cl, dl
jmp 0x1002a647
test ecx, ecx
je 0x1002a751
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1002a6af
mov esi, dword [edx]
test esi, esi
je 0x1002a6af
test byte [esi + 4], 1
jne 0x1002a61a
mov edi, dword [eax]
test edi, edi
je 0x1002d880
mov edx, dword [edi + 4]
test dl, 1
je 0x1002ad81
and edx, 0xfffffffe
je 0x1002d08a
mov esi, dword [edx]
test esi, esi
je 0x1002a6de
test byte [esi + 4], 1
jne 0x1002c1ba
and ecx, 1
or ecx, edx
mov dword [edi + 4], ecx
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x1002d84d
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
je 0x1002d862
mov esi, dword [ecx]
and esi, 0xfffffffe
and edi, 1
or edi, esi
mov dword [eax + 4], edi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
mov esi, dword [esp + 0x24]
cmp dword [esi], eax
mov edi, dword [esp + 8]
jne 0x1002b842
mov dword [esi], edx
mov eax, esi
jmp 0x1002a61a
mov ecx, dword [eax + 4]
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x44], ebx
cmp ecx, 1
jbe 0x1002a7b1
jmp 0x1002a698
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002cfc7
mov edx, dword [ecx]
test edx, edx
je 0x1002a78c
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1002be64
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
mov esi, dword [esp + 0x24]
cmp dword [esi], eax
jne 0x1002d9ea
mov dword [esi], edx
jmp 0x1002a61e
mov ecx, dword [eax]
test ecx, ecx
je 0x1002a7e2
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
cmp dword [ebx], eax
jne 0x1002ad5b
mov dword [ebx], ecx
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x5c]
shr ecx, 0xc
mov ebx, dword [esp + 0x48]
mov dword [ebx], edx
xor eax, eax
mov edx, dword [esp + 0x40]
mov dword [edx], eax
mov dword [edx + 4], eax
mov edx, dword [esp + 0x34]
cmp ecx, edx
jne 0x1002a9a0
test dl, dl
je 0x1002a85e
mov eax, dword [esp + 0x20]
or eax, 1
xor ecx, ecx
inc ecx
cmp edx, 2
cmovae ecx, edx
shl ecx, 2
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x50]
lea edx, [edx + edx*2]
mov esi, dword [esp + 0x38]
lea edx, [esi + edx*4]
add edx, 0x18
xor esi, esi
mov ebx, dword [esp + 0x38]
test byte [edx + esi], 8
je 0x1002a854
dec dword [ebx + 0xc]
dec dword [edi + 0x48]
mov dword [edx + esi], eax
add esi, 0xc
cmp ecx, esi
jne 0x1002a848
mov eax, dword [esp + 0x38]
cmp dword [eax + 0xc], 0
jne 0x1002aba4
cmp dword [esp + 0x58], 0
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
je 0x1002abac
mov ebx, dword [edi + 0x38]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], 0
xor ecx, ecx
dec ecx
xor eax, eax
cmp ebx, dword [esp + 0x38]
setb al
cmova eax, ecx
cmp eax, 0xffffffff
je 0x1002bc7b
test eax, eax
je 0x1002c55b
test ebx, ebx
je 0x1002d17b
mov ecx, dword [ebx + 8]
xor esi, esi
mov eax, ecx
and eax, 0xfffffffe
je 0x1002c49d
mov edx, dword [eax + 4]
test edx, edx
je 0x1002c49d
test byte [edx + 8], 1
je 0x1002c49d
mov edi, ebx
mov ecx, dword [esp + 0x38]
mov ebx, eax
xor eax, eax
cmp ebx, ecx
setb al
mov edx, 0xffffffff
cmova eax, edx
cmp eax, 0xffffffff
jne 0x1002a930
test ebx, ebx
je 0x1002c9ce
mov eax, dword [ebx + 4]
test eax, eax
je 0x1002c9ce
test byte [eax + 8], 1
je 0x1002a91a
mov edi, ebx
jmp 0x1002a8e7
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1002c61d
test byte [ecx + 8], 1
jne 0x1002a8e1
jmp 0x1002c61d
test eax, eax
jne 0x1002a94e
xor ecx, ecx
test ebx, ebx
je 0x1002b6ed
mov eax, dword [ebx + 8]
mov esi, edi
cmp eax, 1
jbe 0x1002b6b8
jmp 0x1002a955
test ebx, ebx
je 0x1002a96b
mov eax, dword [ebx + 8]
and eax, 0xfffffffe
je 0x1002a96b
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1002a96b
test byte [ecx + 8], 1
jne 0x1002a8e1
lea ecx, [esp + 0x80]
mov edx, ebx
call fcn.1003cd70
mov eax, dword [esp + 0x80]
cmp dword [edi + 4], ebx
je 0x1002c8df
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [edi + 8], edx
mov ebx, edi
jmp 0x1002a8e1
mov eax, dword [esp + 0x50]
lea esi, [eax + ecx]
mov dword [esp + 0x24], esi
sub ecx, edx
shl ecx, 0xc
add eax, edx
lea ebx, [eax + eax*2]
mov edi, dword [esp + 0x38]
lea eax, [edi + ebx*4]
add eax, 0x10
mov edx, 0xfff
mov esi, dword [eax + 8]
and esi, edx
or esi, ecx
mov dword [esp + 0x1c], eax
mov dword [eax + 8], esi
mov eax, dword [esp + 0x24]
lea esi, [eax + eax*2]
and edx, dword [edi + esi*4 + 0xc]
or edx, ecx
mov dword [edi + esi*4 + 0xc], edx
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], 0
test ecx, ecx
je 0x1002bd6f
lea eax, [edi + ebx*4]
add eax, 0x18
mov dword [esp + 0x24], eax
lea edi, [esp + 0x88]
xor edx, edx
mov ebx, edx
mov edx, edi
mov edi, dword [ecx]
test edi, edi
je 0x1002aa33
mov eax, dword [edi + 4]
test al, 1
je 0x1002aa33
mov esi, dword [edi]
test esi, esi
je 0x1002aa33
test byte [esi + 4], 1
jne 0x1002aa88
mov edi, ecx
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
mov eax, ecx
mov ebx, 0xfffff000
and eax, ebx
mov esi, dword [edi + 8]
and esi, ebx
xor ebx, ebx
cmp eax, esi
seta bl
mov eax, 0xffffffff
cmovb ebx, eax
cmp ebx, 0xffffffff
je 0x1002aa7a
xor eax, eax
inc eax
test ebx, ebx
jne 0x1002aabc
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x1c]
xor eax, eax
cmp ecx, edi
seta cl
jae 0x1002aaba
mov ecx, dword [edi]
xor eax, eax
dec eax
test ecx, ecx
jne 0x1002aa16
jmp 0x1002ab5e
mov dword [esp + 0x40], ebx
and eax, 0xfffffffe
mov dword [ecx], eax
mov esi, ecx
and esi, 0xfffffffe
mov eax, dword [edi]
mov ebx, dword [edi + 4]
and ebx, 1
or ebx, esi
mov dword [edi + 4], ebx
test eax, eax
je 0x1002d7c9
and byte [eax + 4], 0xfe
cmp dword [edx], ecx
jne 0x1002aac4
mov dword [edx], edi
jmp 0x1002aa35
mov al, cl
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
jmp 0x1002aa7f
and edi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + edi]
mov dword [edx + 4], ecx
test edi, edi
je 0x1002d7d8
mov ecx, dword [edi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [edi], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
or byte [edx + 4], 1
cmp dword [esp + 0x40], 0
je 0x1002d139
mov eax, dword [esp + 0x40]
cmp dword [eax], edx
je 0x1002bf6d
jmp 0x1002c0a0
mov eax, dword [esp + 0x24]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov esi, dword [edi + 8]
and esi, ecx
xor ecx, ecx
cmp edx, esi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x1002bd5e
jmp 0x1002c34a
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
mov edx, edi
test ecx, ecx
mov ebx, dword [esp + 0x40]
jne 0x1002aa1a
mov edx, ebx
mov ecx, dword [esp + 0x1c]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x1002ad16
mov eax, dword [esp + 0x1c]
mov dword [edi], eax
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x88]
test eax, eax
mov edi, dword [esp + 8]
je 0x1002d9db
and byte [eax + 4], 0xfe
mov dword [ecx], eax
mov edx, dword [esp + 0x34]
jmp 0x1002a817
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
test byte [esp + 0x4c], 1
mov edi, dword [esp + 8]
je 0x1002b732
test edx, edx
je 0x1002b732
cmp dword [ecx], edx
je 0x10027b29
mov dword [edx], ecx
mov ecx, dword [esp + 0xc]
cmp dword [edi + ecx + 0x6c], 1
mov ebx, edx
mov edx, 0
je 0x1002abf6
add ecx, edi
add ecx, 0x6c
xor edx, edx
mov dword [ebx + edx*4 + 0xc], 0xffffffff
inc edx
mov esi, dword [ecx]
dec esi
cmp edx, esi
jb 0x1002abe6
mov ecx, dword [esp + 0xc]
mov esi, ebx
mov ebx, dword [edi + ecx + 0x68]
and ebx, 0x1f
mov ecx, ebx
neg cl
xor eax, eax
dec eax
shr eax, cl
cmp ebx, 1
mov ecx, dword [esp + 0xc]
mov ebx, 0
sbb ebx, ebx
or ebx, eax
mov dword [esi + edx*4 + 0xc], ebx
mov dword [esi + 4], 0
mov eax, dword [edi + ecx + 0x68]
mov dword [esi + 8], eax
inc dword [edi + ecx + 0x74]
mov eax, dword [esp + 0x28]
mov dword [eax], esi
mov edx, esi
jmp 0x1002710b
test ecx, ecx
je 0x1002b9a4
mov ecx, dword [eax + 4]
mov dword [esp + 0x44], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x1002ac69
mov esi, dword [edx]
test esi, esi
je 0x1002ac69
test byte [esi + 4], 1
jne 0x1002a61a
mov edx, dword [eax]
test edx, edx
je 0x1002d1a6
test byte [edx + 4], 1
jne 0x1002c475
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1002ac95
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002c649
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1002dbcf
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1002ad04
mov esi, dword [edx]
test esi, esi
je 0x1002acc8
test byte [esi + 4], 1
jne 0x1002a61a
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002d075
mov edx, dword [ecx]
test edx, edx
je 0x1002acee
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1002c751
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x88]
mov dword [eax], edx
mov edi, dword [esp + 8]
jmp 0x1002a61a
mov eax, dword [edi + 4]
and eax, 1
mov ecx, eax
mov esi, dword [esp + 0x1c]
or ecx, esi
mov dword [edi + 4], ecx
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
mov dword [esi], edi
mov eax, dword [edi + 4]
and eax, 1
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
or byte [edi + 4], 1
cmp dword [edx], edi
jne 0x1002bb43
mov eax, dword [esp + 0x1c]
mov dword [edx], eax
jmp 0x1002ab7e
and ecx, 0xfffffffe
mov eax, dword [ebx + 4]
and eax, 1
or eax, ecx
mov dword [ebx + 4], eax
jmp 0x1002a7ec
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x100289ab
or edx, 1
mov dword [edi + 4], edx
mov ecx, dword [edi]
test ecx, ecx
je 0x1002ad99
mov edx, dword [ecx + 4]
test dl, 1
jne 0x1002bdeb
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1002d88f
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1002a738
mov bl, 1
mov dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x1c]
lea eax, [ecx + 0x10]
mov dword [esp + 8], eax
add ecx, 0x18
mov eax, dword [esp + 0x34]
mov eax, dword [eax]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
mov dword [esp + 0x1c], ecx
mov edx, dword [ecx]
mov esi, 0xfffff000
mov ebx, edx
and ebx, esi
and esi, dword [eax + 8]
xor edi, edi
dec edi
xor ecx, ecx
cmp ebx, esi
seta cl
cmovb ecx, edi
test ecx, ecx
je 0x1002b69a
cmp ecx, 0xffffffff
jne 0x1002b4c4
mov edx, dword [eax]
test edx, edx
mov edi, dword [esp + 0x1c]
je 0x1002d9a2
mov ecx, dword [edx + 4]
mov dword [esp + 0x28], 0
test cl, 1
jne 0x1002ae8a
mov esi, dword [edx]
test esi, esi
je 0x1002ae41
test byte [esi + 4], 1
jne 0x1002ae8a
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002d09f
mov edx, dword [ecx]
test edx, edx
je 0x1002ae67
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1002c7cb
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x88]
mov dword [eax], edx
mov edi, dword [esp + 0x1c]
mov dword [esp + 4], eax
mov eax, edx
mov edx, dword [edi]
mov ebx, edx
mov ecx, 0xfffff000
and ebx, ecx
mov esi, dword [eax + 8]
and esi, ecx
xor ecx, ecx
cmp ebx, esi
seta cl
mov esi, 0xffffffff
cmovb ecx, esi
test ecx, ecx
mov ebx, dword [esp + 0xc]
je 0x1002aee3
cmp ecx, 0xffffffff
jne 0x1002aefd
mov edx, dword [eax]
test edx, edx
je 0x1002c0d2
mov ecx, dword [edx + 4]
test cl, 1
jne 0x1002ae8a
mov esi, dword [edx]
test esi, esi
je 0x1002afd6
test byte [esi + 4], 1
jne 0x1002ae8a
jmp 0x1002afd6
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 8]
xor ecx, ecx
cmp edx, eax
seta dl
jb 0x1002aebc
mov cl, dl
jmp 0x1002aeb7
test ecx, ecx
je 0x1002afc1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1002af1f
mov esi, dword [edx]
test esi, esi
je 0x1002af1f
test byte [esi + 4], 1
jne 0x1002ae8a
mov esi, dword [eax]
test esi, esi
je 0x1002d8fc
mov edx, dword [esi + 4]
test dl, 1
je 0x1002b5cc
and edx, 0xfffffffe
je 0x1002d0b4
mov edi, dword [edx]
test edi, edi
je 0x1002af4e
test byte [edi + 4], 1
jne 0x1002c2b9
and ecx, 1
or ecx, edx
mov dword [esi + 4], ecx
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x1002d8c9
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002d8de
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
mov ecx, dword [esp + 4]
cmp dword [ecx], eax
mov eax, ecx
mov edi, dword [esp + 0x1c]
jne 0x1002b926
mov dword [eax], edx
jmp 0x1002ae8a
mov ecx, dword [eax + 4]
mov edx, dword [esp + 4]
mov dword [esp + 0x28], edx
cmp ecx, 1
jbe 0x1002b023
jmp 0x1002af08
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002cfdc
mov edx, dword [ecx]
test edx, edx
je 0x1002affc
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1002bfcd
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
mov ecx, dword [esp + 4]
cmp dword [ecx], eax
mov eax, ecx
jne 0x1002da0e
mov dword [eax], edx
jmp 0x1002ae8e
mov ecx, dword [eax]
test ecx, ecx
je 0x1002b054
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, dword [esp + 4]
cmp dword [edx], eax
mov eax, edx
mov edi, dword [esp + 0x34]
jne 0x1002b585
mov dword [eax], ecx
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x50]
shr ecx, 0xc
mov dword [edi], edx
xor eax, eax
mov edx, dword [esp + 8]
mov dword [edx], eax
mov dword [edx + 4], eax
mov edx, dword [esp + 0x20]
cmp ecx, edx
jne 0x1002b216
test dl, dl
je 0x1002b0da
mov eax, dword [esp + 0x2c]
or eax, 1
xor ecx, ecx
inc ecx
cmp edx, 2
cmovae ecx, edx
shl ecx, 2
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x3c]
lea edx, [edx + edx*2]
mov esi, dword [esp + 0x30]
lea edx, [esi + edx*4]
add edx, 0x18
xor esi, esi
test byte [edx + esi], 8
je 0x1002b0d0
mov edi, dword [esp + 0x30]
dec dword [edi + 0xc]
mov edi, dword [esp + 0x14]
dec dword [edi + 0x48]
mov dword [edx + esi], eax
add esi, 0xc
cmp ecx, esi
jne 0x1002b0bc
mov edx, dword [esp + 0x30]
cmp dword [edx + 0xc], 0
jne 0x1002b426
cmp dword [esp + 0x4c], 0
mov ecx, dword [esp + 0x2c]
je 0x1002b42a
mov eax, dword [esp + 0x14]
mov edi, dword [eax + 0x38]
mov dword [esp + 0x8c], edi
mov dword [esp + 0x90], 0
xor ecx, ecx
dec ecx
xor eax, eax
cmp edi, edx
setb al
cmova eax, ecx
cmp eax, 0xffffffff
je 0x1002bd14
test eax, eax
je 0x1002c5bc
test edi, edi
je 0x1002d18a
mov ecx, dword [edi + 8]
xor ebx, ebx
mov eax, ecx
and eax, 0xfffffffe
je 0x1002c4f3
mov edx, dword [eax + 4]
test edx, edx
je 0x1002c4f3
test byte [edx + 8], 1
je 0x1002c4f3
mov esi, edi
mov ecx, dword [esp + 0x30]
mov edi, eax
xor eax, eax
cmp edi, ecx
setb al
mov ecx, 0xffffffff
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x1002b1a6
test edi, edi
je 0x1002ca34
mov eax, dword [edi + 4]
test eax, eax
je 0x1002ca34
test byte [eax + 8], 1
jne 0x1002b15b
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1002c69e
test byte [ecx + 8], 1
jne 0x1002b15b
jmp 0x1002c69e
test eax, eax
jne 0x1002b1c4
xor ecx, ecx
test edi, edi
je 0x1002b7f0
mov eax, dword [edi + 8]
mov ebx, esi
cmp eax, 1
jbe 0x1002b7bb
jmp 0x1002b1cb
test edi, edi
je 0x1002b1e1
mov eax, dword [edi + 8]
and eax, 0xfffffffe
je 0x1002b1e1
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1002b1e1
test byte [ecx + 8], 1
jne 0x1002b15b
lea ecx, [esp + 0x80]
mov edx, edi
call fcn.1003cd70
mov eax, dword [esp + 0x80]
cmp dword [esi + 4], edi
je 0x1002c918
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [esi + 8], edx
mov edi, esi
jmp 0x1002b15b
mov eax, dword [esp + 0x3c]
lea esi, [eax + ecx]
mov dword [esp + 4], esi
sub ecx, edx
shl ecx, 0xc
add eax, edx
lea eax, [eax + eax*2]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x28], eax
lea eax, [edi + eax*4]
add eax, 0x10
mov edx, 0xfff
mov esi, dword [eax + 8]
and esi, edx
or esi, ecx
mov dword [esp + 8], eax
mov dword [eax + 8], esi
mov eax, dword [esp + 4]
lea esi, [eax + eax*2]
and edx, dword [edi + esi*4 + 0xc]
or edx, ecx
mov dword [edi + esi*4 + 0xc], edx
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], 0
test ecx, ecx
je 0x1002bdce
mov eax, dword [esp + 0x28]
lea eax, [edi + eax*4]
add eax, 0x18
mov dword [esp + 4], eax
lea esi, [esp + 0x88]
xor edx, edx
mov edi, edx
mov edx, esi
mov esi, dword [ecx]
test esi, esi
je 0x1002b2b5
mov eax, dword [esi + 4]
test al, 1
je 0x1002b2b5
mov dword [esp + 0x28], edi
mov edi, dword [esi]
test edi, edi
je 0x1002b2b5
test byte [edi + 4], 1
jne 0x1002b30e
mov esi, ecx
mov eax, dword [esp + 4]
mov ecx, dword [eax]
mov eax, ecx
mov ebx, 0xfffff000
and eax, ebx
mov edi, dword [esi + 8]
and edi, ebx
xor ebx, ebx
cmp eax, edi
seta bl
mov eax, 0xffffffff
cmovb ebx, eax
cmp ebx, 0xffffffff
je 0x1002b2fc
xor eax, eax
inc eax
test ebx, ebx
jne 0x1002b33e
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 8]
xor eax, eax
cmp ecx, esi
seta cl
jae 0x1002b33c
mov ecx, dword [esi]
xor eax, eax
dec eax
test ecx, ecx
mov ebx, dword [esp + 0xc]
jne 0x1002b294
jmp 0x1002b3e4
and eax, 0xfffffffe
mov dword [ecx], eax
mov edi, ecx
and edi, 0xfffffffe
mov eax, dword [esi]
mov ebx, dword [esi + 4]
and ebx, 1
or ebx, edi
mov dword [esi + 4], ebx
test eax, eax
je 0x1002d7f6
and byte [eax + 4], 0xfe
cmp dword [edx], ecx
jne 0x1002b346
mov dword [edx], esi
jmp 0x1002b2b7
mov al, cl
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
jmp 0x1002b301
and esi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + esi]
mov dword [edx + 4], ecx
test esi, esi
je 0x1002d805
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [esi], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
or byte [edx + 4], 1
cmp dword [esp + 0x28], 0
je 0x1002d148
mov eax, dword [esp + 0x28]
cmp dword [eax], edx
je 0x1002c0c7
jmp 0x1002c1a6
mov eax, dword [esp + 4]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov edi, dword [esi + 8]
and edi, ecx
xor ecx, ecx
cmp edx, edi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x1002bd8c
jmp 0x1002c3ab
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, esi
test ecx, ecx
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 0x28]
jne 0x1002b298
mov edx, edi
mov ecx, dword [esp + 8]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x1002b540
mov eax, dword [esp + 8]
mov dword [esi], eax
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x88]
test eax, eax
je 0x1002d9ff
and byte [eax + 4], 0xfe
mov dword [ecx], eax
mov edx, dword [esp + 0x20]
jmp 0x1002b08f
mov ecx, dword [esp + 0x2c]
test byte [esp + 0x38], 1
mov esi, dword [esp + 0x14]
je 0x1002b835
test ecx, ecx
je 0x1002b835
cmp dword [ebx], ecx
je 0x10027b72
mov dword [ecx], ebx
xor eax, eax
mov edi, ecx
mov ecx, dword [esp + 0x18]
cmp dword [esi + ecx + 0x6c], 1
mov edx, 0
je 0x1002b47e
mov ecx, dword [esp + 0x18]
add ecx, esi
add ecx, 0x6c
xor edx, edx
mov dword [edi + edx*4 + 0xc], 0xffffffff
inc edx
mov esi, dword [ecx]
dec esi
cmp edx, esi
mov esi, dword [esp + 0x14]
jb 0x1002b46a
mov ecx, dword [esp + 0x18]
mov ebx, dword [esi + ecx + 0x68]
and ebx, 0x1f
mov ecx, ebx
neg cl
xor esi, esi
dec esi
shr esi, cl
cmp ebx, 1
sbb eax, eax
or eax, esi
mov esi, dword [esp + 0x14]
mov dword [edi + edx*4 + 0xc], eax
mov dword [edi + 4], 0
mov ecx, dword [esp + 0x18]
mov eax, dword [esi + ecx + 0x68]
mov dword [edi + 8], eax
inc dword [esi + ecx + 0x74]
mov eax, dword [esp + 0xc]
mov dword [eax], edi
mov ecx, edi
jmp 0x100273dc
test ecx, ecx
je 0x1002ba5b
mov ecx, dword [eax + 4]
mov dword [esp + 0x28], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x1002b4ee
mov esi, dword [edx]
test esi, esi
je 0x1002b4ee
test byte [esi + 4], 1
jne 0x1002ae86
mov edx, dword [eax]
test edx, edx
je 0x1002d1bb
test byte [edx + 4], 1
jne 0x1002c489
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1002b51a
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002c6ca
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1002dc02
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1002ae7d
mov eax, dword [esi + 4]
and eax, 1
mov ecx, eax
mov edi, dword [esp + 8]
or ecx, edi
mov dword [esi + 4], ecx
mov ecx, dword [edi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
mov dword [edi], esi
mov eax, dword [esi + 4]
and eax, 1
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
or byte [esi + 4], 1
cmp dword [edx], esi
jne 0x1002bbef
mov eax, dword [esp + 8]
mov dword [edx], eax
jmp 0x1002b404
and ecx, 0xfffffffe
mov edx, eax
mov eax, dword [eax + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1002b068
xor esi, esi
test dl, 0x10
cmove esi, dword [esp + 0x40]
xor ecx, ecx
cmp esi, eax
seta dl
mov edi, dword [esp + 8]
jb 0x1002a5fc
mov cl, dl
jmp 0x1002a5ef
mov edi, dword [esp + 0x14]
mov ecx, edi
call fcn.1003c610
jmp 0x100272cc
or edx, 1
mov dword [esi + 4], edx
mov ecx, dword [esi]
test ecx, ecx
je 0x1002b5e4
mov edx, dword [ecx + 4]
test dl, 1
jne 0x1002bf78
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1002d90b
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1002afa8
mov dword [esp + 8], edi
and esi, 1
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
or edi, esi
mov dword [ecx + 4], edi
and byte [eax + 4], 0xfe
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1002d634
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov esi, dword [esp + 0x20]
mov dword [esi + 4], eax
mov dword [ecx], esi
mov dword [edx], ecx
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov dword [esp + 0x20], esi
and esi, 0xfffffffe
mov edi, dword [esp + 8]
jne 0x10028637
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, eax
call fcn.1003c3d0
mov edx, dword [esi]
jmp 0x1002953b
mov ebx, dword [ecx + 4]
jmp 0x10029f4d
xor esi, esi
test dl, 0x10
cmove esi, dword [esp + 8]
xor ecx, ecx
cmp esi, eax
seta dl
jb 0x1002ae17
mov cl, dl
jmp 0x1002ae0e
mov eax, dword [ebx + 4]
test eax, eax
je 0x1002b6ed
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [ebx + 8], 1
and dword [eax + 8], 1
mov ecx, eax
cmp dword [edi + 4], ebx
jne 0x1002bf5a
mov dword [edi + 4], ecx
mov eax, dword [esp + 0x8c]
mov edi, dword [esp + 8]
mov dword [edi + 0x38], eax
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x1002dabe
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov edx, dword [esp + 0x20]
test edx, edx
setne al
test byte [esp + 0x4c], al
mov ecx, dword [esp + 0x28]
jne 0x1002abc3
mov dword [ecx], 0
mov bl, 1
jmp 0x1002716c
mov edx, dword [edi + 0x3c]
test edx, edx
jne 0x1002bd9d
lea eax, [esp + 0x88]
mov ecx, 0x100000
mov edx, 0x100000
push eax
push 0
call fcn.10050150
add esp, 8
test eax, eax
je 0x1002dba0
mov esi, eax
movzx eax, byte [esp + 0x88]
mov ecx, dword [esp + 8]
mov edx, esi
push eax
call fcn.10050070
mov edx, esi
add esp, 4
add edx, 0x2000
jmp 0x10029921
mov esi, dword [esp + 0x54]
shl esi, 0xc
mov eax, esi
and eax, 0xff000
mov edi, 0x100000
sub edi, eax
cmp edi, edx
mov dword [esp + 0x54], edx
cmovae edi, edx
add esi, dword [esp + 0x38]
jmp 0x100299fa
mov eax, dword [edi + 4]
test eax, eax
je 0x1002b7f0
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [edi + 8], 1
and dword [eax + 8], 1
mov ecx, eax
cmp dword [esi + 4], edi
jne 0x1002c0b4
mov dword [esi + 4], ecx
mov eax, dword [esp + 0x8c]
mov esi, dword [esp + 0x14]
mov dword [esi + 0x38], eax
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x1002dacd
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov ecx, dword [esp + 0x2c]
test ecx, ecx
setne al
test byte [esp + 0x38], al
mov ebx, dword [esp + 0xc]
jne 0x1002b441
mov dword [ebx], 0
mov bl, 1
jmp 0x10027437
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov eax, esi
jmp 0x1002a61a
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1002d643
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1002d658
mov edi, dword [eax]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [edx + 4], esi
mov dword [eax], edx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
jmp 0x1002a231
mov edx, dword [esi + 0x3c]
test edx, edx
jne 0x1002be40
lea eax, [esp + 0x88]
mov ecx, 0x100000
mov edx, 0x100000
push eax
push 0
call fcn.10050150
add esp, 8
test eax, eax
je 0x1002dbad
mov esi, eax
movzx eax, byte [esp + 0x88]
mov ecx, dword [esp + 0x14]
mov edx, esi
push eax
call fcn.10050070
mov ecx, esi
add esp, 4
add ecx, 0x2000
jmp 0x10029b3f
mov edi, dword [esp + 0x44]
shl edi, 0xc
mov eax, edi
and eax, 0xff000
mov ebx, 0x100000
sub ebx, eax
cmp ebx, esi
cmovae ebx, esi
add edi, dword [esp + 0x30]
jmp 0x10029c1e
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov eax, esi
jmp 0x1002ae8a
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov ecx, dword [edx]
test ecx, ecx
je 0x1002daeb
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1002db00
mov ebx, dword [eax]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [edx + 4], esi
mov dword [eax], edx
mov edx, dword [ecx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x100290e1
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x4c]
neg cl
shr edx, cl
jmp 0x10028166
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x1002c99e
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
mov edi, dword [esp + 8]
je 0x1002a7f3
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x1002a7f3
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, eax
call fcn.1003c3d0
mov edx, dword [esi]
jmp 0x100296cd
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov ecx, dword [edx]
test ecx, ecx
je 0x1002db1e
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
mov edi, dword [edx + 4]
mov eax, edi
and eax, 0xfffffffe
je 0x1002db33
mov ebx, dword [eax]
and ebx, 0xfffffffe
and edi, 1
or edi, ebx
mov dword [edx + 4], edi
mov dword [eax], edx
mov edx, dword [ecx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x1002926d
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x1002c9b2
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 0x34]
je 0x1002b06f
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x1002b06f
cmp dword [esp + 0xc], 0
je 0x1002db42
mov eax, dword [esp + 0xc]
cmp dword [eax], edi
jne 0x1002c3d7
mov eax, dword [esp + 0xc]
mov dword [eax], edx
test edx, edx
je 0x1002db51
mov esi, edi
mov eax, dword [edi]
mov dword [edx], eax
mov eax, dword [edi + 4]
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov eax, dword [esp + 0x10]
cmp dword [eax], edx
jne 0x1002db60
mov eax, dword [esp + 0x10]
mov dword [eax], 0
jmp 0x100289ab
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], esi
or byte [edx + 4], 1
and dword [eax + 4], 1
jmp 0x10028453
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp edi, ecx
mov ecx, dword [esp + 0x48]
jne 0x1002ab82
and eax, 1
or eax, dword [esp + 0x1c]
mov dword [edx + 4], eax
jmp 0x1002ab82
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x1002db6d
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002db82
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1002953b
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov edi, dword [eax + 4]
and edi, 1
or edi, ecx
mov dword [eax + 4], edi
mov edi, dword [edx + 4]
and edi, 1
or edi, ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], edi
or byte [edx + 4], 1
and dword [eax + 4], 1
jmp 0x100286a4
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp esi, ecx
mov ecx, dword [esp + 0x34]
jne 0x1002b408
and eax, 1
or eax, dword [esp + 8]
mov dword [edx + 4], eax
jmp 0x1002b408
lea ecx, [esp + 0x88]
mov dword [esp + 0x20], ecx
jmp 0x10029079
mov ecx, eax
and ecx, 0xfffffffe
mov esi, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x1002a254
mov dword [esp + 4], edx
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x3c]
test edx, edx
jne 0x1002c36a
mov edi, dword [esp + 0x10]
lea edx, [edi + 0x28]
mov ecx, dword [esp + 4]
call fcn.10005ae0
mov eax, dword [esp + 0x14]
mov esi, dword [eax + 0x3c]
mov dword [eax + 0x3c], edi
jmp 0x10028134
lea ecx, [esp + 0x88]
mov dword [esp + 8], ecx
jmp 0x10029209
test ebx, ebx
je 0x1002bca3
mov eax, dword [ebx + 4]
test eax, eax
je 0x1002bca3
xor esi, esi
test byte [eax + 8], 1
jne 0x1002a8e1
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1002bca3
test byte [ecx + 8], 1
jne 0x1002a8e1
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, ebx
call fcn.1003cc60
mov eax, dword [esi]
test eax, eax
je 0x1002dd72
and byte [eax + 8], 0xfe
xor esi, esi
jmp 0x1002c880
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1002db91
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1002bd0c
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002c7a0
mov dword [eax + 4], ecx
jmp 0x10029537
test edi, edi
je 0x1002bd3c
mov eax, dword [edi + 4]
test eax, eax
je 0x1002bd3c
xor ebx, ebx
test byte [eax + 8], 1
jne 0x1002b15b
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1002bd3c
test byte [ecx + 8], 1
jne 0x1002b15b
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, edi
call fcn.1003cc60
mov eax, dword [esi]
test eax, eax
je 0x1002dd90
and byte [eax + 8], 0xfe
xor ebx, ebx
jmp 0x1002c89e
xor eax, eax
inc eax
cmp ecx, 0xffffffff
jne 0x1002ab48
jmp 0x1002c5b2
mov eax, dword [esp + 0x1c]
mov dword [eax], 0
mov dword [eax + 4], 1
lea edi, [esp + 0x88]
jmp 0x1002ab78
xor eax, eax
inc eax
cmp ecx, 0xffffffff
jne 0x1002b3ca
jmp 0x1002c613
mov eax, dword [esp + 8]
mov dword [eax + 0x3c], 0
lea esi, [edx + 0x2000]
add edx, 0x28
mov ecx, dword [esp + 0x48]
call fcn.100505c0
mov edx, esi
jmp 0x10029921
mov dword [esp + 0x44], 0
jmp 0x10029a70
mov eax, dword [esp + 8]
mov dword [eax], 0
mov dword [eax + 4], 1
lea esi, [esp + 0x88]
jmp 0x1002b3fe
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x1002d89e
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002d8b3
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
jmp 0x1002a738
mov eax, dword [esp + 0x14]
mov dword [eax + 0x3c], 0
lea esi, [edx + 0x2000]
add edx, 0x28
mov ecx, dword [esp + 0x34]
call fcn.100505c0
mov ecx, esi
jmp 0x10029b3f
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1002d676
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1002beab
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002c8e9
mov dword [eax + 4], ecx
mov edi, dword [esp + 8]
jmp 0x1002a79e
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x1002dbde
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002dbf3
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x100296cd
mov dword [esp + 0x40], 0
jmp 0x10029c8f
mov ecx, dword [esp + 0x14]
mov esi, edx
mov edx, dword [esp + 4]
push esi
push eax
call fcn.10002c30
jmp 0x1002a3e8
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1002d4ee
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x100288c5
and ecx, 0xfffffffe
mov eax, dword [edi + 8]
and eax, 1
or eax, ecx
mov dword [edi + 8], eax
jmp 0x1002b6f9
mov eax, dword [esp + 0x40]
mov dword [eax], edi
jmp 0x1002ab18
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x1002d91a
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002d92f
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
jmp 0x1002afa8
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1002d694
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1002c014
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002c932
mov dword [eax + 4], ecx
mov edi, dword [esp + 0x1c]
jmp 0x1002b00e
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x1002a4c3
cmp dword [esp + 0x44], 0
je 0x1002dc11
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
cmp dword [edx], ecx
jne 0x1002c71f
mov ecx, dword [esp + 0x44]
mov dword [ecx], eax
mov esi, dword [esp + 0x40]
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov ecx, dword [esp + 0x24]
cmp dword [ecx], eax
jne 0x1002dc20
mov eax, dword [esp + 0x24]
mov dword [eax], 0
mov edx, dword [esp + 0x88]
mov edi, dword [esp + 8]
jmp 0x1002a7f3
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx + 4]
and eax, 1
or eax, edi
mov dword [ecx + 4], eax
jmp 0x1002ab18
and ecx, 0xfffffffe
mov eax, dword [esi + 8]
and eax, 1
or eax, ecx
mov dword [esi + 8], eax
jmp 0x1002b7fc
mov eax, dword [esp + 0x28]
mov dword [eax], esi
jmp 0x1002b39a
cmp dword [esp + 0x28], 0
je 0x1002dc2d
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x28]
cmp dword [edx], ecx
jne 0x1002c738
mov ecx, dword [esp + 0x28]
mov dword [ecx], eax
mov esi, dword [esp + 8]
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov ecx, dword [esp + 4]
cmp dword [ecx], eax
jne 0x1002dc3c
mov eax, dword [esp + 4]
mov dword [eax], 0
mov edx, dword [esp + 0x88]
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 0x34]
jmp 0x1002b06f
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1002dc49
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1002c188
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002c961
mov dword [eax + 4], ecx
jmp 0x100296c9
mov ecx, esi
mov edx, 0x100000
push 2
call fcn.10005780
add esp, 4
jmp 0x100272e1
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
jmp 0x1002b39a
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
and byte [esi + 4], 0xfe
mov ecx, dword [edi + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1002d871
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [edi + 4], ecx
mov dword [edx], edi
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
jne 0x1002a71a
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [esp + 8], edi
mov esi, dword [esp + 0x20]
and esi, 0xfffffffe
mov dword [eax], esi
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x1002dc58
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov edi, dword [edx + 4]
and edi, 0xfffffffe
je 0x1002c3cb
mov eax, dword [edi + 4]
mov dword [esp + 0x10], eax
test al, 1
je 0x1002c3cb
mov esi, dword [esp + 0x10]
and esi, 0xfffffffe
mov dword [edi + 4], esi
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x1002dd30
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
mov edi, dword [esp + 8]
jmp 0x1002949b
lea edx, [esp + 0x88]
mov dword [esp + 0x1c], edx
jmp 0x100292e4
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
and byte [edi + 4], 0xfe
mov ecx, dword [esi + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1002d8ed
mov edi, dword [edx]
and edi, 0xfffffffe
and ecx, 1
or ecx, edi
mov dword [esi + 4], ecx
mov dword [edx], esi
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
jne 0x1002af8a
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
and ecx, 0xfffffffe
mov dword [esi + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
or ecx, 1
mov dword [eax + 4], ecx
and esi, 0xfffffffe
je 0x1002d545
mov ecx, dword [esi]
or ecx, 1
mov dword [eax + 4], ecx
mov dword [esi], eax
mov dword [edx], esi
jmp 0x10028d93
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x1c]
xor eax, eax
cmp ecx, edi
seta cl
jb 0x1002c5b2
mov al, cl
jmp 0x1002ab48
cmp dword [edx + 0xc], 0
je 0x1002c9c2
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
add ecx, 0x38
call fcn.1003c7b0
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0x2c]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + 0xc]
sub dword [esi + 0x48], edx
sub eax, dword [ecx + 0xc]
mov ecx, dword [esp + 0x14]
add dword [ecx + 0x28], 0xfff00000
add eax, 0xfffffffe
mov dword [ecx + 0x2c], eax
jmp 0x1002bc4c
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp + 8]
xor eax, eax
cmp ecx, esi
seta cl
jb 0x1002c613
mov al, cl
jmp 0x1002b3ca
mov dword [edx + 4], edi
mov edi, dword [esp + 8]
jmp 0x1002949b
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [esp + 0xc]
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x1002baca
lea edx, [esp + 0x88]
mov dword [esp + 0xc], edx
jmp 0x10029588
push 0x100a477c
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov ebx, dword [0x100a4794]
xor eax, eax
dec eax
mov edx, dword [esp + 4]
xor ecx, ecx
cmp dword [ebx + 0x10], edx
setb cl
cmova ecx, eax
test ecx, ecx
je 0x1002c460
cmp ecx, 0xffffffff
jne 0x1002c431
mov ebx, dword [ebx + 8]
jmp 0x1002c418
mov ebx, dword [ebx + 0xc]
and ebx, 0xfffffffe
jmp 0x1002c418
mov eax, dword [ebx]
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x14], ecx
cmp eax, dword [ecx + 8]
je 0x10026fd2
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode__mArenaId__mNode__mArena__mId_
int3
mov esi, dword [ebx + 0x14]
push 0x100a477c
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov edx, esi
jmp 0x10026fc0
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, eax
call fcn.1003c3d0
mov edx, dword [esi]
jmp 0x1002ad04
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, eax
call fcn.1003c3d0
mov edx, dword [esi]
jmp 0x1002ae7d
mov eax, dword [ebx + 4]
test eax, eax
je 0x1002dc76
test byte [eax + 8], 1
jne 0x1002c871
or ecx, 1
mov dword [ebx + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1002c4cb
mov edx, dword [ecx + 8]
test dl, 1
jne 0x1002ca9a
or byte [eax + 8], 1
mov ecx, dword [ebx + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x1002dd81
mov edx, dword [eax + 4]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [ebx + 8], ecx
mov dword [eax + 4], ebx
jmp 0x1002c880
mov eax, dword [edi + 4]
test eax, eax
je 0x1002dc8b
test byte [eax + 8], 1
jne 0x1002c88f
or ecx, 1
mov dword [edi + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1002c521
mov edx, dword [ecx + 8]
test dl, 1
jne 0x1002caf3
or byte [eax + 8], 1
mov ecx, dword [edi + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x1002dd9f
mov edx, dword [eax + 4]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [edi + 8], ecx
mov dword [eax + 4], edi
jmp 0x1002c89e
lea esi, [esp + 0x70]
mov ecx, esi
call fcn.10001010
mov ecx, dword [esi]
jmp 0x1002a33f
xor edx, edx
test ebx, ebx
je 0x1002c5a2
mov ecx, dword [ebx + 8]
cmp ecx, 1
ja 0x1002cba2
mov eax, dword [ebx + 4]
test eax, eax
je 0x1002c5a2
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [ebx + 8], 1
and dword [eax + 8], 1
mov edx, eax
mov edi, dword [esp + 8]
mov dword [edi + 0x38], edx
mov ecx, dword [esp + 0x38]
jmp 0x1002b713
mov ecx, dword [edi]
xor eax, eax
dec eax
jmp 0x1002ab4e
xor edx, edx
test edi, edi
je 0x1002c603
mov ecx, dword [edi + 8]
cmp ecx, 1
ja 0x1002cc2f
mov eax, dword [edi + 4]
test eax, eax
je 0x1002c603
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [edi + 8], 1
and dword [eax + 8], 1
mov edx, eax
mov esi, dword [esp + 0x14]
mov dword [esi + 0x38], edx
mov ecx, dword [esp + 0x30]
jmp 0x1002b816
mov ecx, dword [esi]
xor eax, eax
dec eax
jmp 0x1002b3d0
lea ecx, [esp + 0x84]
mov edx, ebx
call fcn.1003cc60
mov eax, dword [esp + 0x84]
cmp dword [edi + 4], ebx
jne 0x1002dca0
mov dword [edi + 4], eax
mov ebx, eax
mov ecx, dword [esp + 0x38]
jmp 0x1002a8e9
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x1002dcb5
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002dcca
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1002ad04
lea ecx, [esp + 0x84]
mov edx, edi
call fcn.1003cc60
mov eax, dword [esp + 0x84]
cmp dword [esi + 4], edi
jne 0x1002dcd9
mov dword [esi + 4], eax
mov edi, eax
mov ecx, dword [esp + 0x30]
jmp 0x1002b163
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x1002dcee
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1002dd03
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1002ae7d
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [esp + 0x44]
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x1002c056
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [esp + 0x28]
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x1002c0f3
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1002dd12
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1002c798
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002cb4c
mov dword [eax + 4], ecx
jmp 0x1002ad00
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1002dd21
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x10029537
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1002dd3f
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1002c812
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1002cb77
mov dword [eax + 4], ecx
jmp 0x1002ae79
mov esi, eax
and esi, 0xfffffffe
mov dword [edi + 4], esi
mov ecx, dword [edx]
test ecx, ecx
je 0x1002dd4e
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1002dd63
mov edi, dword [eax]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [edx + 4], esi
mov dword [eax], edx
mov edx, dword [ecx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x1002a33f
lea edi, [esp + 0x70]
mov ecx, edi
mov edx, ebx
call fcn.1003cd70
mov eax, dword [edi]
lea ebx, [esp + 0x88]
mov dword [ebx + 4], eax
jmp 0x1002a8e1
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, edi
call fcn.1003cd70
mov eax, dword [esi]
lea edi, [esp + 0x88]
mov dword [edi + 4], eax
jmp 0x1002b15b
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
or byte [edx + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x10029b06
mov dword [edi + 4], eax
mov ebx, edi
jmp 0x1002a8e1
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1002d667
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
mov edi, dword [esp + 8]
jmp 0x1002a79e
mov dword [esi + 4], eax
mov edi, esi
jmp 0x1002b15b
lea ecx, [esp + 0x88]
mov dword [esp + 0xc], ecx
jmp 0x1002a2d8
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1002d685
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
mov edi, dword [esp + 0x1c]
jmp 0x1002b00e
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1002ddae
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x100296c9
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x14]
call fcn.10005680
jmp 0x100272f7
lea edx, [esp + 0x88]
mov dword [esp + 0x44], edx
mov edi, dword [esp + 8]
jmp 0x1002ac52
lea edx, [esp + 0x88]
mov dword [esp + 0x28], edx
jmp 0x1002b4d7
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x2c]
jmp 0x1002c395
test esi, esi
je 0x1002ddbd
mov eax, dword [esp + 0x38]
cmp dword [esi + 4], eax
jne 0x1002ccb8
mov dword [esi + 4], ebx
cmp dword [esp + 0x38], 0
je 0x1002ddd8
test ebx, ebx
je 0x1002ddee
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 4]
mov dword [ebx + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [ebx + 8]
and ecx, 1
or ecx, eax
mov dword [ebx + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [ebx + 8], ecx
cmp dword [edi + 4], ebx
jne 0x1002ddfd
mov dword [edi + 4], 0
jmp 0x1002b6f9
test ebx, ebx
je 0x1002de06
mov eax, dword [esp + 0x30]
cmp dword [ebx + 4], eax
jne 0x1002cccd
mov dword [ebx + 4], edi
cmp dword [esp + 0x30], 0
je 0x1002de21
test edi, edi
je 0x1002de37
mov edx, dword [esp + 0x30]
mov eax, dword [edx + 4]
mov dword [edi + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [edi + 8]
and ecx, 1
or ecx, eax
mov dword [edi + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [edi + 8], ecx
cmp dword [esi + 4], edi
jne 0x1002de46
mov dword [esi + 4], 0
jmp 0x1002b7fc
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov eax, dword [ebx + 4]
test eax, eax
je 0x1002de4f
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [ebx + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1002de65
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
and edx, 1
or edx, edi
mov dword [ebx + 8], edx
mov dword [ecx + 4], ebx
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x1002c880
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov eax, dword [edi + 4]
test eax, eax
je 0x1002de74
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1002de8a
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
and edx, 1
or edx, esi
mov dword [edi + 8], edx
mov dword [ecx + 4], edi
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x1002c89e
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1002de99
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x1002ad00
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1002dea8
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x1002ae79
lea esi, [esp + 0x88]
jmp 0x1002a8c1
mov byte [edi + 0x40], 0
lea eax, [esp + 0x88]
push eax
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
lea esi, [esp + 0x70]
push esi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
mov ecx, 0x10
call fcn.100123e0
xor edx, edx
cmp byte [esi + 8], 0
mov ecx, 0
mov esi, 0
je 0x1002cbf3
mov ecx, dword [esp + 0x74]
mov esi, dword [esp + 0x70]
cmp byte [esp + 0x90], 0
mov edi, 0
je 0x1002cc10
mov edx, dword [esp + 0x8c]
mov edi, dword [esp + 0x88]
mov dword [eax], edi
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], ecx
mov edi, dword [esp + 8]
mov dword [edi + 0x44], eax
mov byte [edi + 0x40], 1
mov ecx, dword [esp + 0xc]
jmp 0x100270da
lea ebx, [esp + 0x88]
jmp 0x1002b13b
mov byte [esi + 0x40], 0
lea eax, [esp + 0x88]
push eax
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
lea esi, [esp + 0x70]
push esi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
mov ecx, 0x10
call fcn.100123e0
xor edx, edx
cmp byte [esi + 8], 0
mov ecx, 0
mov esi, 0
je 0x1002cc80
mov ecx, dword [esp + 0x74]
mov esi, dword [esp + 0x70]
cmp byte [esp + 0x90], 0
mov edi, 0
je 0x1002cc9d
mov edx, dword [esp + 0x8c]
mov edi, dword [esp + 0x88]
mov dword [eax], edi
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], ecx
mov esi, dword [esp + 0x14]
mov dword [esi + 0x44], eax
mov byte [esi + 0x40], 1
jmp 0x100273aa
mov eax, ebx
and eax, 0xfffffffe
mov ecx, dword [esi + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
jmp 0x1002c9e6
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [ebx + 8]
and ecx, 1
or ecx, eax
mov dword [ebx + 8], ecx
jmp 0x1002ca4c
push 0x100a4814
call dword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
cmp dword [0x100a4810], 0
jne 0x1002cf24
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x1002dedf
mov eax, dword [0x100a481c]
mov ecx, dword [0x100a43c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jle 0x1002cd6c
push 0x100a481c
call fcn.1004f02e
add esp, 4
cmp dword [0x100a481c], 0xffffffff
jne 0x1002cd6c
lea esi, [esp + 0x88]
push esi
call dword [sym.imp.kernel32.dll_GetSystemInfo]
mov eax, dword [esi + 4]
mov dword [0x100a4818], eax
push 0x100a481c
call fcn.1004f02e
add esp, 4
mov eax, 0x1000
xor edx, edx
div dword [0x100a4818]
test edx, edx
jne 0x1002dee9
mov esi, 0x100a4820
push 0x40
push esi
push str.MALLOC_OPTIONS
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
test eax, eax
cmove esi, eax
mov dword [esp + 4], esi
je 0x1002cde7
mov eax, dword [esp + 4]
mov al, byte [eax]
test al, al
je 0x1002cde7
xor ebx, ebx
movsx eax, al
add eax, 0xffffffd0
cmp eax, 9
jbe 0x1002df50
xor esi, esi
inc esi
mov eax, dword [esp + 4]
mov al, byte [eax + ebx]
movsx ecx, al
cmp ecx, 0x72
jne 0x1002deb7
mov byte [0x100a4778], 1
dec esi
jne 0x1002cdbd
mov eax, dword [esp + 4]
mov al, byte [eax + ebx + 1]
inc ebx
test al, al
jne 0x1002cdab
xor esi, esi
mov dword [0x100a47dc], esi
mov eax, 0x1388
mov ebx, dword [sym.imp.kernel32.dll_InitializeCriticalSectionAndSpinCount]
push eax
push 0x100a47bc
call ebx
mov dword [0x100a47d4], esi
mov dword [0x100a47d8], esi
mov eax, 0x1388
push eax
push 0x100a477c
call ebx
mov dword [0x100a4794], esi
mov dword [0x100a4798], esi
mov dword [0x100a479c], esi
mov eax, 0x1388
push eax
push 0x100a47e0
call ebx
mov dword [0x100a480c], esi
mov dword [0x100a4804], esi
mov dword [0x100a474c], esi
mov dword [0x100a4750], esi
mov dword [0x100a4754], esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x94], esi
mov eax, dword [0x100a4024]
mov dword [esp + 0x88], eax
mov eax, 0x1388
push eax
push 0x100a472c
call ebx
test eax, eax
je 0x1002df0d
lea edx, [esp + 0x88]
xor ecx, ecx
call fcn.10040920
mov dword [0x100a4744], eax
test eax, eax
je 0x1002df32
mov ecx, dword [0x100a43c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp byte [ecx + 8], 0
je 0x1002df19
mov ecx, dword [0x100a43c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
mov dword [ecx + 0xc], eax
push 0x1388
push 0x100a47a0
call dword [sym.imp.kernel32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x4000
call fcn.100123e0
test eax, eax
je 0x1002df28
mov esi, eax
push 0x4000
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [0x100a47b8], esi
xor eax, eax
inc eax
xchg dword [0x100a4810], eax
call fcn.10001250
push 0x100a4814
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
jmp 0x10027317
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
or esi, 1
mov dword [edx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
or edi, 1
mov dword [edx + 4], edi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
or ebx, 1
mov dword [eax + 4], ebx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
and esi, 1
mov dword [ecx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
and esi, 1
mov dword [ebx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
or esi, 1
mov dword [edx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
or edi, 1
mov dword [edx + 4], edi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
and ecx, 1
mov dword [edi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
and ecx, 1
mov dword [esi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [esp + 0x60], edi
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x1002dff6
cmp eax, 8
je 0x1002dff6
xor eax, eax
jmp 0x10029a3c
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x1002e04d
cmp eax, 8
je 0x1002e04d
xor eax, eax
jmp 0x10029c58
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
or ecx, 1
mov dword [edx + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [esp + 0x18], 1
jmp 0x10026f72
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_malloc_initialized_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__aArena__arena__aArena_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x20U____0___Freeing_in_decommitted_page._
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x01U_____0___Double_free__
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__run__mRegionsMask_elm____1U____bit____0___Double_free__
int3
call fcn.1004eb54
jmp 0x1002734b
mov esi, dword [0x100a4744]
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
jne 0x1002d266
call fcn.1004eb54
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov dword [eax + 0xc], esi
jmp 0x10027368
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__mArena__arena__mArena_
int3
call fcn.1004eb54
jmp 0x1002707b
mov edi, dword [0x100a4744]
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
jne 0x1002d2c2
call fcn.1004eb54
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov dword [eax + 0xc], edi
jmp 0x10027098
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
and eax, 1
mov ecx, dword [esp + 0x34]
mov dword [ecx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
and eax, 1
mov ecx, dword [esp + 0x20]
mov dword [ecx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov eax, ecx
and eax, 0xfffffffe
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x24]
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov eax, dword [esp + 0x24]
mov dword [eax + 4], edx
jmp 0x10027769
mov eax, ecx
and eax, 0xfffffffe
mov dword [esp + 4], edx
mov edx, dword [esp + 4]
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov eax, dword [esp + 4]
mov dword [eax + 4], edx
jmp 0x1002796c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
dec dword [edx + 8]
mov bl, 1
xor esi, esi
jmp 0x1002716c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov eax, dword [esp + 0x2c]
dec dword [eax + 8]
mov bl, 1
mov dword [esp + 4], 0
jmp 0x10027437
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_run_ind___gChunkNumPages___1_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
and esi, 1
mov eax, dword [esp + 0x20]
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
xor ebx, ebx
jmp 0x10027d27
mov eax, edi
and eax, 0xfffffffe
mov ecx, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x10028553
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
jmp 0x1002874d
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
jmp 0x10028c1a
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov eax, ecx
jmp 0x10029902
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov eax, ecx
jmp 0x10029b1e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
and dword [eax + 4], 1
jmp 0x10027b0d
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
and dword [eax + 4], 1
jmp 0x10027b56
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x1002a61e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x1002ae8e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
and dword [edi + 4], 1
jmp 0x1002892d
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
and dword [edi + 4], 1
jmp 0x10028ecd
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov eax, dword [esp + 0x10]
and dword [eax + 4], 1
jmp 0x100289ab
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov edi, dword [esp + 8]
mov ecx, dword [esp + 0x28]
jmp 0x1002b732
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0xc]
jmp 0x1002b835
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov eax, dword [esp + 0x24]
and dword [eax + 4], 1
jmp 0x1002c090
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov eax, dword [esp + 4]
and dword [eax + 4], 1
jmp 0x1002c12d
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
or ecx, 1
mov dword [edi + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [edi + 8], edx
jmp 0x1002c63e
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [esi + 8], edx
jmp 0x1002c6bf
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cfbc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test ebx, ebx
je 0x1002ddee
mov dword [ebx + 4], 0
and dword [ebx + 8], 1
xor ecx, ecx
jmp 0x1002ca1c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
and dword [edi + 8], 1
jmp 0x1002b6f9
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test edi, edi
je 0x1002de37
mov dword [edi + 4], 0
and dword [edi + 8], 1
xor ecx, ecx
jmp 0x1002ca82
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
and dword [esi + 8], 1
jmp 0x1002b7fc
mov dword [ebx + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [edi + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf8f
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1002cf44
cmp ecx, 0x46
jne 0x1002df77
mov eax, dword [0x100a4024]
test eax, eax
je 0x1002df98
add eax, eax
je 0x1002cdd7
mov dword [0x100a4024], eax
jmp 0x1002cdd7
call fcn.1004eb54
jmp 0x1002cd16
mov ecx, str._jemalloc_
mov edx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.10054100
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_CRASH__
int3
mov dword [0x100a4744], 0
jmp 0x1002df32
call fcn.1004eb54
mov eax, dword [0x100a4744]
jmp 0x1002cec6
mov dword [0x100a47b8], 0
push 0x100a4814
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [eax], 0xc
xor esi, esi
jmp 0x100272f7
xor esi, esi
lea ecx, [esi + esi*4]
lea esi, [eax + ecx*2]
mov eax, dword [esp + 4]
movsx eax, byte [eax + ebx + 1]
inc ebx
add eax, 0xffffffd0
cmp eax, 0xa
jb 0x1002df52
test esi, esi
je 0x1002cdda
jmp 0x1002cdbd
cmp ecx, 0x52
jne 0x1002df88
mov byte [0x100a4778], 0
jmp 0x1002cdd7
cmp ecx, 0x66
jne 0x1002dfa7
shr dword [0x100a4024], 1
jmp 0x1002cdd7
mov dword [0x100a4024], 1
jmp 0x1002cdd7
lea ecx, [esp + 0x88]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov eax, 2
push 0xa
push str._jemalloc_
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
push 0x35
push str.:__malloc__Unsupported_character_in_malloc_options:_
mov eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
lea ecx, [esp + 0x88]
mov edx, 0x1009a0a1
call fcn.10054100
jmp 0x1002cdd7
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea edi, [eax + eax*4]
add edi, 5
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
push 4
push 0x1000
push dword [esp + 0x68]
push esi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov dword [esp + 0x64], eax
call dword [sym.imp.kernel32.dll_GetLastError]
cmp dword [esp + 0x64], 0
jne 0x1002e0a8
cmp eax, 0x5af
je 0x1002e043
cmp eax, 8
jne 0x1002d0e7
xor eax, eax
dec edi
jne 0x1002e008
jmp 0x10029a3c
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea eax, [eax + eax*4]
add eax, 5
mov dword [esp + 0x58], eax
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
push 4
push 0x1000
push ebx
push edi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov dword [esp + 0x5c], eax
call dword [sym.imp.kernel32.dll_GetLastError]
cmp dword [esp + 0x5c], 0
jne 0x1002e0cc
cmp eax, 0x5af
je 0x1002e09b
cmp eax, 8
jne 0x1002d108
xor eax, eax
dec dword [esp + 0x58]
jne 0x1002e063
jmp 0x10029c58
cmp eax, 0x5af
mov edi, dword [esp + 0x60]
mov ecx, dword [esp + 0x68]
je 0x1002e0c0
cmp eax, 8
jne 0x10029a1b
push ecx
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x10029a1b
cmp eax, 0x5af
mov ecx, dword [esp + 0x44]
je 0x1002e0e0
cmp eax, 8
jne 0x10029c3f
push ecx
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x10029c3f