Function at 0x10008df0
Capabilities:
Get system information on windows
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa0
mov esi, ecx
mov eax, dword [0x100a400c]
xor eax, ebp
mov dword [esp + 0x98], eax
cmp dword [0x100a4810], 0
je 0x1000c149
xor ebx, ebx
inc ebx
test edx, edx
cmove edx, ebx
mov eax, dword [esi]
test eax, eax
jne 0x100091fa
mov esi, edx
cmp edx, 0x1f1
jae 0x100091f3
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x1000c5dc
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov eax, dword [eax + 0xc]
mov dword [esp + 8], eax
test eax, eax
je 0x1000bd91
cmp esi, 9
jb 0x100093aa
cmp esi, 0x1f1
jae 0x10008ff3
add esi, 0xf
mov eax, esi
and eax, 0xfffffff0
mov dword [esp + 0x18], eax
shr esi, 4
shl esi, 5
mov dword [esp + 0x1c], esi
mov ecx, dword [esp + 8]
cmp byte [ecx + 0x40], 0
je 0x10008eb8
cmp dword [ecx + 0x44], 0
je 0x1000c06a
mov eax, dword [esp + 0x1c]
lea esi, [ecx + eax]
add esi, 0x5c
lea eax, [ecx + 0xc]
mov dword [esp], eax
cmp dword [ecx + 0x24], 0
jne 0x10008ed7
push dword [esp]
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov edi, dword [esi]
test edi, edi
je 0x1000900f
cmp dword [edi + 8], 0
je 0x1000900f
mov esi, dword [edi + 4]
mov dword [esp + 0x28], edi
mov edx, dword [edi + esi*4 + 0xc]
test edx, edx
je 0x100092e0
mov eax, dword [esp + 8]
mov edi, dword [eax + 0x44]
test edi, edi
jne 0x10008f83
tzcnt ebx, edx
mov edi, esi
shl edi, 5
or edi, ebx
btc edx, ebx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x1c]
imul edi, dword [eax + ecx + 0x64]
mov eax, dword [eax + ecx + 0x70]
mov ecx, dword [esp + 0x28]
mov dword [ecx + esi*4 + 0xc], edx
add eax, ecx
add edi, eax
dec dword [ecx + 8]
test edi, edi
je 0x1000c6ed
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
add dword [eax + 0x30], ecx
xor ebx, ebx
cmp dword [eax + 0x24], 0
jne 0x10008f5b
push dword [esp]
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test bl, bl
jne 0x1000a18b
test edi, edi
je 0x1000a18b
mov ecx, dword [esp + 0x98]
xor ecx, ebp
call fcn.1004f020
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 4], esi
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov ebx, eax
shld ebx, ecx, 0x17
mov esi, ecx
shl esi, 0x17
xor esi, ecx
mov ecx, dword [edi + 0xc]
xor ebx, eax
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, ebx
mov dword [esp + 0x10], ebx
shr ebx, 0x11
xor ebx, eax
mov eax, dword [edi + 8]
mov dword [edi + 4], ecx
shld dword [esp + 0x10], esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, dword [esp + 0x10]
mov dword [edi], eax
mov dword [edi + 0xc], ebx
mov dword [edi + 8], ecx
add ecx, eax
mov esi, edx
ror esi, cl
test esi, esi
je 0x10008fec
tzcnt ebx, esi
mov esi, dword [esp + 4]
add ebx, ecx
and ebx, 0x1f
jmp 0x10008f0d
mov ebx, 0x20
jmp 0x10008fde
add esi, 0xff
mov eax, esi
and eax, 0x1f00
mov dword [esp + 0x18], eax
shr esi, 8
add esi, 0x1e
jmp 0x10008e9d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x1c]
mov edx, dword [eax + ecx + 0x60]
test edx, edx
mov dword [esp + 0x10], esi
je 0x1000a19e
add ecx, eax
add ecx, 0x60
mov eax, edx
mov ebx, eax
mov eax, dword [eax]
test eax, eax
jne 0x1000902e
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], 0
xor esi, esi
dec esi
xor eax, eax
cmp edx, ebx
setb al
cmova eax, esi
cmp eax, 0xffffffff
mov dword [esp + 4], ecx
jne 0x10009993
mov ecx, dword [edx]
test ecx, ecx
je 0x1000c441
mov eax, dword [ecx + 4]
mov dword [esp + 0x20], 0
test al, 1
je 0x10009346
mov esi, edx
xor edi, edi
dec edi
mov edx, ecx
xor eax, eax
cmp ecx, ebx
setb al
cmova eax, edi
cmp eax, 0xffffffff
jne 0x10009109
test edx, edx
je 0x1000a4d2
mov ecx, dword [edx]
test ecx, ecx
je 0x1000a4d2
mov eax, dword [ecx + 4]
test al, 1
je 0x100090ac
mov esi, edx
jmp 0x1000907e
mov dword [esp + 0x28], esi
mov esi, dword [ecx]
test esi, esi
je 0x100090bc
test byte [esi + 4], 1
jne 0x100090a8
or eax, 1
mov dword [ecx + 4], eax
mov esi, dword [edx + 4]
mov edi, esi
and edi, 0xfffffffe
je 0x1000c393
mov ecx, dword [edi]
test ecx, ecx
je 0x100090e1
mov eax, dword [ecx + 4]
test al, 1
jne 0x10009dfa
or esi, 1
mov dword [edx + 4], esi
mov eax, dword [edi]
or eax, 1
mov dword [edx + 4], eax
mov dword [edi], edx
mov ecx, edi
xor edi, edi
dec edi
mov esi, dword [esp + 0x28]
cmp dword [esi], edx
jne 0x1000c6d1
mov dword [esi], ecx
jmp 0x1000907e
test eax, eax
jne 0x10009127
xor ecx, ecx
test edx, edx
je 0x1000c622
mov edi, dword [edx + 4]
mov eax, esi
cmp edi, 1
jbe 0x1000929e
jmp 0x10009136
test edx, edx
je 0x1000c6b3
mov edi, dword [edx + 4]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x20], eax
mov ecx, edi
and ecx, 0xfffffffe
je 0x10009151
mov eax, dword [ecx]
test eax, eax
je 0x10009151
test byte [eax + 4], 1
jne 0x10009079
mov eax, dword [edx]
test eax, eax
je 0x1000c6b3
mov ecx, dword [eax + 4]
test cl, 1
mov dword [esp + 0x28], esi
je 0x10009f74
and ecx, 0xfffffffe
je 0x1000c665
mov esi, dword [ecx]
test esi, esi
je 0x10009184
test byte [esi + 4], 1
jne 0x1000a58b
and edi, 1
or edi, ecx
mov dword [eax + 4], edi
or byte [ecx + 4], 1
mov ecx, dword [edx]
test ecx, ecx
je 0x1000c67a
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov edi, esi
and edi, 0xfffffffe
je 0x1000c647
mov eax, dword [edi]
and eax, 0xfffffffe
and esi, 1
or esi, eax
mov dword [edx + 4], esi
mov dword [edi], edx
mov eax, dword [ecx + 4]
and eax, 1
or eax, edi
mov dword [ecx + 4], eax
or byte [edx + 4], 1
mov esi, dword [esp + 0x28]
cmp dword [esi], edx
jne 0x1000a02a
mov dword [esi], ecx
mov edx, esi
jmp 0x10009079
mov eax, dword [0x100a4744]
mov edx, esi
mov dword [esp + 8], eax
mov esi, edx
cmp edx, 0xf00
jbe 0x10008e79
mov edx, esi
cmp esi, 0xfd000
ja 0x1000becf
add edx, 0xfff
mov dword [esp + 0x1c], edx
mov eax, dword [esp + 8]
lea esi, [eax + 0xc]
cmp dword [eax + 0x24], 0
jne 0x10009238
push esi
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x1c]
and eax, 0xfffff000
mov dword [esp + 0x28], eax
mov eax, dword [esp + 8]
mov edi, dword [eax + 0x58]
test edi, edi
mov dword [esp + 0x30], esi
je 0x10009ece
xor eax, eax
mov ecx, 0xfffff000
xor edx, edx
dec edx
mov dword [esp], edi
mov esi, edi
mov edi, dword [esi + 8]
and edi, ecx
xor ebx, ebx
cmp dword [esp + 0x28], edi
seta bl
cmovb ebx, edx
lea edi, [ebx + 1]
cmp edi, 2
jae 0x1000928d
mov eax, esi
mov esi, dword [esi]
test esi, esi
jne 0x10009267
jmp 0x10009464
cmp ebx, 1
jne 0x1000c967
mov esi, dword [esi + 4]
and esi, 0xfffffffe
jmp 0x10009284
mov edi, esi
mov esi, dword [edx]
test esi, esi
jne 0x10009d34
cmp dword [edi], edx
jne 0x10009ff8
mov dword [edi], ecx
mov ecx, dword [esp + 4]
mov eax, dword [esp + 0x70]
mov dword [ecx], eax
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov edi, 0xfffff000
and edi, dword [ebx + 8]
mov eax, dword [esp + 0x10]
mov dword [eax], edi
test edi, edi
jne 0x10008eeb
jmp 0x1000b741
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [eax + ecx + 0x6c]
mov edi, esi
shl edi, 5
mov eax, dword [esp + 0x28]
inc esi
cmp esi, ecx
jae 0x1000c6e6
mov edx, dword [eax + esi*4 + 0xc]
add edi, 0x20
test edx, edx
je 0x100092f5
mov eax, dword [esp + 8]
mov ebx, dword [eax + 0x44]
test ebx, ebx
jne 0x100093e7
tzcnt ebx, edx
add edi, ebx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x1c]
imul edi, dword [eax + ecx + 0x64]
mov eax, dword [eax + ecx + 0x70]
mov ecx, dword [esp + 0x28]
add eax, ecx
add edi, eax
btc edx, ebx
mov dword [ecx + esi*4 + 0xc], edx
mov dword [ecx + 4], esi
jmp 0x10008f34
mov esi, dword [ecx]
test esi, esi
je 0x10009356
test byte [esi + 4], 1
jne 0x10009079
or eax, 1
mov dword [ecx + 4], eax
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1000c42c
mov ecx, dword [eax]
test ecx, ecx
je 0x10009389
mov edi, dword [ecx + 4]
mov dword [esp + 0xc], edi
mov dword [esp + 0x28], eax
mov eax, edi
test al, 1
mov eax, dword [esp + 0x28]
jne 0x1000ab5e
or esi, 1
mov dword [edx + 4], esi
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
and byte [ecx + 4], 0xfe
lea edx, [esp + 0x70]
mov dword [edx], ecx
jmp 0x10009079
mov edx, esi
mov eax, esi
dec eax
je 0x10009bf1
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor esi, esi
inc esi
shl esi, cl
cmp esi, 9
mov eax, 8
cmovb esi, eax
cmp edx, 2
cmovb esi, eax
mov dword [esp + 0x18], esi
mov eax, esi
shr eax, 3
or eax, 1
bsr esi, eax
jmp 0x10008e9d
mov dword [esp + 4], esi
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x20], edx
mov edx, ecx
shld edx, eax, 0x17
mov esi, eax
shl esi, 0x17
xor esi, eax
mov ecx, dword [ebx + 0xc]
xor edx, dword [esp + 0x10]
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, edx
mov dword [esp + 0x10], edx
shr edx, 0x11
xor edx, eax
mov eax, dword [ebx + 8]
mov dword [ebx + 4], ecx
shld dword [esp + 0x10], esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, dword [esp + 0x10]
mov dword [ebx], eax
mov dword [ebx + 0xc], edx
mov dword [ebx + 8], ecx
add ecx, eax
mov edx, dword [esp + 0x20]
mov eax, edx
ror edx, cl
test edx, edx
je 0x10009c77
tzcnt ebx, edx
mov esi, dword [esp + 4]
add ebx, ecx
and ebx, 0x1f
mov edx, eax
jmp 0x1000931c
test eax, eax
je 0x1000c76b
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
mov edi, edx
and edi, 0xfffffff8
shl edi, 9
add edi, ecx
mov ecx, edi
and ecx, 0xfff00000
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x38], eax
mov eax, edi
shr eax, 0xc
movzx edx, al
lea eax, [edx*4]
lea eax, [eax + eax*2]
or eax, ecx
mov dword [esp + 0x18], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x3c], eax
mov esi, dword [esp + 0x1c]
shr esi, 0xc
cmp dword [esp + 0x28], 0
mov dword [esp + 4], ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], esi
je 0x10009d79
xor eax, eax
inc eax
cmp esi, 2
cmovae eax, esi
mov dword [esp + 0xc], eax
lea eax, [edx + edx*2]
lea eax, [ecx + eax*4]
add eax, 0x18
mov dword [esp + 0x10], eax
mov eax, edx
xor edx, edx
xor ebx, ebx
mov dword [esp], esi
lea esi, [ebx + eax]
lea eax, [esi + esi*2]
test byte [ecx + eax*4 + 0x18], 0x60
jne 0x10009529
inc ebx
cmp ebx, dword [esp + 0x1c]
setae dl
mov esi, dword [esp]
dec esi
add dword [esp + 0x10], 0xc
cmp ebx, dword [esp + 0xc]
mov eax, dword [esp + 0x20]
jne 0x100094f9
jmp 0x10009619
mov dword [esp + 0x24], esi
cmp ebx, dword [esp + 0x1c]
jae 0x1000a3fc
xor ecx, ecx
mov eax, dword [esp + 0x10]
mov esi, dword [esp]
mov dword [esp + 0x14], ecx
mov ecx, dword [eax]
test cl, 0x60
je 0x1000bca8
and ecx, 0xffffff9f
mov dword [eax], ecx
mov ecx, dword [esp + 0x14]
inc ecx
add eax, 0xc
cmp esi, ecx
jne 0x10009540
mov eax, esi
mov dword [esp + 0x2c], edx
mov dword [esp + 0x14], eax
mov esi, eax
shl esi, 0xc
jne 0x10009f30
jmp 0x100095c7
mov dword [esp + 0x24], edx
mov dword [esp + 0x44], esi
mov esi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esp + 0x40], eax
push 4
push 0x1000
mov dword [esp + 0x50], esi
push esi
push dword [esp + 0x30]
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x1000c3db
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x48]
add edx, eax
mov esi, dword [esp + 0x44]
sub esi, eax
mov eax, 0x100000
cmp esi, eax
cmovb eax, esi
test esi, esi
jne 0x10009577
mov al, 1
mov dword [esp + 0x34], eax
cmp dword [esp + 0x14], 0
je 0x100095f6
cmp byte [esp + 0x34], 0
mov ecx, 0x20
mov eax, 4
cmovne ecx, eax
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
or dword [edx], ecx
add edx, 0xc
dec eax
jne 0x100095ee
cmp byte [esp + 0x34], 0
mov ecx, dword [esp + 4]
mov eax, dword [esp + 0x2c]
je 0x10009bbc
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x14]
add dword [eax + 0x2c], edx
jmp 0x10009509
mov dword [esp + 0x2c], edx
mov eax, dword [esp + 8]
mov esi, dword [eax + 0x58]
mov dword [esp], esi
mov eax, dword [esp + 0x18]
lea ecx, [eax + 0x10]
mov dword [esp + 0xc], ecx
add eax, 0x18
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], 0
mov dword [esp + 0x18], eax
mov ecx, dword [eax]
mov edx, 0xfffff000
mov ebx, ecx
and ebx, edx
and edx, dword [esi + 8]
xor esi, esi
dec esi
xor eax, eax
cmp ebx, edx
seta al
cmovb eax, esi
mov esi, dword [esp]
test eax, eax
je 0x10009eb0
cmp eax, 0xffffffff
jne 0x10009bfb
mov esi, dword [esi]
test esi, esi
je 0x1000c96e
mov eax, dword [esi + 4]
mov dword [esp + 0x14], 0
test al, 1
je 0x10009c81
mov eax, dword [esp]
mov dword [esp + 0x10], eax
mov dword [esp], esi
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
mov ebx, edx
mov eax, 0xfffff000
and ebx, eax
mov ecx, dword [esp]
mov esi, dword [ecx + 8]
and esi, eax
xor ecx, ecx
cmp ebx, esi
mov esi, dword [esp]
seta cl
mov eax, 0xffffffff
cmovb ecx, eax
test ecx, ecx
je 0x100096f4
cmp ecx, 0xffffffff
jne 0x1000970e
mov esi, dword [esi]
test esi, esi
je 0x1000a523
mov ecx, dword [esi + 4]
test cl, 1
jne 0x10009691
mov edx, dword [esi]
test edx, edx
je 0x100097f5
test byte [edx + 4], 1
jne 0x10009691
jmp 0x100097f5
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 0xc]
xor ecx, ecx
cmp edx, esi
seta dl
jb 0x100096cd
mov cl, dl
jmp 0x100096c8
test ecx, ecx
je 0x100097e0
mov ebx, dword [esi + 4]
mov eax, dword [esp + 0x10]
mov esi, ebx
and esi, 0xfffffffe
je 0x10009734
mov ecx, dword [esi]
test ecx, ecx
je 0x10009734
test byte [ecx + 4], 1
jne 0x10009691
mov esi, dword [esp]
mov edx, dword [esi]
test edx, edx
je 0x1000c729
mov ecx, dword [edx + 4]
test cl, 1
je 0x10009e74
and ecx, 0xfffffffe
je 0x1000c3c0
mov esi, dword [ecx]
mov dword [esp + 0x24], esi
test esi, esi
je 0x1000976e
mov esi, dword [esp + 0x24]
test byte [esi + 4], 1
jne 0x1000a5f9
and ebx, 1
or ebx, ecx
mov dword [edx + 4], ebx
or byte [ecx + 4], 1
mov ebx, dword [esp]
mov esi, dword [ebx]
test esi, esi
je 0x1000c6f6
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov dword [ebx], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
mov edx, dword [ebx + 4]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1000c70b
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and edx, 1
or edx, ebx
mov ebx, dword [esp]
mov dword [ebx + 4], edx
mov dword [ecx], ebx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
or byte [ebx + 4], 1
cmp dword [eax], ebx
jne 0x10009f54
mov dword [eax], esi
mov dword [esp], eax
jmp 0x10009691
mov ebx, dword [esi + 4]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x14], eax
cmp ebx, 1
jbe 0x10009846
jmp 0x1000971d
or ecx, 1
mov dword [esi + 4], ecx
mov ecx, dword [esp]
mov edx, dword [ecx + 4]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1000c12b
mov esi, dword [ecx]
test esi, esi
mov eax, dword [esp + 0x10]
je 0x10009822
mov ebx, dword [esi + 4]
test bl, 1
jne 0x1000a463
or edx, 1
mov ebx, dword [esp]
mov dword [ebx + 4], edx
mov edx, dword [ecx]
or edx, 1
mov dword [ebx + 4], edx
mov dword [ecx], ebx
mov esi, ecx
cmp dword [eax], ebx
jne 0x1000c9c8
mov dword [eax], esi
jmp 0x10009698
mov ecx, dword [esi]
test ecx, ecx
je 0x1000987d
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [esi], edx
mov edx, esi
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [esp]
mov esi, dword [esi + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [esp]
or byte [esi + 4], 1
and dword [ecx + 4], 1
cmp dword [eax], esi
jne 0x10009d66
mov dword [eax], ecx
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x3c]
shr edx, 0xc
mov eax, dword [esp + 8]
mov dword [eax + 0x58], ecx
mov ecx, edx
xor eax, eax
mov edx, dword [esp + 0xc]
mov dword [edx], eax
mov dword [edx + 4], eax
cmp ecx, dword [esp + 0x1c]
jne 0x100099ba
cmp dword [esp + 0x28], 0
je 0x100098ff
xor eax, eax
inc eax
mov ecx, dword [esp + 0x1c]
cmp ecx, 2
cmovae eax, ecx
shl eax, 2
lea eax, [eax + eax*2]
mov ecx, dword [esp + 0x20]
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 4]
lea ecx, [edx + ecx*4]
add ecx, 0x18
xor edx, edx
test byte [ecx + edx], 8
je 0x100098f1
mov esi, dword [esp + 4]
dec dword [esi + 0xc]
mov esi, dword [esp + 8]
dec dword [esi + 0x48]
mov dword [ecx + edx], 3
add edx, 0xc
cmp eax, edx
jne 0x100098dd
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
or dword [ecx], eax
mov ecx, dword [esp + 4]
cmp dword [ecx + 0xc], 0
jne 0x10009bb8
cmp dword [esp + 0x38], 0
mov eax, dword [esp + 0x2c]
je 0x10009bbc
mov eax, dword [esp + 8]
mov esi, dword [eax + 0x38]
mov dword [esp + 0x74], esi
mov dword [esp + 0x78], 0
xor edx, edx
dec edx
xor eax, eax
cmp esi, ecx
setb al
cmova eax, edx
cmp eax, 0xffffffff
je 0x1000a041
test eax, eax
je 0x1000ac41
test esi, esi
je 0x1000c44d
mov ebx, edx
mov ecx, dword [esi + 8]
mov dword [esp + 0x1c], 0
mov eax, ecx
and eax, 0xfffffffe
je 0x1000abeb
mov edx, dword [eax + 4]
test edx, edx
je 0x1000abeb
test byte [edx + 8], 1
je 0x1000abeb
mov edx, ebx
jmp 0x1000a066
test eax, eax
jne 0x10009d87
mov eax, dword [edx + 4]
cmp eax, 1
ja 0x1000b8fe
mov eax, dword [edx]
test eax, eax
jne 0x1000b8ab
mov dword [esp + 0x70], eax
jmp 0x100092b8
mov edx, dword [esp + 0x20]
lea eax, [edx + ecx]
mov dword [esp], eax
mov eax, dword [esp + 0x1c]
sub ecx, eax
shl ecx, 0xc
add eax, edx
lea eax, [eax + eax*2]
mov ebx, dword [esp + 4]
mov dword [esp + 0x10], eax
lea eax, [ebx + eax*4]
add eax, 0x10
mov edx, 0xfff
mov esi, dword [eax + 8]
and esi, edx
or esi, ecx
mov dword [esp + 0xc], eax
mov dword [eax + 8], esi
mov eax, dword [esp]
lea esi, [eax + eax*2]
and edx, dword [ebx + esi*4 + 0xc]
or edx, ecx
mov dword [ebx + esi*4 + 0xc], edx
mov ecx, dword [esp + 8]
mov ecx, dword [ecx + 0x58]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], 0
test ecx, ecx
je 0x1000a217
mov eax, dword [esp + 0x10]
lea eax, [ebx + eax*4]
add eax, 0x18
mov dword [esp + 0x10], eax
lea ebx, [esp + 0x70]
xor edx, edx
mov esi, edx
mov edx, ebx
mov dword [esp], edx
mov ebx, dword [ecx]
test ebx, ebx
je 0x10009a52
mov eax, dword [ebx + 4]
test al, 1
je 0x10009a52
mov edx, dword [ebx]
test edx, edx
je 0x10009a52
test byte [edx + 4], 1
jne 0x10009aaa
mov ebx, ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, ecx
mov edx, 0xfffff000
and eax, edx
mov esi, dword [ebx + 8]
and esi, edx
xor edx, edx
cmp eax, esi
seta dl
mov eax, 0xffffffff
cmovb edx, eax
cmp edx, 0xffffffff
je 0x10009a99
xor eax, eax
inc eax
test edx, edx
jne 0x10009ae5
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0xc]
xor eax, eax
cmp ecx, ebx
seta cl
jae 0x10009ae3
mov ecx, dword [ebx]
xor eax, eax
dec eax
test ecx, ecx
mov edx, dword [esp]
jne 0x10009a32
jmp 0x10009b80
mov dword [esp + 0x14], esi
and eax, 0xfffffffe
mov dword [ecx], eax
mov edx, ecx
and edx, 0xfffffffe
mov eax, dword [ebx]
mov esi, dword [ebx + 4]
and esi, 1
or esi, edx
mov dword [ebx + 4], esi
test eax, eax
je 0x1000c638
and byte [eax + 4], 0xfe
mov edx, dword [esp]
cmp dword [edx], ecx
mov esi, dword [esp + 0x14]
jne 0x10009aed
mov dword [edx], ebx
jmp 0x10009a54
mov al, cl
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
jmp 0x10009a9e
and ebx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + ebx]
mov dword [edx + 4], ecx
test ebx, ebx
je 0x1000c629
mov ecx, dword [ebx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [ebx], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
or byte [edx + 4], 1
test esi, esi
je 0x1000c402
cmp dword [esi], edx
je 0x1000a4cb
jmp 0x1000a57b
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov esi, dword [ebx + 8]
and esi, ecx
xor ecx, ecx
cmp edx, esi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x1000a206
jmp 0x1000a9fc
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
mov esi, dword [esp + 0x14]
mov edx, ebx
test ecx, ecx
jne 0x10009a36
mov edx, esi
mov ecx, dword [esp + 0xc]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x10009ce1
mov dword [ebx], ecx
mov eax, dword [esp + 0x70]
test eax, eax
je 0x1000c99b
and byte [eax + 4], 0xfe
mov ecx, dword [esp + 8]
mov dword [ecx + 0x58], eax
jmp 0x100098b0
mov eax, dword [esp + 0x2c]
test al, 1
je 0x1000a17d
test edi, edi
je 0x1000a17d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x28]
add dword [eax + 0x34], ecx
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x18], 0
jne 0x10008f63
push eax
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
jmp 0x10008f63
mov ecx, 0x20
jmp 0x100093bb
test eax, eax
je 0x10009fae
mov eax, dword [esi + 4]
mov dword [esp + 0x14], 0
mov esi, eax
and esi, 0xfffffffe
je 0x10009c25
mov ecx, dword [esi]
test ecx, ecx
je 0x10009c25
test byte [ecx + 4], 1
jne 0x10009691
mov edx, dword [esp]
mov ecx, dword [edx]
test ecx, ecx
je 0x1000c4ca
test byte [ecx + 4], 1
jne 0x1000abd9
or eax, 1
mov dword [edx + 4], eax
mov eax, dword [ecx]
test eax, eax
je 0x10009c54
mov ebx, dword [eax + 4]
test bl, 1
jne 0x1000ad30
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov esi, eax
and esi, 0xfffffffe
je 0x1000cb65
mov ecx, dword [esi]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
mov dword [esi], edx
jmp 0x10009cd3
mov ebx, 0x20
jmp 0x10009454
mov ecx, dword [esi]
test ecx, ecx
je 0x10009c91
test byte [ecx + 4], 1
jne 0x10009691
or eax, 1
mov dword [esi + 4], eax
mov eax, dword [esp]
mov ecx, dword [eax + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1000c3a8
mov esi, dword [eax]
test esi, esi
je 0x10009cba
mov edx, dword [esi + 4]
test dl, 1
jne 0x1000adb1
or ecx, 1
mov edx, dword [esp]
mov dword [edx + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov esi, eax
and byte [esi + 4], 0xfe
lea eax, [esp + 0x70]
mov dword [esp], eax
mov dword [eax], esi
jmp 0x10009691
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, eax
or ecx, dword [esp + 0xc]
mov dword [ebx + 4], ecx
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
mov eax, dword [esp + 0xc]
mov dword [eax], ebx
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov eax, dword [esp + 0xc]
mov dword [eax + 4], ecx
mov eax, dword [esp + 0xc]
or byte [ebx + 4], 1
cmp dword [edx], ebx
jne 0x1000a00b
mov dword [edx], eax
jmp 0x10009b9c
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
or byte [edx + 4], 1
and dword [esi + 4], 1
mov ecx, esi
jmp 0x100092aa
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
jmp 0x10009887
mov al, 1
mov dword [esp + 0x2c], eax
mov esi, dword [esp]
jmp 0x10009624
mov eax, dword [edx + 4]
mov dword [esp + 0x20], 0
mov ecx, eax
and ecx, 0xfffffffe
je 0x10009da9
mov esi, dword [ecx]
test esi, esi
je 0x10009da9
test byte [esi + 4], 1
jne 0x10009079
mov ecx, dword [edx]
test ecx, ecx
je 0x1000cc2d
test byte [ecx + 4], 1
jne 0x1000ae23
or eax, 1
mov dword [edx + 4], eax
mov edi, dword [ecx]
test edi, edi
je 0x10009dd4
mov eax, dword [edi + 4]
test al, 1
jne 0x1000b802
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1000cce5
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
jmp 0x1000939f
and eax, 0xfffffffe
mov dword [edi], eax
mov eax, dword [ecx + 4]
and eax, 1
or eax, edi
mov dword [ecx + 4], eax
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x1000c5f5
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov esi, dword [edx + 4]
and esi, 0xfffffffe
mov edi, 0xffffffff
je 0x10009f6c
mov eax, dword [esi + 4]
test al, 1
je 0x10009f6c
and eax, 0xfffffffe
mov dword [esi + 4], eax
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x1000c5e6
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
jmp 0x100090f6
or ecx, 1
mov dword [edx + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10009e8c
mov edx, dword [ecx + 4]
test dl, 1
jne 0x1000a409
mov ecx, dword [esi + 4]
mov ebx, esi
mov esi, ecx
and esi, 0xfffffffe
je 0x1000c738
mov edx, dword [esi]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [ebx + 4], ecx
mov dword [esi], ebx
jmp 0x100097ce
xor edx, edx
test cl, 0x10
cmove edx, dword [esp + 0xc]
xor eax, eax
cmp edx, esi
seta cl
jb 0x10009674
mov al, cl
jmp 0x1000966b
mov ecx, dword [esp + 8]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x1000a3ba
push 0x100a47bc
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [0x100a47d4]
test eax, eax
je 0x1000aa58
xor edi, edi
xor ecx, ecx
dec ecx
mov ebx, dword [eax + 0x14]
xor edx, edx
cmp ebx, 0x100000
setb dl
cmova edx, ecx
cmp edx, 0xffffffff
jne 0x10009f1d
mov edi, eax
mov eax, dword [eax]
test eax, eax
jne 0x10009efa
jmp 0x1000a666
test edx, edx
jne 0x1000cc78
cmp dword [eax + 0x10], 0
jne 0x10009f10
jmp 0x1000cc88
mov edx, dword [esp + 0x24]
shl edx, 0xc
mov ecx, edx
and ecx, 0xff000
mov eax, 0x100000
sub eax, ecx
cmp eax, esi
cmovae eax, esi
add edx, dword [esp + 4]
jmp 0x10009577
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov dword [esp], eax
jmp 0x10009691
mov dword [edx + 4], esi
jmp 0x100090f6
or ecx, 1
mov dword [eax + 4], ecx
mov eax, dword [eax]
test eax, eax
je 0x10009f8c
mov ecx, dword [eax + 4]
test cl, 1
jne 0x1000a9a7
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1000c6c2
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
jmp 0x100091de
mov eax, dword [esi + 4]
cmp eax, 1
ja 0x1000b7e5
mov eax, dword [esi]
xor ecx, ecx
test eax, eax
je 0x1000988b
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [esi], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
or byte [esi + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x1000988b
and ecx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
or eax, ecx
mov dword [edi + 4], eax
jmp 0x100092b4
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp ebx, ecx
jne 0x10009b9c
and eax, 1
or eax, dword [esp + 0xc]
mov dword [edx + 4], eax
jmp 0x10009b9c
mov eax, ecx
and eax, 0xfffffffe
mov edx, dword [esi + 4]
and edx, 1
or edx, eax
mov dword [esi + 4], edx
mov edx, esi
jmp 0x10009079
test esi, esi
je 0x1000aa2d
mov eax, dword [esi + 4]
test eax, eax
je 0x1000aa2d
test byte [eax + 8], 1
je 0x1000aa1c
mov dword [esp + 0x1c], 0
mov ebx, esi
mov ecx, dword [esp + 4]
mov esi, eax
xor eax, eax
cmp esi, ecx
setb al
cmova eax, edx
cmp eax, 0xffffffff
jne 0x1000a0b0
test esi, esi
je 0x1000bb08
mov eax, dword [esi + 4]
test eax, eax
je 0x1000bb08
test byte [eax + 8], 1
je 0x1000a09a
mov ebx, esi
jmp 0x1000a06c
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000ad07
test byte [ecx + 8], 1
jne 0x1000a066
jmp 0x1000ad07
test eax, eax
jne 0x1000a0cc
xor ecx, ecx
test esi, esi
je 0x1000a141
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], ebx
cmp eax, 1
jbe 0x1000a10c
jmp 0x1000a0d3
test esi, esi
je 0x1000a0e5
mov eax, dword [esi + 8]
and eax, 0xfffffffe
je 0x1000a0e5
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000a0e5
test byte [ecx + 8], 1
jne 0x1000a066
lea ecx, [esp + 0x68]
mov edx, esi
call fcn.1003cd70
mov eax, dword [esp + 0x68]
cmp dword [ebx + 4], esi
jne 0x1000ad87
jmp 0x1000b675
mov esi, ebx
xor edx, edx
dec edx
jmp 0x1000a066
mov eax, dword [esi + 4]
test eax, eax
je 0x1000a141
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [esi + 4], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [esi + 8], 1
and dword [eax + 8], 1
mov ecx, eax
cmp dword [ebx + 4], esi
jne 0x1000a4b8
mov dword [ebx + 4], ecx
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 8]
mov dword [ecx + 0x38], eax
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x1000ca5f
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
test edi, edi
setne al
test dl, al
jne 0x10009bcc
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x18], 0
je 0x1000c0db
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [eax], 0xc
xor edi, edi
jmp 0x10008f6b
movzx ecx, byte [eax + ecx + 0x7a]
mov dword [esp + 0x20], ecx
lea ecx, [eax + 0x58]
mov dword [esp + 0x3c], ecx
mov ecx, dword [eax + 0x58]
test ecx, ecx
je 0x1000b74c
mov edx, dword [esp + 0x20]
shl edx, 0xc
xor eax, eax
mov edi, ebx
mov esi, dword [ecx + 8]
mov ebx, 0xfffff000
and esi, ebx
xor ebx, ebx
cmp edx, esi
seta bl
mov esi, 0xffffffff
cmovb ebx, esi
lea esi, [ebx + 1]
cmp esi, 2
jae 0x1000a1f5
mov eax, ecx
mov ecx, dword [ecx]
mov esi, dword [esp + 0x10]
mov ebx, edi
test ecx, ecx
jne 0x1000a1c2
jmp 0x1000a231
cmp ebx, 1
jne 0x1000cb4d
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
jmp 0x1000a1e9
xor eax, eax
inc eax
cmp ecx, 0xffffffff
jne 0x10009b6a
jmp 0x1000aca6
mov ecx, dword [esp + 0xc]
mov dword [ecx], 0
mov dword [ecx + 4], 1
lea ebx, [esp + 0x70]
jmp 0x10009b9a
test eax, eax
je 0x1000b74c
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
mov edi, edx
and edi, 0xfffffff8
shl edi, 9
add edi, ecx
mov ecx, edi
and ecx, 0xfff00000
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x48], eax
mov dword [esp + 0x28], edi
mov eax, edi
shr eax, 0xc
movzx esi, al
lea eax, [esi*4]
lea eax, [eax + eax*2]
or eax, ecx
mov dword [esp + 0x30], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x34], eax
mov edi, dword [esp + 0x20]
test edi, edi
mov dword [esp + 0xc], ecx
mov dword [esp + 0x2c], esi
je 0x1000ae35
cmp edi, 2
cmovae ebx, edi
mov dword [esp + 0x14], ebx
lea eax, [esi + esi*2]
lea eax, [ecx + eax*4]
add eax, 0x18
xor edx, edx
xor ebx, ebx
mov dword [esp + 4], eax
add esi, ebx
lea eax, [esi + esi*2]
test byte [ecx + eax*4 + 0x18], 0x60
jne 0x1000a2e6
inc ebx
cmp ebx, dword [esp + 0x20]
setae dl
dec edi
mov eax, dword [esp + 4]
add eax, 0xc
cmp ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x2c]
jne 0x1000a2b7
jmp 0x1000ae37
mov dword [esp + 0x24], esi
cmp ebx, dword [esp + 0x20]
mov eax, dword [esp + 4]
jae 0x1000b9c3
xor esi, esi
mov ecx, dword [eax]
test cl, 0x60
je 0x1000a310
and ecx, 0xffffff9f
mov dword [eax], ecx
inc esi
add eax, 0xc
cmp edi, esi
jne 0x1000a2fa
mov esi, edi
mov dword [esp + 0x38], edx
mov ecx, esi
shl ecx, 0xc
mov dword [esp + 0x40], esi
jne 0x1000b799
jmp 0x1000a375
mov dword [esp + 0x44], edx
mov dword [esp + 0x54], ecx
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esp + 0x50], eax
push 4
push 0x1000
push dword [esp + 0x4c]
push dword [esp + 0x30]
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x1000c584
mov eax, dword [esp + 0x44]
add dword [esp + 0x24], eax
mov ecx, dword [esp + 0x54]
sub ecx, eax
mov eax, 0x100000
cmp ecx, eax
mov edx, 0x100000
cmovb edx, ecx
test ecx, ecx
jne 0x1000a325
mov al, 1
test esi, esi
je 0x1000a39a
test al, al
mov ecx, 0x20
mov edx, 4
cmovne ecx, edx
mov edx, dword [esp + 4]
mov esi, dword [esp + 0x40]
or dword [edx], ecx
add edx, 0xc
dec esi
jne 0x1000a392
test al, al
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x40]
je 0x1000b418
mov eax, dword [esp + 8]
add dword [eax + 0x2c], edx
jmp 0x1000a2c7
xor eax, eax
mov dword [ecx + 0x3c], eax
lea ecx, [esp + 0x70]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [edx + 0x28], eax
lea eax, [edx + 0x28]
mov dword [edx + 0x2c], 1
lea edi, [edx + 0x2000]
mov dword [ecx], eax
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x1000cb56
and byte [ecx + 4], 0xfe
mov eax, dword [esp + 8]
mov dword [esp], ecx
mov dword [eax + 0x58], ecx
jmp 0x1000948d
mov dword [esp + 0x14], 0
jmp 0x10009609
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov ebx, esi
mov esi, dword [esi]
test esi, esi
je 0x1000c747
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov dword [ebx], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
mov edx, dword [ebx + 4]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1000c75c
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and edx, 1
or edx, ebx
mov ebx, dword [esp]
mov dword [ebx + 4], edx
mov dword [ecx], ebx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x100097ce
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
and esi, 0xfffffffe
mov ebx, dword [esp]
mov ecx, dword [ebx + 4]
and ecx, 1
lea edx, [ecx + esi]
mov dword [ebx + 4], edx
test esi, esi
je 0x1000c613
mov edx, dword [esi]
and edx, 0xfffffffe
or edx, ecx
mov dword [ebx + 4], edx
mov dword [esi], ebx
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
je 0x1000a4ad
mov edx, dword [ecx + 4]
test dl, 1
jne 0x1000b67d
mov ebx, dword [esp]
mov dword [ebx + 4], ecx
jmp 0x10009837
and ecx, 0xfffffffe
mov eax, dword [ebx + 8]
and eax, 1
or eax, ecx
mov dword [ebx + 8], eax
jmp 0x1000a14d
mov dword [esi], ebx
jmp 0x10009b3a
mov eax, dword [esp + 0x20]
test eax, eax
je 0x1000cb7f
cmp dword [eax], ebx
jne 0x1000acec
mov dword [eax], edx
test edx, edx
je 0x1000cb8e
mov eax, dword [ebx]
mov dword [edx], eax
mov eax, dword [ebx + 4]
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
cmp dword [esi], edx
jne 0x1000cb9d
mov dword [esi], 0
jmp 0x100092b4
mov ebx, dword [esp + 0x14]
test ebx, ebx
je 0x1000cba6
mov ecx, dword [esp + 0xc]
cmp dword [ebx], ecx
mov esi, dword [esp]
mov eax, dword [esp + 0x10]
jne 0x1000ad9c
mov dword [ebx], esi
mov ebx, dword [esp + 0xc]
mov ecx, dword [ebx]
mov dword [esi], ecx
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
mov edx, dword [ebx + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
cmp dword [eax], esi
jne 0x1000cbb5
mov dword [eax], 0
jmp 0x10009887
mov eax, dword [esi + 4]
and eax, 1
or eax, ebx
mov dword [esi + 4], eax
jmp 0x10009b3a
and edi, 1
mov dword [esp + 0xc], eax
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
or eax, edi
mov edi, dword [esp + 0xc]
mov dword [ecx + 4], eax
and byte [esi + 4], 0xfe
mov eax, dword [edi + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1000c656
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edi + 4], eax
mov dword [ecx], edi
mov dword [edx], ecx
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov edi, esi
and edi, 0xfffffffe
jne 0x100091c0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
and ebx, 1
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
or esi, ebx
mov dword [ecx + 4], esi
mov ecx, dword [esp + 0x24]
and byte [ecx + 4], 0xfe
mov ecx, dword [edx + 4]
mov esi, ecx
and esi, 0xfffffffe
je 0x1000c71a
mov ebx, dword [esi]
and ebx, 0xfffffffe
and ecx, 1
or ecx, ebx
mov dword [edx + 4], ecx
mov dword [esi], edx
mov ebx, dword [esp]
mov dword [ebx], esi
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov dword [ebx], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
mov edx, dword [ebx + 4]
mov ecx, edx
and ecx, 0xfffffffe
jne 0x100097ad
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
test edi, edi
je 0x1000aa58
mov ebx, dword [edi + 0x14]
mov edx, dword [edi + 0x10]
mov dword [esp + 0x18], edx
mov esi, edi
lea edi, [edx + 0xfffff]
mov eax, 0xfff00000
and edi, eax
mov ecx, edi
sub ecx, edx
sub ebx, ecx
add ebx, eax
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], eax
mov ecx, esi
call fcn.10001f60
mov ecx, 0x100a47d8
mov dword [esp], esi
mov edx, esi
call fcn.10001b30
mov eax, edi
sub eax, dword [esp + 0x18]
jne 0x1000cbe1
test ebx, ebx
je 0x1000acb0
lea eax, [edi + 0x100000]
mov esi, dword [esp]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ebx
mov eax, dword [esp + 0x10]
mov dword [esi + 0x18], eax
mov ecx, esi
call fcn.100018b0
mov ecx, 0x100a47d8
mov edx, esi
call fcn.10001630
lock add dword [0x100a47dc], 0xfff00000
mov eax, 0x100a47bc
push eax
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
push 4
push 0x1000
push 0x100000
push edi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x1000c45c
test edi, edi
je 0x1000aa63
push 0x100a47a0
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [0x100a47b8]
test eax, eax
je 0x1000ca93
mov ecx, edi
shr ecx, 0x14
mov dword [eax + ecx*4], edi
push 0x100a47a0
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov eax, dword [esp + 8]
add dword [eax + 0x28], 0x100000
mov dword [edi], eax
xor eax, eax
mov dword [edi + 0xc], eax
mov dword [edi + 0x18], eax
mov dword [edi + 0x24], 0x20
mov dword [edi + 0x30], 0xfd024
mov eax, 0x3c
mov dword [edi + eax], 0x24
add eax, 0xc
cmp eax, 0xc00
jne 0x1000a77e
mov dword [edi + 0xc00], 0xfd024
mov dword [edi + 0xc0c], 0x20
lea ecx, [edi + 0x1000]
mov eax, ecx
and eax, 0xfffff
mov ebx, 0x100000
sub ebx, eax
mov esi, 0xff000
cmp ebx, esi
cmovae ebx, esi
push 0x4000
push ebx
mov dword [esp + 8], ecx
push ecx
call dword [sym.imp.kernel32.dll_VirtualFree]
test eax, eax
je 0x1000ca4a
mov ecx, dword [esp]
add ecx, ebx
sub esi, ebx
mov eax, 0x100000
cmp esi, eax
mov ebx, 0x100000
cmovb ebx, esi
test esi, esi
jne 0x1000a7c1
mov eax, dword [esp + 8]
add dword [eax + 0x2c], 2
lea edx, [edi + 0x28]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], 0
test ecx, ecx
je 0x1000b6ab
mov dword [esp + 0x18], edx
lea ebx, [esp + 0x70]
xor esi, esi
mov eax, ebx
mov dword [esp], eax
mov ebx, dword [ecx]
test ebx, ebx
je 0x1000a83f
mov edx, dword [ebx + 4]
test dl, 1
je 0x1000a83f
mov eax, dword [ebx]
test eax, eax
je 0x1000a83f
test byte [eax + 4], 1
jne 0x1000a894
mov ebx, ecx
mov ecx, dword [edi + 0x30]
mov edx, ecx
mov eax, 0xfffff000
and edx, eax
mov esi, dword [ebx + 8]
and esi, eax
xor eax, eax
cmp edx, esi
seta al
mov edx, 0xffffffff
cmovb eax, edx
cmp eax, 0xffffffff
je 0x1000a883
xor edx, edx
inc edx
test eax, eax
jne 0x1000a8cf
test cl, 0x10
mov eax, 0
cmove eax, dword [esp + 0x18]
xor edx, edx
cmp eax, ebx
seta al
jae 0x1000a8cd
mov ecx, dword [ebx]
xor edx, edx
dec edx
test ecx, ecx
mov esi, dword [esp]
jne 0x1000a820
jmp 0x1000a965
mov dword [esp + 0x10], esi
and edx, 0xfffffffe
mov dword [ecx], edx
mov eax, ecx
and eax, 0xfffffffe
mov edx, dword [ebx]
mov esi, dword [ebx + 4]
and esi, 1
or esi, eax
mov dword [ebx + 4], esi
test edx, edx
je 0x1000c9aa
and byte [edx + 4], 0xfe
mov edx, dword [esp]
cmp dword [edx], ecx
mov esi, dword [esp + 0x10]
jne 0x1000a8d7
mov dword [edx], ebx
jmp 0x1000a841
mov dl, al
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
jmp 0x1000a888
and ebx, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
lea eax, [ecx + ebx]
mov dword [edx + 4], eax
test ebx, ebx
je 0x1000c9b9
mov eax, dword [ebx]
and eax, 0xfffffffe
or eax, ecx
mov dword [edx + 4], eax
mov dword [ebx], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
or byte [edx + 4], 1
test esi, esi
je 0x1000c575
cmp dword [esi], edx
je 0x1000b7de
jmp 0x1000b7f2
mov edx, dword [edi + 0x30]
mov eax, edx
mov ecx, 0xfffff000
and eax, ecx
mov esi, dword [ebx + 8]
and esi, ecx
xor ecx, ecx
cmp eax, esi
seta cl
mov eax, 0xffffffff
cmovb ecx, eax
test ecx, ecx
jne 0x1000b664
jmp 0x1000b90b
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
mov esi, dword [esp + 0x10]
mov eax, ebx
test ecx, ecx
jne 0x1000a822
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 1
cmp edx, 1
je 0x1000ab13
mov edx, dword [esp + 0x18]
mov dword [ebx], edx
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x1000cab4
and byte [ecx + 4], 0xfe
mov eax, dword [esp + 8]
mov dword [esp], ecx
mov dword [eax + 0x58], ecx
add edi, 0x2000
jmp 0x1000948d
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1000c68f
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov eax, dword [edx + 4]
mov esi, eax
and esi, 0xfffffffe
je 0x1000c6a4
mov edi, dword [esi]
and edi, 0xfffffffe
and eax, 1
or eax, edi
mov dword [edx + 4], eax
mov dword [esi], edx
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
jmp 0x100091de
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0xc]
xor eax, eax
cmp ecx, ebx
seta cl
jb 0x1000aca6
mov al, cl
jmp 0x10009b6a
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000aa2d
test byte [ecx + 8], 1
jne 0x1000a05e
lea ebx, [esp + 0x58]
mov ecx, ebx
mov edx, esi
call fcn.1003cc60
mov eax, dword [ebx]
test eax, eax
je 0x1000cd8b
and byte [eax + 8], 0xfe
mov dword [esp + 0x1c], 0
xor edx, edx
dec edx
jmp 0x1000b600
push 0x100a47bc
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
sub esp, 0x10
movaps xmm0, xmmword [0x10092150]
movups xmmword [esp], xmm0
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov edi, eax
test eax, eax
je 0x1000c4f4
test edi, 0xfffff
je 0x1000a72b
push 0x8000
push 0
push edi
call dword [sym.imp.kernel32.dll_VirtualFree]
test eax, eax
je 0x1000cd68
mov esi, dword [sym.imp.kernel32.dll_VirtualFree]
xor ecx, ecx
mov edx, 0x1ff000
push 0x3000
call fcn.10050500
add esp, 4
test eax, eax
je 0x1000a17d
mov edi, eax
add edi, 0xfffff
and edi, 0xfff00000
push 0x8000
push 0
push eax
call esi
test eax, eax
je 0x1000cd3c
mov ecx, edi
mov edx, 0x100000
push 0x3000
call fcn.10050500
add esp, 4
cmp eax, edi
jne 0x1000c0e2
test edi, edi
jne 0x1000a72b
jmp 0x1000aab1
mov edx, dword [esp + 0x18]
and edx, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
lea eax, [ecx + edx]
mov dword [ebx + 4], eax
test edx, edx
je 0x1000cca4
mov eax, dword [edx]
and eax, 0xfffffffe
or eax, ecx
mov dword [ebx + 4], eax
mov dword [edx], ebx
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
or byte [ebx + 4], 1
cmp dword [esi], ebx
jne 0x1000ae06
mov dword [esi], edx
jmp 0x1000a982
mov edi, dword [esp + 0xc]
and edi, 0xfffffffe
mov dword [eax], edi
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x1000ccb3
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov edi, dword [edx + 4]
and edi, 0xfffffffe
je 0x1000ac9e
mov eax, dword [edi + 4]
test al, 1
je 0x1000ac9e
mov esi, eax
and esi, 0xfffffffe
mov dword [edi + 4], esi
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x1000cda9
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
jmp 0x1000939b
lea esi, [esp + 0x58]
mov ecx, esi
call fcn.1003c3d0
mov esi, dword [esi]
jmp 0x10009cd3
mov eax, dword [esi + 4]
test eax, eax
je 0x1000ccc2
test byte [eax + 8], 1
jne 0x1000b5ed
or ecx, 1
mov dword [esi + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000ac19
mov edx, dword [ecx + 8]
test dl, 1
jne 0x1000bbed
or byte [eax + 8], 1
mov ecx, dword [esi + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x1000cd9a
mov edx, dword [eax + 4]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [esi + 8], ecx
mov dword [eax + 4], esi
jmp 0x1000b5fe
mov ebx, edx
xor edx, edx
test esi, esi
je 0x1000ac8a
mov ecx, dword [esi + 8]
cmp ecx, 1
ja 0x1000bcb1
mov eax, dword [esi + 4]
test eax, eax
je 0x1000ac8a
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [esi + 4], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [esi + 8], 1
and dword [eax + 8], 1
mov edx, eax
mov eax, dword [esp + 8]
mov dword [eax + 0x38], edx
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x2c]
jmp 0x1000a168
mov dword [edx + 4], edi
jmp 0x1000939b
mov ecx, dword [ebx]
xor eax, eax
dec eax
jmp 0x10009b70
lock add dword [0x100a47dc], 0xfff00000
push 0x100a47bc
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
push 0x100a47e0
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, 0x100a47e0
mov ecx, dword [0x100a4764]
mov edx, dword [esp]
mov dword [edx], ecx
mov dword [0x100a4764], edx
jmp 0x1000a6f9
mov edi, esi
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov esi, edi
jmp 0x1000a4e8
lea ecx, [esp + 0x6c]
mov edx, esi
call fcn.1003cc60
mov eax, dword [esp + 0x6c]
cmp dword [ebx + 4], esi
jne 0x1000ccf4
mov dword [ebx + 4], eax
mov esi, eax
mov ecx, dword [esp + 4]
xor edx, edx
dec edx
jmp 0x1000a06e
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov ebx, edx
mov esi, dword [edx]
test esi, esi
je 0x1000cd09
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov dword [ebx], eax
mov eax, ebx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [ebx + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1000cd1e
mov edx, dword [eax]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [ebx + 4], ecx
mov dword [eax], ebx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x10009cd3
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [ebx + 8], edx
jmp 0x1000a102
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [ebx + 4]
and edx, 1
or edx, ecx
mov dword [ebx + 4], edx
jmp 0x1000a544
and edx, 0xfffffffe
mov dword [eax], edx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
and esi, 0xfffffffe
mov edx, dword [esp]
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + esi]
mov dword [edx + 4], ecx
test esi, esi
je 0x1000cd2d
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [esi], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x1000adfb
mov ecx, dword [eax + 4]
test cl, 1
jne 0x1000bc77
mov ecx, dword [esp]
mov dword [ecx + 4], eax
jmp 0x10009ccf
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp ebx, ecx
jne 0x1000a982
and eax, 1
or eax, edx
mov dword [esi + 4], eax
jmp 0x1000a982
lea esi, [esp + 0x58]
mov ecx, esi
call fcn.10001010
mov ecx, dword [esi]
jmp 0x1000939f
mov dl, 1
mov dword [esp + 0x38], edx
mov ecx, dword [esp + 0x30]
lea eax, [ecx + 0x10]
mov dword [esp + 0x14], eax
add ecx, 0x18
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x30], ecx
mov edx, dword [ecx]
mov esi, 0xfffff000
mov ebx, edx
and ebx, esi
and esi, dword [eax + 8]
xor edi, edi
dec edi
xor ecx, ecx
cmp ebx, esi
seta cl
cmovb ecx, edi
test ecx, ecx
je 0x1000b646
cmp ecx, 0xffffffff
jne 0x1000b4b7
mov edx, dword [eax]
test edx, edx
je 0x1000cbd2
mov ecx, dword [edx + 4]
mov dword [esp + 0x24], 0
test cl, 1
je 0x1000b530
mov edi, dword [esp + 0x30]
mov dword [esp + 4], eax
mov eax, edx
mov edx, dword [edi]
mov ebx, edx
mov ecx, 0xfffff000
and ebx, ecx
mov esi, dword [eax + 8]
and esi, ecx
xor ecx, ecx
cmp ebx, esi
seta cl
mov esi, 0xffffffff
cmovb ecx, esi
test ecx, ecx
je 0x1000aefb
cmp ecx, 0xffffffff
jne 0x1000af4b
mov edx, dword [eax]
test edx, edx
je 0x1000ba90
mov ecx, dword [edx + 4]
test cl, 1
jne 0x1000aead
mov esi, dword [edx]
test esi, esi
je 0x1000af15
test byte [esi + 4], 1
jne 0x1000aead
jmp 0x1000af15
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 0x14]
xor ecx, ecx
cmp edx, eax
seta dl
jb 0x1000aedb
mov cl, dl
jmp 0x1000aed6
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1000c417
mov edx, dword [ecx]
test edx, edx
jne 0x1000b020
jmp 0x1000b02c
mov esi, dword [esp + 4]
cmp dword [esi], eax
jne 0x1000cc8f
mov dword [esi], edx
jmp 0x1000aeb1
test ecx, ecx
je 0x1000b00b
mov edi, dword [eax + 4]
mov ebx, dword [esp + 4]
mov edx, edi
and edx, 0xfffffffe
je 0x1000af71
mov ecx, dword [edx]
test ecx, ecx
je 0x1000af71
test byte [ecx + 4], 1
jne 0x1000aea9
mov ecx, dword [eax]
test ecx, ecx
je 0x1000cb0b
mov edx, dword [ecx + 4]
test dl, 1
je 0x1000b60c
and edx, 0xfffffffe
je 0x1000c560
mov esi, dword [edx]
test esi, esi
je 0x1000afa0
test byte [esi + 4], 1
jne 0x1000bb79
and edi, 1
or edi, edx
mov dword [ecx + 4], edi
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x1000cad8
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
je 0x1000caed
mov esi, dword [ecx]
and esi, 0xfffffffe
and edi, 1
or edi, esi
mov dword [eax + 4], edi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
cmp dword [ebx], eax
jne 0x1000b7c7
mov dword [ebx], edx
mov eax, ebx
jmp 0x1000aea9
mov edi, dword [eax + 4]
mov ebx, dword [esp + 4]
mov dword [esp + 0x24], ebx
cmp edi, 1
jbe 0x1000b043
jmp 0x1000af5a
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1000ba23
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
jmp 0x1000af38
mov ecx, dword [eax]
test ecx, ecx
je 0x1000b074
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
cmp dword [ebx], eax
mov esi, dword [esp + 0x3c]
jne 0x1000b5da
mov dword [ebx], ecx
mov edx, dword [esp + 0x70]
mov edi, dword [esp + 0x34]
shr edi, 0xc
mov dword [esi], edx
xor eax, eax
mov ecx, dword [esp + 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x20]
cmp edi, eax
jne 0x1000b227
test al, al
je 0x1000b0f3
mov edx, eax
mov eax, dword [esp + 0x28]
or eax, 1
xor ecx, ecx
inc ecx
cmp edx, 2
cmovae ecx, edx
shl ecx, 2
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x2c]
lea edx, [edx + edx*2]
mov esi, dword [esp + 0xc]
lea edx, [esi + edx*4]
add edx, 0x18
xor esi, esi
test byte [edx + esi], 8
je 0x1000b0e9
mov edi, dword [esp + 0xc]
dec dword [edi + 0xc]
mov edi, dword [esp + 8]
dec dword [edi + 0x48]
mov dword [edx + esi], eax
add esi, 0xc
cmp ecx, esi
jne 0x1000b0d5
mov ecx, dword [esp + 0xc]
cmp dword [ecx + 0xc], 0
jne 0x1000b414
cmp dword [esp + 0x48], 0
mov eax, dword [esp + 0x38]
je 0x1000b418
mov eax, dword [esp + 8]
mov edi, dword [eax + 0x38]
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], 0
xor ebx, ebx
dec ebx
xor eax, eax
cmp edi, ecx
setb al
cmova eax, ebx
cmp eax, 0xffffffff
je 0x1000b92c
test eax, eax
je 0x1000bd28
test edi, edi
je 0x1000c5b8
mov ecx, dword [edi + 8]
xor esi, esi
mov eax, ecx
and eax, 0xfffffffe
je 0x1000bcd2
mov edx, dword [eax + 4]
test edx, edx
je 0x1000bcd2
test byte [edx + 8], 1
je 0x1000bcd2
mov ecx, dword [esp + 0xc]
mov edx, ebx
mov ebx, edi
mov edi, eax
xor eax, eax
cmp edi, ecx
setb al
cmova eax, edx
cmp eax, 0xffffffff
jne 0x1000b1bd
test edi, edi
je 0x1000bf5f
mov eax, dword [edi + 4]
test eax, eax
je 0x1000bf5f
test byte [eax + 8], 1
jne 0x1000b174
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000bdd4
test byte [ecx + 8], 1
je 0x1000bdd4
mov ebx, edi
mov ecx, dword [esp + 0xc]
jmp 0x1000b176
test eax, eax
jne 0x1000b1db
xor ecx, ecx
test edi, edi
je 0x1000b6f7
mov eax, dword [edi + 8]
mov esi, ebx
cmp eax, 1
jbe 0x1000b6c2
jmp 0x1000b1e2
test edi, edi
je 0x1000b1fc
mov eax, dword [edi + 8]
and eax, 0xfffffffe
je 0x1000b1fc
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000b1fc
test byte [ecx + 8], 1
mov ecx, dword [esp + 0xc]
jne 0x1000b174
lea ecx, [esp + 0x68]
mov edx, edi
call fcn.1003cd70
mov eax, dword [esp + 0x68]
cmp dword [ebx + 4], edi
jne 0x1000be52
jmp 0x1000bf1f
mov edi, ebx
mov ecx, dword [esp + 0xc]
xor edx, edx
dec edx
jmp 0x1000b174
mov edx, dword [esp + 0x2c]
lea ecx, [edx + edi]
sub edi, eax
shl edi, 0xc
add eax, edx
lea eax, [eax + eax*2]
mov ebx, dword [esp + 0xc]
mov dword [esp + 4], eax
lea eax, [ebx + eax*4]
add eax, 0x10
mov edx, 0xfff
mov esi, dword [eax + 8]
and esi, edx
or esi, edi
mov dword [esp + 0x14], eax
mov dword [eax + 8], esi
lea ecx, [ecx + ecx*2]
and edx, dword [ebx + ecx*4 + 0xc]
or edx, edi
mov dword [ebx + ecx*4 + 0xc], edx
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], 0
test ecx, ecx
je 0x1000b987
mov eax, dword [esp + 4]
lea eax, [ebx + eax*4]
add eax, 0x18
mov dword [esp + 4], eax
lea ebx, [esp + 0x70]
xor edi, edi
mov edx, edi
mov edi, ebx
mov ebx, dword [ecx]
test ebx, ebx
je 0x1000b2b1
mov eax, dword [ebx + 4]
test al, 1
je 0x1000b2b1
mov esi, dword [ebx]
test esi, esi
je 0x1000b2b1
test byte [esi + 4], 1
jne 0x1000b306
mov ebx, ecx
mov eax, dword [esp + 4]
mov ecx, dword [eax]
mov eax, ecx
mov edx, 0xfffff000
and eax, edx
mov esi, dword [ebx + 8]
and esi, edx
xor edx, edx
cmp eax, esi
seta dl
mov eax, 0xffffffff
cmovb edx, eax
cmp edx, 0xffffffff
je 0x1000b2f8
xor eax, eax
inc eax
test edx, edx
jne 0x1000b33a
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x14]
xor eax, eax
cmp ecx, ebx
seta cl
jae 0x1000b338
mov ecx, dword [ebx]
xor eax, eax
dec eax
test ecx, ecx
jne 0x1000b294
jmp 0x1000b3d9
mov dword [esp + 0x30], edx
and eax, 0xfffffffe
mov dword [ecx], eax
mov esi, ecx
and esi, 0xfffffffe
mov eax, dword [ebx]
mov edx, dword [ebx + 4]
and edx, 1
or edx, esi
mov dword [ebx + 4], edx
test eax, eax
je 0x1000c9dd
and byte [eax + 4], 0xfe
cmp dword [edi], ecx
jne 0x1000b342
mov dword [edi], ebx
jmp 0x1000b2b3
mov al, cl
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
jmp 0x1000b2fd
and ebx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
lea ecx, [eax + ebx]
mov dword [edi + 4], ecx
test ebx, ebx
je 0x1000c9ec
mov ecx, dword [ebx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
mov dword [ebx], edi
mov eax, dword [edi + 4]
and eax, 1
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
or byte [edi + 4], 1
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x1000c5a9
cmp dword [ecx], edi
je 0x1000ba89
jmp 0x1000baf8
mov eax, dword [esp + 4]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov esi, dword [ebx + 8]
and esi, ecx
xor ecx, ecx
cmp edx, esi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x1000b976
jmp 0x1000bc57
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
mov edi, ebx
test ecx, ecx
mov edx, dword [esp + 0x30]
jne 0x1000b298
mov edi, edx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x1000b587
mov dword [ebx], ecx
mov eax, dword [esp + 0x70]
test eax, eax
je 0x1000cc69
and byte [eax + 4], 0xfe
mov ecx, dword [esp + 0x3c]
mov dword [ecx], eax
mov eax, dword [esp + 0x20]
jmp 0x1000b0a6
mov eax, dword [esp + 0x38]
test al, 1
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x28]
je 0x1000b73b
test edi, edi
je 0x1000b73b
cmp dword [esi], edi
je 0x100092cd
mov dword [edi], esi
xor eax, eax
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x1c]
cmp dword [ecx + edx + 0x6c], 1
mov edx, 0
je 0x1000b46f
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x1c]
add ecx, edx
add ecx, 0x6c
xor edx, edx
mov dword [edi + edx*4 + 0xc], 0xffffffff
inc edx
mov esi, dword [ecx]
dec esi
cmp edx, esi
jb 0x1000b45f
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 8]
mov ebx, dword [ecx + esi + 0x68]
and ebx, 0x1f
mov ecx, ebx
neg cl
xor esi, esi
dec esi
shr esi, cl
cmp ebx, 1
sbb eax, eax
or eax, esi
mov dword [edi + edx*4 + 0xc], eax
mov dword [edi + 4], 0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 8]
mov eax, dword [edx + ecx + 0x68]
mov dword [edi + 8], eax
inc dword [edx + ecx + 0x74]
mov eax, dword [esp + 0x10]
mov dword [eax], edi
jmp 0x10008eeb
test ecx, ecx
je 0x1000b859
mov ecx, dword [eax + 4]
mov dword [esp + 0x24], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x1000b4e1
mov esi, dword [edx]
test esi, esi
je 0x1000b4e1
test byte [esi + 4], 1
jne 0x1000aea9
mov edx, dword [eax]
test edx, edx
je 0x1000c5c7
test byte [edx + 4], 1
jne 0x1000bcbe
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1000b50d
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1000bdfd
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1000cddc
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1000b57c
mov esi, dword [edx]
test esi, esi
je 0x1000b540
test byte [esi + 4], 1
jne 0x1000aea9
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1000c4df
mov edx, dword [ecx]
test edx, edx
je 0x1000b566
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1000be80
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x70]
mov dword [eax], edx
jmp 0x1000aea9
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, eax
or ecx, dword [esp + 0x14]
mov dword [ebx + 4], ecx
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
mov eax, dword [esp + 0x14]
mov dword [eax], ebx
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov eax, dword [esp + 0x14]
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x14]
or byte [ebx + 4], 1
cmp dword [edi], ebx
jne 0x1000b8df
mov dword [edi], eax
jmp 0x1000b3f5
and ecx, 0xfffffffe
mov eax, dword [ebx + 4]
and eax, 1
or eax, ecx
mov dword [ebx + 4], eax
jmp 0x1000b082
lea ecx, [esp + 0x58]
mov edx, esi
call fcn.1003cd70
lea eax, [esp + 0x58]
mov eax, dword [eax]
mov edx, ebx
lea esi, [esp + 0x70]
mov dword [esi + 4], eax
jmp 0x1000a066
or edx, 1
mov dword [ecx + 4], edx
mov ecx, dword [ecx]
test ecx, ecx
je 0x1000b624
mov edx, dword [ecx + 4]
test dl, 1
jne 0x1000b9ca
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1000cb1a
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1000affa
xor esi, esi
test dl, 0x10
cmove esi, dword [esp + 0x14]
xor ecx, ecx
cmp esi, eax
seta dl
jb 0x1000ae8b
mov cl, dl
jmp 0x1000ae82
xor edx, edx
inc edx
cmp ecx, 0xffffffff
jne 0x1000a951
jmp 0x1000bbe3
mov dword [ebx + 4], eax
jmp 0x1000a102
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov ebx, dword [esp]
mov ecx, dword [ebx + 4]
mov edx, ecx
or edx, 1
mov dword [ebx + 4], edx
and ecx, 0xfffffffe
je 0x1000c604
mov edx, dword [ecx]
or edx, 1
mov dword [ebx + 4], edx
mov dword [ecx], ebx
mov dword [esi], ecx
jmp 0x10009837
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 1
lea ebx, [esp + 0x70]
jmp 0x1000a980
mov eax, dword [edi + 4]
test eax, eax
je 0x1000b6f7
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [edi + 8], 1
and dword [eax + 8], 1
mov ecx, eax
cmp dword [ebx + 4], edi
mov edx, dword [esp + 0x38]
jne 0x1000ba76
mov dword [ebx + 4], ecx
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 8]
mov dword [ecx + 0x38], eax
mov ecx, dword [esp + 0xc]
test ecx, ecx
mov esi, dword [esp + 0x10]
je 0x1000cd7c
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov edi, dword [esp + 0x28]
test edi, edi
setne al
test dl, al
jne 0x1000b430
mov dword [esi], 0
mov bl, 1
mov eax, dword [esp + 8]
jmp 0x10008f4c
mov eax, dword [esp + 8]
mov edx, dword [eax + 0x3c]
test edx, edx
jne 0x1000b9a1
lea eax, [esp + 0x70]
mov ecx, 0x100000
mov edx, 0x100000
push eax
push 0
call fcn.10050150
add esp, 8
test eax, eax
je 0x1000b73b
mov edi, eax
movzx eax, byte [esp + 0x70]
mov ecx, dword [esp + 8]
mov edx, edi
push eax
call fcn.10050070
add esp, 4
add edi, 0x2000
jmp 0x1000a25a
mov eax, dword [esp + 0x24]
shl eax, 0xc
mov edx, eax
and edx, 0xff000
mov dword [esp + 0x24], edx
mov edx, 0x100000
sub edx, dword [esp + 0x24]
cmp edx, ecx
cmovae edx, ecx
add eax, dword [esp + 0xc]
mov dword [esp + 0x24], eax
jmp 0x1000a325
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
mov eax, ebx
jmp 0x1000aea9
mov dword [esi], ebx
jmp 0x1000a924
lea ecx, [esp + 0x70]
mov dword [esp + 0x14], ecx
jmp 0x10009c0e
mov eax, dword [esi + 4]
and eax, 1
or eax, ebx
mov dword [esi + 4], eax
jmp 0x1000a924
mov esi, eax
and esi, 0xfffffffe
mov dword [edi + 4], esi
mov ecx, dword [edx]
test ecx, ecx
je 0x1000cdb8
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1000cdcd
mov edi, dword [eax]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [edx + 4], esi
mov dword [eax], edx
mov edx, dword [ecx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x1000939f
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x1000bf52
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
mov esi, dword [esp + 0x3c]
je 0x1000b086
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [esp + 0x3c]
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x1000b086
mov edi, ecx
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov ecx, edi
mov dword [eax + 4], esi
or byte [edx + 4], 1
and dword [eax + 4], 1
jmp 0x100099b1
mov eax, dword [edi + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp ebx, ecx
jne 0x1000b3f5
and eax, 1
or eax, dword [esp + 0x14]
mov dword [edi + 4], eax
jmp 0x1000b3f5
lea ecx, [esp + 0x70]
mov dword [esp + 0x20], ecx
jmp 0x10009d92
test dl, 0x10
mov eax, 0
cmove eax, dword [esp + 0x18]
xor edx, edx
cmp eax, ebx
seta al
jb 0x1000bbe3
mov dl, al
jmp 0x1000a951
test edi, edi
je 0x1000b954
mov eax, dword [edi + 4]
test eax, eax
je 0x1000b954
xor esi, esi
test byte [eax + 8], 1
jne 0x1000b16e
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000b954
test byte [ecx + 8], 1
jne 0x1000b16e
lea esi, [esp + 0x58]
mov ecx, esi
mov edx, edi
call fcn.1003cc60
mov eax, dword [esi]
test eax, eax
je 0x1000ceeb
and byte [eax + 8], 0xfe
xor esi, esi
jmp 0x1000befa
xor eax, eax
inc eax
cmp ecx, 0xffffffff
jne 0x1000b3c3
jmp 0x1000bd87
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0
mov dword [ecx + 4], 1
lea ebx, [esp + 0x70]
jmp 0x1000b3f3
mov eax, dword [esp + 8]
mov dword [eax + 0x3c], 0
lea edi, [edx + 0x2000]
add edx, 0x28
mov ecx, dword [esp + 0x3c]
call fcn.100505c0
jmp 0x1000a25a
xor edx, edx
jmp 0x1000a3ae
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x1000cb29
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1000cb3e
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [esp + 4]
jmp 0x1000affa
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1000c98c
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1000ba6a
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1000bf27
mov dword [eax + 4], ecx
mov edi, dword [esp + 0x30]
jmp 0x1000af38
and ecx, 0xfffffffe
mov eax, dword [ebx + 8]
and eax, 1
or eax, ecx
mov dword [ebx + 8], eax
jmp 0x1000b707
mov dword [ecx], ebx
jmp 0x1000b393
cmp dword [esp + 0x24], 0
je 0x1000cdeb
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
cmp dword [edx], ecx
jne 0x1000be67
mov ecx, dword [esp + 0x24]
mov dword [ecx], eax
mov esi, dword [esp + 0x14]
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov ecx, dword [esp + 4]
cmp dword [ecx], eax
jne 0x1000cdfa
mov eax, dword [esp + 4]
mov dword [eax], 0
mov edx, dword [esp + 0x70]
mov esi, dword [esp + 0x3c]
jmp 0x1000b086
mov eax, dword [ecx + 4]
and eax, 1
or eax, ebx
mov dword [ecx + 4], eax
jmp 0x1000b393
cmp dword [esp + 0x1c], 0
je 0x1000ce07
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x1c]
cmp dword [ecx + 4], eax
jne 0x1000bf06
mov eax, dword [esp + 0x1c]
mov dword [eax + 4], esi
cmp dword [esp + 4], 0
je 0x1000ce22
test esi, esi
je 0x1000ce38
mov edx, dword [esp + 4]
mov eax, dword [edx + 4]
mov dword [esi + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [esi + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
cmp dword [ebx + 4], esi
jne 0x1000ce47
mov dword [ebx + 4], 0
jmp 0x1000a14d
and edi, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, edi
mov dword [edx + 4], ebx
and byte [esi + 4], 0xfe
mov esi, dword [ecx + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x1000cafc
mov edi, dword [edx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [ecx + 4], esi
mov dword [edx], ecx
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
mov ebx, dword [esp + 4]
jne 0x1000afdc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov ecx, dword [ebx]
xor edx, edx
dec edx
jmp 0x1000a957
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov eax, dword [esi + 4]
test eax, eax
je 0x1000ce50
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [esi + 4], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [esi + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1000ce66
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx + 4]
mov dword [esp], ecx
and dword [esp], 0xfffffffe
and edx, 1
add edx, dword [esp]
mov dword [esi + 8], edx
mov ecx, dword [esp + 0x18]
mov dword [ecx + 4], esi
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x1000b5fe
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x14]
xor eax, eax
cmp ecx, ebx
seta cl
jb 0x1000bd87
mov al, cl
jmp 0x1000b3c3
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov edx, dword [esp]
mov eax, dword [edx + 4]
mov ecx, eax
or ecx, 1
mov dword [edx + 4], ecx
and eax, 0xfffffffe
je 0x1000ce75
mov ecx, dword [eax]
or ecx, 1
mov edx, dword [esp]
mov dword [edx + 4], ecx
mov dword [eax], edx
mov dword [esi], eax
jmp 0x10009ccf
mov eax, dword [esp + 0x14]
jmp 0x10009562
lea eax, [esp + 0x70]
mov dword [esp + 0x1c], eax
jmp 0x1000996c
lea esi, [esp + 0x58]
mov ecx, esi
mov edx, eax
call fcn.1003c3d0
mov edx, dword [esi]
jmp 0x1000b57c
mov eax, dword [edi + 4]
test eax, eax
je 0x1000ce84
test byte [eax + 8], 1
jne 0x1000bee9
or ecx, 1
mov dword [edi + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000bd00
mov edx, dword [ecx + 8]
test dl, 1
jne 0x1000bfc9
or byte [eax + 8], 1
mov ecx, dword [edi + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x1000cefa
mov edx, dword [eax + 4]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [edi + 8], ecx
mov dword [eax + 4], edi
jmp 0x1000befa
xor edx, edx
test edi, edi
je 0x1000bd6f
mov ecx, dword [edi + 8]
cmp ecx, 1
ja 0x1000c061
mov eax, dword [edi + 4]
test eax, eax
je 0x1000bd6f
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [edi + 8], 1
and dword [eax + 8], 1
mov edx, eax
mov eax, dword [esp + 8]
mov dword [eax + 0x38], edx
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x38]
jmp 0x1000b722
mov ecx, dword [ebx]
xor eax, eax
dec eax
jmp 0x1000b3c9
mov eax, dword [0x100a4744]
mov dword [esp + 8], eax
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x1000ce99
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 8]
mov dword [eax + 0xc], ecx
jmp 0x10008e79
lea ecx, [esp + 0x6c]
mov edx, edi
call fcn.1003cc60
mov eax, dword [esp + 0x6c]
cmp dword [ebx + 4], edi
jne 0x1000cea3
mov dword [ebx + 4], eax
mov edi, eax
mov ecx, dword [esp + 0xc]
xor edx, edx
dec edx
jmp 0x1000b178
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x1000ceb8
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1000cecd
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1000b57c
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [ebx + 8], edx
jmp 0x1000b219
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [esp + 0x24]
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x1000bab1
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1000cedc
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1000bec7
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1000c036
mov dword [eax + 4], ecx
jmp 0x1000b578
mov ecx, dword [esp + 8]
push 0
push 0x100000
call fcn.100023d0
add esp, 8
mov edi, eax
jmp 0x10008f63
lea ecx, [esp + 0x58]
mov edx, edi
call fcn.1003cd70
lea eax, [esp + 0x58]
mov eax, dword [eax]
lea edi, [esp + 0x70]
mov dword [edi + 4], eax
jmp 0x1000b16e
mov eax, esi
and eax, 0xfffffffe
mov edx, dword [esp + 0x1c]
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [edx + 8], ecx
jmp 0x1000bb2b
mov dword [ebx + 4], eax
jmp 0x1000b219
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1000c97d
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x1000ba6d
lea edx, [esp + 0x70]
mov dword [esp + 0x24], edx
jmp 0x1000b4ca
test esi, esi
je 0x1000cf09
mov eax, dword [esp + 0xc]
cmp dword [esi + 4], eax
jne 0x1000c116
mov dword [esi + 4], edi
cmp dword [esp + 0xc], 0
je 0x1000cf24
test edi, edi
je 0x1000cf3a
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 4]
mov dword [edi + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [edi + 8]
and ecx, 1
or ecx, eax
mov dword [edi + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [edi + 8], ecx
cmp dword [ebx + 4], edi
jne 0x1000cf49
mov dword [ebx + 4], 0
mov edx, dword [esp + 0x38]
jmp 0x1000b707
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov eax, dword [edi + 4]
test eax, eax
je 0x1000cf52
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1000cf68
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx + 4]
mov dword [esp + 4], ecx
and dword [esp + 4], 0xfffffffe
and edx, 1
add edx, dword [esp + 4]
mov dword [edi + 8], edx
mov ecx, dword [esp + 0x20]
mov dword [ecx + 4], edi
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x1000befa
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1000cf77
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x1000b578
lea esi, [esp + 0x70]
jmp 0x1000b14e
mov byte [ecx + 0x40], 0
lea eax, [esp + 0x70]
push eax
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
lea esi, [esp + 0x58]
push esi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
mov ecx, 0x10
call fcn.100123e0
xor edx, edx
cmp byte [esi + 8], 0
mov ecx, 0
mov esi, 0
je 0x1000c0ac
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
cmp byte [esp + 0x78], 0
mov edi, 0
je 0x1000c0c0
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0x70]
mov dword [eax], edi
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 8]
mov dword [ecx + 0x44], eax
mov byte [ecx + 0x40], 1
jmp 0x10008eb8
xor edi, edi
jmp 0x10009be5
xor edi, edi
test eax, eax
je 0x1000ab09
push 0x8000
push 0
push eax
call dword [sym.imp.kernel32.dll_VirtualFree]
test eax, eax
jne 0x1000ab09
mov ecx, str._jemalloc_
mov edx, str.:__malloc__Error_in_VirtualFree___n
call fcn.10054100
jmp 0x1000ab09
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [esi + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
jmp 0x1000bf77
or edx, 1
mov eax, dword [esp]
mov dword [eax + 4], edx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
mov dword [esp + 0x1c], edx
push 0x100a4814
call dword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
cmp dword [0x100a4810], 0
jne 0x1000c37f
mov eax, dword [0x100a43c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x1000cfd4
mov eax, dword [0x100a481c]
mov ecx, dword [0x100a43c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jle 0x1000c1d4
push 0x100a481c
call fcn.1004f02e
add esp, 4
cmp dword [0x100a481c], 0xffffffff
jne 0x1000c1d4
lea edi, [esp + 0x70]
push edi
call dword [sym.imp.kernel32.dll_GetSystemInfo]
mov eax, dword [edi + 4]
mov dword [0x100a4818], eax
push 0x100a481c
call fcn.1004f02e
add esp, 4
mov eax, 0x1000
xor edx, edx
div dword [0x100a4818]
test edx, edx
jne 0x1000cfde
mov edi, 0x100a4820
push 0x40
push edi
push str.MALLOC_OPTIONS
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
test eax, eax
cmove edi, eax
je 0x1000c251
mov al, byte [edi]
test al, al
je 0x1000c251
mov dword [esp + 8], 0
movsx eax, al
add eax, 0xffffffd0
cmp eax, 9
jbe 0x1000d011
xor ebx, ebx
inc ebx
mov eax, dword [esp + 8]
mov al, byte [edi + eax]
movsx ecx, al
cmp ecx, 0x72
jne 0x1000cf86
mov byte [0x100a4778], 1
dec ebx
jne 0x1000c223
mov ecx, dword [esp + 8]
mov al, byte [edi + ecx + 1]
inc ecx
mov dword [esp + 8], ecx
test al, al
jne 0x1000c211
xor edi, edi
mov dword [0x100a47dc], edi
mov eax, 0x1388
mov ebx, dword [sym.imp.kernel32.dll_InitializeCriticalSectionAndSpinCount]
push eax
push 0x100a47bc
call ebx
mov dword [0x100a47d4], edi
mov dword [0x100a47d8], edi
mov eax, 0x1388
push eax
push 0x100a477c
call ebx
mov dword [0x100a4794], edi
mov dword [0x100a4798], edi
mov dword [0x100a479c], edi
mov eax, 0x1388
push eax
push 0x100a47e0
call ebx
mov dword [0x100a480c], edi
mov dword [0x100a4804], edi
mov dword [0x100a474c], edi
mov dword [0x100a4750], edi
mov dword [0x100a4754], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x74], edi
mov dword [esp + 0x7c], edi
mov eax, dword [0x100a4024]
mov dword [esp + 0x70], eax
mov eax, 0x1388
push eax
push 0x100a472c
call ebx
test eax, eax
je 0x1000cfae
lea edx, [esp + 0x70]
xor ecx, ecx
call fcn.10040920
mov dword [0x100a4744], eax
test eax, eax
je 0x1000cfc4
mov ecx, dword [0x100a43c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp byte [ecx + 8], 0
je 0x1000d002
mov ecx, dword [0x100a43c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
mov dword [ecx + 0xc], eax
push 0x1388
push 0x100a47a0
call dword [sym.imp.kernel32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x4000
call fcn.100123e0
test eax, eax
je 0x1000cfba
mov ebx, eax
push 0x4000
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [0x100a47b8], ebx
xor eax, eax
inc eax
xchg dword [0x100a4810], eax
call fcn.10001250
push 0x100a4814
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov edx, dword [esp + 0x1c]
jmp 0x10008e1c
or esi, 1
mov dword [edx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
or ecx, 1
mov eax, dword [esp]
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
and ebx, 1
mov dword [edx + 4], ebx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x1000d05d
cmp eax, 8
je 0x1000d05d
mov dword [esp + 0x34], 0
jmp 0x100095cd
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
or esi, 1
mov dword [edx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x1000c472
cmp eax, 8
jne 0x1000aa63
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea ebx, [eax + eax*4]
add ebx, 5
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
push 4
push 0x1000
push 0x100000
push edi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GetLastError]
cmp dword [esp], 0
jne 0x1000d144
cmp eax, 0x5af
je 0x1000c4c2
cmp eax, 8
jne 0x1000aa63
dec ebx
jne 0x1000c484
jmp 0x1000aa63
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x1000c50a
cmp eax, 8
jne 0x1000a17d
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea ebx, [eax + eax*4]
add ebx, 5
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
sub esp, 0x10
movaps xmm0, xmmword [0x10092150]
movups xmmword [esp], xmm0
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov edi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
test edi, edi
jne 0x1000d1c0
cmp eax, 0x5af
je 0x1000c558
cmp eax, 8
jne 0x1000a17d
dec ebx
jne 0x1000c51c
jmp 0x1000a17d
and edi, 1
mov dword [ecx + 4], edi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x1000d160
cmp eax, 8
je 0x1000d160
xor eax, eax
mov esi, dword [esp + 0x40]
jmp 0x1000a377
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
call fcn.1004eb54
jmp 0x10008e58
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov edi, esi
jmp 0x100092aa
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
and edi, 1
mov dword [eax + 4], edi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov eax, ecx
and eax, 0xfffffffe
mov edx, dword [esi + 4]
and edx, 1
or edx, eax
mov dword [esi + 4], edx
jmp 0x1000907e
mov eax, dword [esp + 0x28]
dec dword [eax + 8]
mov bl, 1
xor edi, edi
jmp 0x1000b743
mov dword [ebx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [ebx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov eax, dword [esp + 8]
mov ecx, dword [eax + 0x3c]
mov dword [esp + 0x10], ecx
test ecx, ecx
je 0x10009edd
xor ebx, ebx
mov dword [eax + 0x3c], ebx
mov eax, dword [esp + 0x10]
lea edi, [eax + 0x2000]
add eax, 0x28
mov dword [esp + 0xc], eax
lea ecx, [esp + 0x70]
mov esi, dword [esp]
mov dword [ecx], esi
mov dword [esp + 0x18], 0
mov dword [ecx + 4], ebx
mov esi, dword [esp + 0x18]
mov dword [esp + 0x20], esi
mov dword [esp + 0x18], ecx
mov ecx, dword [esp]
mov ecx, dword [ecx]
test ecx, ecx
je 0x1000c7d1
mov ebx, dword [ecx + 4]
test bl, 1
je 0x1000c7d1
mov esi, dword [ecx]
test esi, esi
je 0x1000c7d1
test byte [esi + 4], 1
jne 0x1000c837
mov ecx, dword [esp]
mov esi, dword [esp + 0x10]
mov esi, dword [esi + 0x30]
mov dword [esp + 0x20], esi
mov ebx, 0xfffff000
and esi, ebx
mov dword [esp], esi
mov esi, dword [ecx + 8]
and esi, ebx
xor ebx, ebx
cmp dword [esp], esi
seta bl
cmovb ebx, edx
cmp ebx, 0xffffffff
je 0x1000c81f
xor esi, esi
inc esi
mov dword [esp + 4], esi
test ebx, ebx
jne 0x1000c87f
test byte [esp + 0x20], 0x10
mov esi, 0
cmove esi, dword [esp + 0xc]
cmp esi, ecx
seta al
jae 0x1000c877
mov esi, dword [ecx]
mov dword [esp], esi
mov dword [esp + 4], edx
cmp dword [esp], 0
jne 0x1000c7a8
jmp 0x1000c941
and ebx, 0xfffffffe
mov esi, dword [esp]
mov dword [esi], ebx
and esi, 0xfffffffe
mov dword [esp + 4], esi
mov ebx, dword [ecx]
mov esi, dword [ecx + 4]
and esi, 1
add esi, dword [esp + 4]
mov dword [ecx + 4], esi
test ebx, ebx
je 0x1000d20f
and byte [ebx + 4], 0xfe
mov esi, dword [esp]
mov ebx, dword [esp + 0x18]
cmp dword [ebx], esi
jne 0x1000c88a
mov esi, dword [esp + 0x18]
mov dword [esi], ecx
jmp 0x1000c7d4
xor ebx, ebx
mov bl, al
mov dword [esp + 4], ebx
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
mov dword [esp], esi
jmp 0x1000c828
and ecx, 0xfffffffe
mov esi, dword [esp + 0x18]
mov ebx, dword [esi + 4]
mov eax, esi
and ebx, 1
lea esi, [ebx + ecx]
mov dword [eax + 4], esi
test ecx, ecx
je 0x1000d21e
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, ebx
mov ebx, dword [esp + 0x18]
mov dword [ebx + 4], esi
mov dword [ecx], ebx
mov esi, dword [ebx + 4]
and esi, 1
mov ebx, dword [ecx + 4]
and ebx, 0xfffffffe
or ebx, esi
mov dword [ecx + 4], ebx
mov esi, dword [esp + 0x18]
or byte [esi + 4], 1
cmp dword [esp + 0x20], 0
je 0x1000d135
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
cmp dword [ebx], esi
je 0x1000cb74
jmp 0x1000cbbe
mov esi, dword [esp + 0x10]
mov esi, dword [esi + 0x30]
mov dword [esp + 0x18], esi
mov ebx, 0xfffff000
and esi, ebx
mov dword [esp], esi
mov esi, dword [ecx + 8]
and esi, ebx
xor ebx, ebx
cmp dword [esp], esi
seta bl
cmovb ebx, edx
test ebx, ebx
jne 0x1000cac3
jmp 0x1000cc42
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
mov dword [esp], esi
mov dword [esp + 0x18], ecx
cmp dword [esp], 0
jne 0x1000c7b4
mov edx, dword [esp + 0x20]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x10]
mov dword [edx + 0x28], 0
mov dword [edx + 0x2c], 1
cmp dword [esp + 4], 1
je 0x1000c9fb
mov eax, dword [esp + 0xc]
jmp 0x1000a3db
mov eax, esi
jmp 0x1000946c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
jmp 0x10009698
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov ebx, dword [esp + 0xc]
and ebx, 0xfffffffe
mov edx, dword [ecx + 4]
and edx, 1
lea esi, [edx + ebx]
mov dword [ecx + 4], esi
test ebx, ebx
je 0x1000d200
mov eax, ebx
mov esi, dword [eax]
and esi, 0xfffffffe
or esi, edx
mov dword [ecx + 4], esi
mov dword [eax], ecx
mov edx, dword [ecx + 4]
and edx, 1
mov esi, dword [eax + 4]
and esi, 0xfffffffe
or esi, edx
mov dword [eax + 4], esi
or byte [ecx + 4], 1
mov edx, dword [esp + 0x18]
cmp dword [edx], ecx
jne 0x1000ca6e
mov ecx, dword [esp + 0x18]
jmp 0x1000a3db
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_CRASH__
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov edx, dword [esp + 0x18]
mov edx, dword [edx + 4]
mov esi, edx
and esi, 0xfffffffe
cmp ecx, esi
jne 0x1000a3dd
and edx, 1
or edx, eax
mov eax, dword [esp + 0x18]
mov dword [eax + 4], edx
jmp 0x1000a3dd
push 0x100a47a0
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov ecx, edi
mov edx, 0x100000
push 0
call fcn.10005780
add esp, 4
jmp 0x1000a17d
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
xor esi, esi
inc esi
mov dword [esp + 4], esi
cmp ebx, 0xffffffff
jne 0x1000c922
jmp 0x1000ccd7
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov eax, ecx
mov ebx, edi
jmp 0x1000a239
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov esi, dword [esp + 0x20]
mov dword [esi], ecx
jmp 0x1000c8f0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
and dword [esi + 4], 1
jmp 0x100092b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
and dword [eax + 4], 1
jmp 0x10009887
mov ebx, dword [esp + 0x20]
mov esi, dword [ebx + 4]
and esi, 1
or esi, ecx
mov dword [ebx + 4], esi
jmp 0x1000c8f0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov esi, dword [esp]
mov dword [esi + 0x14], eax
mov ecx, esi
call fcn.100018b0
mov ecx, 0x100a47d8
mov edx, esi
call fcn.10001630
test ebx, ebx
je 0x1000a6e9
push 0x100a47bc
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
call fcn.10054150
mov dword [esp], eax
test eax, eax
je 0x1000cd50
push 0x100a47bc
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
jmp 0x1000a6c0
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
test byte [esp + 0x18], 0x10
mov esi, 0
cmove esi, dword [esp + 0xc]
cmp esi, ecx
seta byte [esp]
jb 0x1000ccd7
xor ebx, ebx
mov al, byte [esp]
mov bl, al
mov dword [esp + 4], ebx
jmp 0x1000c922
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
cmp edx, 1
jne 0x1000cc88
mov eax, dword [eax + 4]
and eax, 0xfffffffe
jmp 0x10009f14
mov edi, eax
jmp 0x1000a671
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x1000aeb1
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
or ecx, 1
mov dword [esi + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov esi, dword [ecx]
mov dword [esp], esi
mov dword [esp + 4], edx
jmp 0x1000c92b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [ebx + 8], edx
jmp 0x1000ad22
mov dword [ebx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov ecx, str._jemalloc_
mov edx, str.:__malloc__Error_in_VirtualFree___n
call fcn.10054100
jmp 0x1000aaed
mov ecx, edi
mov edx, 0x100000
push dword [esp + 0x10]
call fcn.10005780
add esp, 4
jmp 0x1000aa63
mov ecx, str._jemalloc_
mov edx, str.:__malloc__Error_in_VirtualFree___n
call fcn.10054100
jmp 0x1000aaab
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov eax, dword [esp + 4]
and dword [eax + 4], 1
jmp 0x1000baeb
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test esi, esi
je 0x1000ce38
mov dword [esi + 4], 0
and dword [esi + 8], 1
xor ecx, ecx
jmp 0x1000bb61
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
and dword [ebx + 8], 1
jmp 0x1000a14d
mov dword [esi + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
or ecx, 1
mov dword [edi + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
call fcn.1004eb54
jmp 0x1000bdb6
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [ebx + 8], edx
jmp 0x1000bdef
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test edi, edi
je 0x1000cf3a
mov dword [edi + 4], 0
and dword [edi + 8], 1
xor ecx, ecx
jmp 0x1000bfad
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
and dword [ebx + 8], 1
jmp 0x1000bfc0
mov dword [edi + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
cmp ecx, 0x46
jne 0x1000d03c
mov eax, dword [0x100a4024]
test eax, eax
je 0x1000d0bd
add eax, eax
je 0x1000c23d
mov dword [0x100a4024], eax
jmp 0x1000c23d
mov dword [0x100a4744], 0
jmp 0x1000cfc4
mov dword [0x100a47b8], 0
push 0x100a4814
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
jmp 0x1000a18b
call fcn.1004eb54
jmp 0x1000c181
mov ecx, str._jemalloc_
mov edx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.10054100
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_CRASH__
int3
call fcn.1004eb54
mov eax, dword [0x100a4744]
jmp 0x1000c321
xor ebx, ebx
lea ecx, [ebx + ebx*4]
lea ebx, [eax + ecx*2]
mov ecx, dword [esp + 8]
movsx eax, byte [edi + ecx + 1]
inc ecx
mov dword [esp + 8], ecx
add eax, 0xffffffd0
cmp eax, 0xa
jb 0x1000d013
test ebx, ebx
je 0x1000c240
jmp 0x1000c223
cmp ecx, 0x52
jne 0x1000d04d
mov byte [0x100a4778], 0
jmp 0x1000c23d
cmp ecx, 0x66
jne 0x1000d0cc
shr dword [0x100a4024], 1
jmp 0x1000c23d
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea esi, [eax + eax*4]
add esi, 5
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
push 4
push 0x1000
push dword [esp + 0x50]
push dword [esp + 0x30]
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov dword [esp + 0x34], eax
call dword [sym.imp.kernel32.dll_GetLastError]
cmp dword [esp + 0x34], 0
jne 0x1000d115
cmp eax, 0x5af
je 0x1000d0ad
cmp eax, 8
jne 0x1000c3f5
mov dword [esp + 0x34], 0
dec esi
jne 0x1000d06f
jmp 0x100095cd
mov dword [0x100a4024], 1
jmp 0x1000c23d
lea ecx, [esp + 0x70]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov eax, 2
push 0xa
push str._jemalloc_
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
push 0x35
push str.:__malloc__Unsupported_character_in_malloc_options:_
mov eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
lea ecx, [esp + 0x70]
mov edx, 0x1009a0a1
call fcn.10054100
jmp 0x1000c23d
cmp eax, 0x5af
mov ecx, dword [esp + 0x40]
je 0x1000d129
cmp eax, 8
jne 0x100095a9
push ecx
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x100095a9
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c40c
cmp eax, 0x5af
je 0x1000d154
cmp eax, 8
jne 0x1000a723
push esi
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x1000a723
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea eax, [eax + eax*4]
add eax, 5
mov dword [esp + 0x4c], eax
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
push 4
push 0x1000
push dword [esp + 0x4c]
push dword [esp + 0x30]
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov esi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
test esi, esi
jne 0x1000d1dc
cmp eax, 0x5af
je 0x1000d1af
cmp eax, 8
jne 0x1000c59e
xor eax, eax
dec dword [esp + 0x4c]
mov esi, dword [esp + 0x40]
jne 0x1000d176
jmp 0x1000a377
cmp eax, 0x5af
je 0x1000d1d0
cmp eax, 8
jne 0x1000aa89
push esi
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x1000aa89
cmp eax, 0x5af
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x50]
je 0x1000d1f4
cmp eax, 8
jne 0x1000a354
push ecx
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x1000a354
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c3d0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c13e