Function at 0x10033510
Capabilities:
Get system information on windows
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb0
mov ebx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov eax, dword [0x100a500c]
xor eax, ebp
mov dword [esp + 0xa8], eax
test ebx, ebx
je 0x10039007
mov eax, dword [0x100a580c]
test ecx, ecx
je 0x10033886
test eax, eax
je 0x10039036
mov edi, ecx
and edi, 0xfff00000
cmp edi, ecx
mov dword [esp + 4], edi
je 0x10038218
mov eax, ecx
shr eax, 0xc
movzx eax, al
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*4 + 0x18]
mov edx, eax
and edx, 0xfffff000
test al, 2
jne 0x10033584
mov eax, dword [edx]
mov edx, dword [eax + 8]
cmp edx, 0xfd000
ja 0x10038250
mov esi, dword [edi]
cmp ebx, 0xfd000
ja 0x10037edc
cmp ebx, 8
jbe 0x100343a8
cmp ebx, 0x1f0
ja 0x100339a7
lea edi, [ebx + 0xf]
and edi, 0xfffffff0
xor eax, eax
cmp edi, edx
sete cl
cmp edx, 0xfd001
jae 0x10035dea
test cl, cl
jne 0x10033bd6
lea ecx, [edx - 0xf01]
cmp ecx, 0xfc100
setae cl
xor al, 1
or al, cl
mov dword [esp + 0x2c], edx
je 0x10033eb5
cmp byte [esi + 0x41], 0
mov ecx, esi
mov dword [esp + 0x18], esi
jne 0x10033ac5
cmp ebx, 0x1f1
jae 0x10033abf
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x100390f3
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x100390fd
cmp ebx, 9
mov dword [esp + 0x20], ecx
jb 0x100343d4
cmp ebx, 0x1f1
jae 0x10033bfa
lea edx, [ebx + 0xf]
mov eax, edx
and eax, 0xfffffff0
mov dword [esp + 0x28], eax
shr edx, 4
shl edx, 5
cmp byte [ecx + 0x40], 0
mov dword [esp], edx
je 0x10033684
cmp dword [ecx + 0x44], 0
je 0x10038a24
lea eax, [ecx + edx]
add eax, 0x5c
lea edi, [ecx + 0xc]
cmp dword [ecx + 0x24], 0
jne 0x100336a6
push edi
mov esi, ebx
mov ebx, eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, ebx
mov ebx, esi
mov ecx, dword [esp + 0x20]
mov edx, dword [eax]
test edx, edx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], edi
je 0x10033c16
cmp dword [edx + 8], 0
je 0x10033c16
mov eax, dword [edx + 4]
mov dword [esp + 8], edx
mov edx, dword [edx + eax*4 + 0xc]
test edx, edx
je 0x10033dbb
mov edi, dword [ecx + 0x44]
test edi, edi
jne 0x100339c4
tzcnt ebx, edx
mov edi, eax
shl edi, 5
or edi, ebx
btc edx, ebx
mov esi, eax
mov eax, dword [esp]
imul edi, dword [ecx + eax + 0x64]
mov eax, dword [ecx + eax + 0x70]
mov ecx, dword [esp + 8]
mov dword [ecx + esi*4 + 0xc], edx
mov edx, ecx
add eax, ecx
add edi, eax
dec dword [edx + 8]
test edi, edi
je 0x1003909f
mov esi, edi
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
add dword [ecx + 0x30], eax
xor ebx, ebx
mov edi, dword [esp + 0x10]
cmp dword [ecx + 0x24], 0
jne 0x10033735
push edi
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test bl, bl
mov ebx, dword [esp + 0x14]
mov eax, esi
mov edi, dword [ebp + 8]
mov esi, dword [esp + 0x18]
jne 0x10039c7a
test eax, eax
je 0x10039c7a
mov ecx, dword [esp + 0x2c]
cmp ecx, ebx
cmovb ebx, ecx
push ebx
push edi
mov dword [esp + 0x14], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, edi
and eax, 0xfffff
je 0x10038773
mov ebx, dword [esp + 4]
cmp dword [ebx], esi
jne 0x1003904b
mov dword [esp], eax
mov esi, eax
shr esi, 0xc
lea edx, [esi + esi*2]
mov ecx, dword [ebx + edx*4 + 0x18]
mov eax, ecx
and eax, 0xfffff000
test cl, 2
jne 0x100337a3
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [esp + 0x2c], edx
lea ecx, [ebx + edx*4]
add ecx, 0x18
mov dword [esp + 0x14], ecx
push eax
push 0xe5
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x18]
lea ebx, [eax + 0xc]
cmp dword [eax + 0x24], 0
jne 0x100337d4
push ebx
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
test al, 0x20
jne 0x10039060
mov dword [esp + 0x20], ebx
test al, 1
je 0x10039075
mov ebx, eax
and ebx, 0xfffff000
test al, 2
jne 0x10033fe5
mov edx, dword [ebx]
mov ecx, dword [edx + 8]
mov dword [esp + 0x2c], ecx
mov ecx, dword [edx + 0x14]
add ecx, ebx
sub edi, ecx
mov dword [esp + 0x14], edx
movzx edx, word [edx + 0x1c]
imul edx, edi
mov ecx, edx
shr ecx, 0x11
shr edx, 0x16
cmp edx, dword [ebx + 4]
jb 0x10033e39
mov esi, dword [ebx + edx*4 + 0xc]
mov edi, 1
shl edi, cl
bt esi, ecx
jb 0x1003908a
or esi, edi
mov dword [ebx + edx*4 + 0xc], esi
mov ecx, dword [ebx + 8]
lea edx, [ecx + 1]
mov dword [ebx + 8], edx
mov edi, dword [esp + 0x14]
cmp edx, dword [edi + 0xc]
je 0x100345d1
test ecx, ecx
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 4]
je 0x10033ae5
mov edi, dword [esp + 0x20]
xor ebx, ebx
mov eax, dword [esp + 0x2c]
sub dword [esi + 0x30], eax
cmp dword [esi + 0x24], 0
je 0x10034373
jmp 0x1003437a
test eax, eax
je 0x10038b75
cmp ebx, 0x1f0
ja 0x10035085
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x100390ac
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov esi, dword [eax + 0xc]
test esi, esi
je 0x100390b6
cmp ebx, 9
jb 0x10034413
add ebx, 0xf
mov eax, ebx
and eax, 0xfffffff0
mov dword [esp + 4], eax
shr ebx, 4
shl ebx, 5
cmp byte [esi + 0x40], 0
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], esi
je 0x10033906
cmp dword [esi + 0x44], 0
je 0x10038aa4
add ebx, esi
add ebx, 0x5c
lea edi, [esi + 0xc]
cmp dword [esi + 0x24], 0
jne 0x1003391b
push edi
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov ecx, dword [ebx]
test ecx, ecx
mov dword [esp + 0x20], edi
je 0x10033cec
cmp dword [ecx + 8], 0
je 0x10033cec
mov eax, dword [ecx + 4]
mov edx, dword [ecx + eax*4 + 0xc]
test edx, edx
je 0x10033e41
mov esi, dword [esi + 0x44]
test esi, esi
jne 0x10033a35
tzcnt ebx, edx
mov esi, dword [esp + 0x18]
mov edi, eax
shl edi, 5
or edi, ebx
btc edx, ebx
mov ebx, eax
mov eax, dword [esp + 0x14]
imul edi, dword [esi + eax + 0x64]
mov eax, dword [esi + eax + 0x70]
mov dword [ecx + ebx*4 + 0xc], edx
add eax, ecx
add edi, eax
dec dword [ecx + 8]
test edi, edi
je 0x10039234
mov eax, dword [esp + 4]
add dword [esi + 0x30], eax
xor ebx, ebx
cmp dword [esi + 0x24], 0
jne 0x1003399a
push dword [esp + 0x20]
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test bl, bl
je 0x10034386
jmp 0x10039c7a
cmp ebx, 0xf00
ja 0x10033aac
lea edi, [ebx + 0xff]
and edi, 0xffffff00
jmp 0x100335b9
mov dword [esp + 0x30], eax
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov ebx, eax
shld ebx, ecx, 0x17
mov esi, ecx
shl esi, 0x17
xor esi, ecx
mov ecx, dword [edi + 0xc]
xor ebx, eax
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, ebx
mov dword [esp + 0xc], ebx
shr ebx, 0x11
xor ebx, eax
mov eax, dword [edi + 8]
mov dword [edi + 4], ecx
shld dword [esp + 0xc], esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, dword [esp + 0xc]
mov dword [edi], eax
mov dword [edi + 0xc], ebx
mov dword [edi + 8], ecx
add ecx, eax
mov esi, edx
ror esi, cl
test esi, esi
je 0x10033be6
tzcnt ebx, esi
mov eax, dword [esp + 0x30]
add ebx, ecx
and ebx, 0x1f
mov ecx, dword [esp + 0x20]
jmp 0x100336e4
mov dword [esp], eax
mov dword [esp + 0x2c], ecx
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov ebx, eax
shld ebx, ecx, 0x17
mov edi, ecx
shl edi, 0x17
xor edi, ecx
mov ecx, dword [esi + 0xc]
xor ebx, eax
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, ebx
mov dword [esp + 0xc], ebx
shr ebx, 0x11
xor ebx, eax
mov eax, dword [esi + 8]
mov dword [esi + 4], ecx
shld dword [esp + 0xc], edi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, edi
xor ecx, dword [esp + 0xc]
mov dword [esi], eax
mov dword [esi + 0xc], ebx
mov dword [esi + 8], ecx
add ecx, eax
mov esi, edx
ror esi, cl
test esi, esi
je 0x10033bf0
tzcnt ebx, esi
mov esi, dword [esp + 0x18]
mov eax, dword [esp]
add ebx, ecx
and ebx, 0x1f
mov ecx, dword [esp + 0x2c]
jmp 0x10033955
lea edi, [ebx + 0xfff]
and edi, 0x1ff000
mov al, 1
jmp 0x100335bb
mov ecx, dword [0x100a5744]
cmp ebx, 0xf00
jbe 0x10033646
mov edx, ebx
push 0
call fcn.1003a880
add esp, 4
mov edi, dword [ebp + 8]
jmp 0x1003374a
mov ecx, dword [edi]
cmp ecx, ebx
je 0x1003386a
test ecx, ecx
je 0x100351e9
cmp ebx, ecx
jae 0x10033f2f
cmp dword [ecx + 8], 0
je 0x100351e9
mov eax, ecx
and eax, 0xfff00000
shr ecx, 0xa
and ecx, 0x3fc
lea ecx, [ecx + ecx*2]
or ecx, eax
add ecx, 0x10
mov dword [esp], ecx
mov eax, dword [edi + 4]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 0
test eax, eax
je 0x10034c20
lea ecx, [esp + 0x80]
mov dword [esp + 4], 0
mov edx, dword [esp + 4]
mov dword [esp + 0x10], edx
mov dword [esp + 4], ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x10033b8f
mov edx, dword [ecx + 4]
test dl, 1
je 0x10033b8f
mov edi, dword [ecx]
test edi, edi
je 0x10033b76
test byte [edi + 4], 1
jne 0x10033b9b
mov ecx, eax
mov edi, dword [esp + 0x14]
cmp ecx, dword [esp]
seta dl
jbe 0x10033b93
mov eax, dword [ecx]
test eax, eax
jne 0x10033b50
jmp 0x100351b9
mov ecx, eax
jmp 0x10033b7c
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
jmp 0x10033b86
and edx, 0xfffffffe
mov dword [eax], edx
mov edi, eax
and edi, 0xfffffffe
mov edx, dword [ecx]
mov esi, dword [ecx + 4]
and esi, 1
or esi, edi
mov dword [ecx + 4], esi
test edx, edx
je 0x1003914b
and byte [edx + 4], 0xfe
mov edx, dword [esp + 4]
cmp dword [edx], eax
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x14]
jne 0x1003512b
mov dword [edx], ecx
jmp 0x10033b7c
sub edx, ebx
ja 0x10034ff8
mov edi, dword [ebp + 8]
jmp 0x10034386
mov ebx, 0x20
jmp 0x10033a23
mov ebx, 0x20
jmp 0x10033a97
lea edx, [ebx + 0xff]
mov eax, edx
and eax, 0x1f00
mov dword [esp + 0x28], eax
shr edx, 8
add edx, 0x1e
jmp 0x1003366e
mov dword [esp + 0x30], eax
mov edx, dword [esp]
mov eax, dword [ecx + edx + 0x60]
test eax, eax
je 0x100355d6
add ecx, edx
add ecx, 0x60
mov dword [esp + 0x24], ecx
mov ecx, eax
nop word cs:[eax + eax]
mov edi, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x10033c40
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 0
xor edx, edx
dec edx
xor ecx, ecx
cmp eax, edi
setb cl
cmova ecx, edx
cmp ecx, 0xffffffff
mov dword [esp + 8], edi
jne 0x10034803
mov edi, dword [eax]
test edi, edi
je 0x10038e0a
mov ecx, dword [edi + 4]
mov dword [esp + 0x1c], 0
test cl, 1
jne 0x10039eaa
mov esi, dword [edi]
test esi, esi
je 0x10033ca2
test byte [esi + 4], 1
jne 0x10039eaa
or ecx, 1
mov dword [edi + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10038e40
mov edi, dword [ecx]
test edi, edi
je 0x10033cc8
mov ebx, dword [edi + 4]
test bl, 1
jne 0x10035df9
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edi, ecx
and byte [edi + 4], 0xfe
lea eax, [esp + 0x80]
mov dword [eax], edi
jmp 0x10039eaa
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + ecx + 0x60]
test eax, eax
mov dword [esp + 0xc], ebx
je 0x10035655
lea edi, [esi + ecx]
add edi, 0x60
mov ecx, eax
nop dword [eax + eax]
mov esi, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x10033d10
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 0
xor edx, edx
dec edx
xor ecx, ecx
cmp eax, esi
setb cl
cmova ecx, edx
cmp ecx, 0xffffffff
mov dword [esp + 0x2c], edi
jne 0x1003482d
mov edx, dword [eax]
test edx, edx
je 0x10038e34
mov ecx, dword [edx + 4]
mov dword [esp], 0
test cl, 1
jne 0x1003a448
mov edi, dword [edx]
test edi, edi
je 0x10033d71
test byte [edi + 4], 1
jne 0x1003a448
or ecx, 1
mov dword [edx + 4], ecx
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
je 0x10038e55
mov edx, dword [ecx]
test edx, edx
je 0x10033d97
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10035ea1
or edi, 1
mov dword [eax + 4], edi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x80]
mov dword [eax], edx
jmp 0x1003a448
mov edx, eax
mov eax, dword [esp]
mov eax, dword [ecx + eax + 0x6c]
mov dword [esp + 0x30], eax
mov eax, edx
shl eax, 5
mov dword [esp + 0xc], eax
mov eax, edx
mov edx, dword [esp + 8]
inc eax
cmp eax, dword [esp + 0x30]
jae 0x100391e1
mov ecx, dword [edx + eax*4 + 0xc]
add dword [esp + 0xc], 0x20
mov dword [esp + 0x24], ecx
test ecx, ecx
je 0x10033dd7
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x20]
mov ebx, dword [eax + 0x44]
test ebx, ebx
jne 0x1003444e
mov ebx, dword [esp + 0x24]
tzcnt ecx, ebx
mov edi, dword [esp + 0xc]
add edi, ecx
mov esi, ecx
mov ecx, dword [esp]
imul edi, dword [eax + ecx + 0x64]
mov eax, dword [eax + ecx + 0x70]
add eax, edx
add edi, eax
btc ebx, esi
mov eax, dword [esp + 0x30]
mov dword [edx + eax*4 + 0xc], ebx
mov dword [edx + 4], eax
jmp 0x1003370a
mov dword [ebx + 4], edx
jmp 0x1003382a
mov dword [esp + 0x2c], ecx
mov edx, eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + eax + 0x6c]
mov eax, edx
mov edi, edx
shl edi, 5
inc eax
cmp eax, ecx
jae 0x1003922d
mov edx, eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + edx*4 + 0xc]
add edi, 0x20
mov dword [esp + 0xc], eax
test eax, eax
mov eax, edx
je 0x10033e56
mov dword [esp], eax
mov ebx, dword [esi + 0x44]
test ebx, ebx
jne 0x100344bd
mov edx, dword [esp + 0xc]
tzcnt ebx, edx
add edi, ebx
mov eax, dword [esp + 0x14]
imul edi, dword [esi + eax + 0x64]
mov eax, dword [esi + eax + 0x70]
mov ecx, dword [esp + 0x2c]
add eax, ecx
add edi, eax
btc edx, ebx
mov eax, dword [esp]
mov dword [ecx + eax*4 + 0xc], edx
mov dword [ecx + 4], eax
jmp 0x10033976
mov eax, edi
sub eax, edx
mov dword [esp], eax
jb 0x10034b76
mov dword [esp + 0x14], ebx
mov eax, dword [ebp + 8]
shr eax, 0xc
movzx eax, al
mov dword [esp + 0xc], eax
mov ebx, edx
shr ebx, 0xc
lea edx, [esi + 0xc]
cmp dword [esi + 0x24], 0
mov dword [esp + 0x20], edx
jne 0x10033ef0
push edx
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov edx, dword [esp + 0x20]
add ebx, dword [esp + 0xc]
cmp ebx, 0xfe
ja 0x10033f0f
lea ecx, [ebx + ebx*2]
mov eax, dword [esp + 4]
mov eax, dword [eax + ecx*4 + 0x18]
test al, 1
je 0x1003452e
xor ebx, ebx
cmp dword [edx + 0x18], 0
jne 0x10033f1e
push edx
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test bl, bl
mov ebx, dword [esp + 0x14]
je 0x100335f1
jmp 0x10033bde
sub eax, edx
shr eax, 0xc
lea eax, [eax + eax*2]
lea eax, [edx + eax*4]
add eax, 0x10
mov dword [esp + 4], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 0
test eax, eax
je 0x10034f92
lea ecx, [esp + 0x80]
xor edx, edx
mov edi, dword [esp + 4]
mov dword [esp], edx
mov edx, ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x10033fa2
mov ebx, dword [ecx + 4]
test bl, 1
je 0x10033fa2
mov edi, dword [ecx]
test edi, edi
je 0x10033f8a
test byte [edi + 4], 1
jne 0x10033fae
mov ecx, eax
mov edi, dword [esp + 4]
cmp ecx, edi
seta bl
jbe 0x10033fa6
mov eax, dword [ecx]
test eax, eax
jne 0x10033f6b
jmp 0x100353c9
mov ecx, eax
jmp 0x10033f90
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
jmp 0x10033f99
and ebx, 0xfffffffe
mov dword [eax], ebx
mov esi, eax
and esi, 0xfffffffe
mov ebx, dword [ecx]
mov edi, dword [ecx + 4]
and edi, 1
or edi, esi
mov dword [ecx + 4], edi
test ebx, ebx
je 0x10039178
and byte [ebx + 4], 0xfe
cmp dword [edx], eax
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 4]
jne 0x1003535a
mov dword [edx], ecx
jmp 0x10033f90
mov eax, dword [esp + 0x18]
sub dword [eax + 0x34], ebx
cmp dword [esp], 0xff000
jae 0x1003924c
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
test al, 2
mov ebx, dword [esp + 4]
mov dword [esp + 0x10], esi
je 0x10034a7f
mov edi, eax
and edi, 0xfffff000
shr eax, 0xc
test eax, eax
je 0x100340ce
lea ecx, [eax - 1]
movd xmm0, ecx
pshufd xmm0, xmm0, 0
mov ecx, dword [esp + 0x2c]
lea ecx, [ebx + ecx*4]
add ecx, 0x3c
lea edx, [eax*4 + 0xc]
and edx, 0xfffffff0
lea edx, [edx + edx*2]
movdqa xmm1, xmmword [0x10093120]
xor esi, esi
movdqa xmm2, xmmword [0x10093130]
pxor xmm0, xmm2
pcmpeqd xmm3, xmm3
movdqa xmm4, xmmword [0x10093140]
movdqa xmm5, xmm1
pxor xmm5, xmm2
pcmpgtd xmm5, xmm0
movd ebx, xmm5
not ebx
test bl, 1
je 0x10034086
mov dword [ecx + esi - 0x24], 8
pxor xmm5, xmm3
pextrw ebx, xmm5, 2
test bl, 1
je 0x1003409c
mov dword [ecx + esi - 0x18], 8
pextrw ebx, xmm5, 4
test bl, 1
je 0x100340ae
mov dword [ecx + esi - 0xc], 8
pextrw ebx, xmm5, 6
test bl, 1
je 0x100340bf
mov dword [ecx + esi], 8
paddd xmm1, xmm4
add esi, 0x30
cmp edx, esi
mov ebx, dword [esp + 4]
jne 0x10034067
mov ecx, dword [ebx + 0xc]
test ecx, ecx
mov esi, dword [esp + 0x18]
mov dword [esp + 8], edi
je 0x10034e49
add ecx, eax
mov dword [ebx + 0xc], ecx
add dword [esi + 0x48], eax
mov edx, 0xfff
mov ebx, dword [esp + 0x14]
mov ecx, dword [ebx]
and ecx, edx
or ecx, edi
mov dword [ebx], ecx
mov ebx, dword [esp + 4]
add eax, dword [esp + 0x10]
lea ecx, [eax + eax*2]
and edx, dword [ebx + ecx*4 + 0xc]
or edx, edi
mov dword [ebx + ecx*4 + 0xc], edx
cmp eax, 0xfe
ja 0x10035c37
mov edx, dword [ebx + ecx*4 + 0x18]
test dl, 1
mov eax, dword [esp + 0x2c]
je 0x1003486b
mov edi, dword [esp + 8]
cmp dword [esp], 0x3000
jb 0x10034144
mov eax, dword [ebx + eax*4 + 0xc]
test al, 1
je 0x10034c3c
mov eax, dword [esp + 0x10]
lea eax, [eax + eax*2]
lea edx, [ebx + eax*4]
add edx, 0x10
mov ecx, dword [esi + 0x58]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], 0
test ecx, ecx
je 0x10034fcc
mov dword [esp + 0x2c], edx
lea eax, [ebx + eax*4]
add eax, 0x18
mov dword [esp + 0x14], eax
lea ebx, [esp + 0x80]
xor esi, esi
mov eax, esi
mov esi, ebx
mov ebx, dword [ecx]
test ebx, ebx
je 0x100341a3
mov edx, dword [ebx + 4]
test dl, 1
je 0x100341a3
mov edi, dword [ebx]
test edi, edi
je 0x100341a3
test byte [edi + 4], 1
jne 0x1003420d
mov ebx, ecx
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov edx, eax
and edx, 0xfffff000
mov edi, dword [ebx + 8]
mov ecx, 0xfffff000
and edi, ecx
xor ecx, ecx
cmp edx, edi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
cmp ecx, 0xffffffff
je 0x100341ea
test ecx, ecx
jne 0x100341fc
test al, 0x10
mov eax, 0
cmove eax, dword [esp + 0x2c]
xor edx, edx
cmp eax, ebx
seta al
jae 0x1003423e
mov ecx, dword [ebx]
xor edx, edx
dec edx
mov edi, dword [esp + 4]
test ecx, ecx
jne 0x10034185
jmp 0x100342db
mov edx, 1
mov edi, dword [esp + 4]
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
jmp 0x100341f3
mov dword [esp], eax
and edx, 0xfffffffe
mov dword [ecx], edx
mov edi, ecx
and edi, 0xfffffffe
mov edx, dword [ebx]
mov eax, dword [ebx + 4]
and eax, 1
or eax, edi
mov dword [ebx + 4], eax
test edx, edx
je 0x10039196
and byte [edx + 4], 0xfe
cmp dword [esi], ecx
jne 0x10034242
mov dword [esi], ebx
jmp 0x100341a5
mov dl, al
jmp 0x10034201
and ebx, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
lea eax, [ecx + ebx]
mov dword [esi + 4], eax
test ebx, ebx
je 0x100391a5
mov eax, dword [ebx]
and eax, 0xfffffffe
or eax, ecx
mov dword [esi + 4], eax
mov dword [ebx], esi
mov eax, dword [esi + 4]
and eax, 1
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
or byte [esi + 4], 1
mov eax, dword [esp]
test eax, eax
mov edi, dword [esp + 4]
je 0x10038e94
cmp dword [eax], esi
je 0x1003529f
jmp 0x10035348
mov eax, dword [esp + 0x14]
mov edx, dword [eax]
mov eax, edx
mov ecx, 0xfffff000
and eax, ecx
mov esi, dword [ebx + 8]
and esi, ecx
xor ecx, ecx
cmp eax, esi
seta cl
mov eax, 0xffffffff
cmovb ecx, eax
test ecx, ecx
jne 0x10034fe7
jmp 0x100354e3
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
mov eax, dword [esp]
mov esi, ebx
test ecx, ecx
jne 0x10034189
mov esi, eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 0
mov dword [eax + 4], 1
cmp edx, 1
je 0x10034592
mov edx, eax
mov dword [ebx], edx
mov eax, dword [esp + 0x80]
test eax, eax
je 0x10039261
mov esi, dword [esp + 0x18]
lea ecx, [esi + 0x58]
and byte [eax + 4], 0xfe
mov dword [ecx], eax
mov eax, 0xfffff001
and eax, dword [edi + 0x30]
xor ebx, ebx
mov dword [esp + 0x14], 0
cmp eax, 0xfd000
je 0x10037b18
mov ecx, dword [0x100a5754]
test ecx, ecx
je 0x10034355
setle al
movzx eax, al
mov eax, dword [esi + eax*4 + 0x50]
test eax, eax
cmovne ecx, eax
test ecx, ecx
js 0x1003766c
mov ebx, ecx
mov edx, dword [esi + 0x4c]
mov ecx, ebx
shl edx, cl
cmp dword [esi + 0x48], edx
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x14]
ja 0x100373c3
cmp dword [esi + 0x24], 0
jne 0x1003437a
push edi
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test ebx, ebx
jne 0x10038075
mov edi, dword [esp + 0xc]
mov esi, edi
test edi, edi
je 0x10039c7a
mov ecx, dword [esp + 0xa8]
xor ecx, ebp
call fcn.1004fb50
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, ebx
dec eax
je 0x10034857
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor edi, edi
inc edi
shl edi, cl
cmp edi, 9
mov eax, 8
cmovb edi, eax
cmp ebx, 2
cmovb edi, eax
jmp 0x100335b9
mov eax, ebx
dec eax
je 0x10034861
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor edx, edx
inc edx
shl edx, cl
cmp edx, 9
mov eax, 8
cmovb edx, eax
cmp ebx, 2
cmovb edx, eax
mov dword [esp + 0x28], edx
mov eax, edx
shr eax, 3
or eax, 1
bsr edx, eax
mov ecx, dword [esp + 0x20]
jmp 0x1003366e
mov eax, ebx
dec eax
je 0x10034a75
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor edx, edx
inc edx
shl edx, cl
cmp edx, 9
mov eax, 8
cmovb edx, eax
cmp ebx, 2
cmovb edx, eax
mov dword [esp + 4], edx
mov eax, edx
shr eax, 3
or eax, 1
bsr ebx, eax
jmp 0x100338eb
mov eax, dword [ebx]
mov edi, dword [ebx + 4]
mov edx, edi
shld edx, eax, 0x17
mov esi, eax
shl esi, 0x17
xor esi, eax
mov ecx, dword [ebx + 0xc]
xor edx, edi
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, edx
mov edi, edx
shr edx, 0x11
xor edx, eax
mov eax, dword [ebx + 8]
mov dword [ebx + 4], ecx
shld edi, esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, edi
mov dword [ebx], eax
mov dword [ebx + 0xc], edx
mov dword [ebx + 8], ecx
add ecx, eax
mov edx, dword [esp + 0x24]
ror edx, cl
test edx, edx
je 0x10034c0c
tzcnt eax, edx
mov edx, dword [esp + 8]
add eax, ecx
mov ecx, eax
and ecx, 0x1f
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
jmp 0x10033e0e
mov dword [esp + 0x10], edi
mov eax, dword [ebx]
mov edi, dword [ebx + 4]
mov edx, edi
shld edx, eax, 0x17
mov esi, eax
shl esi, 0x17
xor esi, eax
mov ecx, dword [ebx + 0xc]
xor edx, edi
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, edx
mov edi, edx
shr edx, 0x11
xor edx, eax
mov eax, dword [ebx + 8]
mov dword [ebx + 4], ecx
shld edi, esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, edi
mov dword [ebx], eax
mov dword [ebx + 0xc], edx
mov dword [ebx + 8], ecx
add ecx, eax
mov edx, dword [esp + 0xc]
ror edx, cl
test edx, edx
je 0x10034c16
tzcnt ebx, edx
mov edi, dword [esp + 0x10]
add ebx, ecx
and ebx, 0x1f
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0xc]
jmp 0x10033e8c
mov dword [esp + 0x10], ecx
and eax, 0xfffff000
mov ecx, dword [esp]
cmp eax, ecx
jb 0x10033f0f
mov eax, ecx
shl ebx, 0xc
add ebx, dword [esp + 4]
mov ecx, esi
mov edx, ebx
push eax
mov ebx, eax
call fcn.1003c690
add esp, 4
test al, al
je 0x10039451
or edi, 3
mov eax, dword [esp + 0xc]
lea eax, [eax + eax*2]
mov ecx, dword [esp + 4]
mov dword [ecx + eax*4 + 0x18], edi
mov eax, dword [esp + 0x10]
lea eax, [ecx + eax*4]
add eax, 0x18
mov dword [eax], 3
add dword [esi + 0x34], ebx
mov bl, 1
mov edx, dword [esp + 0x20]
jmp 0x10033f11
mov edx, dword [ebx + 4]
and edx, 1
mov ecx, edx
or ecx, eax
mov dword [ebx + 4], ecx
mov ecx, dword [eax]
and ecx, 0xfffffffe
or ecx, edx
mov dword [ebx + 4], ecx
mov dword [eax], ebx
mov edx, dword [ebx + 4]
and edx, 1
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
or ecx, edx
mov dword [eax + 4], ecx
or byte [ebx + 4], 1
cmp dword [esi], ebx
mov edx, eax
jne 0x10034faf
mov dword [esi], edx
jmp 0x100342f9
cmp dword [edi], ebx
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 4]
je 0x1003545b
test ecx, ecx
je 0x10034ac1
sub eax, edx
shr eax, 0xc
lea eax, [eax + eax*2]
lea ecx, [edx + eax*4]
add ecx, 0x10
mov edx, dword [edi + 4]
mov dword [esp + 0x80], edx
mov dword [esp + 0x84], 0
xor eax, eax
mov dword [esp], ecx
cmp edx, ecx
setb al
mov ecx, 0xffffffff
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x10035a1f
test edx, edx
je 0x10038f71
mov ecx, dword [edx]
test ecx, ecx
je 0x10038f71
mov eax, dword [ecx + 4]
mov dword [esp + 0x10], 0
test al, 1
je 0x10035237
mov dword [esp + 4], edx
mov esi, dword [esp]
mov edx, ecx
xor eax, eax
cmp ecx, esi
setb al
mov ecx, 0xffffffff
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x100346d8
test edx, edx
je 0x100375fe
mov ecx, dword [edx]
test ecx, ecx
je 0x100375fe
mov eax, dword [ecx + 4]
test al, 1
je 0x10034688
mov dword [esp + 4], edx
jmp 0x10034653
mov esi, dword [ecx]
test esi, esi
je 0x10034694
test byte [esi + 4], 1
jne 0x1003464c
or eax, 1
mov dword [ecx + 4], eax
mov eax, dword [edx + 4]
mov esi, eax
and esi, 0xfffffffe
je 0x10038e7f
mov ecx, dword [esi]
test ecx, ecx
jne 0x100346f8
or eax, 1
mov dword [edx + 4], eax
mov eax, dword [esi]
or eax, 1
mov dword [edx + 4], eax
mov dword [esi], edx
mov ecx, esi
mov eax, dword [esp + 4]
cmp dword [eax], edx
mov edx, eax
mov esi, dword [esp]
jne 0x10039458
mov dword [edx], ecx
jmp 0x10034653
test eax, eax
jne 0x10034715
xor ecx, ecx
test edx, edx
je 0x10034a99
mov esi, dword [edx + 4]
mov eax, dword [esp + 4]
cmp esi, 1
jbe 0x10034a8f
jmp 0x10034724
mov dword [esp + 8], ecx
mov ecx, dword [esp + 8]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x28], ecx
test cl, 1
mov ecx, dword [esp + 8]
je 0x100346ae
jmp 0x10035ba8
test edx, edx
je 0x1003929d
mov esi, dword [edx + 4]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], eax
mov ecx, esi
and ecx, 0xfffffffe
je 0x1003473f
mov eax, dword [ecx]
test eax, eax
je 0x1003473f
test byte [eax + 4], 1
jne 0x1003464c
mov eax, dword [edx]
test eax, eax
je 0x1003929d
mov ecx, dword [eax + 4]
test cl, 1
je 0x10035f17
mov dword [esp + 8], eax
and ecx, 0xfffffffe
je 0x100392ac
mov eax, dword [ecx]
test eax, eax
je 0x10034772
test byte [eax + 4], 1
jne 0x100372fa
and esi, 1
or esi, ecx
mov eax, dword [esp + 8]
mov dword [eax + 4], esi
or byte [ecx + 4], 1
mov ecx, dword [edx]
test ecx, ecx
je 0x100392c5
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov dword [esp + 8], esi
and esi, 0xfffffffe
je 0x100392da
mov eax, dword [esi]
and eax, 0xfffffffe
mov dword [esp + 0x28], eax
mov eax, dword [esp + 8]
and eax, 1
add eax, dword [esp + 0x28]
mov dword [edx + 4], eax
mov dword [esi], edx
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
or byte [edx + 4], 1
mov eax, dword [esp + 4]
cmp dword [eax], edx
mov edx, eax
je 0x10035298
mov eax, ecx
and eax, 0xfffffffe
mov esi, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov dword [esi + 4], edx
mov edx, esi
jmp 0x1003464c
test ecx, ecx
jne 0x10035011
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x1003780a
mov ecx, dword [eax]
test ecx, ecx
jne 0x10037831
mov dword [esp + 0x80], ecx
jmp 0x1003a008
test ecx, ecx
jne 0x100350b8
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x10037a36
mov ecx, dword [eax]
test ecx, ecx
jne 0x10037ab6
mov dword [esp + 0x80], ecx
jmp 0x10039e20
mov ecx, 0x20
jmp 0x100343b7
mov ecx, 0x20
jmp 0x100343e3
mov dword [esp + 0x24], edx
lea ebx, [ebx + ecx*4]
add ebx, 0x18
mov edx, 0xfffff000
mov eax, dword [esi + 0x58]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 0
mov dword [esp + 0x28], ebx
mov ebx, dword [ebx]
mov dword [esp + 0x1c], ebx
and ebx, edx
mov esi, dword [eax + 8]
and esi, edx
xor edi, edi
dec edi
xor edx, edx
cmp ebx, esi
mov ebx, dword [esp + 4]
seta dl
lea ecx, [ebx + ecx*4 + 0x10]
mov dword [esp + 0x30], ecx
cmovb edx, edi
test edx, edx
je 0x100359ec
cmp edx, 0xffffffff
jne 0x100352cc
mov edx, dword [eax]
test edx, edx
je 0x10039479
mov ecx, dword [edx + 4]
mov dword [esp + 0x1c], 0
test cl, 1
je 0x10035466
mov edi, eax
mov eax, edx
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx]
mov ebx, edx
mov ecx, 0xfffff000
and ebx, ecx
mov esi, dword [eax + 8]
and esi, ecx
xor ecx, ecx
cmp ebx, esi
seta cl
mov esi, 0xffffffff
cmovb ecx, esi
test ecx, ecx
mov esi, dword [esp + 0x18]
je 0x10034943
cmp ecx, 0xffffffff
jne 0x1003495d
mov edx, dword [eax]
test edx, edx
je 0x10036081
mov ecx, dword [edx + 4]
test cl, 1
jne 0x100348e8
mov esi, dword [edx]
test esi, esi
je 0x10034a2e
test byte [esi + 4], 1
jne 0x100348e8
jmp 0x10034a2e
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 0x30]
xor ecx, ecx
cmp edx, eax
seta dl
jb 0x1003491c
mov cl, dl
jmp 0x10034917
test ecx, ecx
je 0x10034a19
mov esi, dword [eax + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x1003497f
mov ecx, dword [edx]
test ecx, ecx
je 0x1003497f
test byte [ecx + 4], 1
jne 0x100348e8
mov ecx, dword [eax]
test ecx, ecx
je 0x1003935e
mov edx, dword [ecx + 4]
test dl, 1
je 0x10035a6d
and edx, 0xfffffffe
je 0x10038ea9
mov ebx, dword [edx]
test ebx, ebx
je 0x100349ae
test byte [ebx + 4], 1
jne 0x1003610a
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x1003932b
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10039340
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
cmp dword [edi], eax
jne 0x10035ac8
mov dword [edi], edx
mov eax, edi
jmp 0x100348e8
mov esi, dword [eax + 4]
mov dword [esp + 0x1c], edi
cmp esi, 1
jbe 0x10034add
jmp 0x10034968
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10038e1f
mov edx, dword [ecx]
test edx, edx
je 0x10034a54
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10036032
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
cmp dword [edi], eax
jne 0x100394f1
mov dword [edi], edx
jmp 0x100348ea
mov ecx, 0x20
jmp 0x10034422
mov eax, dword [edi]
movzx eax, byte [eax + 0x1e]
mov edi, eax
shl edi, 0xc
jmp 0x1003401a
mov esi, dword [edx]
test esi, esi
jne 0x10035e6f
mov eax, dword [esp + 4]
cmp dword [eax], edx
mov edx, eax
jne 0x1003621c
mov dword [edx], ecx
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x80]
mov dword [edi + 4], eax
xor eax, eax
mov ecx, dword [esp]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov ecx, esi
mov edx, ebx
push 1
call fcn.10030740
add esp, 4
mov ebx, eax
dec dword [edi + 0x18]
mov edi, dword [esp + 0x20]
jmp 0x10033870
mov ecx, dword [eax]
test ecx, ecx
je 0x10034b0e
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
cmp dword [edi], eax
jne 0x100359d9
mov dword [edi], ecx
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 4]
mov edi, dword [esp + 8]
mov dword [esi + 0x58], edx
xor eax, eax
mov ecx, dword [esp + 0x30]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x24]
mov ecx, 0xfffff000
and eax, ecx
add edi, eax
mov eax, 0xfff
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
and ecx, eax
or ecx, edi
mov dword [edx], ecx
mov ecx, edi
shr ecx, 0xc
add ecx, dword [esp + 0x10]
lea ecx, [ecx + ecx*2]
and eax, dword [ebx + ecx*4 + 0xc]
or eax, edi
mov dword [ebx + ecx*4 + 0xc], eax
mov eax, dword [esp + 0x2c]
jmp 0x1003412f
mov eax, edx
sub eax, ebx
add ebx, dword [ebp + 8]
push eax
push 0xe5
push ebx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ebx, [esi + 0xc]
cmp dword [esi + 0x24], 0
jne 0x10034b9c
push ebx
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [esp + 0x14], ebx
mov ebx, dword [ebp + 8]
mov eax, ebx
shr eax, 0xc
movzx eax, al
mov dword [esp + 0x20], eax
mov ecx, edi
or ecx, 3
lea edx, [eax + eax*2]
mov eax, dword [esp + 4]
mov dword [eax + edx*4 + 0x18], ecx
mov ecx, edi
shr ecx, 0xc
add ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x2c]
sub edx, edi
or edx, 3
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + 4]
mov dword [ecx + eax*4 + 0x18], edx
add edi, ebx
mov ebx, dword [esp + 0x14]
mov ecx, esi
mov edx, edi
push 1
call fcn.10030740
add esp, 4
mov eax, dword [esp]
add dword [esi + 0x34], eax
cmp dword [ebx + 0x18], 0
jne 0x10033bde
push ebx
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
jmp 0x10033bde
mov eax, 0x20
jmp 0x100344a5
mov ebx, 0x20
jmp 0x10034518
mov eax, dword [esp]
mov dword [eax], 0
mov dword [eax + 4], 1
lea ecx, [esp + 0x80]
jmp 0x100351d1
mov edx, 0xfffff000
mov dword [esp + 0x2c], eax
shr eax, 0xc
mov ecx, dword [esp + 0x10]
sub ecx, eax
mov dword [esp + 0x10], ecx
lea eax, [ecx + ecx*2]
lea ecx, [ebx + eax*4]
add ecx, 0x10
mov eax, dword [esi + 0x58]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 0
mov dword [esp + 0x14], ecx
mov ebx, dword [ecx + 8]
mov dword [esp], ebx
and ebx, edx
mov esi, dword [eax + 8]
and esi, edx
xor edx, edx
dec edx
xor ecx, ecx
cmp ebx, esi
seta cl
cmovb ecx, edx
test ecx, ecx
mov dword [esp + 8], edi
je 0x10035af2
cmp ecx, 0xffffffff
jne 0x10035504
mov edx, dword [eax]
test edx, edx
je 0x100394e2
mov ecx, dword [edx + 4]
mov dword [esp], 0
test cl, 1
je 0x1003557c
mov edi, eax
mov eax, edx
mov ecx, dword [esp + 0x14]
mov ebx, dword [ecx + 8]
mov ecx, ebx
mov edx, 0xfffff000
and ecx, edx
mov esi, dword [eax + 8]
and esi, edx
xor edx, edx
cmp ecx, esi
seta dl
mov ecx, 0xffffffff
cmovb edx, ecx
test edx, edx
je 0x10034d18
cmp edx, 0xffffffff
jne 0x10034d32
mov edx, dword [eax]
test edx, edx
je 0x1003622f
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10034cc0
mov ecx, dword [edx]
test ecx, ecx
je 0x10034e02
test byte [ecx + 4], 1
jne 0x10034cc0
jmp 0x10034e02
test bl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x14]
xor edx, edx
cmp ecx, eax
seta cl
jb 0x10034cf1
mov dl, cl
jmp 0x10034cec
test edx, edx
je 0x10034dee
mov esi, dword [eax + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x10034d54
mov ecx, dword [edx]
test ecx, ecx
je 0x10034d54
test byte [ecx + 4], 1
jne 0x10034cc0
mov ebx, dword [eax]
test ebx, ebx
je 0x1003940f
mov edx, dword [ebx + 4]
test dl, 1
je 0x10035b6e
and edx, 0xfffffffe
je 0x10038f08
mov ecx, dword [edx]
test ecx, ecx
je 0x10034d83
test byte [ecx + 4], 1
jne 0x1003715a
and esi, 1
or esi, edx
mov dword [ebx + 4], esi
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x100393dc
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
je 0x100393f1
mov ecx, dword [esi]
and ecx, 0xfffffffe
and ebx, 1
or ebx, ecx
mov dword [eax + 4], ebx
mov dword [esi], eax
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, esi
mov dword [edx + 4], ecx
or byte [eax + 4], 1
cmp dword [edi], eax
jne 0x10035c40
mov dword [edi], edx
mov eax, edi
jmp 0x10034cc0
mov esi, dword [eax + 4]
mov dword [esp], edi
cmp esi, 1
jbe 0x10034eff
jmp 0x10034d3d
or ebx, 1
mov dword [edx + 4], ebx
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
je 0x10038e6a
mov edx, dword [esi]
test edx, edx
je 0x10034e28
mov ecx, dword [edx + 4]
test cl, 1
jne 0x100361cd
or ebx, 1
mov dword [eax + 4], ebx
mov ecx, dword [esi]
or ecx, 1
mov dword [eax + 4], ecx
mov dword [esi], eax
mov edx, esi
cmp dword [edi], eax
jne 0x100395fe
mov dword [edi], edx
jmp 0x10034cc2
mov ebx, dword [esi + 0x38]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], 0
test ebx, ebx
je 0x10035a4f
lea ecx, [esp + 0x80]
xor esi, esi
mov dword [esp + 0x28], esi
mov esi, ecx
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x10034e9d
mov edx, dword [ecx + 8]
test dl, 1
je 0x10034e9d
mov edi, dword [ecx + 4]
test edi, edi
je 0x10034e91
test byte [edi + 8], 1
jne 0x10034ebe
mov ecx, ebx
mov edx, dword [esp + 4]
mov edi, dword [esp + 8]
jmp 0x10034ea3
mov ecx, ebx
mov edx, dword [esp + 4]
cmp ecx, edx
seta dl
jbe 0x10034eb6
mov ebx, dword [ecx + 4]
test ebx, ebx
jne 0x10034e6f
jmp 0x10035cd2
mov ebx, dword [ecx + 8]
and ebx, 0xfffffffe
jmp 0x10034ead
and edx, 0xfffffffe
mov dword [ebx + 4], edx
mov edx, ebx
and edx, 0xfffffffe
mov dword [esp + 0x30], edx
mov edx, dword [ecx + 4]
mov edi, dword [ecx + 8]
and edi, 1
add edi, dword [esp + 0x30]
mov dword [ecx + 8], edi
test edx, edx
je 0x10039270
and byte [edx + 8], 0xfe
cmp dword [esi + 4], ebx
mov edx, dword [esp + 4]
mov edi, dword [esp + 8]
jne 0x10035c57
mov dword [esi + 4], ecx
jmp 0x10034ea3
mov edx, dword [eax]
test edx, edx
je 0x10034f30
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
and dword [edx + 4], 1
cmp dword [edi], eax
jne 0x10035adf
mov dword [edi], edx
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edi, dword [esp + 0x2c]
mov eax, 0xfffff000
and edi, eax
add edi, ecx
mov dword [esi + 0x58], edx
xor eax, eax
mov edx, dword [esp + 0x14]
mov dword [edx], eax
mov dword [edx + 4], eax
mov eax, 0xfff
mov ecx, dword [edx + 8]
and ecx, eax
or ecx, edi
mov dword [edx + 8], ecx
mov ecx, edi
shr ecx, 0xc
add ecx, dword [esp + 0x10]
lea ecx, [ecx + ecx*2]
and eax, dword [ebx + ecx*4 + 0xc]
or eax, edi
mov dword [ebx + ecx*4 + 0xc], eax
jmp 0x10034144
mov eax, dword [esp + 4]
mov dword [eax], 0
mov dword [eax + 4], 1
lea ecx, [esp + 0x80]
jmp 0x10035430
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp ebx, ecx
jne 0x100342f9
and eax, 1
or eax, edx
mov dword [esi + 4], eax
jmp 0x100342f9
mov edi, ebx
mov dword [edx], 0
mov dword [edx + 4], 1
lea ebx, [esp + 0x80]
jmp 0x100342f7
xor edx, edx
inc edx
cmp ecx, 0xffffffff
jne 0x100342c6
jmp 0x10035aa7
mov edi, dword [ebp + 8]
add ebx, edi
push edx
push 0xe5
push ebx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
jmp 0x10034386
mov ecx, dword [eax + 4]
mov dword [esp + 0x1c], 0
mov edi, ecx
and edi, 0xfffffffe
je 0x10035033
mov esi, dword [edi]
test esi, esi
je 0x10035033
test byte [esi + 4], 1
jne 0x10039eaa
mov edx, dword [eax]
test edx, edx
je 0x10039622
test byte [edx + 4], 1
jne 0x100360da
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1003505f
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10037535
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edi, ecx
and edi, 0xfffffffe
je 0x10039755
mov esi, dword [edi]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edi], eax
jmp 0x10033cde
mov esi, dword [0x100a5744]
cmp ebx, 0xf01
jb 0x10035639
mov ecx, esi
mov edx, ebx
cmp ebx, 0xfd000
ja 0x100369ff
push 0
call fcn.1003a880
add esp, 4
mov edi, eax
jmp 0x10034386
mov ecx, dword [eax + 4]
mov dword [esp], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x100350d9
mov edi, dword [edx]
test edi, edi
je 0x100350d9
test byte [edi + 4], 1
jne 0x1003a448
mov edx, dword [eax]
test edx, edx
je 0x10039646
test byte [edx + 4], 1
jne 0x100360f6
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10035105
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1003758a
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10039773
mov edi, dword [edx]
and edi, 0xfffffffe
and ecx, 1
or ecx, edi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x10033dad
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
mov dword [esp + 4], edx
mov dword [esp + 8], eax
lea edx, [eax + ecx]
mov eax, dword [esp + 4]
mov dword [eax + 4], edx
test ecx, ecx
je 0x1003915a
mov edx, dword [ecx]
and edx, 0xfffffffe
add edx, dword [esp + 8]
mov eax, dword [esp + 4]
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, dword [eax + 4]
and edx, 1
mov dword [esp + 8], edx
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
add edx, dword [esp + 8]
mov dword [ecx + 4], edx
or byte [eax + 4], 1
mov edx, dword [esp + 0x10]
test edx, edx
je 0x1003913c
cmp dword [edx], eax
mov eax, dword [esp]
jne 0x10035a0c
mov dword [edx], ecx
cmp eax, ecx
setb dl
jb 0x10035ab1
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [esp + 4], ecx
test eax, eax
jne 0x10033b5c
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
mov eax, dword [esp]
mov dword [eax], 0
mov dword [eax + 4], 1
test dl, dl
jne 0x100351d1
cmp ecx, eax
jb 0x100351f0
mov dword [ecx], eax
mov eax, dword [esp + 0x80]
test eax, eax
je 0x100391d2
and byte [eax + 4], 0xfe
mov dword [edi + 4], eax
mov dword [edi], ebx
jmp 0x1003386a
mov eax, dword [ecx + 4]
and eax, 1
mov edx, eax
or edx, dword [esp]
mov dword [ecx + 4], edx
mov edx, dword [esp]
mov edx, dword [edx]
and edx, 0xfffffffe
or edx, eax
mov dword [ecx + 4], edx
mov eax, dword [esp]
mov dword [eax], ecx
mov eax, dword [ecx + 4]
and eax, 1
mov edx, dword [esp]
mov edx, dword [edx + 4]
and edx, 0xfffffffe
or edx, eax
mov eax, dword [esp]
mov dword [eax + 4], edx
or byte [ecx + 4], 1
mov edx, dword [esp + 4]
cmp dword [edx], ecx
jne 0x100352a6
mov dword [edx], eax
jmp 0x100351d3
mov esi, dword [ecx]
test esi, esi
je 0x10035247
test byte [esi + 4], 1
jne 0x1003464c
or eax, 1
mov dword [ecx + 4], eax
mov ecx, dword [edx + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10038f80
mov dword [esp + 4], ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x10035277
mov esi, dword [ecx + 4]
mov dword [esp + 8], esi
test byte [esp + 8], 1
jne 0x10037f90
mov ecx, dword [esp + 4]
or ecx, 1
mov dword [edx + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
and byte [ecx + 4], 0xfe
lea edx, [esp + 0x80]
mov dword [edx], ecx
jmp 0x1003464c
mov dword [eax], ebx
jmp 0x10034296
mov eax, dword [edx + 4]
mov dword [esp + 4], edx
mov edx, eax
and edx, 0xfffffffe
cmp ecx, edx
jne 0x100351d3
and eax, 1
or eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [ecx + 4], eax
jmp 0x100351d3
test edx, edx
je 0x10035b18
mov ecx, dword [eax + 4]
mov dword [esp + 0x1c], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x100352f6
mov esi, dword [edx]
test esi, esi
je 0x100352f6
test byte [esi + 4], 1
jne 0x100348e8
mov edx, dword [eax]
test edx, edx
je 0x1003965b
test byte [edx + 4], 1
jne 0x1003725a
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10035322
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100379c4
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10039746
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x100354b2
mov ecx, eax
mov eax, dword [eax + 4]
and eax, 1
or eax, ebx
mov dword [ecx + 4], eax
jmp 0x10034296
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x10039187
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov eax, dword [edx + 4]
and eax, 1
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
or esi, eax
mov dword [ecx + 4], esi
or byte [edx + 4], 1
mov ebx, dword [esp]
test ebx, ebx
je 0x10039169
cmp dword [ebx], edx
mov esi, dword [esp + 0x18]
jne 0x10035ab8
mov dword [ebx], ecx
cmp edi, ecx
setb bl
jb 0x10035b11
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov edx, ecx
test eax, eax
jne 0x10033f70
mov edx, dword [esp]
mov dword [edi], 0
mov dword [edi + 4], 1
test bl, bl
jne 0x10035430
cmp ecx, edi
mov eax, edi
mov edi, dword [esp + 0x20]
mov ebx, 0
jae 0x10035436
mov esi, dword [ecx + 4]
and esi, 1
mov dword [esp], esi
mov esi, dword [esp]
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [eax]
and esi, 0xfffffffe
add esi, dword [esp]
mov dword [ecx + 4], esi
mov dword [eax], ecx
mov esi, dword [ecx + 4]
and esi, 1
mov dword [esp], esi
mov esi, dword [eax + 4]
and esi, 0xfffffffe
add esi, dword [esp]
mov dword [eax + 4], esi
or byte [ecx + 4], 1
cmp dword [edx], ecx
jne 0x100354c0
mov dword [edx], eax
mov esi, dword [esp + 0x18]
jmp 0x1003543c
mov edi, dword [esp + 0x20]
xor ebx, ebx
mov eax, dword [esp + 4]
mov dword [ecx], eax
mov eax, dword [esp + 0x80]
test eax, eax
je 0x1003923d
and byte [eax + 4], 0xfe
mov ecx, dword [esp + 0x14]
mov dword [ecx + 4], eax
jmp 0x10033870
mov dword [edi], 0
jmp 0x10034ac1
mov esi, dword [edx]
test esi, esi
je 0x10035476
test byte [esi + 4], 1
jne 0x100348e8
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10038f1d
mov edx, dword [ecx]
test edx, edx
je 0x1003549c
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10037a67
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x80]
mov dword [eax], edx
jmp 0x100348e8
mov eax, dword [edx + 4]
mov esi, eax
and esi, 0xfffffffe
cmp ecx, esi
mov esi, dword [esp + 0x18]
jne 0x1003543c
and eax, 1
or eax, dword [esp + 4]
mov dword [edx + 4], eax
jmp 0x1003543c
test dl, 0x10
mov eax, 0
cmove eax, dword [esp + 0x2c]
xor edx, edx
cmp eax, ebx
seta cl
jb 0x10035aa7
mov dl, cl
jmp 0x100342c6
test ecx, ecx
je 0x10035d8c
mov ecx, dword [eax + 4]
mov dword [esp], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x1003552d
mov esi, dword [edx]
test esi, esi
je 0x1003552d
test byte [esi + 4], 1
jne 0x10034cc0
mov edx, dword [eax]
test edx, edx
je 0x10039722
test byte [edx + 4], 1
jne 0x10037521
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10035559
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10037db8
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x100397a9
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x100355c8
mov esi, dword [edx]
test esi, esi
je 0x1003558c
test byte [esi + 4], 1
jne 0x10034cc0
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10038f5c
mov edx, dword [ecx]
test edx, edx
je 0x100355b2
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10037e8d
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x80]
mov dword [eax], edx
jmp 0x10034cc0
movzx eax, byte [ecx + edx + 0x7a]
mov dword [esp + 0x24], eax
lea eax, [ecx + 0x58]
mov dword [esp + 0x40], eax
mov ecx, dword [ecx + 0x58]
test ecx, ecx
je 0x1003726e
mov edx, dword [esp + 0x24]
shl edx, 0xc
xor eax, eax
mov edi, 0xfffff000
mov esi, dword [ecx + 8]
and esi, edi
xor ebx, ebx
cmp edx, esi
seta bl
mov esi, 0xffffffff
cmovb ebx, esi
lea esi, [ebx + 1]
cmp esi, 2
jae 0x10035628
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x100355ff
jmp 0x100356b6
cmp ebx, 1
jne 0x1003957b
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
jmp 0x1003561f
add ebx, 0xff
mov eax, ebx
and eax, 0x1f00
mov dword [esp + 4], eax
shr ebx, 8
add ebx, 0x1e
jmp 0x100338eb
movzx eax, byte [esi + ecx + 0x7a]
mov dword [esp + 8], eax
lea eax, [esi + 0x58]
mov dword [esp + 0x38], eax
mov ecx, dword [esi + 0x58]
test ecx, ecx
je 0x1003736e
mov edx, dword [esp + 8]
shl edx, 0xc
xor eax, eax
xor edi, edi
dec edi
mov esi, dword [ecx + 8]
mov ebx, 0xfffff000
and esi, ebx
xor ebx, ebx
cmp edx, esi
seta bl
cmovb ebx, edi
lea esi, [ebx + 1]
cmp esi, 2
jae 0x100356a5
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x1003567c
jmp 0x1003584c
cmp ebx, 1
jne 0x100395f7
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
jmp 0x1003569c
test eax, eax
je 0x1003726e
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
and edx, 0xfffffff8
shl edx, 9
add edx, ecx
mov ecx, edx
and ecx, 0xfff00000
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x54], eax
mov eax, edx
shr eax, 0xc
movzx esi, al
lea eax, [esi*4]
lea eax, [eax + eax*2]
or eax, ecx
mov dword [esp + 0x44], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x4c], eax
mov edi, dword [esp + 0x24]
test edi, edi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x50], esi
mov dword [esp + 8], edx
je 0x1003628a
xor eax, eax
inc eax
cmp edi, 2
cmovae eax, edi
mov dword [esp + 0x3c], eax
lea eax, [esi + esi*2]
lea eax, [ecx + eax*4]
add eax, 0x18
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], edi
xor ebx, ebx
mov dword [esp + 0xc], eax
mov edi, esi
add esi, ebx
lea eax, [esi + esi*2]
test byte [ecx + eax*4 + 0x18], 0x60
jne 0x1003577d
inc ebx
cmp ebx, dword [esp + 0x24]
setae al
mov dword [esp + 0x38], eax
dec dword [esp + 0x34]
mov eax, dword [esp + 0xc]
add eax, 0xc
cmp ebx, dword [esp + 0x3c]
mov esi, edi
jne 0x10035747
jmp 0x10036290
mov dword [esp + 0x64], ebx
cmp ebx, dword [esp + 0x24]
jae 0x10037a56
xor edx, edx
mov eax, dword [esp + 0xc]
mov edi, dword [esp + 0x34]
mov ecx, dword [eax]
test cl, 0x60
je 0x100357ab
and ecx, 0xffffff9f
mov dword [eax], ecx
inc edx
add eax, 0xc
cmp edi, edx
jne 0x10035795
mov edx, edi
mov dword [esp + 0x48], edx
shl edx, 0xc
jne 0x100372d7
jmp 0x100357f8
call dword [sym.imp.kernel32.dll_GetLastError]
mov edi, eax
push 4
push 0x1000
push ebx
push esi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x10038ebe
add esi, ebx
mov ecx, dword [esp + 0x5c]
sub ecx, ebx
mov eax, 0x100000
cmp ecx, eax
mov ebx, 0x100000
cmovb ebx, ecx
mov dword [esp + 0x5c], ecx
test ecx, ecx
jne 0x100357ba
mov al, 1
cmp dword [esp + 0x48], 0
je 0x10035820
test al, al
mov ecx, 0x20
mov edx, 4
cmovne ecx, edx
mov edx, dword [esp + 0xc]
mov esi, dword [esp + 0x48]
or dword [edx], ecx
add edx, 0xc
dec esi
jne 0x10035818
test al, al
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 8]
je 0x1003686d
mov eax, dword [esp + 0x48]
add dword [ecx + 0x2c], eax
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x50]
mov ebx, dword [esp + 0x64]
jmp 0x10035759
test eax, eax
mov esi, dword [esp + 0x18]
je 0x1003736e
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
and edx, 0xfffffff8
shl edx, 9
add edx, ecx
mov ecx, edx
mov edx, ecx
and edx, 0xfff00000
mov eax, dword [edx + 0xc]
mov dword [esp + 0x44], eax
mov eax, ecx
shr eax, 0xc
movzx ebx, al
lea eax, [ebx*4]
lea eax, [eax + eax*2]
or eax, edx
mov dword [esp + 0x1c], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x3c], eax
mov esi, dword [esp + 8]
test esi, esi
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], ebx
je 0x10036a13
xor eax, eax
inc eax
cmp esi, 2
cmovae eax, esi
mov dword [esp + 0x24], eax
lea eax, [ebx + ebx*2]
lea eax, [edx + eax*4]
add eax, 0x18
xor ebx, ebx
xor edi, edi
mov dword [esp + 0x10], esi
mov dword [esp], eax
mov eax, dword [esp + 0x30]
lea esi, [edi + eax]
lea eax, [esi + esi*2]
test byte [edx + eax*4 + 0x18], 0x60
jne 0x1003590f
inc edi
cmp edi, dword [esp + 8]
setae bl
mov esi, dword [esp + 0x10]
dec esi
mov eax, dword [esp]
add eax, 0xc
cmp edi, dword [esp + 0x24]
jne 0x100358d9
jmp 0x10036a15
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], edi
cmp edi, dword [esp + 8]
jae 0x10037b6e
mov dword [esp + 0x34], ebx
xor edx, edx
mov eax, dword [esp]
mov esi, dword [esp + 0x10]
mov ecx, dword [eax]
test cl, 0x60
je 0x10035944
and ecx, 0xffffff9f
mov dword [eax], ecx
inc edx
add eax, 0xc
cmp esi, edx
jne 0x1003592e
mov edx, esi
mov dword [esp + 0x40], edx
mov esi, edx
shl esi, 0xc
jne 0x100373e8
jmp 0x1003598d
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esp + 0x4c], eax
push 4
push 0x1000
push ebx
push edi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x10038ee7
add edi, ebx
sub esi, ebx
mov eax, 0x100000
cmp esi, eax
mov ebx, 0x100000
cmovb ebx, esi
test esi, esi
jne 0x10035955
mov al, 1
mov edi, dword [esp + 0x40]
test edi, edi
je 0x100359b1
test al, al
mov ecx, 0x20
mov edx, 4
cmovne ecx, edx
mov edx, dword [esp]
or dword [edx], ecx
add edx, 0xc
dec edi
jne 0x100359a9
test al, al
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
je 0x10036fe9
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x40]
add dword [eax + 0x2c], edi
mov edi, dword [esp + 0x50]
jmp 0x100358f1
and ecx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
or eax, ecx
mov dword [edi + 4], eax
jmp 0x10034b18
xor ecx, ecx
test byte [esp + 0x1c], 0x10
cmove ecx, dword [esp + 0x30]
xor edx, edx
cmp ecx, eax
seta cl
jb 0x100348ca
mov dl, cl
jmp 0x100348c1
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
mov eax, dword [esp]
jmp 0x10035194
test eax, eax
jne 0x10035f55
xor ecx, ecx
test edx, edx
je 0x10035a43
mov eax, dword [edx + 4]
cmp eax, 1
ja 0x1003867a
mov eax, dword [edx]
test eax, eax
jne 0x1003868a
mov dword [esp + 0x80], ecx
jmp 0x10034aad
mov ebx, dword [esp + 4]
mov dword [ebx + 4], 0
mov dword [ebx + 8], 1
lea ecx, [esp + 0x80]
jmp 0x10035d49
or edx, 1
mov dword [ecx + 4], edx
mov ecx, dword [ecx]
test ecx, ecx
je 0x10035a85
mov edx, dword [ecx + 4]
test dl, 1
jne 0x10035fdd
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003936d
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x10034a08
mov ecx, dword [ebx]
xor edx, edx
dec edx
jmp 0x100342cc
mov eax, dword [ecx]
jmp 0x100351a5
mov eax, dword [ebx + 4]
and eax, 1
or eax, ecx
mov dword [ebx + 4], eax
jmp 0x100353ab
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov eax, edi
jmp 0x100348e8
and edx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
or eax, edx
mov dword [edi + 4], eax
jmp 0x10034f3a
xor esi, esi
test byte [esp], 0x10
cmove esi, dword [esp + 0x14]
xor ecx, ecx
cmp esi, eax
seta dl
jb 0x10034ca3
mov cl, dl
jmp 0x10034c9a
mov eax, dword [ecx]
jmp 0x100353bc
mov ecx, dword [eax + 4]
cmp ecx, 1
mov edi, dword [esp + 8]
ja 0x10037f80
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
mov esi, dword [esp + 0x18]
je 0x10034b2b
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [esp + 0x18]
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x10034b2b
or edx, 1
mov dword [ebx + 4], edx
mov edx, dword [ebx]
test edx, edx
je 0x10035b86
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10036178
mov esi, dword [eax + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x1003941e
mov ecx, dword [edx]
and ecx, 0xfffffffe
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
jmp 0x10034ddd
mov eax, dword [esp + 0x28]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x1003921e
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x10035df1
mov esi, dword [eax + 4]
mov dword [esp + 0x28], esi
mov dword [esp + 8], eax
mov eax, esi
test al, 1
mov eax, dword [esp + 8]
je 0x10035df1
mov esi, dword [esp + 0x28]
and esi, 0xfffffffe
mov dword [eax + 4], esi
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x1003920f
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
mov edi, dword [esp + 0x14]
jmp 0x100346c0
mov eax, dword [esp + 0x2c]
jmp 0x1003412b
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov eax, edi
jmp 0x10034cc0
and ecx, 0xfffffffe
mov edx, dword [esi + 8]
and edx, 1
lea edi, [edx + ecx]
mov dword [esi + 8], edi
test ecx, ecx
je 0x1003927f
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
or edi, edx
mov dword [esi + 8], edi
mov dword [ecx + 4], esi
mov edx, dword [esi + 8]
and edx, 1
mov edi, dword [ecx + 8]
and edi, 0xfffffffe
or edi, edx
mov dword [ecx + 8], edi
or byte [esi + 8], 1
mov ebx, dword [esp + 0x28]
test ebx, ebx
je 0x1003928e
cmp dword [ebx + 4], esi
mov edi, dword [esp + 4]
mov esi, dword [esp + 8]
jne 0x100372c7
mov dword [ebx + 4], ecx
cmp ecx, edi
seta dl
ja 0x10037424
mov ebx, dword [ecx + 8]
and ebx, 0xfffffffe
mov edi, esi
mov esi, ecx
test ebx, ebx
jne 0x10034e75
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 4]
test ebx, ebx
je 0x100394d3
cmp ecx, ebx
setae dh
mov dword [ebx + 4], 0
mov dword [ebx + 8], 1
or dl, dh
jne 0x10035d49
mov edx, dword [ecx + 8]
and edx, 1
mov edi, edx
or edi, dword [esp + 4]
mov dword [ecx + 8], edi
mov edi, dword [esp + 4]
mov edi, dword [edi + 4]
and edi, 0xfffffffe
or edi, edx
mov dword [ecx + 8], edi
mov edx, dword [esp + 4]
mov dword [edx + 4], ecx
mov edx, dword [ecx + 8]
and edx, 1
mov edi, dword [esp + 4]
mov edi, dword [edi + 8]
and edi, 0xfffffffe
or edi, edx
mov edx, dword [esp + 4]
mov dword [edx + 8], edi
mov ebx, dword [esp + 4]
or byte [ecx + 8], 1
cmp dword [esi + 4], ecx
jne 0x10035d6e
mov dword [esi + 4], ebx
mov edi, dword [esp + 8]
jmp 0x10035d4c
mov dword [ecx + 4], ebx
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x10039488
and byte [ecx + 8], 0xfe
mov esi, dword [esp + 0x18]
mov dword [esi + 0x38], ecx
mov ecx, dword [ebx + 0xc]
jmp 0x100340e1
mov edx, dword [esi + 8]
mov edi, edx
and edi, 0xfffffffe
cmp ecx, edi
mov ebx, dword [esp + 4]
mov edi, dword [esp + 8]
jne 0x10035d4c
and edx, 1
or edx, ebx
mov dword [esi + 8], edx
jmp 0x10035d4c
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x100381c8
mov ecx, dword [eax]
xor edx, edx
mov dword [esp], ecx
test ecx, ecx
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 4]
mov ecx, edi
je 0x10034f4d
mov edi, dword [esp]
mov edx, dword [edi + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [edi + 4]
and esi, 1
or esi, edx
mov dword [edi + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [edi + 4], esi
mov esi, dword [esp + 0x18]
or byte [eax + 4], 1
and dword [edi + 4], 1
mov edx, edi
jmp 0x10034f4d
xor ecx, ecx
jmp 0x100335cc
mov dword [edx + 4], eax
jmp 0x100346c0
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edi + 4]
and esi, 1
or esi, ecx
mov dword [edi + 4], esi
and edi, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edi]
mov dword [eax + 4], esi
test edi, edi
je 0x10039737
mov esi, dword [edi]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edi], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x100360d2
mov ebx, dword [ecx + 4]
test bl, 1
je 0x100360d2
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x10039818
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edi], ecx
jmp 0x10033cda
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
or byte [edx + 4], 1
and dword [esi + 4], 1
mov ecx, esi
jmp 0x10034a99
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov edi, dword [edx + 4]
and edi, 1
or edi, ecx
mov dword [edx + 4], edi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea edi, [ecx + edx]
mov dword [eax + 4], edi
test edx, edx
je 0x10039764
mov edi, dword [edx]
and edi, 0xfffffffe
or edi, ecx
mov dword [eax + 4], edi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x100360ee
mov ebx, dword [ecx + 4]
test bl, 1
je 0x100360ee
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov edi, ecx
or edi, 1
mov dword [eax + 4], edi
and ecx, 0xfffffffe
je 0x1003984b
mov edi, dword [ecx]
or edi, 1
mov dword [eax + 4], edi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x10033da9
or ecx, 1
mov dword [eax + 4], ecx
mov eax, dword [eax]
test eax, eax
je 0x10035f2f
mov ecx, dword [eax + 4]
test cl, 1
jne 0x1003742c
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x100392e9
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
mov edi, dword [esp + 0x14]
jmp 0x100347dc
test edx, edx
je 0x10039782
mov eax, dword [edx + 4]
mov dword [esp + 0x10], 0
mov ecx, eax
and ecx, 0xfffffffe
je 0x10035f7f
mov esi, dword [ecx]
test esi, esi
je 0x10035f7f
test byte [esi + 4], 1
jne 0x1003464c
mov ecx, dword [edx]
test ecx, ecx
je 0x100398a9
test byte [ecx + 4], 1
jne 0x10038112
or eax, 1
mov dword [edx + 4], eax
mov edi, dword [ecx]
test edi, edi
je 0x10035faa
mov eax, dword [edi + 4]
test al, 1
jne 0x1003856c
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x100399a2
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
lea edx, [esp + 0x80]
mov dword [edx], ecx
mov edi, dword [esp + 0x14]
jmp 0x1003464c
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x1003937c
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10039391
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
jmp 0x10034a08
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x100391c3
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10036079
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10037f55
mov dword [eax + 4], ecx
jmp 0x10034a66
mov edx, dword [esp + 0x1c]
test edx, edx
je 0x10039791
mov ecx, dword [esp + 0x30]
cmp dword [edx], ecx
jne 0x1003781a
mov dword [edx], eax
mov ebx, dword [esp + 0x30]
mov ecx, dword [ebx]
mov dword [eax], ecx
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [ebx + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
cmp dword [edi], eax
jne 0x100397a0
mov dword [edi], 0
jmp 0x10034b1c
mov dword [eax + 4], ecx
jmp 0x10033cda
lea esi, [esp + 0x68]
mov ecx, esi
mov edx, eax
call fcn.10001010
mov edi, dword [esi]
jmp 0x10033cde
mov dword [eax + 4], ecx
jmp 0x10033da9
lea edi, [esp + 0x68]
mov ecx, edi
mov edx, eax
call fcn.10001010
mov edx, dword [edi]
jmp 0x10033dad
and esi, 1
mov dword [esp + 0x38], ebx
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, esi
mov dword [edx + 4], ebx
mov edx, dword [esp + 0x38]
and byte [edx + 4], 0xfe
mov esi, dword [ecx + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x1003934f
mov ebx, dword [edx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [ecx + 4], esi
mov dword [edx], ecx
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
jne 0x100349ea
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
and ebx, 0xfffffffe
mov dword [edx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x1003942d
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
je 0x10039442
mov ecx, dword [esi]
and ecx, 0xfffffffe
and ebx, 1
or ebx, ecx
mov dword [eax + 4], ebx
mov dword [esi], eax
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, esi
mov dword [edx + 4], ecx
jmp 0x10034ddd
and ecx, 0xfffffffe
mov dword [esi], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, esi
mov dword [edx + 4], ecx
and edx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
lea ecx, [esi + edx]
mov dword [eax + 4], ecx
test edx, edx
je 0x10039200
mov ecx, dword [edx]
and ecx, 0xfffffffe
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
mov esi, dword [eax + 4]
and esi, 0xfffffffe
je 0x10036214
mov ecx, dword [esi + 4]
test cl, 1
jne 0x1003815c
mov dword [eax + 4], esi
jmp 0x10034e3a
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10034aa9
mov esi, dword [esp]
test esi, esi
je 0x100397b8
mov ecx, dword [esp + 0x14]
cmp dword [esi], ecx
jne 0x10037d8f
mov dword [esi], eax
mov esi, dword [esp + 0x14]
mov ecx, dword [esi]
mov dword [eax], ecx
mov edx, dword [esi + 4]
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
or ecx, edx
mov dword [eax + 4], ecx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, edx
mov dword [eax + 4], ecx
cmp dword [edi], eax
jne 0x100397c7
mov dword [edi], 0
mov edx, dword [esp + 0x80]
mov esi, dword [esp + 0x18]
jmp 0x10034f45
mov al, 1
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x44]
lea eax, [ecx + 0x10]
mov dword [esp + 0x34], eax
add ecx, 0x18
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 0
mov dword [esp + 0x44], ecx
mov edx, dword [ecx]
mov esi, 0xfffff000
mov ebx, edx
and ebx, esi
and esi, dword [eax + 8]
xor edi, edi
dec edi
xor ecx, ecx
cmp ebx, esi
seta cl
cmovb ecx, edi
test ecx, ecx
je 0x100369e1
cmp ecx, 0xffffffff
jne 0x1003690b
mov edx, dword [eax]
test edx, edx
je 0x10039613
mov ecx, dword [edx + 4]
mov dword [esp + 0x3c], 0
test cl, 1
mov edi, dword [esp + 0x44]
jne 0x10036359
mov esi, dword [edx]
test esi, esi
je 0x10036310
test byte [esi + 4], 1
jne 0x10036359
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10038fbf
mov edx, dword [ecx]
test edx, edx
je 0x10036336
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10038479
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x80]
mov dword [eax], edx
mov edi, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov eax, edx
mov edx, dword [edi]
mov ebx, edx
mov ecx, 0xfffff000
and ebx, ecx
mov esi, dword [eax + 8]
and esi, ecx
xor ecx, ecx
cmp ebx, esi
seta cl
mov esi, 0xffffffff
cmovb ecx, esi
test ecx, ecx
je 0x100363ae
cmp ecx, 0xffffffff
jne 0x100363c8
mov edx, dword [eax]
test edx, edx
je 0x10037cbe
mov ecx, dword [edx + 4]
test cl, 1
jne 0x10036359
mov esi, dword [edx]
test esi, esi
je 0x100364a1
test byte [esi + 4], 1
jne 0x10036359
jmp 0x100364a1
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 0x34]
xor ecx, ecx
cmp edx, eax
seta dl
jb 0x10036387
mov cl, dl
jmp 0x10036382
test ecx, ecx
je 0x1003648c
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x100363ea
mov esi, dword [edx]
test esi, esi
je 0x100363ea
test byte [esi + 4], 1
jne 0x10036359
mov edi, dword [eax]
test edi, edi
je 0x10039539
mov edx, dword [edi + 4]
test dl, 1
je 0x100371e6
and edx, 0xfffffffe
je 0x10038f95
mov esi, dword [edx]
test esi, esi
je 0x10036419
test byte [esi + 4], 1
jne 0x10037eef
and ecx, 1
or ecx, edx
mov dword [edi + 4], ecx
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x10039506
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
je 0x1003951b
mov esi, dword [ecx]
and esi, 0xfffffffe
and edi, 1
or edi, esi
mov dword [eax + 4], edi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
mov ecx, dword [esp + 0xc]
cmp dword [ecx], eax
mov eax, ecx
mov edi, dword [esp + 0x44]
jne 0x100373cf
mov dword [eax], edx
jmp 0x10036359
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x3c], edx
cmp ecx, 1
jbe 0x100364ee
jmp 0x100363d3
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10038f32
mov edx, dword [ecx]
test edx, edx
je 0x100364c7
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10037bfb
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
mov ecx, dword [esp + 0xc]
cmp dword [ecx], eax
mov eax, ecx
jne 0x100396c1
mov dword [eax], edx
jmp 0x1003635d
mov ecx, dword [eax]
test ecx, ecx
je 0x1003651f
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, dword [esp + 0xc]
cmp dword [edx], eax
mov eax, edx
mov edi, dword [esp + 0x40]
jne 0x100369cc
mov dword [eax], ecx
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x4c]
shr ecx, 0xc
mov dword [edi], edx
xor eax, eax
mov edx, dword [esp + 0x34]
mov dword [edx], eax
mov dword [edx + 4], eax
mov edx, dword [esp + 0x24]
cmp ecx, edx
jne 0x1003665f
test dl, dl
je 0x100365a5
mov eax, dword [esp + 8]
or eax, 1
xor ecx, ecx
inc ecx
cmp edx, 2
cmovae ecx, edx
shl ecx, 2
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x50]
lea edx, [edx + edx*2]
mov esi, dword [esp + 0x1c]
lea edx, [esi + edx*4]
add edx, 0x18
xor esi, esi
test byte [edx + esi], 8
je 0x1003659b
mov edi, dword [esp + 0x1c]
dec dword [edi + 0xc]
mov edi, dword [esp + 0x20]
dec dword [edi + 0x48]
mov dword [edx + esi], eax
add esi, 0xc
cmp ecx, esi
jne 0x10036587
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0xc], 0
jne 0x10036861
cmp dword [esp + 0x54], 0
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 8]
je 0x1003686d
mov esi, dword [ecx + 0x38]
mov dword [esp + 0x84], esi
mov dword [esp + 0x88], 0
xor ecx, ecx
dec ecx
xor eax, eax
cmp esi, dword [esp + 0x1c]
setb al
cmova eax, ecx
cmp eax, 0xffffffff
mov edx, esi
je 0x1003769b
test eax, eax
je 0x100382dc
test edx, edx
je 0x10038fe9
mov ecx, dword [edx + 8]
mov dword [esp + 0xc], 0
mov eax, ecx
and eax, 0xfffffffe
je 0x1003662c
mov esi, dword [eax + 4]
test esi, esi
je 0x1003662c
test byte [esi + 8], 1
jne 0x100376c0
mov eax, dword [edx + 4]
test eax, eax
je 0x100399c6
test byte [eax + 8], 1
je 0x100385ee
lea esi, [esp + 0x68]
mov ecx, esi
call fcn.100329e0
mov eax, dword [esi]
lea ecx, [esp + 0x80]
mov edx, ecx
mov dword [ecx + 4], eax
jmp 0x100376c0
mov eax, dword [esp + 0x50]
lea esi, [eax + ecx]
mov dword [esp + 0xc], esi
sub ecx, edx
shl ecx, 0xc
add eax, edx
lea eax, [eax + eax*2]
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x3c], eax
lea eax, [edi + eax*4]
add eax, 0x10
mov edx, 0xfff
mov esi, dword [eax + 8]
and esi, edx
or esi, ecx
mov dword [esp + 0x34], eax
mov dword [eax + 8], esi
mov eax, dword [esp + 0xc]
lea esi, [eax + eax*2]
and edx, dword [edi + esi*4 + 0xc]
or edx, ecx
mov dword [edi + esi*4 + 0xc], edx
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], 0
test ecx, ecx
je 0x10037a19
mov eax, dword [esp + 0x3c]
lea eax, [edi + eax*4]
add eax, 0x18
mov dword [esp + 0xc], eax
lea edi, [esp + 0x80]
xor edx, edx
mov esi, edx
mov edx, edi
mov edi, dword [ecx]
test edi, edi
je 0x100366fe
mov eax, dword [edi + 4]
test al, 1
je 0x100366fe
mov dword [esp + 0x3c], esi
mov esi, dword [edi]
test esi, esi
je 0x100366fe
test byte [esi + 4], 1
jne 0x10036753
mov edi, ecx
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
mov eax, ecx
mov ebx, 0xfffff000
and eax, ebx
mov esi, dword [edi + 8]
and esi, ebx
xor ebx, ebx
cmp eax, esi
seta bl
mov eax, 0xffffffff
cmovb ebx, eax
cmp ebx, 0xffffffff
je 0x10036745
xor eax, eax
inc eax
test ebx, ebx
jne 0x10036780
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x34]
xor eax, eax
cmp ecx, edi
seta cl
jae 0x1003677e
mov ecx, dword [edi]
xor eax, eax
dec eax
test ecx, ecx
jne 0x100366dd
jmp 0x1003681f
and eax, 0xfffffffe
mov dword [ecx], eax
mov esi, ecx
and esi, 0xfffffffe
mov eax, dword [edi]
mov ebx, dword [edi + 4]
and ebx, 1
or ebx, esi
mov dword [edi + 4], ebx
test eax, eax
je 0x10039497
and byte [eax + 4], 0xfe
cmp dword [edx], ecx
jne 0x10036788
mov dword [edx], edi
jmp 0x10036700
mov al, cl
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
jmp 0x1003674a
and edi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + edi]
mov dword [edx + 4], ecx
test edi, edi
je 0x100394a6
mov ecx, dword [edi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [edi], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
or byte [edx + 4], 1
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x10039018
cmp dword [ecx], edx
je 0x10037b9f
jmp 0x10037cae
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov esi, dword [edi + 8]
and esi, ecx
xor ecx, ecx
cmp edx, esi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x10037a45
jmp 0x1003808b
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
mov edx, edi
test ecx, ecx
mov esi, dword [esp + 0x3c]
jne 0x100366e1
mov edx, esi
mov ecx, dword [esp + 0x34]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x10036987
mov eax, dword [esp + 0x34]
mov dword [edi], eax
mov eax, dword [esp + 0x80]
test eax, eax
mov ecx, dword [esp + 0x40]
je 0x10039670
and byte [eax + 4], 0xfe
mov dword [ecx], eax
mov edx, dword [esp + 0x24]
jmp 0x1003655a
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 8]
test byte [esp + 0x38], 1
je 0x100377fd
test edx, edx
je 0x100377fd
cmp dword [eax], edx
je 0x1003a024
mov dword [edx], eax
xor eax, eax
mov ecx, dword [esp + 0x20]
mov esi, dword [esp]
cmp dword [ecx + esi + 0x6c], 1
mov ebx, edx
mov edx, 0
je 0x100368c0
mov ecx, dword [esp + 0x20]
add ecx, esi
add ecx, 0x6c
xor edx, edx
mov dword [ebx + edx*4 + 0xc], 0xffffffff
inc edx
mov edi, esi
mov esi, dword [ecx]
dec esi
cmp edx, esi
mov esi, edi
jb 0x100368ac
mov edi, dword [esp + 0x20]
mov ebx, dword [edi + esi + 0x68]
and ebx, 0x1f
mov ecx, ebx
neg cl
xor esi, esi
dec esi
shr esi, cl
cmp ebx, 1
sbb eax, eax
or eax, esi
mov esi, dword [esp]
mov ebx, dword [esp + 8]
mov dword [ebx + edx*4 + 0xc], eax
mov dword [ebx + 4], 0
mov eax, dword [edi + esi + 0x68]
mov dword [ebx + 8], eax
mov ecx, edi
inc dword [edi + esi + 0x74]
mov eax, dword [esp + 0x30]
mov dword [eax], ebx
mov edx, ebx
mov edi, dword [esp + 0x10]
jmp 0x100336c2
test ecx, ecx
je 0x10037481
mov ecx, dword [eax + 4]
mov dword [esp + 0x3c], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x10036935
mov esi, dword [edx]
test esi, esi
je 0x10036935
test byte [esi + 4], 1
jne 0x10036355
mov edx, dword [eax]
test edx, edx
je 0x100397ee
test byte [edx + 4], 1
jne 0x100381d7
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10036961
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1003840b
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003990b
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1003634c
mov eax, dword [edi + 4]
and eax, 1
mov ecx, eax
mov esi, dword [esp + 0x34]
or ecx, esi
mov dword [edi + 4], ecx
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
mov dword [esi], edi
mov eax, dword [edi + 4]
and eax, 1
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
or byte [edi + 4], 1
cmp dword [edx], edi
jne 0x100375df
mov eax, dword [esp + 0x34]
mov dword [edx], eax
jmp 0x1003683f
and ecx, 0xfffffffe
mov edx, eax
mov eax, dword [eax + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10036533
xor esi, esi
test dl, 0x10
cmove esi, dword [esp + 0x34]
xor ecx, ecx
cmp esi, eax
seta dl
jb 0x100362e6
mov cl, dl
jmp 0x100362dd
push 0
push 0x100000
call fcn.100029a0
add esp, 8
jmp 0x100350b1
mov bl, 1
mov dword [esp + 0x34], ebx
mov ecx, dword [esp + 0x1c]
lea eax, [ecx + 0x10]
mov dword [esp + 0x10], eax
add ecx, 0x18
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], 0
mov dword [esp + 0x1c], ecx
mov edx, dword [ecx]
mov esi, 0xfffff000
mov ebx, edx
and ebx, esi
and esi, dword [eax + 8]
xor edi, edi
dec edi
xor ecx, ecx
cmp ebx, esi
seta cl
cmovb ecx, edi
test ecx, ecx
je 0x100371c8
cmp ecx, 0xffffffff
jne 0x10037080
mov edx, dword [eax]
test edx, edx
je 0x10039637
mov ecx, dword [edx + 4]
mov dword [esp + 0x24], 0
test cl, 1
mov edi, dword [esp + 0x1c]
jne 0x10036ae2
mov esi, dword [edx]
test esi, esi
je 0x10036a99
test byte [esi + 4], 1
jne 0x10036ae2
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10038fd4
mov edx, dword [ecx]
test edx, edx
je 0x10036abf
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1003851d
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x80]
mov dword [eax], edx
mov edi, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, edx
mov edx, dword [edi]
mov ebx, edx
mov ecx, 0xfffff000
and ebx, ecx
mov esi, dword [eax + 8]
and esi, ecx
xor ecx, ecx
cmp ebx, esi
seta cl
mov esi, 0xffffffff
cmovb ecx, esi
test ecx, ecx
mov ebx, dword [esp + 0xc]
je 0x10036b3a
cmp ecx, 0xffffffff
jne 0x10036b54
mov edx, dword [eax]
test edx, edx
je 0x10037e0d
mov ecx, dword [edx + 4]
test cl, 1
jne 0x10036ae2
mov esi, dword [edx]
test esi, esi
je 0x10036c2b
test byte [esi + 4], 1
jne 0x10036ae2
jmp 0x10036c2b
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 0x10]
xor ecx, ecx
cmp edx, eax
seta dl
jb 0x10036b13
mov cl, dl
jmp 0x10036b0e
test ecx, ecx
je 0x10036c17
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10036b76
mov esi, dword [edx]
test esi, esi
je 0x10036b76
test byte [esi + 4], 1
jne 0x10036ae2
mov esi, dword [eax]
test esi, esi
je 0x100395b5
mov edx, dword [esi + 4]
test dl, 1
je 0x10037220
and edx, 0xfffffffe
je 0x10038faa
mov edi, dword [edx]
test edi, edi
je 0x10036ba5
test byte [edi + 4], 1
jne 0x1003800f
and ecx, 1
or ecx, edx
mov dword [esi + 4], ecx
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x10039582
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10039597
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
mov ecx, dword [esp]
cmp dword [ecx], eax
mov eax, ecx
mov edi, dword [esp + 0x1c]
jne 0x1003740b
mov dword [eax], edx
jmp 0x10036ae2
mov ecx, dword [eax + 4]
mov edx, dword [esp]
mov dword [esp + 0x24], edx
cmp ecx, 1
jbe 0x10036c77
jmp 0x10036b5f
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10038f47
mov edx, dword [ecx]
test edx, edx
je 0x10036c51
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10037d3c
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
mov ecx, dword [esp]
cmp dword [ecx], eax
mov eax, ecx
jne 0x100396d8
mov dword [eax], edx
jmp 0x10036ae5
mov ecx, dword [eax]
test ecx, ecx
je 0x10036ca8
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, dword [esp]
cmp dword [edx], eax
mov eax, edx
mov edi, dword [esp + 0x38]
jne 0x10037145
mov dword [eax], ecx
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x3c]
shr ecx, 0xc
mov dword [edi], edx
xor eax, eax
mov edx, dword [esp + 0x10]
mov dword [edx], eax
mov dword [edx + 4], eax
mov edx, dword [esp + 8]
cmp ecx, edx
jne 0x10036dde
test dl, dl
je 0x10036d2d
mov eax, dword [esp + 0x2c]
or eax, 1
xor ecx, ecx
inc ecx
cmp edx, 2
cmovae ecx, edx
shl ecx, 2
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x30]
lea edx, [edx + edx*2]
mov esi, dword [esp + 0x28]
lea edx, [esi + edx*4]
add edx, 0x18
xor esi, esi
test byte [edx + esi], 8
je 0x10036d23
mov edi, dword [esp + 0x28]
dec dword [edi + 0xc]
mov edi, dword [esp + 0x18]
dec dword [edi + 0x48]
mov dword [edx + esi], eax
add esi, 0xc
cmp ecx, esi
jne 0x10036d0f
mov edx, dword [esp + 0x28]
cmp dword [edx + 0xc], 0
jne 0x10036fe5
cmp dword [esp + 0x44], 0
mov ecx, dword [esp + 0x2c]
je 0x10036fe9
mov eax, dword [esp + 0x18]
mov edi, dword [eax + 0x38]
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], 0
xor ecx, ecx
dec ecx
xor eax, eax
cmp edi, edx
setb al
cmova eax, ecx
cmp eax, 0xffffffff
je 0x10037861
test eax, eax
je 0x10038391
test edi, edi
je 0x10038ff8
mov ecx, dword [edi + 8]
mov dword [esp], 0
mov eax, ecx
and eax, 0xfffffffe
je 0x10036dab
mov edx, dword [eax + 4]
test edx, edx
je 0x10036dab
test byte [edx + 8], 1
jne 0x10037885
mov eax, dword [edi + 4]
test eax, eax
je 0x100399f0
test byte [eax + 8], 1
je 0x1003862f
lea esi, [esp + 0x68]
mov ecx, esi
mov edx, edi
call fcn.100329e0
mov eax, dword [esi]
lea edi, [esp + 0x80]
mov dword [edi + 4], eax
jmp 0x10037885
mov eax, dword [esp + 0x30]
lea esi, [eax + ecx]
mov dword [esp], esi
sub ecx, edx
shl ecx, 0xc
add eax, edx
lea eax, [eax + eax*2]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x10], eax
lea eax, [edi + eax*4]
add eax, 0x10
mov edx, 0xfff
mov esi, dword [eax + 8]
and esi, edx
or esi, ecx
mov dword [esp + 0x24], eax
mov dword [eax + 8], esi
mov eax, dword [esp]
lea esi, [eax + eax*2]
and edx, dword [edi + esi*4 + 0xc]
or edx, ecx
mov dword [edi + esi*4 + 0xc], edx
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], 0
test ecx, ecx
je 0x10037aea
mov eax, dword [esp + 0x10]
lea eax, [edi + eax*4]
add eax, 0x18
mov dword [esp], eax
lea esi, [esp + 0x80]
xor edx, edx
mov dword [esp + 0x10], edx
mov edx, esi
mov esi, dword [ecx]
test esi, esi
je 0x10036e78
mov eax, dword [esi + 4]
test al, 1
je 0x10036e78
mov edi, dword [esi]
test edi, edi
je 0x10036e78
test byte [edi + 4], 1
jne 0x10036ed0
mov esi, ecx
mov eax, dword [esp]
mov ecx, dword [eax]
mov eax, ecx
mov ebx, 0xfffff000
and eax, ebx
mov edi, dword [esi + 8]
and edi, ebx
xor ebx, ebx
cmp eax, edi
seta bl
mov eax, 0xffffffff
cmovb ebx, eax
cmp ebx, 0xffffffff
je 0x10036ebe
xor eax, eax
inc eax
test ebx, ebx
jne 0x10036f00
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x24]
xor eax, eax
cmp ecx, esi
seta cl
jae 0x10036efe
mov ecx, dword [esi]
xor eax, eax
dec eax
test ecx, ecx
mov ebx, dword [esp + 0xc]
jne 0x10036e59
jmp 0x10036fa3
and eax, 0xfffffffe
mov dword [ecx], eax
mov edi, ecx
and edi, 0xfffffffe
mov eax, dword [esi]
mov ebx, dword [esi + 4]
and ebx, 1
or ebx, edi
mov dword [esi + 4], ebx
test eax, eax
je 0x100394b5
and byte [eax + 4], 0xfe
cmp dword [edx], ecx
jne 0x10036f08
mov dword [edx], esi
jmp 0x10036e7a
mov al, cl
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
jmp 0x10036ec3
and esi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + esi]
mov dword [edx + 4], ecx
test esi, esi
je 0x100394c4
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [esi], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
or byte [edx + 4], 1
cmp dword [esp + 0x10], 0
je 0x10039027
mov eax, dword [esp + 0x10]
cmp dword [eax], edx
je 0x10037c4e
jmp 0x10037da4
mov eax, dword [esp]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov edi, dword [esi + 8]
and edi, ecx
xor ecx, ecx
cmp edx, edi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x10037b07
jmp 0x100380ab
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, esi
test ecx, ecx
mov ebx, dword [esp + 0xc]
jne 0x10036e5f
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x100370fc
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x24]
mov dword [esi], eax
mov eax, dword [esp + 0x80]
test eax, eax
je 0x1003967f
and byte [eax + 4], 0xfe
mov dword [ecx], eax
mov edx, dword [esp + 8]
jmp 0x10036ce2
mov ecx, dword [esp + 0x2c]
test byte [esp + 0x34], 1
mov esi, dword [esp + 0x18]
je 0x100379b7
test ecx, ecx
je 0x100379b7
cmp dword [ebx], ecx
je 0x10039e38
mov dword [ecx], ebx
xor eax, eax
mov ebx, dword [esp + 0x14]
cmp dword [esi + ebx + 0x6c], 1
mov edx, 0
mov edi, ecx
je 0x1003703a
lea ecx, [esi + ebx]
add ecx, 0x6c
xor edx, edx
mov dword [edi + edx*4 + 0xc], 0xffffffff
inc edx
mov esi, dword [ecx]
dec esi
cmp edx, esi
mov esi, dword [esp + 0x18]
jb 0x10037026
mov ecx, dword [esp + 0x14]
mov ebx, dword [esi + ecx + 0x68]
and ebx, 0x1f
mov ecx, ebx
neg cl
xor esi, esi
dec esi
shr esi, cl
cmp ebx, 1
mov ecx, dword [esp + 0x14]
sbb eax, eax
or eax, esi
mov esi, dword [esp + 0x18]
mov dword [edi + edx*4 + 0xc], eax
mov dword [edi + 4], 0
mov eax, dword [esi + ecx + 0x68]
mov dword [edi + 8], eax
inc dword [esi + ecx + 0x74]
mov eax, dword [esp + 0xc]
mov dword [eax], edi
mov ecx, edi
jmp 0x10033933
test ecx, ecx
je 0x100374cf
mov ecx, dword [eax + 4]
mov dword [esp + 0x24], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x100370aa
mov esi, dword [edx]
test esi, esi
je 0x100370aa
test byte [esi + 4], 1
jne 0x10036ade
mov edx, dword [eax]
test edx, edx
je 0x10039803
test byte [edx + 4], 1
jne 0x10038204
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x100370d6
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100384c8
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003991a
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x10036ad5
mov eax, dword [esi + 4]
and eax, 1
mov ecx, eax
mov edi, dword [esp + 0x24]
or ecx, edi
mov dword [esi + 4], ecx
mov ecx, dword [edi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
mov dword [edi], esi
mov eax, dword [esi + 4]
and eax, 1
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
or byte [esi + 4], 1
cmp dword [edx], esi
jne 0x10037678
mov eax, dword [esp + 0x24]
mov dword [edx], eax
mov ecx, dword [esp + 0x38]
jmp 0x10036fc7
and ecx, 0xfffffffe
mov edx, eax
mov eax, dword [eax + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10036cbb
and esi, 1
mov dword [esp + 0x28], ecx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
or ecx, esi
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x28]
and byte [ecx + 4], 0xfe
mov esi, dword [ebx + 4]
mov edx, esi
and edx, 0xfffffffe
je 0x10039400
mov ecx, dword [edx]
and ecx, 0xfffffffe
and esi, 1
or esi, ecx
mov dword [ebx + 4], esi
mov dword [edx], ebx
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov ebx, dword [eax + 4]
mov esi, ebx
and esi, 0xfffffffe
jne 0x10034dbf
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
xor esi, esi
test dl, 0x10
cmove esi, dword [esp + 0x10]
xor ecx, ecx
cmp esi, eax
seta dl
jb 0x10036a6f
mov cl, dl
jmp 0x10036a66
or edx, 1
mov dword [edi + 4], edx
mov ecx, dword [edi]
test ecx, ecx
je 0x100371fe
mov edx, dword [ecx + 4]
test dl, 1
jne 0x10037ba6
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10039548
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x10036473
or edx, 1
mov dword [esi + 4], edx
mov ecx, dword [esi]
test ecx, ecx
je 0x10037238
mov edx, dword [ecx + 4]
test dl, 1
jne 0x10037c59
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x100395c4
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x10036bff
lea esi, [esp + 0x68]
mov ecx, esi
mov edx, eax
call fcn.10032030
mov edx, dword [esi]
jmp 0x100354b2
mov eax, dword [esp + 0x20]
mov edx, dword [eax + 0x3c]
test edx, edx
jne 0x10037b4a
lea eax, [esp + 0x80]
mov ecx, 0x100000
mov edx, 0x100000
push eax
push 0
call fcn.10050c80
add esp, 8
test eax, eax
je 0x100398be
mov edi, eax
movzx eax, byte [esp + 0x80]
mov ecx, dword [esp + 0x20]
mov edx, edi
push eax
call fcn.10050ba0
mov edx, edi
add esp, 4
add edx, 0x2000
jmp 0x100356dd
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [ebx + 8], edx
jmp 0x10035cb1
shl esi, 0xc
mov eax, esi
and eax, 0xff000
mov ebx, 0x100000
sub ebx, eax
cmp ebx, edx
mov dword [esp + 0x5c], edx
cmovae ebx, edx
add esi, dword [esp + 0x1c]
jmp 0x100357ba
and esi, 1
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
or edi, esi
mov dword [ecx + 4], edi
and byte [eax + 4], 0xfe
mov eax, dword [esp + 8]
mov eax, dword [eax + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x100392f8
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov esi, dword [esp + 8]
mov dword [esi + 4], eax
mov dword [ecx], esi
mov dword [edx], ecx
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov dword [esp + 8], esi
and esi, 0xfffffffe
mov edi, dword [esp + 0x14]
jne 0x100347b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov edx, dword [esi + 0x3c]
test edx, edx
jne 0x10037b7b
lea eax, [esp + 0x80]
mov ecx, 0x100000
mov edx, 0x100000
push eax
push 0
call fcn.10050c80
add esp, 8
test eax, eax
je 0x100398cb
mov esi, eax
movzx eax, byte [esp + 0x80]
mov ecx, dword [esp + 0x18]
mov edx, esi
push eax
call fcn.10050ba0
mov ecx, esi
add esp, 4
add ecx, 0x2000
jmp 0x10035879
mov ecx, esi
call fcn.10032270
jmp 0x1003436d
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov eax, esi
jmp 0x10036359
mov edi, dword [esp + 0x4c]
shl edi, 0xc
mov eax, edi
and eax, 0xff000
mov ebx, 0x100000
sub ebx, eax
cmp ebx, esi
cmovae ebx, esi
add edi, dword [esp + 0x28]
jmp 0x10035955
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov eax, esi
jmp 0x10036ae2
mov ebx, dword [ecx + 4]
jmp 0x10035cc2
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10039307
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1003931c
mov edi, dword [eax]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [edx + 4], esi
mov dword [eax], edx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
jmp 0x10035f4c
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x100386f9
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
mov edi, dword [esp + 0x40]
je 0x1003653a
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x1003653a
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x10038738
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 0x38]
je 0x10036cc2
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x10036cc2
lea esi, [esp + 0x68]
mov ecx, esi
mov edx, eax
call fcn.10032030
mov edx, dword [esi]
jmp 0x100355c8
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edi, dword [eax]
test edi, edi
je 0x10039827
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edi + 4]
and esi, 1
or esi, ecx
mov dword [edi + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1003983c
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edi + 4]
and eax, 1
or eax, ecx
mov dword [edi + 4], eax
jmp 0x10033cde
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x1003985a
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov edi, dword [edx + 4]
and edi, 1
or edi, ecx
mov dword [edx + 4], edi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
je 0x1003986f
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and edi, 1
or edi, ebx
mov dword [eax + 4], edi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10033dad
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp edi, ecx
jne 0x1003683f
and eax, 1
or eax, dword [esp + 0x34]
mov dword [edx + 4], eax
jmp 0x1003683f
cmp dword [esp + 0x10], 0
je 0x1003987e
mov eax, dword [esp]
mov ecx, dword [esp + 0x10]
cmp dword [ecx], eax
jne 0x100381eb
mov eax, dword [esp + 0x10]
mov dword [eax], edx
test edx, edx
je 0x1003988d
mov esi, dword [esp]
mov eax, dword [esi]
mov dword [edx], eax
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov eax, dword [esp + 4]
cmp dword [eax], edx
jne 0x1003989c
mov eax, dword [esp + 4]
mov dword [eax], 0
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x14]
jmp 0x10034aad
mov edx, dword [esi + 0x4c]
neg cl
shr edx, cl
jmp 0x1003435c
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp esi, ecx
mov ecx, dword [esp + 0x38]
jne 0x10036fc7
and eax, 1
or eax, dword [esp + 0x24]
mov dword [edx + 4], eax
jmp 0x10036fc7
test esi, esi
je 0x100380de
mov eax, dword [esi + 4]
test eax, eax
je 0x100380de
mov dword [esp + 0xc], 0
test byte [eax + 8], 1
je 0x100380cb
mov esi, edx
mov edi, esi
mov ecx, dword [esp + 0x1c]
mov esi, eax
xor eax, eax
cmp esi, ecx
setb al
mov ecx, 0xffffffff
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x1003770f
test esi, esi
je 0x10038791
mov eax, dword [esi + 4]
test eax, eax
je 0x10038791
mov ecx, dword [eax + 8]
test cl, 1
jne 0x100376c2
mov edx, dword [eax + 4]
test edx, edx
je 0x10038288
test byte [edx + 8], 1
jne 0x100376c2
jmp 0x10038288
test eax, eax
jne 0x1003772b
xor ecx, ecx
test esi, esi
je 0x100377b4
mov eax, dword [esi + 8]
mov dword [esp + 0xc], edi
cmp eax, 1
jbe 0x1003777f
jmp 0x1003773a
mov eax, esi
test esi, esi
je 0x10039011
mov esi, eax
mov eax, dword [eax + 8]
and eax, 0xfffffffe
je 0x10037750
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10037750
test byte [ecx + 8], 1
jne 0x100376c2
lea ecx, [esp + 0x7c]
mov edx, esi
call fcn.100329e0
mov eax, dword [esp + 0x7c]
cmp dword [edi + 4], esi
je 0x10038670
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [edi + 8], edx
mov esi, edi
jmp 0x100376c2
mov eax, dword [esi + 4]
test eax, eax
je 0x100377b4
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [esi + 4], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [esi + 8], 1
and dword [eax + 8], 1
mov ecx, eax
cmp dword [edi + 4], esi
jne 0x10037d29
mov dword [edi + 4], ecx
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x20]
mov dword [ecx + 0x38], eax
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x100397d0
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov edx, dword [esp + 8]
test edx, edx
setne al
test byte [esp + 0x38], al
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
jne 0x10036880
mov dword [eax], 0
mov bl, 1
jmp 0x10033724
lea edx, [esp + 0x80]
mov dword [esp + 0x1c], edx
jmp 0x1003501c
mov ecx, eax
and ecx, 0xfffffffe
mov ebx, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, ecx
mov dword [ebx + 4], edx
jmp 0x1003609b
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
jmp 0x10034821
test edi, edi
je 0x10038135
mov eax, dword [edi + 4]
test eax, eax
je 0x10038135
mov dword [esp], 0
test byte [eax + 8], 1
je 0x10038124
mov esi, edi
mov edx, dword [esp + 0x28]
mov edi, eax
xor eax, eax
cmp edi, edx
setb al
mov ecx, 0xffffffff
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x100378d6
test edi, edi
je 0x1003885f
mov eax, dword [edi + 4]
test eax, eax
je 0x1003885f
mov ecx, dword [eax + 8]
test cl, 1
je 0x100378c0
mov esi, edi
jmp 0x1003788b
mov edx, dword [eax + 4]
test edx, edx
je 0x10038335
test byte [edx + 8], 1
jne 0x10037885
jmp 0x10038335
test eax, eax
jne 0x100378f1
xor ecx, ecx
test edi, edi
je 0x10037972
mov eax, dword [edi + 8]
mov dword [esp], esi
cmp eax, 1
jbe 0x1003793d
jmp 0x100378f8
test edi, edi
je 0x1003790e
mov eax, dword [edi + 8]
and eax, 0xfffffffe
je 0x1003790e
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1003790e
test byte [ecx + 8], 1
jne 0x10037885
lea ecx, [esp + 0x7c]
mov edx, edi
call fcn.100329e0
mov eax, dword [esp + 0x7c]
cmp dword [esi + 4], edi
je 0x100386c0
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [esi + 8], edx
mov edi, esi
jmp 0x10037885
mov eax, dword [edi + 4]
test eax, eax
je 0x10037972
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [edi + 8], 1
and dword [eax + 8], 1
mov ecx, eax
cmp dword [esi + 4], edi
jne 0x10037e7a
mov dword [esi + 4], ecx
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 0x18]
mov dword [esi + 0x38], eax
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x100397df
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov ecx, dword [esp + 0x2c]
test ecx, ecx
setne al
test byte [esp + 0x34], al
mov ebx, dword [esp + 0xc]
jne 0x10037000
mov dword [ebx], 0
mov bl, 1
jmp 0x1003398a
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x100398d8
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x100398ed
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x100354b2
mov eax, dword [esp + 0x34]
mov dword [eax], 0
mov dword [eax + 4], 1
lea edi, [esp + 0x80]
jmp 0x10036839
lea edx, [esp + 0x80]
mov dword [esp], edx
jmp 0x100350c2
xor eax, eax
inc eax
cmp ecx, 0xffffffff
jne 0x10036809
jmp 0x10038387
mov dword [esp + 0x48], 0
mov ecx, dword [esp + 0x20]
jmp 0x10035834
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x100398fc
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10037aae
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100385c3
mov dword [eax + 4], ecx
jmp 0x100354ae
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov edi, dword [ecx + 4]
and edi, 1
or edi, edx
mov dword [ecx + 4], edi
mov edi, dword [eax + 4]
and edi, 1
or edi, edx
mov dword [ecx + 4], edi
mov edi, dword [esp + 0x2c]
or byte [eax + 4], 1
and dword [ecx + 4], 1
jmp 0x1003484b
mov eax, dword [esp + 0x24]
mov dword [eax], 0
mov dword [eax + 4], 1
lea esi, [esp + 0x80]
jmp 0x10036fbd
xor eax, eax
inc eax
cmp ecx, 0xffffffff
jne 0x10036f8b
jmp 0x100383e8
mov dword [esp + 0x14], ecx
mov edx, dword [esi + 0x3c]
test edx, edx
jne 0x10038187
mov edi, dword [esp + 4]
lea edx, [edi + 0x28]
mov ecx, dword [esp + 0x14]
call fcn.10032c30
mov esi, dword [esp + 0x18]
mov eax, dword [esi + 0x3c]
mov dword [esp + 0x14], eax
mov dword [esi + 0x3c], edi
jmp 0x10034332
mov eax, dword [esp + 0x20]
mov dword [eax + 0x3c], 0
lea ebx, [edx + 0x2000]
add edx, 0x28
mov ecx, dword [esp + 0x40]
call fcn.10051170
mov edx, ebx
jmp 0x100356dd
mov dword [esp + 0x40], 0
jmp 0x100359c5
mov eax, dword [esp + 0x18]
mov dword [eax + 0x3c], 0
lea esi, [edx + 0x2000]
add edx, 0x28
mov ecx, dword [esp + 0x38]
call fcn.10051170
mov ecx, esi
jmp 0x10035879
mov dword [ecx], edi
jmp 0x100367d9
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x10039557
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1003956c
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
jmp 0x10036473
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x100393af
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10037c42
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100386ca
mov dword [eax + 4], ecx
mov edi, dword [esp + 0x44]
jmp 0x100364d9
mov eax, dword [esp + 0x10]
mov dword [eax], esi
jmp 0x10036f5c
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x100395d3
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x100395e8
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
jmp 0x10036bff
mov eax, dword [ecx + 4]
and eax, 1
or eax, edi
mov dword [ecx + 4], eax
jmp 0x100367d9
cmp dword [esp + 0x3c], 0
je 0x10039929
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
cmp dword [edx], ecx
jne 0x100383f2
mov ecx, dword [esp + 0x3c]
mov dword [ecx], eax
mov esi, dword [esp + 0x34]
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov ecx, dword [esp + 0xc]
cmp dword [ecx], eax
jne 0x10039938
mov eax, dword [esp + 0xc]
mov dword [eax], 0
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0x40]
jmp 0x1003653a
and ecx, 0xfffffffe
mov eax, dword [edi + 8]
and eax, 1
or eax, ecx
mov dword [edi + 8], eax
jmp 0x100377c0
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x100393cd
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10037d83
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10038709
mov dword [eax + 4], ecx
mov edi, dword [esp + 0x1c]
jmp 0x10036c63
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x10036248
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
jmp 0x10036f5c
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x10039945
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1003995a
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x100355c8
cmp dword [esp + 0x24], 0
je 0x10039969
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
cmp dword [edx], ecx
jne 0x10038460
mov ecx, dword [esp + 0x24]
mov dword [ecx], eax
mov esi, dword [esp + 0x10]
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov ecx, dword [esp]
cmp dword [ecx], eax
jne 0x10039978
mov eax, dword [esp]
mov dword [eax], 0
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 0x38]
jmp 0x10036cc2
and ecx, 0xfffffffe
mov eax, dword [esi + 8]
and eax, 1
or eax, ecx
mov dword [esi + 8], eax
jmp 0x1003797e
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x10039984
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10037ed4
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10038748
mov dword [eax + 4], ecx
jmp 0x100355c4
mov ecx, esi
mov eax, edx
mov edx, dword [ebp + 8]
push eax
push ebx
call fcn.10003200
jmp 0x10036a0b
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
and byte [esi + 4], 0xfe
mov ecx, dword [edi + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003952a
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [edi + 4], ecx
mov dword [edx], edi
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
jne 0x10036455
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x100391b4
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x10034a66
lea edx, [esp + 0x80]
mov dword [esp + 0x1c], edx
jmp 0x100352df
mov esi, dword [esp + 8]
and esi, 0xfffffffe
mov dword [eax], esi
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x10039993
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov edi, dword [edx + 4]
and edi, 0xfffffffe
je 0x10038106
mov eax, dword [edi + 4]
test al, 1
je 0x10038106
mov esi, eax
and esi, 0xfffffffe
mov dword [edi + 4], esi
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x10039a6b
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
mov edi, dword [esp + 0x14]
jmp 0x1003528d
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
and byte [edi + 4], 0xfe
mov ecx, dword [esi + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x100395a6
mov edi, dword [edx]
and edi, 0xfffffffe
and ecx, 1
or ecx, edi
mov dword [esi + 4], ecx
mov dword [edx], esi
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
jne 0x10036be1
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov ecx, ebx
mov edx, 0x100000
push 2
call fcn.10001850
add esp, 4
jmp 0x10034382
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x34]
xor eax, eax
cmp ecx, edi
seta cl
jb 0x10038387
mov al, cl
jmp 0x10036809
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x24]
xor eax, eax
cmp ecx, esi
seta cl
jb 0x100383e8
mov al, cl
jmp 0x10036f8b
mov ecx, dword [eax + 4]
test ecx, ecx
mov esi, edx
je 0x100380de
test byte [ecx + 8], 1
jne 0x100376c0
lea edi, [esp + 0x68]
mov ecx, edi
mov edx, esi
call fcn.10001630
mov eax, dword [edi]
test eax, eax
je 0x10039abc
and byte [eax + 8], 0xfe
mov dword [esp + 0xc], 0
jmp 0x1003664e
mov dword [edx + 4], edi
mov edi, dword [esp + 0x14]
jmp 0x1003528d
lea esi, [esp + 0x68]
mov ecx, esi
call fcn.10001010
mov ecx, dword [esi]
jmp 0x10035fcb
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10038135
test byte [ecx + 8], 1
jne 0x10037885
lea esi, [esp + 0x68]
mov ecx, esi
mov edx, edi
call fcn.10001630
mov eax, dword [esi]
test eax, eax
je 0x10039ae9
and byte [eax + 8], 0xfe
mov dword [esp], 0
jmp 0x10036dcf
and ecx, 0xfffffffe
mov dword [esi + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
or ecx, 1
mov dword [eax + 4], ecx
and esi, 0xfffffffe
je 0x100391f1
mov ecx, dword [esi]
or ecx, 1
mov dword [eax + 4], ecx
mov dword [esi], eax
mov dword [edx], esi
jmp 0x10034e3a
cmp dword [edx + 0xc], 0
je 0x10038785
mov eax, dword [esp + 4]
mov ecx, dword [eax]
add ecx, 0x38
call fcn.10032410
mov esi, dword [esp + 0x18]
mov eax, dword [esi + 0x2c]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + 0xc]
sub dword [esi + 0x48], edx
sub eax, dword [ecx + 0xc]
mov ecx, dword [esp + 0x18]
add dword [ecx + 0x28], 0xfff00000
add eax, 0xfffffffe
mov dword [ecx + 0x2c], eax
jmp 0x10037b27
lea edx, [esp + 0x80]
mov dword [esp], edx
jmp 0x10035516
lea esi, [esp + 0x68]
mov ecx, esi
mov edx, eax
call fcn.10032030
mov edx, dword [esi]
jmp 0x1003634c
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [esp + 0x10]
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x1003761e
lea esi, [esp + 0x68]
mov ecx, esi
mov edx, eax
call fcn.10032030
mov edx, dword [esi]
jmp 0x10036ad5
push 0x100a5778
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov edi, dword [0x100a5790]
xor eax, eax
dec eax
xor ecx, ecx
mov edx, dword [ebp + 8]
cmp dword [edi + 0x10], edx
setb cl
cmova ecx, eax
test ecx, ecx
je 0x10038273
cmp ecx, 0xffffffff
je 0x1003824b
mov edi, dword [edi + 0xc]
and edi, 0xfffffffe
jmp 0x1003822c
mov edi, dword [edi + 8]
jmp 0x1003822c
mov eax, dword [edi]
mov esi, dword [edi + 0x18]
cmp eax, dword [esi + 8]
je 0x10033592
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode__mArenaId__mNode__mArena__mId_
int3
mov esi, dword [edi + 0x14]
push 0x100a5778
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov edx, esi
jmp 0x10033584
or ecx, 1
mov dword [eax + 8], ecx
mov edx, dword [esi + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1003968e
mov eax, dword [ecx + 4]
test eax, eax
je 0x100382af
mov ebx, dword [eax + 8]
test bl, 1
jne 0x10038926
or edx, 1
mov ebx, esi
mov dword [esi + 8], edx
mov eax, dword [ecx + 4]
or eax, 1
mov dword [esi + 8], eax
mov dword [ecx + 4], esi
mov eax, ecx
cmp dword [edi + 4], esi
jne 0x100399b1
mov dword [edi + 4], eax
mov esi, eax
mov ecx, dword [esp + 0x1c]
jmp 0x100376ca
xor esi, esi
test edx, edx
je 0x10038325
mov ecx, dword [edx + 8]
cmp ecx, 1
ja 0x10038b25
mov eax, dword [edx + 4]
test eax, eax
je 0x10038325
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov esi, edx
mov dword [edx + 4], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [esi + 8], 1
and dword [eax + 8], 1
mov esi, eax
mov eax, dword [esp + 0x20]
mov dword [eax + 0x38], esi
mov ecx, dword [esp + 0x1c]
jmp 0x100377da
or ecx, 1
mov dword [eax + 8], ecx
mov edx, dword [edi + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x100396ef
mov eax, dword [ecx + 4]
test eax, eax
je 0x1003835c
mov ebx, dword [eax + 8]
test bl, 1
jne 0x100389a7
or edx, 1
mov dword [edi + 8], edx
mov eax, dword [ecx + 4]
or eax, 1
mov dword [edi + 8], eax
mov dword [ecx + 4], edi
mov eax, ecx
cmp dword [esi + 4], edi
jne 0x100399db
mov dword [esi + 4], eax
mov edi, eax
mov edx, dword [esp + 0x28]
jmp 0x1003788d
mov ecx, dword [edi]
xor eax, eax
dec eax
jmp 0x1003680f
xor edx, edx
test edi, edi
je 0x100383d8
mov ecx, dword [edi + 8]
cmp ecx, 1
ja 0x10038b35
mov eax, dword [edi + 4]
test eax, eax
je 0x100383d8
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [edi + 8], 1
and dword [eax + 8], 1
mov edx, eax
mov esi, dword [esp + 0x18]
mov dword [esi + 0x38], edx
mov ecx, dword [esp + 0x28]
jmp 0x10037998
mov ecx, dword [esi]
xor eax, eax
dec eax
jmp 0x10036f91
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [esp + 0x3c]
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x10037cdf
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x10039a05
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10039a1a
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1003634c
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [esp + 0x24]
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x10037e2e
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x10039a29
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x100384c0
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1003897c
mov dword [eax + 4], ecx
jmp 0x10036348
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x10039a38
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10039a4d
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10036ad5
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x10039a5c
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x10038564
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100389f9
mov dword [eax + 4], ecx
jmp 0x10036ad1
mov esi, eax
and esi, 0xfffffffe
mov dword [edi + 4], esi
mov ecx, dword [edx]
test ecx, ecx
je 0x10039a7a
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x10039a8f
mov edi, dword [eax]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [edx + 4], esi
mov dword [eax], edx
mov edx, dword [ecx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x10035fcb
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x10039a9e
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x100354ae
or ecx, 1
mov dword [edx + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10038607
mov ebx, dword [ecx + 8]
test bl, 1
jne 0x10038804
or byte [eax + 8], 1
mov ecx, dword [edx + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x10039aad
mov esi, dword [eax + 4]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [edx + 8], ecx
mov dword [eax + 4], edx
jmp 0x1003664e
or ecx, 1
mov dword [edi + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10038648
mov edx, dword [ecx + 8]
test dl, 1
jne 0x100388cd
or byte [eax + 8], 1
mov ecx, dword [edi + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x10039acb
mov edx, dword [eax + 4]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [edi + 8], ecx
mov dword [eax + 4], edi
jmp 0x10036dcf
mov dword [edi + 4], eax
mov esi, edi
jmp 0x100376c2
lea ecx, [esp + 0x80]
mov dword [esp + 0x10], ecx
jmp 0x10035f68
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [esp + 0x18]
or byte [edx + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x10035a43
mov dword [esi + 4], eax
mov edi, esi
jmp 0x10037885
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x100393a0
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
mov edi, dword [esp + 0x44]
jmp 0x100364d9
lea edx, [esp + 0x80]
mov dword [esp + 0x3c], edx
jmp 0x1003691e
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x100393be
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
mov edi, dword [esp + 0x1c]
jmp 0x10036c63
lea edx, [esp + 0x80]
mov dword [esp + 0x24], edx
jmp 0x10037093
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x10039ada
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x100355c4
mov ecx, edi
mov edx, esi
call fcn.10001740
mov esi, dword [esp + 0xc]
jmp 0x10034390
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x2c]
jmp 0x100381b2
cmp dword [esp + 0xc], 0
je 0x10039af8
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc]
cmp dword [ecx + 4], eax
jne 0x10038b44
mov eax, dword [esp + 0xc]
mov dword [eax + 4], esi
cmp dword [esp + 0x1c], 0
je 0x10039b13
test esi, esi
je 0x10039b34
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 4]
mov ebx, esi
mov dword [esi + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [esi + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
cmp dword [edi + 4], esi
jne 0x10039b2b
mov dword [edi + 4], 0
jmp 0x100377c0
and ebx, 0xfffffffe
mov dword [ecx + 8], ebx
mov eax, dword [edx + 4]
test eax, eax
je 0x10039b43
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov esi, edx
mov dword [edx + 4], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov edi, dword [eax + 8]
and edi, 1
or edi, ecx
mov dword [eax + 8], edi
mov edi, dword [edx + 8]
mov ecx, edi
and ecx, 0xfffffffe
je 0x10039b59
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
and edi, 1
or edi, esi
mov dword [edx + 8], edi
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x1003664e
cmp dword [esp], 0
je 0x10039b68
mov eax, dword [esp + 0x28]
mov ecx, dword [esp]
cmp dword [ecx + 4], eax
jne 0x10038b5d
mov eax, dword [esp]
mov dword [eax + 4], edi
cmp dword [esp + 0x28], 0
je 0x10039b83
test edi, edi
je 0x10039ba2
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 4]
mov dword [edi + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [edi + 8]
and ecx, 1
or ecx, eax
mov dword [edi + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [edi + 8], ecx
cmp dword [esi + 4], edi
jne 0x10039b99
mov dword [esi + 4], 0
jmp 0x1003797e
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov eax, dword [edi + 4]
test eax, eax
je 0x10039bb1
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x10039bc7
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
and edx, 1
or edx, esi
mov dword [edi + 8], edx
mov dword [ecx + 4], edi
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x10036dcf
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
and eax, 0xfffffffe
mov ebx, esi
mov ecx, dword [esi + 8]
and ecx, 1
lea edx, [ecx + eax]
mov dword [esi + 8], edx
test eax, eax
je 0x100396a3
mov edx, dword [eax + 4]
and edx, 0xfffffffe
or edx, ecx
mov ecx, esi
mov dword [esi + 8], edx
mov dword [eax + 4], esi
mov ecx, dword [esi + 8]
and ecx, 0xfffffffe
je 0x10038974
mov edx, dword [ecx + 8]
test dl, 1
jne 0x10038daa
mov dword [esi + 8], ecx
jmp 0x100382c5
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x10039bd6
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x10036348
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
and eax, 0xfffffffe
mov ecx, dword [edi + 8]
and ecx, 1
lea edx, [ecx + eax]
mov dword [edi + 8], edx
test eax, eax
je 0x10039704
mov edx, dword [eax + 4]
and edx, 0xfffffffe
or edx, ecx
mov dword [edi + 8], edx
mov dword [eax + 4], edi
mov ecx, dword [edi + 8]
and ecx, 0xfffffffe
je 0x100389f1
mov edx, dword [ecx + 8]
test dl, 1
jne 0x10038ddc
mov dword [edi + 8], ecx
jmp 0x10038370
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x10039be5
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x10036ad1
mov byte [ecx + 0x40], 0
lea eax, [esp + 0x80]
push eax
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
lea esi, [esp + 0x68]
push esi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
mov ecx, 0x10
call fcn.10011e30
xor edx, edx
cmp byte [esi + 8], 0
mov ecx, 0
mov esi, 0
je 0x10038a69
mov ecx, dword [esp + 0x6c]
mov esi, dword [esp + 0x68]
cmp byte [esp + 0x88], 0
mov edi, 0
je 0x10038a86
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0x80]
mov dword [eax], edi
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x20]
mov dword [ecx + 0x44], eax
mov byte [ecx + 0x40], 1
mov edx, dword [esp]
jmp 0x10033684
mov byte [esi + 0x40], 0
lea eax, [esp + 0x80]
push eax
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
lea esi, [esp + 0x68]
push esi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
mov ecx, 0x10
call fcn.10011e30
xor edx, edx
cmp byte [esi + 8], 0
mov ecx, 0
mov esi, 0
je 0x10038ae9
mov ecx, dword [esp + 0x6c]
mov esi, dword [esp + 0x68]
cmp byte [esp + 0x88], 0
mov edi, 0
je 0x10038b06
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0x80]
mov dword [eax], edi
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], ecx
mov esi, dword [esp + 0x18]
mov dword [esi + 0x44], eax
mov byte [esi + 0x40], 1
mov ebx, dword [esp + 0x14]
jmp 0x10033906
lea eax, [esp + 0x80]
mov dword [esp + 0xc], eax
jmp 0x10036614
lea eax, [esp + 0x80]
mov dword [esp], eax
jmp 0x10036d93
mov eax, esi
and eax, 0xfffffffe
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [edx + 8], ecx
jmp 0x100387b4
mov eax, edi
and eax, 0xfffffffe
mov edx, dword [esp]
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [edx + 8], ecx
jmp 0x1003887f
mov dword [esp + 0x14], ebx
push 0x100a5810
call dword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
cmp dword [0x100a580c], 0
jne 0x10038d96
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x10039c1c
mov eax, dword [0x100a5818]
mov ecx, dword [0x100a53c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jle 0x10038c03
push 0x100a5818
call fcn.1004fb5e
add esp, 4
cmp dword [0x100a5818], 0xffffffff
jne 0x10038c03
lea esi, [esp + 0x80]
push esi
call dword [sym.imp.kernel32.dll_GetSystemInfo]
mov eax, dword [esi + 4]
mov dword [0x100a5814], eax
push 0x100a5818
call fcn.1004fb5e
add esp, 4
mov eax, 0x1000
xor edx, edx
div dword [0x100a5814]
test edx, edx
jne 0x10039c26
mov edi, 0x100a581c
push 0x40
push edi
push str.MALLOC_OPTIONS
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
test eax, eax
cmove edi, eax
je 0x10038c6e
mov al, byte [edi]
test al, al
je 0x10038c6e
xor ebx, ebx
movsx eax, al
add eax, 0xffffffd0
cmp eax, 9
jbe 0x10039c8d
xor esi, esi
inc esi
mov al, byte [edi + ebx]
movsx ecx, al
cmp ecx, 0x72
jne 0x10039bf4
mov byte [0x100a5774], 1
dec esi
jne 0x10038c4c
mov al, byte [edi + ebx + 1]
inc ebx
test al, al
jne 0x10038c3a
xor ebx, ebx
mov dword [0x100a57d8], ebx
mov edi, 0x1388
mov esi, dword [sym.imp.kernel32.dll_InitializeCriticalSectionAndSpinCount]
push edi
push 0x100a57b8
call esi
mov dword [0x100a57d0], ebx
mov dword [0x100a57d4], ebx
push edi
push 0x100a5778
call esi
mov dword [0x100a5790], ebx
mov dword [0x100a5794], ebx
mov dword [0x100a5798], ebx
push edi
push 0x100a57dc
call esi
mov dword [0x100a5808], ebx
mov dword [0x100a5800], ebx
mov dword [0x100a574c], ebx
mov dword [0x100a5750], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x8c], ebx
mov eax, dword [0x100a5024]
mov dword [esp + 0x80], eax
push edi
push 0x100a572c
call esi
test eax, eax
je 0x10039c4a
lea edx, [esp + 0x80]
xor ecx, ecx
call fcn.10041370
mov dword [0x100a5744], eax
test eax, eax
je 0x10039c6f
mov ecx, dword [0x100a53c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp byte [ecx + 8], 0
je 0x10039c56
mov ecx, dword [0x100a53c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
mov dword [ecx + 0xc], eax
push 0x1388
push 0x100a579c
call dword [sym.imp.kernel32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x4000
call fcn.10011e30
test eax, eax
je 0x10039c65
mov esi, eax
push 0x4000
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [0x100a57b4], esi
xor eax, eax
inc eax
xchg dword [0x100a580c], eax
call fcn.10001250
push 0x100a5810
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov ebx, dword [esp + 0x14]
jmp 0x1003388e
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov ebx, esi
mov ecx, dword [esi + 8]
mov edx, ecx
or edx, 1
mov dword [esi + 8], edx
and ecx, 0xfffffffe
je 0x100396b2
mov edx, dword [ecx + 4]
or edx, 1
mov ebx, esi
mov dword [esi + 8], edx
mov dword [ecx + 4], esi
mov dword [eax + 4], ecx
jmp 0x100382c5
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov ecx, dword [edi + 8]
mov edx, ecx
or edx, 1
mov dword [edi + 8], edx
and ecx, 0xfffffffe
je 0x10039713
mov edx, dword [ecx + 4]
or edx, 1
mov dword [edi + 8], edx
mov dword [ecx + 4], edi
mov dword [eax + 4], ecx
jmp 0x10038370
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
or edi, 1
mov dword [eax + 4], edi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
or ebx, 1
mov dword [eax + 4], ebx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
and esi, 1
mov dword [ecx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [esp + 0x60], edi
mov dword [esp + 0x58], ebx
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x10039d2f
cmp eax, 8
je 0x10039d2f
xor eax, eax
jmp 0x100357fa
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x10039d81
cmp eax, 8
je 0x10039d81
xor eax, eax
jmp 0x1003598f
and esi, 1
mov dword [ebx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
or ecx, 1
mov dword [edx + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
and ecx, 1
mov dword [edi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
and ecx, 1
mov dword [esi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov ebx, 1
jmp 0x1003353b
mov esi, eax
jmp 0x10037750
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_malloc_initialized_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__aArena__arena__aArena_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x20U____0___Freeing_in_decommitted_page._
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x01U_____0___Double_free__
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__run__mRegionsMask_elm____1U____bit____0___Double_free__
int3
mov bl, 1
xor esi, esi
mov ecx, dword [esp + 0x20]
jmp 0x10033724
call fcn.1004f684
jmp 0x100338b6
mov esi, dword [0x100a5744]
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
jne 0x100390d9
call fcn.1004f684
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov dword [eax + 0xc], esi
jmp 0x100338d3
call fcn.1004f684
jmp 0x10033629
mov esi, dword [0x100a5744]
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
jne 0x10039120
call fcn.1004f684
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov dword [eax + 0xc], esi
mov ecx, esi
jmp 0x10033646
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
dec dword [edx + 8]
mov bl, 1
xor esi, esi
mov ecx, dword [esp + 0x20]
jmp 0x10033728
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov eax, dword [esp + 0x2c]
dec dword [eax + 8]
mov bl, 1
xor edi, edi
jmp 0x1003398a
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_run_ind___gChunkNumPages___1_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
and esi, 1
mov eax, dword [esp + 8]
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
xor ebx, ebx
jmp 0x10034589
mov eax, ecx
and eax, 0xfffffffe
mov dword [esp + 4], edx
mov edx, dword [esp + 4]
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov eax, dword [esp + 4]
mov dword [eax + 4], edx
jmp 0x10034653
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
jmp 0x100348ea
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov eax, ecx
jmp 0x100356be
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov eax, ecx
jmp 0x10035858
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
jmp 0x10034cc2
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
or edx, 1
mov dword [esi + 8], edx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x1003635d
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x10036ae5
or edx, 1
mov dword [edi + 8], edx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
and dword [edi + 4], 1
jmp 0x10034b1c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
and dword [edi + 4], 1
jmp 0x1003627a
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov eax, dword [esp + 4]
and dword [eax + 4], 1
jmp 0x1003765f
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
jmp 0x100377fd
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0xc]
jmp 0x100379b7
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov eax, dword [esp + 0xc]
and dword [eax + 4], 1
jmp 0x10037d19
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov eax, dword [esp]
and dword [eax + 4], 1
jmp 0x10037e66
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [edi + 8], edx
jmp 0x100382d1
or ecx, 1
mov dword [edx + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [esi + 8], edx
jmp 0x1003837c
or ecx, 1
mov dword [edi + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test esi, esi
je 0x10039b34
mov eax, esi
mov dword [esi + 4], 0
and dword [esi + 8], 1
xor ecx, ecx
jmp 0x100387ec
and dword [edi + 8], 1
jmp 0x100377c0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [edx + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test edi, edi
je 0x10039ba2
mov dword [edi + 4], 0
and dword [edi + 8], 1
xor ecx, ecx
jmp 0x100388b5
and dword [esi + 8], 1
jmp 0x1003797e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [edi + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
cmp ecx, 0x46
jne 0x10039cb0
mov eax, dword [0x100a5024]
test eax, eax
je 0x10039cd1
add eax, eax
je 0x10038c62
mov dword [0x100a5024], eax
jmp 0x10038c62
call fcn.1004f684
jmp 0x10038bad
mov ecx, str._jemalloc_
mov edx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.10054c10
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_CRASH__
int3
mov dword [0x100a5744], 0
jmp 0x10039c6f
call fcn.1004f684
mov eax, dword [0x100a5744]
jmp 0x10038d38
mov dword [0x100a57b4], 0
push 0x100a5810
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [eax], 0xc
xor esi, esi
jmp 0x10034390
xor esi, esi
lea ecx, [esi + esi*4]
lea esi, [eax + ecx*2]
movsx eax, byte [edi + ebx + 1]
inc ebx
add eax, 0xffffffd0
cmp eax, 0xa
jb 0x10039c8f
test esi, esi
je 0x10038c65
jmp 0x10038c4c
cmp ecx, 0x52
jne 0x10039cc1
mov byte [0x100a5774], 0
jmp 0x10038c62
cmp ecx, 0x66
jne 0x10039ce0
shr dword [0x100a5024], 1
jmp 0x10038c62
mov dword [0x100a5024], 1
jmp 0x10038c62
lea ecx, [esp + 0x80]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov eax, 2
push 0xa
push str._jemalloc_
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
push 0x35
push str.:__malloc__Unsupported_character_in_malloc_options:_
mov eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
lea ecx, [esp + 0x80]
mov edx, 0x1009afc9
call fcn.10054c10
jmp 0x10038c62
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea edi, [eax + eax*4]
add edi, 5
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
push 4
push 0x1000
push dword [esp + 0x60]
push esi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov ebx, eax
call dword [sym.imp.kernel32.dll_GetLastError]
test ebx, ebx
jne 0x10039ddc
cmp eax, 0x5af
je 0x10039d77
cmp eax, 8
jne 0x10038ee0
xor eax, eax
dec edi
jne 0x10039d41
jmp 0x100357fa
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea eax, [eax + eax*4]
add eax, 5
mov dword [esp + 0x48], eax
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
push 4
push 0x1000
push ebx
push edi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov dword [esp + 0x54], eax
call dword [sym.imp.kernel32.dll_GetLastError]
cmp dword [esp + 0x54], 0
jne 0x10039e00
cmp eax, 0x5af
je 0x10039dcf
cmp eax, 8
jne 0x10038f01
xor eax, eax
dec dword [esp + 0x48]
jne 0x10039d97
jmp 0x1003598f
cmp eax, 0x5af
mov ebx, dword [esp + 0x58]
mov ecx, dword [esp + 0x60]
je 0x10039df4
cmp eax, 8
jne 0x100357d9
push ecx
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x100357d9
cmp eax, 0x5af
mov ecx, dword [esp + 0x4c]
je 0x10039e14
cmp eax, 8
jne 0x10035976
push ecx
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x10035976
mov eax, dword [esp + 0x80]
mov dword [edi], eax
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov ecx, 0xfffff000
and ecx, dword [esi + 8]
mov dword [ebx], ecx
test ecx, ecx
mov esi, dword [esp + 0x18]
jne 0x10033933
jmp 0x100379bd
int3
mov eax, edx
and eax, 0xfffffffe
mov edi, ecx
mov ecx, dword [ecx + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov edi, dword [esp + 8]
mov eax, edx
nop
xor ecx, ecx
cmp eax, edi
setb cl
mov edx, 0xffffffff
cmova ecx, edx
cmp ecx, 0xffffffff
jne 0x10039eb6
test eax, eax
je 0x1003a14a
mov edi, dword [eax]
test edi, edi
je 0x1003a14a
mov ecx, dword [edi + 4]
test cl, 1
jne 0x10039eaa
mov esi, dword [edi]
test esi, esi
je 0x10039eda
test byte [esi + 4], 1
je 0x10039eda
mov dword [esp + 0xc], eax
mov eax, edi
mov edi, dword [esp + 8]
jmp 0x10039e70
test ecx, ecx
jne 0x10039f2b
mov ecx, edi
test eax, eax
je 0x1003a296
mov edx, dword [eax + 4]
mov edi, dword [esp + 0xc]
mov dword [esp + 0x1c], edi
cmp edx, 1
jbe 0x10039fed
jmp 0x10039f36
or ecx, 1
mov dword [edi + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1003a281
mov edx, dword [ecx]
test edx, edx
mov edi, dword [esp + 8]
je 0x10039f04
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1003a070
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
mov ecx, dword [esp + 0xc]
cmp dword [ecx], eax
jne 0x10039e56
mov dword [ecx], edx
mov eax, edx
jmp 0x10039e70
test eax, eax
je 0x1003a338
mov edx, dword [eax + 4]
mov edi, edx
and edi, 0xfffffffe
mov ecx, edx
je 0x10039f4f
mov esi, dword [edi]
test esi, esi
je 0x10039f4f
test byte [esi + 4], 1
jne 0x10039eaa
mov edi, dword [eax]
test edi, edi
je 0x1003a338
mov edx, dword [edi + 4]
test dl, 1
je 0x1003a0f9
and edx, 0xfffffffe
je 0x1003a2bd
mov esi, dword [edx]
test esi, esi
je 0x10039f7e
test byte [esi + 4], 1
jne 0x1003a1a3
and ecx, 1
or ecx, edx
mov dword [edi + 4], ecx
or byte [edx + 4], 1
mov edi, dword [eax]
test edi, edi
je 0x1003a2d2
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edi + 4]
and esi, 1
or esi, ecx
mov dword [edi + 4], esi
mov ebx, dword [eax + 4]
mov ecx, ebx
and ecx, 0xfffffffe
je 0x1003a2e7
mov esi, dword [ecx]
and esi, 0xfffffffe
and ebx, 1
or ebx, esi
mov dword [eax + 4], ebx
mov dword [ecx], eax
mov esi, dword [edi + 4]
and esi, 1
or esi, ecx
mov dword [edi + 4], esi
or byte [eax + 4], 1
mov esi, dword [esp + 0xc]
cmp dword [esi], eax
jne 0x1003a133
mov dword [esi], edi
mov eax, esi
jmp 0x10039eaa
mov edi, ecx
mov ecx, dword [eax]
test ecx, ecx
mov edx, 0
jne 0x1003a041
mov ecx, dword [esp + 0xc]
cmp dword [ecx], eax
jne 0x1003a0de
mov dword [ecx], edx
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x80]
mov dword [ecx], eax
xor eax, eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov edx, 0xfffff000
and edx, dword [edi + 8]
mov eax, dword [esp + 0x30]
mov dword [eax], edx
test edx, edx
mov ecx, dword [esp + 0x20]
mov edi, dword [esp + 0x10]
jne 0x100336c2
mov bl, 1
jmp 0x10033728
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x10039ffa
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1003a2ae
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1003a0f1
mov ebx, dword [ecx + 4]
test bl, 1
je 0x1003a0f1
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1003a29f
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x10039f16
and edx, 0xfffffffe
mov eax, dword [ecx + 4]
and eax, 1
or eax, edx
mov dword [ecx + 4], eax
jmp 0x1003a008
mov dword [eax + 4], ecx
jmp 0x10039f16
or edx, 1
mov dword [edi + 4], edx
mov ecx, dword [edi]
test ecx, ecx
je 0x1003a111
mov edx, dword [ecx + 4]
test dl, 1
jne 0x1003a20b
mov ecx, dword [eax + 4]
mov edi, ecx
and edi, 0xfffffffe
je 0x1003a2f6
mov esi, dword [edi]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edi], eax
jmp 0x10039fd8
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov eax, esi
jmp 0x10039eaa
mov edx, dword [esp + 0x1c]
test edx, edx
je 0x1003a347
mov edi, dword [esp + 8]
cmp dword [edx], edi
jne 0x1003a260
mov dword [edx], eax
test eax, eax
je 0x1003a356
mov ecx, dword [edi]
mov dword [eax], ecx
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [edi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov ecx, dword [esp + 0xc]
cmp dword [ecx], eax
jne 0x1003a365
mov dword [ecx], 0
jmp 0x1003a008
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
and byte [esi + 4], 0xfe
mov ecx, dword [edi + 4]
mov edx, edi
mov edi, ecx
and edi, 0xfffffffe
je 0x1003a305
mov esi, dword [edi]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [edx + 4], ecx
mov dword [edi], edx
mov dword [eax], edi
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edi + 4]
and esi, 1
or esi, ecx
mov dword [edi + 4], esi
mov ebx, dword [eax + 4]
mov ecx, ebx
and ecx, 0xfffffffe
jne 0x10039fba
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edi, dword [eax]
test edi, edi
je 0x1003a314
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edi + 4]
and esi, 1
or esi, ecx
mov dword [edi + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1003a329
mov ebx, dword [ecx]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edi + 4]
and esi, 1
or esi, ecx
mov dword [edi + 4], esi
jmp 0x10039fd8
mov ecx, eax
and ecx, 0xfffffffe
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x1c]
mov edx, dword [edx + 4]
and edx, 1
or edx, ecx
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 4], edx
jmp 0x1003a164
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov edi, ecx
xor edx, edx
jmp 0x10039ffa
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
and ecx, 1
mov dword [edi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
and dword [ecx + 4], 1
jmp 0x1003a008
xor ecx, ecx
cmp eax, esi
setb cl
mov edx, 0xffffffff
cmova ecx, edx
cmp ecx, 0xffffffff
jne 0x1003a402
test eax, eax
je 0x1003a639
mov edx, dword [eax]
test edx, edx
je 0x1003a639
mov ecx, dword [edx + 4]
test cl, 1
jne 0x1003a3f9
mov ebx, dword [edx]
test ebx, ebx
je 0x1003a3ae
test byte [ebx + 4], 1
jne 0x1003a448
mov dword [esp + 0x10], edi
or ecx, 1
mov dword [edx + 4], ecx
mov ebx, dword [eax + 4]
mov ecx, ebx
and ecx, 0xfffffffe
je 0x1003a77e
mov edi, dword [ecx]
test edi, edi
jne 0x1003a419
or ebx, 1
mov dword [eax + 4], ebx
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edi, ecx
mov edx, dword [esp + 0x10]
cmp dword [edx], eax
mov ebx, dword [esp + 0xc]
jne 0x1003a83f
mov dword [edx], edi
mov eax, edi
mov edi, edx
jmp 0x1003a370
mov edi, eax
mov eax, edx
jmp 0x1003a370
test ecx, ecx
jne 0x1003a42a
xor edx, edx
test eax, eax
je 0x1003a45a
mov ecx, dword [eax + 4]
mov dword [esp], edi
cmp ecx, 1
jbe 0x1003a450
jmp 0x1003a435
mov edx, dword [edi + 4]
mov dword [esp + 8], edx
test dl, 1
je 0x1003a3cc
jmp 0x1003a55b
test eax, eax
je 0x1003a7b1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003a46d
mov ebx, dword [edx]
test ebx, ebx
je 0x1003a46d
test byte [ebx + 4], 1
je 0x1003a46d
mov edi, eax
mov ebx, dword [esp + 0xc]
jmp 0x1003a3fb
mov ecx, dword [eax]
test ecx, ecx
jne 0x1003a525
cmp dword [edi], eax
jne 0x1003a5cd
mov dword [edi], edx
mov edi, dword [esp + 0x2c]
jmp 0x10039e20
mov ebx, dword [eax]
test ebx, ebx
je 0x1003a7b1
mov edx, dword [ebx + 4]
test dl, 1
je 0x1003a5e8
mov dword [esp + 0x10], ebx
and edx, 0xfffffffe
je 0x1003a7c0
mov ebx, dword [edx]
mov dword [esp + 8], ebx
test ebx, ebx
je 0x1003a4a8
mov ebx, dword [esp + 8]
test byte [ebx + 4], 1
jne 0x1003a689
and ecx, 1
or ecx, edx
mov ebx, dword [esp + 0x10]
mov dword [ebx + 4], ecx
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x1003a7d9
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov ebx, dword [edx + 4]
and ebx, 1
or ebx, ecx
mov dword [edx + 4], ebx
mov ecx, dword [eax + 4]
mov dword [esp + 8], ecx
and ecx, 0xfffffffe
je 0x1003a7ee
mov ebx, dword [ecx]
mov dword [esp + 0x10], ebx
and dword [esp + 0x10], 0xfffffffe
mov ebx, dword [esp + 8]
and ebx, 1
add ebx, dword [esp + 0x10]
mov dword [eax + 4], ebx
mov dword [ecx], eax
mov ebx, dword [edx + 4]
and ebx, 1
or ebx, ecx
mov dword [edx + 4], ebx
or byte [eax + 4], 1
cmp dword [edi], eax
jne 0x1003a622
mov dword [edi], edx
mov eax, edi
jmp 0x1003a448
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov ebx, dword [ecx + 4]
and ebx, 1
or ebx, edx
mov dword [ecx + 4], ebx
mov ebx, dword [eax + 4]
and ebx, 1
or ebx, edx
mov dword [ecx + 4], ebx
mov ebx, dword [esp + 0xc]
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x1003a45a
mov edx, dword [esp + 8]
and edx, 0xfffffffe
mov dword [ecx], edx
mov ebx, dword [edi + 4]
and ebx, 1
or ebx, ecx
mov dword [edi + 4], ebx
and edi, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea ebx, [ecx + edi]
mov dword [eax + 4], ebx
test edi, edi
je 0x1003a7a2
mov ebx, dword [edi]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [eax + 4], ebx
mov dword [edi], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1003a5e0
mov ebx, dword [ecx + 4]
test bl, 1
je 0x1003a5e0
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov ebx, ecx
or ebx, 1
mov dword [eax + 4], ebx
and ecx, 0xfffffffe
je 0x1003a793
mov ebx, dword [ecx]
or ebx, 1
mov dword [eax + 4], ebx
mov dword [ecx], eax
mov dword [edi], ecx
jmp 0x1003a3de
and edx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
or eax, edx
mov dword [edi + 4], eax
jmp 0x1003a464
mov dword [eax + 4], ecx
jmp 0x1003a3de
or edx, 1
mov dword [ebx + 4], edx
mov ecx, dword [ebx]
test ecx, ecx
je 0x1003a600
mov edx, dword [ecx + 4]
test dl, 1
jne 0x1003a6fd
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003a7fd
mov ebx, dword [edx]
and ebx, 0xfffffffe
and ecx, 1
or ecx, ebx
mov dword [eax + 4], ecx
mov dword [edx], eax
jmp 0x1003a514
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov eax, edi
jmp 0x1003a448
mov edx, dword [esp]
test edx, edx
je 0x1003a854
cmp dword [edx], esi
jne 0x1003a760
mov dword [edx], eax
test eax, eax
je 0x1003a863
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
cmp dword [edi], eax
jne 0x1003a872
mov dword [edi], 0
jmp 0x1003a464
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
mov ecx, dword [esp + 8]
and byte [ecx + 4], 0xfe
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1003a80c
mov ebx, dword [edx]
and ebx, 0xfffffffe
and ecx, 1
or ecx, ebx
mov ebx, dword [esp + 0x10]
mov dword [ebx + 4], ecx
mov dword [edx], ebx
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov ebx, dword [edx + 4]
and ebx, 1
or ebx, ecx
mov dword [edx + 4], ebx
mov ecx, dword [eax + 4]
mov dword [esp + 8], ecx
and ecx, 0xfffffffe
jne 0x1003a4ea
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x1003a81b
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov ebx, dword [edx + 4]
and ebx, 1
or ebx, ecx
mov dword [edx + 4], ebx
mov ecx, dword [eax + 4]
mov dword [esp + 8], ecx
and ecx, 0xfffffffe
je 0x1003a830
mov ebx, dword [ecx]
mov dword [esp + 0x10], ebx
and dword [esp + 0x10], 0xfffffffe
mov ebx, dword [esp + 8]
and ebx, 1
add ebx, dword [esp + 0x10]
mov dword [eax + 4], ebx
mov dword [ecx], eax
mov ebx, dword [edx + 4]
and ebx, 1
or ebx, ecx
mov dword [edx + 4], ebx
jmp 0x1003a514
mov ecx, eax
and ecx, 0xfffffffe
mov dword [esp], edx
mov edx, dword [esp]
mov edx, dword [edx + 4]
and edx, 1
or edx, ecx
mov ecx, dword [esp]
mov dword [ecx + 4], edx
jmp 0x1003a64e
or ebx, 1
mov dword [eax + 4], ebx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
and ecx, 1
mov eax, dword [esp + 0x10]
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e14
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x1003a3f0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10038e9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10039e4b
and dword [edi + 4], 1
jmp 0x1003a464