Function at 0x10008d30
Capabilities:
Get system information on windows
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa0
mov esi, ecx
mov eax, dword [0x100a500c]
xor eax, ebp
mov dword [esp + 0x98], eax
cmp dword [0x100a580c], 0
je 0x1000c1d6
xor ebx, ebx
inc ebx
test edx, edx
cmove edx, ebx
mov eax, dword [esi]
test eax, eax
jne 0x10009161
mov esi, edx
cmp edx, 0x1f1
jae 0x1000915a
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x1000c653
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x10], eax
test eax, eax
je 0x1000bdb0
cmp esi, 9
jb 0x10009319
cmp esi, 0x1f1
jae 0x10008f3e
add esi, 0xf
mov eax, esi
and eax, 0xfffffff0
mov dword [esp + 0x18], eax
shr esi, 4
shl esi, 5
mov dword [esp + 0x1c], esi
mov ecx, dword [esp + 0x10]
cmp byte [ecx + 0x40], 0
je 0x10008df8
cmp dword [ecx + 0x44], 0
je 0x1000c101
mov eax, dword [esp + 0x1c]
lea edi, [ecx + eax]
add edi, 0x5c
lea eax, [ecx + 0xc]
mov dword [esp + 4], eax
cmp dword [ecx + 0x24], 0
jne 0x10008e19
push dword [esp + 4]
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov esi, dword [edi]
test esi, esi
je 0x10008f5a
cmp dword [esi + 8], 0
je 0x10008f5a
mov eax, dword [esi + 4]
mov dword [esp], eax
mov dword [esp + 0x24], esi
mov edx, dword [esi + eax*4 + 0xc]
test edx, edx
je 0x10009247
mov eax, dword [esp + 0x10]
mov ebx, dword [eax + 0x44]
test ebx, ebx
jne 0x10008ed6
tzcnt ebx, edx
mov esi, dword [esp]
mov edi, esi
shl edi, 5
or edi, ebx
btc edx, ebx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
imul edi, dword [eax + ecx + 0x64]
mov eax, dword [eax + ecx + 0x70]
mov ecx, dword [esp + 0x24]
mov dword [ecx + esi*4 + 0xc], edx
add eax, ecx
add edi, eax
dec dword [ecx + 8]
mov dword [esp], edi
test edi, edi
je 0x1000c766
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
add dword [eax + 0x30], ecx
xor ebx, ebx
cmp dword [eax + 0x24], 0
jne 0x10008eab
push dword [esp + 4]
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
test bl, bl
jne 0x1000a19a
cmp dword [esp], 0
je 0x1000a19a
mov ecx, dword [esp + 0x98]
xor ecx, ebp
call fcn.1004fb50
mov eax, dword [esp]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov edi, eax
shld edi, ecx, 0x17
mov esi, ecx
shl esi, 0x17
xor esi, ecx
mov ecx, dword [ebx + 0xc]
xor edi, eax
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, edi
mov dword [esp + 0xc], edi
shr edi, 0x11
xor edi, eax
mov eax, dword [ebx + 8]
mov dword [ebx + 4], ecx
shld dword [esp + 0xc], esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, dword [esp + 0xc]
mov dword [ebx], eax
mov dword [ebx + 0xc], edi
mov dword [ebx + 8], ecx
add ecx, eax
mov esi, edx
ror esi, cl
test esi, esi
je 0x10008f37
tzcnt ebx, esi
add ebx, ecx
and ebx, 0x1f
jmp 0x10008e56
mov ebx, 0x20
jmp 0x10008f2d
add esi, 0xff
mov eax, esi
and eax, 0x1f00
mov dword [esp + 0x18], eax
shr esi, 8
add esi, 0x1e
jmp 0x10008ddd
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
mov edx, dword [eax + ecx + 0x60]
test edx, edx
je 0x10009fa7
add ecx, eax
add ecx, 0x60
mov eax, edx
mov ebx, eax
mov eax, dword [eax]
test eax, eax
jne 0x10008f75
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], 0
xor esi, esi
dec esi
xor eax, eax
cmp edx, ebx
setb al
cmova eax, esi
cmp eax, 0xffffffff
mov dword [esp + 0x24], ecx
jne 0x10009a6c
mov ecx, dword [edx]
test ecx, ecx
je 0x1000c489
mov eax, dword [ecx + 4]
mov dword [esp + 0xc], 0
test al, 1
je 0x100092b6
mov dword [esp], edx
xor esi, esi
dec esi
mov edx, ecx
xor eax, eax
cmp ecx, ebx
setb al
cmova eax, esi
cmp eax, 0xffffffff
jne 0x1000904e
test edx, edx
je 0x1000a4d0
mov ecx, dword [edx]
test ecx, ecx
je 0x1000a4d0
mov eax, dword [ecx + 4]
test al, 1
je 0x10008ff5
mov dword [esp], edx
jmp 0x10008fc6
mov esi, dword [ecx]
test esi, esi
je 0x10009001
test byte [esi + 4], 1
jne 0x10008fc0
mov dword [esp + 0x14], edi
or eax, 1
mov dword [ecx + 4], eax
mov edi, dword [edx + 4]
mov esi, edi
and esi, 0xfffffffe
je 0x1000c418
mov ecx, dword [esi]
test ecx, ecx
jne 0x1000906d
or edi, 1
mov dword [edx + 4], edi
mov eax, dword [esi]
or eax, 1
mov dword [edx + 4], eax
mov dword [esi], edx
mov ecx, esi
mov edi, dword [esp + 0x14]
mov eax, dword [esp]
cmp dword [eax], edx
mov edx, eax
mov esi, 0xffffffff
jne 0x1000c723
mov dword [edx], ecx
jmp 0x10008fc6
test eax, eax
jne 0x10009079
xor ecx, ecx
test edx, edx
je 0x10009210
mov esi, dword [edx + 4]
mov eax, dword [esp]
cmp esi, 1
jbe 0x10009206
jmp 0x10009088
mov eax, dword [ecx + 4]
test al, 1
je 0x1000901f
jmp 0x10009b87
test edx, edx
je 0x1000c714
mov esi, dword [edx + 4]
mov eax, dword [esp + 0xc]
mov dword [esp + 0xc], eax
mov ecx, esi
and ecx, 0xfffffffe
je 0x100090a3
mov eax, dword [ecx]
test eax, eax
je 0x100090a3
test byte [eax + 4], 1
jne 0x10008fc0
mov eax, dword [edx]
test eax, eax
je 0x1000c714
mov ecx, dword [eax + 4]
test cl, 1
je 0x10009c85
mov dword [esp + 0x14], edi
and ecx, 0xfffffffe
je 0x1000c6cc
mov edi, dword [ecx]
test edi, edi
je 0x100090d6
test byte [edi + 4], 1
jne 0x10009f39
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
or byte [ecx + 4], 1
mov ecx, dword [edx]
test ecx, ecx
je 0x1000c6b7
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov edi, dword [edx + 4]
mov esi, edi
and esi, 0xfffffffe
je 0x1000c6a8
mov eax, dword [esi]
and eax, 0xfffffffe
and edi, 1
or edi, eax
mov dword [edx + 4], edi
mov dword [esi], edx
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
or byte [edx + 4], 1
mov edi, dword [esp + 0x14]
mov eax, dword [esp]
cmp dword [eax], edx
mov edx, eax
je 0x10009312
mov eax, ecx
and eax, 0xfffffffe
mov esi, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov dword [esi + 4], edx
mov edx, esi
jmp 0x10008fc0
mov eax, dword [0x100a5744]
mov edx, esi
mov dword [esp + 0x10], eax
mov esi, edx
cmp edx, 0xf00
jbe 0x10008db9
mov edx, esi
cmp esi, 0xfd000
ja 0x1000beae
add edx, 0xfff
mov dword [esp + 0x1c], edx
mov eax, dword [esp + 0x10]
lea esi, [eax + 0xc]
cmp dword [eax + 0x24], 0
jne 0x1000919f
push esi
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x1c]
and eax, 0xfffff000
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x10]
mov edi, dword [eax + 0x58]
test edi, edi
mov dword [esp + 0x2c], esi
je 0x10009e1d
xor eax, eax
mov ecx, 0xfffff000
xor edx, edx
dec edx
mov dword [esp + 4], edi
mov esi, edi
mov edi, dword [esi + 8]
and edi, ecx
xor ebx, ebx
cmp dword [esp + 0x24], edi
seta bl
cmovb ebx, edx
lea edi, [ebx + 1]
cmp edi, 2
jae 0x100091f5
mov eax, esi
mov esi, dword [esi]
test esi, esi
jne 0x100091cf
jmp 0x10009356
cmp ebx, 1
jne 0x1000c7e9
mov esi, dword [esi + 4]
and esi, 0xfffffffe
jmp 0x100091ec
mov esi, dword [edx]
test esi, esi
jne 0x10009c00
mov eax, dword [esp]
cmp dword [eax], edx
mov edx, eax
jne 0x10009eb9
mov dword [edx], ecx
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x70]
mov dword [ecx], eax
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov esi, 0xfffff000
and esi, dword [ebx + 8]
mov dword [edi], esi
test esi, esi
jne 0x10008e2d
jmp 0x1000b8c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [eax + ecx + 0x6c]
mov eax, dword [esp]
mov edi, eax
shl edi, 5
mov edx, dword [esp + 0x24]
inc eax
cmp eax, ecx
jae 0x1000c75f
mov esi, dword [edx + eax*4 + 0xc]
add edi, 0x20
test esi, esi
je 0x1000925f
mov dword [esp], eax
mov eax, dword [esp + 0x10]
mov ebx, dword [eax + 0x44]
test ebx, ebx
jne 0x10009810
tzcnt ebx, esi
add edi, ebx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
imul edi, dword [eax + ecx + 0x64]
mov eax, dword [eax + ecx + 0x70]
mov ecx, dword [esp + 0x24]
add eax, ecx
add edi, eax
btc esi, ebx
mov eax, dword [esp]
mov dword [ecx + eax*4 + 0xc], esi
mov dword [ecx + 4], eax
jmp 0x10008e80
mov esi, dword [ecx]
test esi, esi
je 0x100092c6
test byte [esi + 4], 1
jne 0x10008fc0
or eax, 1
mov dword [ecx + 4], eax
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1000c495
mov ecx, dword [eax]
test ecx, ecx
je 0x100092f8
mov dword [esp + 8], esi
mov esi, dword [ecx + 4]
mov dword [esp], esi
mov esi, dword [esp + 8]
test byte [esp], 1
jne 0x1000aad4
or esi, 1
mov dword [edx + 4], esi
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
and byte [ecx + 4], 0xfe
lea edx, [esp + 0x70]
mov dword [edx], ecx
jmp 0x10008fc0
mov edx, esi
mov eax, esi
dec eax
je 0x10009a93
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor esi, esi
inc esi
shl esi, cl
cmp esi, 9
mov eax, 8
cmovb esi, eax
cmp edx, 2
cmovb esi, eax
mov dword [esp + 0x18], esi
mov eax, esi
shr eax, 3
or eax, 1
bsr esi, eax
jmp 0x10008ddd
test eax, eax
je 0x1000c7f0
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
and edx, 0xfffffff8
shl edx, 9
add edx, ecx
mov edi, edx
and edi, 0xfff00000
mov eax, dword [edi + 0xc]
mov dword [esp + 0x28], eax
mov dword [esp], edx
mov eax, edx
shr eax, 0xc
movzx ecx, al
lea eax, [ecx*4]
lea eax, [eax + eax*2]
or eax, edi
mov dword [esp + 0x18], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x34], eax
mov esi, dword [esp + 0x1c]
shr esi, 0xc
cmp dword [esp + 0x24], 0
mov dword [esp + 0xc], edi
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], esi
je 0x10009d35
xor eax, eax
inc eax
cmp esi, 2
cmovae eax, esi
mov dword [esp + 8], eax
lea eax, [ecx + ecx*2]
lea eax, [edi + eax*4]
add eax, 0x18
xor ebx, ebx
mov dword [esp + 0x14], esi
xor edx, edx
mov dword [esp + 4], eax
mov esi, ecx
lea edi, [edx + ecx]
lea eax, [edi + edi*2]
mov ecx, dword [esp + 0xc]
test byte [ecx + eax*4 + 0x18], 0x60
jne 0x10009421
inc edx
cmp edx, dword [esp + 0x1c]
setae bl
dec dword [esp + 0x14]
mov eax, dword [esp + 4]
add eax, 0xc
cmp edx, dword [esp + 8]
mov ecx, esi
jne 0x100093ea
jmp 0x100094e3
mov dword [esp + 0x30], edx
cmp edx, dword [esp + 0x1c]
mov eax, dword [esp + 4]
jae 0x1000a3cb
mov edx, edi
xor edi, edi
mov esi, dword [esp + 0x14]
mov ecx, dword [eax]
test cl, 0x60
je 0x10009451
and ecx, 0xffffff9f
mov dword [eax], ecx
inc edi
add eax, 0xc
cmp esi, edi
jne 0x1000943b
mov edi, esi
mov ecx, edi
shl ecx, 0xc
mov dword [esp + 0x38], ebx
jne 0x10009e7f
jmp 0x100094a4
mov dword [esp + 0x48], ecx
mov esi, edx
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esp + 0x44], eax
push 4
push 0x1000
push esi
push ebx
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x1000c433
add ebx, esi
mov ecx, dword [esp + 0x48]
sub ecx, esi
mov eax, 0x100000
cmp ecx, eax
mov edx, 0x100000
cmovb edx, ecx
test ecx, ecx
jne 0x10009462
mov al, 1
test edi, edi
je 0x100094c7
test al, al
mov ecx, 0x20
mov edx, 4
cmovne ecx, edx
mov edx, dword [esp + 4]
mov ebx, edi
or dword [edx], ecx
add edx, 0xc
dec ebx
jne 0x100094bf
test al, al
mov esi, dword [esp + 0x20]
je 0x100097d6
mov eax, dword [esp + 0x10]
add dword [eax + 0x2c], edi
mov edx, dword [esp + 0x30]
jmp 0x10009401
mov dword [esp + 0x38], ebx
mov eax, dword [esp + 0x10]
mov esi, dword [eax + 0x58]
mov dword [esp + 4], esi
mov eax, dword [esp + 0x18]
lea ecx, [eax + 0x10]
mov dword [esp + 8], ecx
add eax, 0x18
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], 0
mov dword [esp + 0x18], eax
mov ecx, dword [eax]
mov edx, 0xfffff000
mov ebx, ecx
and ebx, edx
and edx, dword [esi + 8]
xor esi, esi
dec esi
xor eax, eax
cmp ebx, edx
seta al
cmovb eax, esi
mov esi, dword [esp + 4]
test eax, eax
je 0x10009d57
cmp eax, 0xffffffff
jne 0x10009a9d
mov esi, dword [esi]
test esi, esi
je 0x1000ca3b
mov eax, dword [esi + 4]
mov dword [esp + 0x30], 0
test al, 1
je 0x10009b24
mov eax, dword [esp + 4]
mov dword [esp + 0x14], eax
mov dword [esp + 4], esi
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, ecx
mov ebx, 0xfffff000
and edx, ebx
mov eax, dword [esp + 4]
mov esi, dword [eax + 8]
and esi, ebx
xor eax, eax
cmp edx, esi
mov esi, dword [esp + 4]
seta al
mov edx, 0xffffffff
cmovb eax, edx
test eax, eax
je 0x100095c3
cmp eax, 0xffffffff
jne 0x100095dd
mov esi, dword [esi]
test esi, esi
je 0x1000a534
mov eax, dword [esi + 4]
test al, 1
jne 0x1000955d
mov ecx, dword [esi]
test ecx, ecx
je 0x100096b9
test byte [ecx + 4], 1
jne 0x1000955d
jmp 0x100096b9
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 8]
xor eax, eax
cmp ecx, esi
seta cl
jb 0x1000959d
mov al, cl
jmp 0x10009598
test eax, eax
je 0x100096a4
mov edx, dword [esi + 4]
mov ebx, dword [esp + 0x14]
mov esi, edx
and esi, 0xfffffffe
je 0x10009603
mov eax, dword [esi]
test eax, eax
je 0x10009603
test byte [eax + 4], 1
jne 0x1000955d
mov esi, dword [esp + 4]
mov ecx, dword [esi]
test ecx, ecx
je 0x1000c7da
mov eax, dword [ecx + 4]
test al, 1
je 0x10009de1
and eax, 0xfffffffe
je 0x1000c46e
mov edi, dword [eax]
test edi, edi
je 0x10009635
test byte [edi + 4], 1
jne 0x1000a8ed
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
or byte [eax + 4], 1
mov edi, esi
mov esi, dword [esi]
test esi, esi
je 0x1000c783
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov dword [edi], eax
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1000c798
mov edx, dword [eax]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [edi + 4], ecx
mov dword [eax], edi
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
or byte [edi + 4], 1
cmp dword [ebx], edi
jne 0x10009ea0
mov dword [ebx], esi
mov dword [esp + 4], ebx
jmp 0x1000955d
mov edx, dword [esi + 4]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x30], ebx
cmp edx, 1
jbe 0x1000970c
jmp 0x100095ec
or eax, 1
mov dword [esi + 4], eax
mov eax, dword [esp + 4]
mov ecx, dword [eax + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1000c458
mov esi, dword [eax]
test esi, esi
mov ebx, dword [esp + 0x14]
je 0x100096e7
mov edx, dword [esi + 4]
test dl, 1
jne 0x1000a479
or ecx, 1
mov edx, dword [esp + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov esi, eax
cmp dword [ebx], edx
jne 0x1000cac8
mov dword [ebx], esi
jmp 0x10009565
mov ecx, dword [esi]
test ecx, ecx
je 0x1000973d
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov edx, dword [ecx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
or byte [esi + 4], 1
and dword [ecx + 4], 1
cmp dword [ebx], esi
jne 0x10009d44
mov dword [ebx], ecx
mov ecx, dword [esp + 0x70]
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x34]
shr edx, 0xc
mov eax, dword [esp + 0x10]
mov dword [eax + 0x58], ecx
mov ecx, edx
xor eax, eax
mov edx, dword [esp + 8]
mov dword [edx], eax
mov dword [edx + 4], eax
cmp ecx, dword [esp + 0x1c]
jne 0x10009881
cmp dword [esp + 0x24], 0
je 0x100097bb
xor eax, eax
inc eax
mov ecx, dword [esp + 0x1c]
cmp ecx, 2
cmovae eax, ecx
shl eax, 2
lea eax, [eax + eax*2]
mov ecx, dword [esp + 0x20]
lea ecx, [ecx + ecx*2]
lea ecx, [ebx + ecx*4]
add ecx, 0x18
xor edx, edx
mov esi, dword [esp + 0x10]
test byte [ecx + edx], 8
je 0x100097ad
dec dword [ebx + 0xc]
dec dword [esi + 0x48]
mov dword [ecx + edx], 3
add edx, 0xc
cmp eax, edx
jne 0x100097a1
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
or dword [ecx], eax
cmp dword [ebx + 0xc], 0
jne 0x100097d6
cmp dword [esp + 0x28], 0
jne 0x10009d75
test byte [esp + 0x38], 1
je 0x1000a18c
cmp dword [esp], 0
je 0x1000a18c
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
add dword [eax + 0x34], ecx
mov eax, dword [esp + 0x2c]
cmp dword [eax + 0x18], 0
jne 0x10008eb3
push eax
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
jmp 0x10008eb3
mov eax, dword [ebx]
mov edx, dword [ebx + 4]
mov dword [esp + 0xc], edx
shld edx, eax, 0x17
mov dword [esp + 0x14], esi
mov esi, eax
shl esi, 0x17
xor esi, eax
mov ecx, dword [ebx + 0xc]
xor edx, dword [esp + 0xc]
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, edx
mov dword [esp + 0xc], edx
shr edx, 0x11
xor edx, eax
mov eax, dword [ebx + 8]
mov dword [ebx + 4], ecx
shld dword [esp + 0xc], esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
mov esi, dword [esp + 0x14]
xor ecx, dword [esp + 0xc]
mov dword [ebx], eax
mov dword [ebx + 0xc], edx
mov dword [ebx + 8], ecx
add ecx, eax
mov edx, esi
ror edx, cl
test edx, edx
je 0x10009b1a
tzcnt ebx, edx
add ebx, ecx
and ebx, 0x1f
jmp 0x10009289
mov edx, dword [esp + 0x20]
lea eax, [edx + ecx]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1c]
sub ecx, eax
shl ecx, 0xc
add eax, edx
lea edi, [eax + eax*2]
lea eax, [ebx + edi*4]
add eax, 0x10
mov edx, 0xfff
mov esi, dword [eax + 8]
and esi, edx
or esi, ecx
mov dword [esp + 8], eax
mov dword [eax + 8], esi
mov eax, dword [esp + 4]
lea esi, [eax + eax*2]
and edx, dword [ebx + esi*4 + 0xc]
or edx, ecx
mov dword [ebx + esi*4 + 0xc], edx
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x58]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], 0
test ecx, ecx
je 0x1000a39c
lea eax, [ebx + edi*4]
add eax, 0x18
mov dword [esp + 0x14], eax
lea esi, [esp + 0x70]
xor edi, edi
mov edx, esi
mov dword [esp + 4], edx
mov esi, dword [ecx]
test esi, esi
je 0x1000990e
mov eax, dword [esi + 4]
test al, 1
je 0x1000990e
mov ebx, dword [esi]
test ebx, ebx
je 0x1000990e
test byte [ebx + 4], 1
jne 0x1000996b
mov esi, ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov eax, ecx
mov ebx, 0xfffff000
and eax, ebx
mov edx, dword [esi + 8]
and edx, ebx
xor ebx, ebx
cmp eax, edx
seta bl
mov eax, 0xffffffff
cmovb ebx, eax
cmp ebx, 0xffffffff
je 0x10009955
xor eax, eax
inc eax
test ebx, ebx
jne 0x1000999f
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 8]
xor eax, eax
cmp ecx, esi
seta cl
jae 0x1000999d
mov ecx, dword [esi]
xor eax, eax
dec eax
test ecx, ecx
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 4]
jne 0x100098ef
jmp 0x10009a34
and eax, 0xfffffffe
mov dword [ecx], eax
mov ebx, ecx
and ebx, 0xfffffffe
mov eax, dword [esi]
mov edx, dword [esi + 4]
and edx, 1
or edx, ebx
mov dword [esi + 4], edx
test eax, eax
je 0x1000c750
and byte [eax + 4], 0xfe
mov edx, dword [esp + 4]
cmp dword [edx], ecx
jne 0x100099a7
mov dword [edx], esi
jmp 0x10009910
mov al, cl
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
jmp 0x1000995a
and esi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + esi]
mov dword [edx + 4], ecx
test esi, esi
je 0x1000c741
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [esi], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
or byte [edx + 4], 1
test edi, edi
je 0x1000c5ed
cmp dword [edi], edx
je 0x1000a41b
jmp 0x1000a524
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov ebx, dword [esi + 8]
and ebx, ecx
xor ecx, ecx
cmp edx, ebx
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x1000a3b6
jmp 0x1000a957
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, esi
test ecx, ecx
jne 0x100098f1
mov ecx, dword [esp + 8]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x10009c32
mov dword [esi], ecx
mov eax, dword [esp + 0x70]
test eax, eax
je 0x1000ca68
and byte [eax + 4], 0xfe
mov ecx, dword [esp + 0x10]
mov dword [ecx + 0x58], eax
jmp 0x10009774
test eax, eax
jne 0x10009cbf
mov eax, dword [edx + 4]
cmp eax, 1
ja 0x1000b8ec
mov eax, dword [edx]
test eax, eax
jne 0x1000b8f9
mov dword [esp + 0x70], eax
jmp 0x10009223
mov ecx, 0x20
jmp 0x1000932a
test eax, eax
je 0x10009ecc
mov eax, dword [esi + 4]
mov dword [esp + 0x30], 0
mov esi, eax
and esi, 0xfffffffe
je 0x10009ac7
mov ecx, dword [esi]
test ecx, ecx
je 0x10009ac7
test byte [ecx + 4], 1
jne 0x1000955d
mov edx, dword [esp + 4]
mov ecx, dword [edx]
test ecx, ecx
je 0x1000cba1
test byte [ecx + 4], 1
jne 0x1000aac2
or eax, 1
mov dword [edx + 4], eax
mov eax, dword [ecx]
test eax, eax
je 0x10009af7
mov ebx, dword [eax + 4]
test bl, 1
jne 0x1000ac9e
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov esi, eax
and esi, 0xfffffffe
je 0x1000cc0c
mov ecx, dword [esi]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
mov dword [esi], edx
jmp 0x10009b78
mov ebx, 0x20
jmp 0x10009877
mov ecx, dword [esi]
test ecx, ecx
je 0x10009b34
test byte [ecx + 4], 1
jne 0x1000955d
or eax, 1
mov dword [esi + 4], eax
mov eax, dword [esp + 4]
mov ecx, dword [eax + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1000c51c
mov esi, dword [eax]
test esi, esi
je 0x10009b5e
mov edx, dword [esi + 4]
test dl, 1
jne 0x1000b41b
or ecx, 1
mov edx, dword [esp + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov esi, eax
and byte [esi + 4], 0xfe
lea eax, [esp + 0x70]
mov dword [esp + 4], eax
mov dword [eax], esi
jmp 0x1000955d
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x1000c66c
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov esi, dword [edx + 4]
and esi, 0xfffffffe
mov edi, dword [esp + 0x14]
je 0x10009bf8
mov eax, dword [esi + 4]
test al, 1
je 0x10009bf8
and eax, 0xfffffffe
mov dword [esi + 4], eax
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x1000c65d
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
jmp 0x10009035
mov dword [edx + 4], esi
jmp 0x10009035
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
or byte [edx + 4], 1
and dword [esi + 4], 1
mov ecx, esi
jmp 0x10009210
mov eax, dword [esi + 4]
and eax, 1
mov ecx, eax
or ecx, dword [esp + 8]
mov dword [esi + 4], ecx
mov ecx, dword [esp + 8]
mov ecx, dword [ecx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [esp + 8]
mov dword [eax], esi
mov eax, dword [esi + 4]
and eax, 1
mov ecx, dword [esp + 8]
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov eax, dword [esp + 8]
mov dword [eax + 4], ecx
mov eax, dword [esp + 8]
or byte [esi + 4], 1
cmp dword [edi], esi
jne 0x10009f1a
mov dword [edi], eax
jmp 0x10009a50
or ecx, 1
mov dword [eax + 4], ecx
mov eax, dword [eax]
test eax, eax
je 0x10009c9d
mov ecx, dword [eax + 4]
test cl, 1
jne 0x1000a343
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1000c705
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
jmp 0x10009134
mov eax, dword [edx + 4]
mov dword [esp + 0xc], 0
mov ecx, eax
and ecx, 0xfffffffe
je 0x10009ce1
mov esi, dword [ecx]
test esi, esi
je 0x10009ce1
test byte [esi + 4], 1
jne 0x10008fc0
mov ecx, dword [edx]
test ecx, ecx
je 0x1000cc80
test byte [ecx + 4], 1
jne 0x1000ac23
or eax, 1
mov dword [edx + 4], eax
mov esi, dword [ecx]
test esi, esi
je 0x10009d0f
mov eax, dword [esi + 4]
mov dword [esp], eax
test al, 1
jne 0x1000b689
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1000cddb
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
jmp 0x1000930e
mov al, 1
mov dword [esp + 0x38], eax
mov esi, dword [esp + 4]
jmp 0x100094ee
and ecx, 0xfffffffe
mov eax, dword [ebx + 4]
and eax, 1
or eax, ecx
mov dword [ebx + 4], eax
jmp 0x10009747
xor edx, edx
test cl, 0x10
cmove edx, dword [esp + 8]
xor eax, eax
cmp edx, esi
seta cl
jb 0x10009540
mov al, cl
jmp 0x10009537
mov eax, dword [esp + 0x10]
mov esi, dword [eax + 0x38]
mov dword [esp + 0x74], esi
mov dword [esp + 0x78], 0
xor edx, edx
dec edx
xor eax, eax
cmp esi, ebx
setb al
cmova eax, edx
cmp eax, 0xffffffff
je 0x1000a012
test eax, eax
je 0x1000abbe
test esi, esi
je 0x1000c5a4
mov ecx, dword [esi + 8]
mov dword [esp + 0x1c], 0
mov eax, ecx
and eax, 0xfffffffe
je 0x1000ab8b
mov edx, dword [eax + 4]
test edx, edx
je 0x1000ab8b
test byte [edx + 8], 1
je 0x1000ab8b
xor edx, edx
dec edx
jmp 0x1000a037
or eax, 1
mov dword [ecx + 4], eax
mov eax, dword [ecx]
test eax, eax
je 0x10009df9
mov ecx, dword [eax + 4]
test cl, 1
jne 0x1000a422
mov eax, dword [esi + 4]
mov edi, esi
mov esi, eax
and esi, 0xfffffffe
je 0x1000c7a7
mov ecx, dword [esi]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [edi + 4], eax
mov dword [esi], edi
jmp 0x10009691
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne 0x1000a3d2
push 0x100a57b8
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [0x100a57d0]
test eax, eax
je 0x1000a9b4
xor ebx, ebx
xor ecx, ecx
dec ecx
mov esi, dword [eax + 0x14]
xor edx, edx
cmp esi, 0x100000
setb dl
cmova edx, ecx
cmp edx, 0xffffffff
jne 0x10009e6c
mov ebx, eax
mov eax, dword [eax]
test eax, eax
jne 0x10009e49
jmp 0x1000a5a0
test edx, edx
jne 0x1000cd1c
cmp dword [eax + 0x10], 0
jne 0x10009e5f
jmp 0x1000cd2c
mov ebx, edx
shl ebx, 0xc
mov eax, ebx
and eax, 0xff000
mov edx, 0x100000
sub edx, eax
cmp edx, ecx
cmovae edx, ecx
add ebx, dword [esp + 0xc]
jmp 0x10009462
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
mov dword [esp + 4], ebx
jmp 0x1000955d
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1000921f
mov eax, dword [esi + 4]
cmp eax, 1
mov ebx, dword [esp + 0xc]
ja 0x1000b61b
mov eax, dword [esi]
xor ecx, ecx
test eax, eax
je 0x1000974f
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [esi], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
or byte [esi + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x1000974f
mov eax, dword [edi + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp esi, ecx
jne 0x10009a50
and eax, 1
or eax, dword [esp + 8]
mov dword [edi + 4], eax
jmp 0x10009a50
and esi, 1
mov dword [esp + 8], eax
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
or eax, esi
mov dword [ecx + 4], eax
and byte [edi + 4], 0xfe
mov edi, dword [esp + 8]
mov eax, dword [edi + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x1000c699
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edi + 4], eax
mov dword [ecx], edi
mov dword [edx], ecx
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov edi, dword [edx + 4]
mov esi, edi
and esi, 0xfffffffe
jne 0x10009112
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
movzx ecx, byte [eax + ecx + 0x7a]
mov dword [esp + 0xc], ecx
lea ecx, [eax + 0x58]
mov dword [esp + 0x30], ecx
mov ecx, dword [eax + 0x58]
test ecx, ecx
mov dword [esp + 0x14], edi
je 0x1000b4ed
mov edi, dword [esp + 0xc]
shl edi, 0xc
xor eax, eax
mov edx, ebx
mov esi, dword [ecx + 8]
mov ebx, 0xfffff000
and esi, ebx
xor ebx, ebx
cmp edi, esi
seta bl
mov esi, 0xffffffff
cmovb ebx, esi
lea esi, [ebx + 1]
cmp esi, 2
jae 0x1000a001
mov eax, ecx
mov ecx, dword [ecx]
mov ebx, edx
test ecx, ecx
jne 0x10009fcf
jmp 0x1000a1b2
cmp ebx, 1
jne 0x1000cb85
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
jmp 0x10009ff6
test esi, esi
je 0x1000a98c
mov eax, dword [esi + 4]
test eax, eax
je 0x1000a98c
mov dword [esp + 0x1c], 0
test byte [eax + 8], 1
je 0x1000a97b
mov ebx, esi
mov esi, eax
xor eax, eax
cmp esi, dword [esp + 0xc]
setb al
cmova eax, edx
cmp eax, 0xffffffff
jne 0x1000a07b
test esi, esi
je 0x1000bb8d
mov eax, dword [esi + 4]
test eax, eax
je 0x1000bb8d
mov ecx, dword [eax + 8]
test cl, 1
jne 0x1000a037
mov edx, dword [eax + 4]
test edx, edx
je 0x1000a0c9
test byte [edx + 8], 1
je 0x1000a0c9
mov ebx, esi
xor edx, edx
dec edx
jmp 0x1000a039
test eax, eax
jne 0x1000a09b
xor ecx, ecx
test esi, esi
je 0x1000a150
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], ebx
cmp eax, 1
jbe 0x1000a11b
jmp 0x1000a0a6
test esi, esi
je 0x1000ab5c
mov eax, dword [esi + 8]
and eax, 0xfffffffe
je 0x1000ab5c
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000ab5c
test byte [ecx + 8], 1
jne 0x1000a037
jmp 0x1000ab5c
or ecx, 1
mov dword [eax + 8], ecx
mov edx, dword [esi + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1000ca95
mov edi, dword [ecx + 4]
test edi, edi
je 0x1000a0ef
mov eax, dword [edi + 8]
test al, 1
jne 0x1000baa8
or edx, 1
mov dword [esi + 8], edx
mov eax, dword [ecx + 4]
or eax, 1
mov dword [esi + 8], eax
mov dword [ecx + 4], esi
mov edi, ecx
cmp dword [ebx + 4], esi
mov edx, 0xffffffff
jne 0x1000cd5e
mov dword [ebx + 4], edi
mov esi, edi
jmp 0x1000a03b
mov eax, dword [esi + 4]
test eax, eax
je 0x1000a150
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [esi + 4], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [esi + 8], 1
and dword [eax + 8], 1
mov ecx, eax
cmp dword [ebx + 4], esi
jne 0x1000a58d
mov dword [ebx + 4], ecx
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x10]
mov dword [ecx + 0x38], eax
mov ebx, dword [esp + 0xc]
test ebx, ebx
je 0x1000cb92
xor eax, eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
cmp dword [esp], 0
setne al
test byte [esp + 0x38], al
jne 0x100097eb
mov eax, dword [esp + 0x2c]
cmp dword [eax + 0x18], 0
je 0x1000c17f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [eax], 0xc
mov dword [esp], 0
jmp 0x10008ebd
test eax, eax
mov edi, dword [esp + 0x14]
je 0x1000b4ed
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
mov esi, edx
and esi, 0xfffffff8
shl esi, 9
add esi, ecx
mov ecx, esi
and ecx, 0xfff00000
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x44], eax
mov dword [esp + 0x24], esi
mov eax, esi
shr eax, 0xc
movzx esi, al
lea eax, [esi*4]
lea eax, [eax + eax*2]
or eax, ecx
mov dword [esp], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0xc]
test eax, eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x38], esi
je 0x1000acf5
cmp eax, 2
cmovae ebx, eax
mov dword [esp + 0x34], ebx
mov ebx, eax
lea eax, [esi + esi*2]
lea eax, [ecx + eax*4]
add eax, 0x18
mov dword [esp + 0x2c], eax
xor edx, edx
mov dword [esp + 8], ebx
xor ebx, ebx
mov eax, esi
lea esi, [ebx + eax]
lea eax, [esi + esi*2]
test byte [ecx + eax*4 + 0x18], 0x60
jne 0x1000a274
inc ebx
cmp ebx, dword [esp + 0xc]
setae dl
dec dword [esp + 8]
add dword [esp + 0x2c], 0xc
cmp ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
jne 0x1000a247
jmp 0x1000acf7
mov dword [esp + 0x40], esi
cmp ebx, dword [esp + 0xc]
jae 0x1000b958
xor esi, esi
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
test cl, 0x60
je 0x1000a2a2
and ecx, 0xffffff9f
mov dword [eax], ecx
inc esi
add eax, 0xc
cmp dword [esp + 8], esi
jne 0x1000a288
mov esi, dword [esp + 8]
mov dword [esp + 0x28], edx
mov edx, esi
shl edx, 0xc
mov dword [esp + 0x3c], esi
jne 0x1000b57f
jmp 0x1000a2f7
mov dword [esp + 0x40], edx
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esp + 0x54], eax
push 4
push 0x1000
push edi
push esi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x1000c5b3
add esi, edi
mov edx, dword [esp + 0x40]
sub edx, edi
mov eax, 0x100000
cmp edx, eax
mov edi, 0x100000
cmovb edi, edx
test edx, edx
jne 0x1000a2b7
mov al, 1
cmp dword [esp + 0x3c], 0
je 0x1000a31f
test al, al
mov ecx, 0x20
mov edx, 4
cmovne ecx, edx
mov edx, dword [esp + 0x2c]
mov esi, dword [esp + 0x3c]
or dword [edx], ecx
add edx, 0xc
dec esi
jne 0x1000a317
test al, al
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x3c]
je 0x1000b241
mov eax, dword [esp + 0x10]
add dword [eax + 0x2c], esi
jmp 0x1000a254
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1000c6f0
mov dword [esp + 0x14], edi
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov eax, dword [edx + 4]
mov esi, eax
and esi, 0xfffffffe
je 0x1000c6e1
mov edi, dword [esi]
and edi, 0xfffffffe
and eax, 1
or eax, edi
mov dword [edx + 4], eax
mov dword [esi], edx
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
jmp 0x10009130
mov ecx, dword [esp + 8]
mov dword [ecx], 0
mov dword [ecx + 4], 1
lea esi, [esp + 0x70]
jmp 0x10009a4e
xor eax, eax
inc eax
cmp ecx, 0xffffffff
mov ebx, dword [esp + 0xc]
jne 0x10009a24
jmp 0x1000ac19
xor edi, edi
jmp 0x100094d3
xor eax, eax
mov dword [ecx + 0x3c], eax
lea ecx, [esp + 0x70]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [edx + 0x28], eax
lea edi, [edx + 0x28]
mov dword [edx + 0x2c], 1
lea eax, [edx + 0x2000]
mov dword [esp], eax
mov dword [ecx], edi
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x1000cc30
and byte [ecx + 4], 0xfe
mov eax, dword [esp + 0x10]
mov dword [esp + 4], ecx
mov dword [eax + 0x58], ecx
mov edx, dword [esp]
jmp 0x1000937d
mov dword [edi], esi
jmp 0x100099f4
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov edi, esi
mov esi, dword [esi]
test esi, esi
je 0x1000c7b6
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov dword [edi], eax
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1000c7cb
mov edx, dword [eax]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [edi + 4], ecx
mov dword [eax], edi
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x10009691
and edx, 0xfffffffe
mov dword [eax], edx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
and esi, 0xfffffffe
mov edx, dword [esp + 4]
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + esi]
mov dword [edx + 4], ecx
test esi, esi
je 0x1000c68a
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [esi], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x1000a4c4
mov ecx, dword [eax + 4]
test cl, 1
jne 0x1000b5ec
mov edx, dword [esp + 4]
mov dword [edx + 4], eax
jmp 0x100096fd
mov eax, dword [esp + 0xc]
test eax, eax
je 0x1000cc4e
cmp dword [eax], ebx
jne 0x1000ac72
mov dword [eax], edx
test edx, edx
je 0x1000cc5d
mov eax, dword [ebx]
mov dword [edx], eax
mov eax, dword [ebx + 4]
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov eax, dword [esp]
cmp dword [eax], edx
jne 0x1000cc6c
mov dword [eax], 0
jmp 0x1000921f
mov eax, dword [edi + 4]
and eax, 1
or eax, esi
mov dword [edi + 4], eax
jmp 0x100099f4
mov esi, dword [esp + 0x30]
test esi, esi
je 0x1000cc95
mov eax, dword [esp + 8]
cmp dword [esi], eax
mov edx, dword [esp + 4]
mov ebx, dword [esp + 0x14]
jne 0x1000ac89
mov dword [esi], edx
mov esi, dword [esp + 8]
mov eax, dword [esi]
mov dword [edx], eax
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
cmp dword [ebx], edx
jne 0x1000cca4
mov dword [ebx], 0
jmp 0x10009747
and ecx, 0xfffffffe
mov eax, dword [ebx + 8]
and eax, 1
or eax, ecx
mov dword [ebx + 8], eax
jmp 0x1000a15c
test ebx, ebx
je 0x1000a9b4
mov esi, dword [ebx + 0x14]
mov edx, dword [ebx + 0x10]
mov dword [esp + 0x18], edx
lea edi, [edx + 0xfffff]
mov eax, 0xfff00000
and edi, eax
mov ecx, edi
sub ecx, edx
sub esi, ecx
add esi, eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0xc], eax
mov ecx, ebx
call fcn.10002520
mov ecx, 0x100a57d4
mov dword [esp + 4], ebx
mov edx, ebx
call fcn.100020d0
mov dword [esp], edi
mov eax, edi
sub eax, dword [esp + 0x18]
jne 0x1000ccc1
test esi, esi
je 0x1000ac35
mov edi, dword [esp + 4]
mov eax, dword [esp]
add eax, 0x100000
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], esi
mov eax, dword [esp + 0xc]
mov dword [edi + 0x18], eax
mov ecx, edi
call fcn.10001e40
mov ecx, 0x100a57d4
mov edx, edi
call fcn.10001bb0
lock add dword [0x100a57d8], 0xfff00000
mov eax, 0x100a57b8
push eax
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
push 4
push 0x1000
push 0x100000
mov edi, dword [esp + 0xc]
push edi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x1000c4a7
test edi, edi
je 0x1000a9bf
push 0x100a579c
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [0x100a57b4]
test eax, eax
je 0x1000cbdb
mov esi, dword [esp]
mov ecx, esi
shr ecx, 0x14
mov dword [eax + ecx*4], esi
push 0x100a579c
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x10]
add dword [eax + 0x28], 0x100000
mov dword [esi], eax
xor eax, eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x24], 0x20
mov dword [esi + 0x30], 0xfd024
mov eax, 0x3c
mov dword [esi + eax], 0x24
add eax, 0xc
cmp eax, 0xc00
jne 0x1000a6c4
mov dword [esi + 0xc00], 0xfd024
mov dword [esi + 0xc0c], 0x20
lea edi, [esi + 0x1000]
mov eax, edi
and eax, 0xfffff
mov ebx, 0x100000
sub ebx, eax
mov esi, 0xff000
cmp ebx, esi
cmovae ebx, esi
push 0x4000
push ebx
push edi
call dword [sym.imp.kernel32.dll_VirtualFree]
test eax, eax
je 0x1000cafb
add edi, ebx
sub esi, ebx
mov eax, 0x100000
cmp esi, eax
mov ebx, 0x100000
cmovb ebx, esi
test esi, esi
jne 0x1000a707
mov eax, dword [esp + 0x10]
add dword [eax + 0x2c], 2
mov ecx, dword [esp]
lea edx, [ecx + 0x28]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], 0
test ecx, ecx
je 0x1000b5a2
mov dword [esp + 0x18], edx
lea eax, [esp + 0x70]
xor edi, edi
mov esi, eax
mov dword [esp + 4], esi
mov eax, dword [ecx]
test eax, eax
je 0x1000a782
mov edx, dword [eax + 4]
test dl, 1
je 0x1000a782
mov ebx, dword [eax]
test ebx, ebx
je 0x1000a782
test byte [ebx + 4], 1
jne 0x1000a7db
mov eax, ecx
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x30]
mov edx, ecx
mov ebx, 0xfffff000
and edx, ebx
mov esi, dword [eax + 8]
and esi, ebx
xor ebx, ebx
cmp edx, esi
seta bl
mov edx, 0xffffffff
cmovb ebx, edx
cmp ebx, 0xffffffff
je 0x1000a7c9
xor edx, edx
inc edx
test ebx, ebx
jne 0x1000a80f
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x18]
xor edx, edx
cmp ecx, eax
seta cl
jae 0x1000a80d
mov ecx, dword [eax]
xor edx, edx
dec edx
test ecx, ecx
mov edi, dword [esp + 4]
jne 0x1000a762
jmp 0x1000a8a4
and edx, 0xfffffffe
mov dword [ecx], edx
mov ebx, ecx
and ebx, 0xfffffffe
mov edx, dword [eax]
mov esi, dword [eax + 4]
and esi, 1
or esi, ebx
mov dword [eax + 4], esi
test edx, edx
je 0x1000caaa
and byte [edx + 4], 0xfe
mov esi, dword [esp + 4]
cmp dword [esi], ecx
jne 0x1000a817
mov dword [esi], eax
jmp 0x1000a784
mov dl, cl
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
jmp 0x1000a7ce
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
lea edx, [ecx + eax]
mov dword [esi + 4], edx
test eax, eax
je 0x1000cab9
mov edx, dword [eax]
and edx, 0xfffffffe
or edx, ecx
mov dword [esi + 4], edx
mov dword [eax], esi
mov ecx, dword [esi + 4]
and ecx, 1
mov edx, dword [eax + 4]
and edx, 0xfffffffe
or edx, ecx
mov dword [eax + 4], edx
or byte [esi + 4], 1
test edi, edi
je 0x1000c63b
cmp dword [edi], esi
je 0x1000b628
jmp 0x1000b679
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x30]
mov edx, ecx
mov ebx, 0xfffff000
and edx, ebx
mov esi, dword [eax + 8]
and esi, ebx
xor ebx, ebx
cmp edx, esi
seta bl
mov edx, 0xffffffff
cmovb ebx, edx
test ebx, ebx
jne 0x1000b5bc
jmp 0x1000b8cb
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov esi, eax
test ecx, ecx
jne 0x1000a764
mov ecx, dword [esp]
mov dword [ecx + 0x28], 0
mov dword [ecx + 0x2c], 1
cmp edx, 1
je 0x1000aa75
mov edx, dword [esp + 0x18]
mov dword [eax], edx
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x1000cbfd
and byte [ecx + 4], 0xfe
mov eax, dword [esp + 0x10]
mov dword [esp + 4], ecx
mov dword [eax + 0x58], ecx
mov edx, dword [esp]
add edx, 0x2000
jmp 0x1000937d
and edx, 1
mov esi, dword [eax + 4]
and esi, 0xfffffffe
or esi, edx
mov dword [eax + 4], esi
and byte [edi + 4], 0xfe
mov eax, dword [ecx + 4]
mov esi, eax
and esi, 0xfffffffe
je 0x1000c774
mov edx, dword [esi]
and edx, 0xfffffffe
and eax, 1
or eax, edx
mov dword [ecx + 4], eax
mov dword [esi], ecx
mov edi, dword [esp + 4]
mov dword [edi], esi
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov dword [edi], eax
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edi + 4]
mov eax, ecx
and eax, 0xfffffffe
jne 0x10009673
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp + 8]
xor eax, eax
cmp ecx, esi
seta cl
mov ebx, dword [esp + 0xc]
jb 0x1000ac19
mov al, cl
jmp 0x10009a24
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000a98c
test byte [ecx + 8], 1
jne 0x1000a037
lea edi, [esp + 0x58]
mov ecx, edi
mov edx, esi
call fcn.10001630
mov eax, dword [edi]
test eax, eax
je 0x1000ceb5
and byte [eax + 8], 0xfe
mov dword [esp + 0x1c], 0
jmp 0x1000abaf
push 0x100a57b8
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
sub esp, 0x10
movaps xmm0, xmmword [0x10093150]
movups xmmword [esp], xmm0
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
je 0x1000c535
mov dword [esp], eax
test eax, 0xfffff
je 0x1000a66e
push 0x8000
push 0
push dword [esp + 8]
call dword [sym.imp.kernel32.dll_VirtualFree]
test eax, eax
je 0x1000ce7d
mov esi, dword [sym.imp.kernel32.dll_VirtualFree]
xor ecx, ecx
mov edx, 0x1ff000
push 0x3000
call fcn.100510b0
add esp, 4
test eax, eax
je 0x1000a18c
mov ebx, eax
add ebx, 0xfffff
and ebx, 0xfff00000
push 0x8000
push 0
push eax
call esi
test eax, eax
je 0x1000ce50
mov ecx, ebx
mov edx, 0x100000
push 0x3000
call fcn.100510b0
add esp, 4
cmp eax, ebx
jne 0x1000bfe9
mov dword [esp], ebx
test ebx, ebx
jne 0x1000a66e
jmp 0x1000aa10
mov esi, dword [esp + 0x18]
and esi, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea edx, [ecx + esi]
mov dword [eax + 4], edx
test esi, esi
je 0x1000cdbd
mov edx, dword [esi]
and edx, 0xfffffffe
or edx, ecx
mov dword [eax + 4], edx
mov dword [esi], eax
mov ecx, dword [eax + 4]
and ecx, 1
mov edx, dword [esi + 4]
and edx, 0xfffffffe
or edx, ecx
mov dword [esi + 4], edx
or byte [eax + 4], 1
cmp dword [edi], eax
jne 0x1000b492
mov ecx, esi
mov dword [edi], esi
jmp 0x1000a8c4
lea esi, [esp + 0x58]
mov ecx, esi
call fcn.10032030
mov esi, dword [esi]
jmp 0x10009b78
mov esi, dword [esp]
and esi, 0xfffffffe
mov dword [eax], esi
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x1000cdcc
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x1000ac11
mov esi, dword [eax + 4]
mov dword [esp + 8], esi
mov dword [esp], eax
mov eax, esi
test al, 1
mov eax, dword [esp]
je 0x1000ac11
mov esi, dword [esp + 8]
and esi, 0xfffffffe
mov dword [eax + 4], esi
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x1000cec4
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
jmp 0x1000930a
lea ecx, [esp + 0x6c]
mov edx, esi
call fcn.100329e0
mov eax, dword [esp + 0x6c]
cmp dword [ebx + 4], esi
je 0x1000b5e4
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [ebx + 8], edx
mov esi, ebx
jmp 0x10009dd9
mov eax, dword [esi + 4]
test eax, eax
je 0x1000cdea
test byte [eax + 8], 1
je 0x1000b53e
lea edi, [esp + 0x58]
mov ecx, edi
mov edx, esi
call fcn.100329e0
mov eax, dword [edi]
xor edx, edx
dec edx
lea esi, [esp + 0x70]
mov dword [esi + 4], eax
jmp 0x1000a037
xor edx, edx
test esi, esi
je 0x1000ac05
mov ecx, dword [esi + 8]
cmp ecx, 1
ja 0x1000bda3
mov eax, dword [esi + 4]
test eax, eax
je 0x1000ac05
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [esi + 4], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [esi + 8], 1
and dword [eax + 8], 1
mov edx, eax
mov eax, dword [esp + 0x10]
mov dword [eax + 0x38], edx
jmp 0x1000a173
mov dword [edx + 4], eax
jmp 0x1000930a
mov ecx, dword [esi]
xor eax, eax
dec eax
jmp 0x10009a2a
lea esi, [esp + 0x58]
mov ecx, esi
call fcn.10001010
mov ecx, dword [esi]
jmp 0x1000930e
lock add dword [0x100a57d8], 0xfff00000
push 0x100a57b8
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
push 0x100a57dc
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, 0x100a57dc
mov ecx, dword [0x100a5760]
mov edx, dword [esp + 4]
mov dword [edx], ecx
mov dword [0x100a5760], edx
jmp 0x1000a638
mov esi, eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x1000a4e6
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x1000a556
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov ebx, edx
mov esi, dword [edx]
test esi, esi
je 0x1000ce0e
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov dword [ebx], eax
mov eax, ebx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [ebx + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1000ce23
mov edx, dword [eax]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [ebx + 4], ecx
mov dword [eax], ebx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x10009b78
mov dl, 1
mov dword [esp + 0x28], edx
mov ecx, dword [esp]
lea eax, [ecx + 0x10]
mov dword [esp + 0x2c], eax
add ecx, 0x18
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], 0
mov dword [esp], ecx
mov ebx, dword [ecx]
mov esi, 0xfffff000
mov dword [esp + 8], ebx
and ebx, esi
and esi, dword [eax + 8]
xor edx, edx
dec edx
xor ecx, ecx
cmp ebx, esi
seta cl
cmovb ecx, edx
test ecx, ecx
je 0x1000b472
cmp ecx, 0xffffffff
jne 0x1000b2e1
mov edx, dword [eax]
test edx, edx
je 0x1000cc3f
mov ecx, dword [edx + 4]
mov dword [esp + 0x34], 0
test cl, 1
je 0x1000b35e
mov dword [esp + 8], eax
mov eax, edx
mov ecx, dword [esp]
mov edx, dword [ecx]
mov ebx, edx
mov ecx, 0xfffff000
and ebx, ecx
mov esi, dword [eax + 8]
and esi, ecx
xor ecx, ecx
cmp ebx, esi
seta cl
mov esi, 0xffffffff
cmovb ecx, esi
test ecx, ecx
je 0x1000adc1
cmp ecx, 0xffffffff
jne 0x1000addb
mov edx, dword [eax]
test edx, edx
je 0x1000ba40
mov ecx, dword [edx + 4]
test cl, 1
jne 0x1000ad69
mov esi, dword [edx]
test esi, esi
je 0x1000aeb4
test byte [esi + 4], 1
jne 0x1000ad69
jmp 0x1000aeb4
test dl, 0x10
mov edx, 0
cmove edx, dword [esp + 0x2c]
xor ecx, ecx
cmp edx, eax
seta dl
jb 0x1000ad9a
mov cl, dl
jmp 0x1000ad95
test ecx, ecx
je 0x1000ae9f
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1000adfd
mov esi, dword [edx]
test esi, esi
je 0x1000adfd
test byte [esi + 4], 1
jne 0x1000ad69
mov ebx, dword [eax]
test ebx, ebx
je 0x1000cb43
mov edx, dword [ebx + 4]
test dl, 1
je 0x1000b4af
and edx, 0xfffffffe
je 0x1000c602
mov esi, dword [edx]
test esi, esi
je 0x1000ae2c
test byte [esi + 4], 1
jne 0x1000baf9
and ecx, 1
or ecx, edx
mov dword [ebx + 4], ecx
or byte [edx + 4], 1
mov edx, dword [eax]
test edx, edx
je 0x1000cb10
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
mov ebx, dword [esp + 8]
je 0x1000cb25
mov esi, dword [ecx]
and esi, 0xfffffffe
and edi, 1
or edi, esi
mov dword [eax + 4], edi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
or byte [eax + 4], 1
mov edi, dword [esp + 0x14]
cmp dword [ebx], eax
jne 0x1000b5cd
mov dword [ebx], edx
mov eax, ebx
jmp 0x1000ad69
mov ecx, dword [eax + 4]
mov ebx, dword [esp + 8]
mov dword [esp + 0x34], ebx
cmp ecx, 1
jbe 0x1000aeff
jmp 0x1000ade6
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1000c5d8
mov edx, dword [ecx]
test edx, edx
je 0x1000aeda
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1000b9e1
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
mov esi, dword [esp + 8]
cmp dword [esi], eax
jne 0x1000cda8
mov dword [esi], edx
jmp 0x1000ad6d
mov ecx, dword [eax]
test ecx, ecx
je 0x1000af30
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
cmp dword [ebx], eax
jne 0x1000b408
mov dword [ebx], ecx
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0x48]
shr ebx, 0xc
mov ecx, dword [esp + 0x30]
mov dword [ecx], edx
xor eax, eax
mov edx, dword [esp + 0x2c]
mov dword [edx], eax
mov dword [edx + 4], eax
mov eax, dword [esp + 0xc]
cmp ebx, eax
jne 0x1000b045
test al, al
je 0x1000afb3
mov edx, eax
mov eax, dword [esp + 0x24]
or eax, 1
xor ecx, ecx
inc ecx
cmp edx, 2
cmovae ecx, edx
shl ecx, 2
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x38]
lea edx, [edx + edx*2]
mov esi, dword [esp + 0x20]
lea edx, [esi + edx*4]
add edx, 0x18
xor esi, esi
test byte [edx + esi], 8
je 0x1000afa9
mov ebx, dword [esp + 0x20]
dec dword [ebx + 0xc]
mov ebx, edi
mov edi, dword [esp + 0x10]
dec dword [edi + 0x48]
mov edi, ebx
mov dword [edx + esi], eax
add esi, 0xc
cmp ecx, esi
jne 0x1000af91
mov ecx, dword [esp + 0x20]
cmp dword [ecx + 0xc], 0
jne 0x1000b23d
cmp dword [esp + 0x44], 0
mov edx, dword [esp + 0x28]
je 0x1000b241
mov eax, dword [esp + 0x10]
mov ebx, dword [eax + 0x38]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], 0
xor esi, esi
dec esi
xor eax, eax
cmp ebx, ecx
mov ecx, ebx
setb al
cmova eax, esi
cmp eax, 0xffffffff
je 0x1000b70c
test eax, eax
je 0x1000bd3c
test ecx, ecx
je 0x1000c62c
mov ebx, ecx
mov ecx, dword [ecx + 8]
mov dword [esp + 0xc], 0
mov eax, ecx
and eax, 0xfffffffe
je 0x1000bd0a
mov edx, dword [eax + 4]
test edx, edx
je 0x1000bd0a
test byte [edx + 8], 1
je 0x1000bd0a
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
jmp 0x1000b737
mov edx, dword [esp + 0x38]
lea ecx, [edx + ebx]
mov dword [esp], ecx
sub ebx, eax
shl ebx, 0xc
add eax, edx
lea edx, [eax + eax*2]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x2c], edx
lea ecx, [eax + edx*4]
add ecx, 0x10
mov edx, 0xfff
mov esi, dword [ecx + 8]
and esi, edx
or esi, ebx
mov dword [esp + 8], ecx
mov dword [ecx + 8], esi
mov ecx, dword [esp]
lea ecx, [ecx + ecx*2]
and edx, dword [eax + ecx*4 + 0xc]
or edx, ebx
mov dword [eax + ecx*4 + 0xc], edx
mov edx, eax
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], 0
test ecx, ecx
je 0x1000b92d
mov eax, dword [esp + 0x2c]
lea eax, [edx + eax*4]
add eax, 0x18
mov dword [esp], eax
lea ebx, [esp + 0x70]
xor esi, esi
mov dword [esp + 0x2c], esi
mov esi, ebx
mov ebx, dword [ecx]
test ebx, ebx
je 0x1000b0d8
mov eax, dword [ebx + 4]
test al, 1
je 0x1000b0d8
mov edx, dword [ebx]
test edx, edx
je 0x1000b0d8
test byte [edx + 4], 1
jne 0x1000b130
mov ebx, ecx
mov eax, dword [esp]
mov ecx, dword [eax]
mov eax, ecx
mov edx, 0xfffff000
and eax, edx
mov edi, dword [ebx + 8]
and edi, edx
xor edx, edx
cmp eax, edi
seta dl
mov eax, 0xffffffff
cmovb edx, eax
cmp edx, 0xffffffff
mov edi, dword [esp + 0x14]
je 0x1000b122
xor eax, eax
inc eax
test edx, edx
jne 0x1000b162
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 8]
xor eax, eax
cmp ecx, ebx
seta cl
jae 0x1000b160
mov ecx, dword [ebx]
xor eax, eax
dec eax
test ecx, ecx
jne 0x1000b0b9
jmp 0x1000b202
and eax, 0xfffffffe
mov dword [ecx], eax
mov edx, ecx
and edx, 0xfffffffe
mov eax, dword [ebx]
mov edi, dword [ebx + 4]
and edi, 1
or edi, edx
mov dword [ebx + 4], edi
test eax, eax
je 0x1000cadd
and byte [eax + 4], 0xfe
mov edx, esi
cmp dword [esi], ecx
jne 0x1000b16a
mov dword [edx], ebx
jmp 0x1000b0da
mov al, cl
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
jmp 0x1000b127
and ebx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + ebx]
mov dword [edx + 4], ecx
test ebx, ebx
je 0x1000caec
mov ecx, dword [ebx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [ebx], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
or byte [edx + 4], 1
mov ecx, dword [esp + 0x2c]
test ecx, ecx
mov edi, dword [esp + 0x14]
je 0x1000c647
cmp dword [ecx], edx
je 0x1000b981
jmp 0x1000ba30
mov eax, dword [esp]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov esi, dword [ebx + 8]
and esi, ecx
xor ecx, ecx
cmp edx, esi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x1000b947
jmp 0x1000bb63
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
mov esi, ebx
test ecx, ecx
jne 0x1000b0bf
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 8]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x1000b3b5
mov dword [ebx], ecx
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x70]
test eax, eax
je 0x1000cd0d
and byte [eax + 4], 0xfe
mov dword [ecx], eax
mov eax, dword [esp + 0xc]
jmp 0x1000af62
mov edx, dword [esp + 0x28]
test dl, 1
mov esi, dword [esp + 0x24]
je 0x1000b8ba
test esi, esi
je 0x1000b8ba
cmp dword [edi], esi
je 0x10009238
mov dword [esi], edi
xor eax, eax
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
cmp dword [ecx + edx + 0x6c], 1
mov edx, 0
mov edi, esi
je 0x1000b297
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
add ecx, edx
add ecx, 0x6c
xor edx, edx
mov dword [edi + edx*4 + 0xc], 0xffffffff
inc edx
mov esi, dword [ecx]
dec esi
cmp edx, esi
jb 0x1000b287
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov ebx, dword [ecx + esi + 0x68]
and ebx, 0x1f
mov ecx, ebx
neg cl
xor esi, esi
dec esi
shr esi, cl
cmp ebx, 1
sbb eax, eax
or eax, esi
mov dword [edi + edx*4 + 0xc], eax
mov dword [edi + 4], 0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov eax, dword [edx + ecx + 0x68]
mov dword [edi + 8], eax
inc dword [edx + ecx + 0x74]
mov eax, dword [esp + 0x14]
mov dword [eax], edi
mov esi, edi
jmp 0x10008e2d
test ecx, ecx
je 0x1000b62f
mov ecx, dword [eax + 4]
mov dword [esp + 0x34], 0
mov edx, ecx
and edx, 0xfffffffe
je 0x1000b30b
mov esi, dword [edx]
test esi, esi
je 0x1000b30b
test byte [esi + 4], 1
jne 0x1000ad69
mov edx, dword [eax]
test edx, edx
je 0x1000ce91
test byte [edx + 4], 1
jne 0x1000bc90
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x1000b337
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1000be0a
or byte [edx + 4], 1
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1000cef7
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
mov edi, dword [esp + 0x14]
jmp 0x1000b3aa
mov esi, dword [edx]
test esi, esi
je 0x1000b36e
test byte [esi + 4], 1
jne 0x1000ad69
or ecx, 1
mov dword [edx + 4], ecx
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1000c617
mov edx, dword [ecx]
test edx, edx
je 0x1000b394
mov ebx, dword [edx + 4]
test bl, 1
jne 0x1000be5f
or esi, 1
mov dword [eax + 4], esi
mov edx, dword [ecx]
or edx, 1
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, ecx
and byte [edx + 4], 0xfe
lea eax, [esp + 0x70]
mov dword [eax], edx
jmp 0x1000ad69
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, eax
or ecx, dword [esp + 8]
mov dword [ebx + 4], ecx
mov ecx, dword [esp + 8]
mov ecx, dword [ecx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
mov eax, dword [esp + 8]
mov dword [eax], ebx
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, dword [esp + 8]
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov eax, dword [esp + 8]
mov dword [eax + 4], ecx
mov eax, dword [esp + 8]
or byte [ebx + 4], 1
cmp dword [esi], ebx
jne 0x1000b6e9
mov dword [esi], eax
jmp 0x1000b21e
and ecx, 0xfffffffe
mov eax, dword [ebx + 4]
and eax, 1
or eax, ecx
mov dword [ebx + 4], eax
jmp 0x1000af3a
and edx, 0xfffffffe
mov dword [eax], edx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
and esi, 0xfffffffe
mov edx, dword [esp + 4]
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + esi]
mov dword [edx + 4], ecx
test esi, esi
je 0x1000ce32
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [esi], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x1000b466
mov ecx, dword [eax + 4]
test cl, 1
jne 0x1000bca4
mov ecx, dword [esp + 4]
mov dword [ecx + 4], eax
jmp 0x10009b74
xor esi, esi
test byte [esp + 8], 0x10
cmove esi, dword [esp + 0x2c]
xor ecx, ecx
cmp esi, eax
seta dl
jb 0x1000ad4b
mov cl, dl
jmp 0x1000ad42
mov ecx, dword [edi + 4]
mov edx, ecx
and edx, 0xfffffffe
cmp eax, edx
jne 0x1000a8c4
and ecx, 1
or ecx, esi
mov dword [edi + 4], ecx
jmp 0x1000a8c4
or edx, 1
mov dword [ebx + 4], edx
mov ecx, dword [ebx]
test ecx, ecx
je 0x1000b4c7
mov edx, dword [ecx + 4]
test dl, 1
jne 0x1000b988
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1000cb52
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
mov ebx, dword [esp + 8]
jmp 0x1000ae8e
mov eax, dword [esp + 0x10]
mov edx, dword [eax + 0x3c]
test edx, edx
jne 0x1000b95f
lea eax, [esp + 0x70]
mov ecx, 0x100000
mov edx, 0x100000
push eax
push 0
call fcn.10050c80
add esp, 8
test eax, eax
je 0x1000b8ba
mov esi, eax
movzx eax, byte [esp + 0x70]
mov ecx, dword [esp + 0x10]
mov edx, esi
push eax
call fcn.10050ba0
add esp, 4
add esi, 0x2000
jmp 0x1000a1df
or ecx, 1
mov dword [esi + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000b557
mov edx, dword [ecx + 8]
test dl, 1
jne 0x1000bc37
or byte [eax + 8], 1
mov ecx, dword [esi + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x1000cea6
mov edx, dword [eax + 4]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [esi + 8], ecx
mov dword [eax + 4], esi
jmp 0x1000abaf
mov esi, dword [esp + 0x40]
shl esi, 0xc
mov eax, esi
and eax, 0xff000
mov edi, 0x100000
sub edi, eax
cmp edi, edx
cmovae edi, edx
add esi, dword [esp + 0x20]
jmp 0x1000a2b7
mov eax, dword [esp]
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 1
lea eax, [esp + 0x70]
jmp 0x1000a8c2
xor edx, edx
inc edx
cmp ebx, 0xffffffff
jne 0x1000a894
jmp 0x1000bb83
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
mov eax, ebx
jmp 0x1000ad69
mov dword [ebx + 4], eax
jmp 0x1000ab84
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov edx, dword [esp + 4]
mov eax, dword [edx + 4]
mov ecx, eax
or ecx, 1
mov dword [edx + 4], ecx
and eax, 0xfffffffe
je 0x1000c67b
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov dword [esi], eax
jmp 0x100096fd
lea ecx, [esp + 0x70]
mov dword [esp + 0x30], ecx
jmp 0x10009ab0
mov dword [edi], eax
jmp 0x1000a864
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x1000bf40
mov ecx, dword [eax]
xor edx, edx
test ecx, ecx
je 0x1000af3e
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
mov esi, dword [eax + 4]
and esi, 1
or esi, edx
mov dword [ecx + 4], esi
or byte [eax + 4], 1
and dword [ecx + 4], 1
mov edx, ecx
jmp 0x1000af3e
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
jmp 0x1000a864
mov eax, dword [esp]
and eax, 0xfffffffe
mov dword [esi + 4], eax
mov ecx, dword [edx]
test ecx, ecx
je 0x1000ced3
mov dword [esp + 0x14], edi
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1000cee8
mov edi, dword [eax]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [edx + 4], esi
mov dword [eax], edx
mov edx, dword [ecx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
mov edi, dword [esp + 0x14]
jmp 0x1000930e
mov eax, dword [esi + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp ebx, ecx
mov ecx, dword [esp + 0x30]
jne 0x1000b222
and eax, 1
or eax, dword [esp + 8]
mov dword [esi + 4], eax
jmp 0x1000b222
mov ebx, ecx
test ecx, ecx
je 0x1000bc0f
mov eax, dword [ebx + 4]
test eax, eax
je 0x1000bc0f
mov dword [esp + 0xc], 0
test byte [eax + 8], 1
je 0x1000bbfe
mov ecx, dword [esp + 0x20]
mov dword [esp], ebx
mov ebx, eax
xor eax, eax
cmp ebx, ecx
setb al
mov ecx, 0xffffffff
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x1000b78e
test ebx, ebx
je 0x1000bff8
mov eax, dword [ebx + 4]
test eax, eax
je 0x1000bff8
mov ecx, dword [eax + 8]
test cl, 1
je 0x1000b774
mov dword [esp], ebx
mov ecx, dword [esp + 0x20]
jmp 0x1000b73a
mov edx, dword [eax + 4]
test edx, edx
je 0x1000b7e3
test byte [edx + 8], 1
je 0x1000b7e3
mov dword [esp], ebx
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
jmp 0x1000b73a
test eax, eax
jne 0x1000b7b1
xor esi, esi
test ebx, ebx
je 0x1000b879
mov eax, dword [ebx + 8]
mov ecx, dword [esp]
mov dword [esp + 0xc], ecx
cmp eax, 1
jbe 0x1000b840
jmp 0x1000b7bc
test ebx, ebx
je 0x1000bcd7
mov eax, dword [ebx + 8]
and eax, 0xfffffffe
je 0x1000bcd7
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000bcd7
test byte [ecx + 8], 1
mov ecx, dword [esp + 0x20]
jne 0x1000b737
jmp 0x1000bcd7
or ecx, 1
mov dword [eax + 8], ecx
mov edx, dword [ebx + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1000cd93
mov esi, dword [ecx + 4]
test esi, esi
je 0x1000b809
mov eax, dword [esi + 8]
test al, 1
jne 0x1000bf94
or edx, 1
mov esi, ebx
mov dword [ebx + 8], edx
mov eax, dword [ecx + 4]
or eax, 1
mov dword [ebx + 8], eax
mov dword [ecx + 4], ebx
mov esi, ecx
mov eax, dword [esp]
cmp dword [eax + 4], ebx
jne 0x1000cf1e
mov eax, dword [esp]
mov dword [eax + 4], esi
mov ebx, esi
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
jmp 0x1000b73c
mov eax, dword [ebx + 4]
test eax, eax
je 0x1000b879
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [esp + 0x28]
or byte [ebx + 8], 1
and dword [eax + 8], 1
mov esi, eax
mov eax, dword [esp]
cmp dword [eax + 4], ebx
mov ebx, eax
jne 0x1000ba95
mov dword [ebx + 4], esi
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x10]
mov dword [ecx + 0x38], eax
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x1000ce41
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov esi, dword [esp + 0x24]
test esi, esi
setne al
test dl, al
jne 0x1000b256
mov dword [edi], 0
mov bl, 1
mov eax, dword [esp + 0x10]
jmp 0x10008e9b
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x18]
xor edx, edx
cmp ecx, eax
seta cl
jb 0x1000bb83
mov dl, cl
jmp 0x1000a894
lea ecx, [esp + 0x70]
mov dword [esp + 0xc], ecx
jmp 0x10009cca
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov ecx, dword [esp + 0x24]
mov dword [eax + 4], esi
or byte [edx + 4], 1
and dword [eax + 4], 1
jmp 0x10009a8a
mov ecx, dword [esp + 8]
mov dword [ecx], 0
mov dword [ecx + 4], 1
lea ebx, [esp + 0x70]
jmp 0x1000b21c
xor eax, eax
inc eax
cmp ecx, 0xffffffff
jne 0x1000b1ee
jmp 0x1000bd99
xor esi, esi
jmp 0x1000a337
mov eax, dword [esp + 0x10]
mov dword [eax + 0x3c], 0
lea esi, [edx + 0x2000]
add edx, 0x28
mov ecx, dword [esp + 0x30]
call fcn.10051170
jmp 0x1000a1df
mov dword [ecx], ebx
jmp 0x1000b1bf
and edx, 0xfffffffe
mov dword [ecx + 4], edx
mov edx, dword [eax]
test edx, edx
je 0x1000cb61
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1000cb76
mov ebx, edi
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov edi, ebx
jmp 0x1000b4e4
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1000ca59
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1000ba28
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1000bf15
mov dword [eax + 4], ecx
jmp 0x1000aeec
mov eax, dword [ecx + 4]
and eax, 1
or eax, ebx
mov dword [ecx + 4], eax
jmp 0x1000b1bf
mov edx, dword [esp + 0x34]
test edx, edx
je 0x1000cf06
mov ecx, dword [esp + 0x2c]
cmp dword [edx], ecx
jne 0x1000bdf3
mov dword [edx], eax
mov esi, dword [esp + 0x2c]
mov ecx, dword [esi]
mov dword [eax], ecx
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov ecx, dword [esp + 8]
cmp dword [ecx], eax
jne 0x1000cf15
mov dword [ecx], 0
jmp 0x1000af3a
and esi, 0xfffffffe
mov eax, dword [ebx + 8]
and eax, 1
or eax, esi
mov dword [ebx + 8], eax
jmp 0x1000b88a
and eax, 0xfffffffe
mov dword [ecx + 4], eax
mov eax, dword [edi + 8]
and eax, 1
or eax, ecx
mov dword [edi + 8], eax
and edi, 0xfffffffe
mov ecx, dword [esi + 8]
and ecx, 1
lea eax, [ecx + edi]
mov dword [esi + 8], eax
test edi, edi
je 0x1000ca86
mov eax, dword [edi + 4]
and eax, 0xfffffffe
or eax, ecx
mov dword [esi + 8], eax
mov dword [edi + 4], esi
mov ecx, dword [esi + 8]
and ecx, 0xfffffffe
je 0x1000baf1
mov eax, dword [ecx + 8]
test al, 1
jne 0x1000bf66
mov dword [esi + 8], ecx
jmp 0x1000a103
and ecx, 1
mov edi, dword [edx + 4]
and edi, 0xfffffffe
or edi, ecx
mov dword [edx + 4], edi
and byte [esi + 4], 0xfe
mov ecx, dword [ebx + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x1000cb34
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [ebx + 4], ecx
mov dword [edx], ebx
mov dword [eax], edx
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov edi, dword [eax + 4]
mov ecx, edi
and ecx, 0xfffffffe
mov ebx, dword [esp + 8]
jne 0x1000ae6c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp + 8]
xor eax, eax
cmp ecx, ebx
seta cl
jb 0x1000bd99
mov al, cl
jmp 0x1000b1ee
mov ecx, dword [eax]
xor edx, edx
dec edx
jmp 0x1000a89a
cmp dword [esp + 0x1c], 0
je 0x1000cf36
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1c]
cmp dword [ecx + 4], eax
jne 0x1000bf4d
mov eax, dword [esp + 0x1c]
mov dword [eax + 4], esi
cmp dword [esp + 0xc], 0
je 0x1000cf51
test esi, esi
je 0x1000cf67
mov edx, dword [esp + 0xc]
mov eax, dword [edx + 4]
mov dword [esi + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [esi + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
cmp dword [ebx + 4], esi
jne 0x1000cf76
mov dword [ebx + 4], 0
jmp 0x1000a15c
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000bc0f
test byte [ecx + 8], 1
jne 0x1000b733
lea esi, [esp + 0x58]
mov ecx, esi
mov edx, ebx
call fcn.10001630
mov eax, dword [esi]
test eax, eax
je 0x1000d014
and byte [eax + 8], 0xfe
mov dword [esp + 0xc], 0
jmp 0x1000bd2e
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov eax, dword [esi + 4]
test eax, eax
je 0x1000cf7f
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [esi + 4], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [esi + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1000cf95
mov ebx, dword [ecx + 4]
and ebx, 0xfffffffe
and edx, 1
or edx, ebx
mov dword [esi + 8], edx
mov dword [ecx + 4], esi
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x1000abaf
lea esi, [esp + 0x58]
mov ecx, esi
mov edx, eax
call fcn.10032030
mov edx, dword [esi]
jmp 0x1000b3aa
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov edx, dword [esp + 4]
mov eax, dword [edx + 4]
mov ecx, eax
or ecx, 1
mov dword [edx + 4], ecx
and eax, 0xfffffffe
je 0x1000cfa4
mov ecx, dword [eax]
or ecx, 1
mov edx, dword [esp + 4]
mov dword [edx + 4], ecx
mov dword [eax], edx
mov dword [esi], eax
jmp 0x10009b74
lea ecx, [esp + 0x6c]
mov edx, ebx
call fcn.100329e0
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp]
cmp dword [ecx + 4], ebx
je 0x1000bf0a
mov ecx, eax
and ecx, 0xfffffffe
mov ebx, dword [esp]
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [ebx + 8], edx
jmp 0x1000b038
mov eax, dword [ebx + 4]
test eax, eax
je 0x1000cfb3
test byte [eax + 8], 1
je 0x1000bec9
lea esi, [esp + 0x58]
mov ecx, esi
mov edx, ebx
call fcn.100329e0
mov eax, dword [esi]
lea ecx, [esp + 0x70]
mov ebx, ecx
mov dword [ecx + 4], eax
jmp 0x1000b038
xor edx, edx
test ecx, ecx
je 0x1000bd85
mov ebx, ecx
mov ecx, dword [ecx + 8]
cmp ecx, 1
ja 0x1000c172
mov eax, dword [ebx + 4]
test eax, eax
je 0x1000bd85
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [ebx + 8], 1
and dword [eax + 8], 1
mov edx, eax
mov eax, dword [esp + 0x10]
mov dword [eax + 0x38], edx
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
jmp 0x1000b8a1
mov ecx, dword [ebx]
xor eax, eax
dec eax
jmp 0x1000b1f4
lea eax, [esp + 0x70]
mov dword [esp + 0x1c], eax
jmp 0x10009db9
mov eax, dword [0x100a5744]
mov dword [esp + 0x10], eax
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x1000cfc8
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x10]
mov dword [eax + 0xc], ecx
jmp 0x10008db9
mov ecx, eax
and ecx, 0xfffffffe
mov esi, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
jmp 0x1000ba5a
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov edx, dword [eax]
test edx, edx
je 0x1000cfd2
mov ecx, dword [edx + 4]
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, eax
and ecx, 0xfffffffe
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x1000cfe7
mov edi, dword [ecx]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [eax + 4], esi
mov dword [ecx], eax
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x1000b358
and ebx, 0xfffffffe
mov dword [ecx], ebx
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [edx + 4], esi
and edx, 0xfffffffe
mov ecx, dword [eax + 4]
and ecx, 1
lea esi, [ecx + edx]
mov dword [eax + 4], esi
test edx, edx
je 0x1000cff6
mov esi, dword [edx]
and esi, 0xfffffffe
or esi, ecx
mov dword [eax + 4], esi
mov dword [edx], eax
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
je 0x1000bea6
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x1000c0d6
mov dword [eax + 4], ecx
jmp 0x1000b3a6
mov ecx, dword [esp + 0x10]
push 0
push 0x100000
call fcn.100029a0
add esp, 8
mov dword [esp], eax
jmp 0x10008eb3
or ecx, 1
mov dword [ebx + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000bee2
mov edx, dword [ecx + 8]
test dl, 1
jne 0x1000c077
or byte [eax + 8], 1
mov ecx, dword [ebx + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x1000d005
mov edx, dword [eax + 4]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [ebx + 8], ecx
mov dword [eax + 4], ebx
jmp 0x1000bd2e
mov ebx, dword [esp]
mov dword [ebx + 4], eax
jmp 0x1000b038
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1000ca4a
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x1000aeec
lea edx, [esp + 0x70]
mov dword [esp + 0x34], edx
jmp 0x1000b2f4
mov eax, esi
and eax, 0xfffffffe
mov edx, dword [esp + 0x1c]
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [edx + 8], ecx
jmp 0x1000bbb0
and eax, 0xfffffffe
mov dword [ecx + 8], eax
mov ecx, dword [esi + 8]
mov eax, ecx
or eax, 1
mov dword [esi + 8], eax
and ecx, 0xfffffffe
je 0x1000ca77
mov eax, dword [ecx + 4]
or eax, 1
mov dword [esi + 8], eax
mov dword [ecx + 4], esi
mov dword [edi + 4], ecx
jmp 0x1000a103
and eax, 0xfffffffe
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
and eax, 1
or eax, ecx
mov dword [esi + 8], eax
and esi, 0xfffffffe
mov edx, ebx
mov ecx, dword [ebx + 8]
and ecx, 1
lea eax, [ecx + esi]
mov dword [ebx + 8], eax
test esi, esi
je 0x1000cd75
mov eax, dword [esi + 4]
and eax, 0xfffffffe
or eax, ecx
mov ecx, ebx
mov dword [ebx + 8], eax
mov dword [esi + 4], ebx
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffe
je 0x1000bfe1
mov eax, dword [ecx + 8]
test al, 1
jne 0x1000c1a4
mov dword [ebx + 8], ecx
jmp 0x1000b81f
test eax, eax
jne 0x1000d023
xor ebx, ebx
jmp 0x1000aa68
cmp dword [esp + 0xc], 0
je 0x1000d04d
mov esi, ebx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xc]
cmp dword [ecx + 4], eax
jne 0x1000c18b
mov eax, dword [esp + 0xc]
mov dword [eax + 4], esi
cmp dword [esp + 0x20], 0
je 0x1000d068
test esi, esi
je 0x1000d080
mov edx, dword [esp + 0x20]
mov eax, dword [edx + 4]
mov ebx, esi
mov dword [esi + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [esi + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
mov eax, dword [esp]
cmp dword [eax + 4], esi
jne 0x1000d08f
mov eax, dword [esp]
mov dword [eax + 4], 0
mov edx, dword [esp + 0x28]
jmp 0x1000b88a
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov eax, dword [ebx + 4]
test eax, eax
je 0x1000d09b
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov dword [esp], ebx
mov edx, dword [ebx + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1000d0b1
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
and edx, 1
or edx, esi
mov esi, dword [esp]
mov dword [esi + 8], edx
mov dword [ecx + 4], esi
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x1000bd2e
and ebx, 0xfffffffe
mov dword [ecx + 4], ebx
mov ecx, dword [eax + 4]
mov esi, ecx
or esi, 1
mov dword [eax + 4], esi
and ecx, 0xfffffffe
je 0x1000d0c0
mov esi, dword [ecx]
or esi, 1
mov dword [eax + 4], esi
mov dword [ecx], eax
mov dword [edx], ecx
jmp 0x1000b3a6
mov byte [ecx + 0x40], 0
lea eax, [esp + 0x70]
push eax
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
lea esi, [esp + 0x58]
push esi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
mov ecx, 0x10
call fcn.10011e30
xor edx, edx
cmp byte [esi + 8], 0
mov ecx, 0
mov esi, 0
je 0x1000c143
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
cmp byte [esp + 0x78], 0
mov edi, 0
je 0x1000c157
mov edx, dword [esp + 0x74]
mov edi, dword [esp + 0x70]
mov dword [eax], edi
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x10]
mov dword [ecx + 0x44], eax
mov byte [ecx + 0x40], 1
jmp 0x10008df8
lea eax, [esp + 0x70]
mov dword [esp + 0xc], eax
jmp 0x1000b018
mov dword [esp], 0
jmp 0x10009804
mov eax, esi
and eax, 0xfffffffe
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [edx + 8], ecx
jmp 0x1000c01d
and eax, 0xfffffffe
mov dword [ecx + 8], eax
mov edx, ebx
mov ecx, dword [ebx + 8]
mov eax, ecx
or eax, 1
mov dword [ebx + 8], eax
and ecx, 0xfffffffe
je 0x1000cd84
mov eax, dword [ecx + 4]
or eax, 1
mov edx, ebx
mov dword [ebx + 8], eax
mov dword [ecx + 4], ebx
mov dword [esi + 4], ecx
jmp 0x1000b81f
mov dword [esp + 0x1c], edx
push 0x100a5810
call dword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
cmp dword [0x100a580c], 0
jne 0x1000c404
mov eax, dword [0x100a53c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 8], 0
je 0x1000d11d
mov eax, dword [0x100a5818]
mov ecx, dword [0x100a53c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jle 0x1000c261
push 0x100a5818
call fcn.1004fb5e
add esp, 4
cmp dword [0x100a5818], 0xffffffff
jne 0x1000c261
lea edi, [esp + 0x70]
push edi
call dword [sym.imp.kernel32.dll_GetSystemInfo]
mov eax, dword [edi + 4]
mov dword [0x100a5814], eax
push 0x100a5818
call fcn.1004fb5e
add esp, 4
mov eax, 0x1000
xor edx, edx
div dword [0x100a5814]
test edx, edx
jne 0x1000d127
mov edi, 0x100a581c
push 0x40
push edi
push str.MALLOC_OPTIONS
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
test eax, eax
cmove edi, eax
mov dword [esp + 0x10], edi
je 0x1000c2dc
mov eax, dword [esp + 0x10]
mov al, byte [eax]
test al, al
je 0x1000c2dc
xor edi, edi
movsx eax, al
add eax, 0xffffffd0
cmp eax, 9
jbe 0x1000d1b1
xor ebx, ebx
inc ebx
mov eax, dword [esp + 0x10]
mov al, byte [eax + edi]
movsx ecx, al
cmp ecx, 0x72
jne 0x1000d0cf
mov byte [0x100a5774], 1
dec ebx
jne 0x1000c2b2
mov eax, dword [esp + 0x10]
mov al, byte [eax + edi + 1]
inc edi
test al, al
jne 0x1000c2a0
xor edi, edi
mov dword [0x100a57d8], edi
mov eax, 0x1388
mov ebx, dword [sym.imp.kernel32.dll_InitializeCriticalSectionAndSpinCount]
push eax
push 0x100a57b8
call ebx
mov dword [0x100a57d0], edi
mov dword [0x100a57d4], edi
mov eax, 0x1388
push eax
push 0x100a5778
call ebx
mov dword [0x100a5790], edi
mov dword [0x100a5794], edi
mov dword [0x100a5798], edi
mov eax, 0x1388
push eax
push 0x100a57dc
call ebx
mov dword [0x100a5808], edi
mov dword [0x100a5800], edi
mov dword [0x100a574c], edi
mov dword [0x100a5750], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x74], edi
mov dword [esp + 0x7c], edi
mov eax, dword [0x100a5024]
mov dword [esp + 0x70], eax
mov eax, 0x1388
push eax
push 0x100a572c
call ebx
test eax, eax
je 0x1000d0f7
lea edx, [esp + 0x70]
xor ecx, ecx
call fcn.10041370
mov dword [0x100a5744], eax
test eax, eax
je 0x1000d10d
mov ecx, dword [0x100a53c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp byte [ecx + 8], 0
je 0x1000d14b
mov ecx, dword [0x100a53c8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
mov dword [ecx + 0xc], eax
push 0x1388
push 0x100a579c
call dword [sym.imp.kernel32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x4000
call fcn.10011e30
test eax, eax
je 0x1000d103
mov ebx, eax
push 0x4000
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [0x100a57b4], ebx
xor eax, eax
inc eax
xchg dword [0x100a580c], eax
call fcn.10001250
push 0x100a5810
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov edx, dword [esp + 0x1c]
jmp 0x10008d5c
or edi, 1
mov dword [edx + 4], edi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
mov dword [esp + 0x3c], esi
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x1000d15a
cmp eax, 8
je 0x1000d15a
xor eax, eax
jmp 0x100094a6
or ecx, 1
mov eax, dword [esp + 4]
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
and edx, 1
mov dword [ecx + 4], edx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
or esi, 1
mov dword [edx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x1000c4bd
cmp eax, 8
jne 0x1000a9bf
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea ebx, [eax + eax*4]
add ebx, 5
mov edi, dword [sym.imp.kernel32.dll_Sleep]
push 0x32
call edi
push 4
push 0x1000
push 0x100000
push dword [esp + 0xc]
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov dword [esp + 4], eax
call dword [sym.imp.kernel32.dll_GetLastError]
cmp dword [esp + 4], 0
jne 0x1000d2ce
cmp eax, 0x5af
je 0x1000c514
cmp eax, 8
jne 0x1000a9bf
dec ebx
jne 0x1000c4d5
jmp 0x1000a9bf
or ecx, 1
mov eax, dword [esp + 4]
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x1000c54b
cmp eax, 8
jne 0x1000a18c
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea ebx, [eax + eax*4]
add ebx, 5
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
sub esp, 0x10
movaps xmm0, xmmword [0x10093150]
movups xmmword [esp], xmm0
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov edi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esp], edi
test edi, edi
jne 0x1000d2ed
cmp eax, 0x5af
je 0x1000c59c
cmp eax, 8
jne 0x1000a18c
dec ebx
jne 0x1000c55d
jmp 0x1000a18c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [esp + 0x4c], edi
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x5af
je 0x1000d275
cmp eax, 8
je 0x1000d275
xor eax, eax
jmp 0x1000a2f9
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
and ecx, 1
mov dword [ebx + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
or esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
call fcn.1004f684
jmp 0x10008d98
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
and esi, 1
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov eax, ecx
and eax, 0xfffffffe
mov dword [esp], edx
mov edx, dword [esp]
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov eax, dword [esp]
mov dword [eax + 4], edx
jmp 0x10008fc6
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov eax, dword [esp + 0x24]
dec dword [eax + 8]
mov bl, 1
mov dword [esp], 0
jmp 0x1000b8c2
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [edi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [edi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov eax, esi
jmp 0x1000935e
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x3c]
mov dword [esp + 0xc], ecx
test ecx, ecx
je 0x10009e2c
xor ebx, ebx
mov dword [eax + 0x3c], ebx
mov eax, dword [esp + 0xc]
lea ecx, [eax + 0x2000]
mov dword [esp], ecx
lea edi, [eax + 0x28]
lea ecx, [esp + 0x70]
mov esi, dword [esp + 4]
mov dword [ecx], esi
mov dword [esp + 0x18], 0
mov dword [ecx + 4], ebx
mov esi, dword [esp + 0x18]
mov dword [esp + 8], esi
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 4]
mov ecx, dword [ecx]
test ecx, ecx
je 0x1000c857
mov ebx, dword [ecx + 4]
test bl, 1
je 0x1000c857
mov esi, dword [ecx]
test esi, esi
je 0x1000c857
test byte [esi + 4], 1
jne 0x1000c8c0
mov ecx, dword [esp + 4]
mov esi, dword [esp + 0xc]
mov esi, dword [esi + 0x30]
mov dword [esp + 8], esi
mov ebx, 0xfffff000
and esi, ebx
mov dword [esp + 4], esi
mov esi, dword [ecx + 8]
and esi, ebx
xor ebx, ebx
cmp dword [esp + 4], esi
seta bl
cmovb ebx, edx
cmp ebx, 0xffffffff
je 0x1000c8a6
xor esi, esi
inc esi
mov dword [esp + 0x14], esi
test ebx, ebx
jne 0x1000c90a
test byte [esp + 8], 0x10
mov esi, 0
cmove esi, edi
cmp esi, ecx
seta al
jae 0x1000c902
mov esi, dword [ecx]
mov dword [esp + 4], esi
mov dword [esp + 0x14], edx
cmp dword [esp + 4], 0
jne 0x1000c82d
jmp 0x1000c9d1
and ebx, 0xfffffffe
mov esi, dword [esp + 4]
mov dword [esi], ebx
and esi, 0xfffffffe
mov dword [esp + 0x14], esi
mov ebx, dword [ecx]
mov esi, dword [ecx + 4]
and esi, 1
add esi, dword [esp + 0x14]
mov dword [ecx + 4], esi
test ebx, ebx
je 0x1000d34a
and byte [ebx + 4], 0xfe
mov esi, dword [esp + 4]
mov ebx, dword [esp + 0x18]
cmp dword [ebx], esi
jne 0x1000c916
mov esi, dword [esp + 0x18]
mov dword [esi], ecx
jmp 0x1000c85b
xor ebx, ebx
mov bl, al
mov dword [esp + 0x14], ebx
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
mov dword [esp + 4], esi
jmp 0x1000c8b0
and ecx, 0xfffffffe
mov esi, dword [esp + 0x18]
mov ebx, dword [esi + 4]
mov eax, esi
and ebx, 1
lea esi, [ebx + ecx]
mov dword [eax + 4], esi
test ecx, ecx
je 0x1000d359
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, ebx
mov ebx, dword [esp + 0x18]
mov dword [ebx + 4], esi
mov dword [ecx], ebx
mov esi, dword [ebx + 4]
and esi, 1
mov ebx, dword [ecx + 4]
and ebx, 0xfffffffe
or ebx, esi
mov dword [ecx + 4], ebx
mov esi, dword [esp + 0x18]
or byte [esi + 4], 1
cmp dword [esp + 8], 0
je 0x1000d32c
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 8]
cmp dword [ebx], esi
je 0x1000cc75
jmp 0x1000ccad
mov esi, dword [esp + 0xc]
mov esi, dword [esi + 0x30]
mov dword [esp + 0x18], esi
mov ebx, 0xfffff000
and esi, ebx
mov dword [esp + 4], esi
mov esi, dword [ecx + 8]
and esi, ebx
xor ebx, ebx
cmp dword [esp + 4], esi
seta bl
cmovb ebx, edx
test ebx, ebx
jne 0x1000cc1b
jmp 0x1000cd33
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
mov dword [esp + 4], esi
mov dword [esp + 0x18], ecx
cmp dword [esp + 4], 0
jne 0x1000c839
mov edx, dword [esp + 8]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0xc]
mov dword [edx + 0x28], 0
mov dword [edx + 0x2c], 1
cmp dword [esp + 0x14], 1
jne 0x1000a3f6
and edi, 0xfffffffe
mov edx, dword [ecx + 4]
and edx, 1
lea esi, [edx + edi]
mov dword [ecx + 4], esi
test edi, edi
je 0x1000d33b
mov esi, dword [edi]
and esi, 0xfffffffe
or esi, edx
mov dword [ecx + 4], esi
mov dword [edi], ecx
mov edx, dword [ecx + 4]
and edx, 1
mov esi, dword [edi + 4]
and esi, 0xfffffffe
or esi, edx
mov dword [edi + 4], esi
or byte [ecx + 4], 1
mov edx, dword [esp + 0x18]
cmp dword [edx], ecx
jne 0x1000cbb6
mov ecx, dword [esp + 0x18]
jmp 0x1000a3f6
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
or edx, 1
mov dword [esi + 8], edx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
jmp 0x10009565
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_CRASH__
int3
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov eax, ecx
mov edi, dword [esp + 0x14]
mov ebx, edx
jmp 0x1000a1be
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov edx, dword [esp + 0x18]
mov edx, dword [edx + 4]
mov esi, edx
and esi, 0xfffffffe
cmp ecx, esi
jne 0x1000a3f8
and edx, 1
or edx, edi
mov eax, dword [esp + 0x18]
mov dword [eax + 4], edx
jmp 0x1000a3f8
push 0x100a579c
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov ecx, dword [esp]
mov edx, 0x100000
push 0
call fcn.10001850
add esp, 4
jmp 0x1000a18c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
xor esi, esi
inc esi
mov dword [esp + 0x14], esi
cmp ebx, 0xffffffff
jne 0x1000c9b0
jmp 0x1000cdff
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
and dword [eax + 4], 1
jmp 0x1000921f
mov esi, dword [esp + 8]
mov dword [esi], ecx
jmp 0x1000c97c
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
and dword [ebx + 4], 1
jmp 0x10009747
mov ebx, dword [esp + 8]
mov esi, dword [ebx + 4]
and esi, 1
or esi, ecx
mov dword [ebx + 4], esi
jmp 0x1000c97c
mov edi, dword [esp + 4]
mov dword [edi + 0x14], eax
mov ecx, edi
call fcn.10001e40
mov ecx, 0x100a57d4
mov edx, edi
call fcn.10001bb0
test esi, esi
je 0x1000a628
push 0x100a57b8
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
call fcn.10054c60
test eax, eax
je 0x1000ce64
mov edi, eax
push 0x100a57b8
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
jmp 0x1000a600
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
cmp edx, 1
jne 0x1000cd2c
mov eax, dword [eax + 4]
and eax, 0xfffffffe
jmp 0x10009e63
mov ebx, eax
jmp 0x1000a5ab
test byte [esp + 0x18], 0x10
mov esi, 0
cmove esi, edi
cmp esi, ecx
seta byte [esp + 4]
jb 0x1000cdff
xor ebx, ebx
mov al, byte [esp + 4]
mov bl, al
mov dword [esp + 0x14], ebx
jmp 0x1000c9b0
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [ebx + 8]
and ecx, 1
or ecx, eax
mov dword [ebx + 8], ecx
mov esi, edi
jmp 0x1000a03b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
or edx, 1
mov dword [ebx + 8], edx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x1000ad6d
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
or ecx, 1
mov dword [esi + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov esi, dword [ecx]
mov dword [esp + 4], esi
mov dword [esp + 0x14], edx
jmp 0x1000c9ba
mov dword [ebx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov ecx, str._jemalloc_
mov edx, str.:__malloc__Error_in_VirtualFree___n
call fcn.10054c10
jmp 0x1000aa4c
mov ecx, dword [esp]
mov edx, 0x100000
push dword [esp + 0xc]
call fcn.10001850
add esp, 4
jmp 0x1000a9bf
mov ecx, str._jemalloc_
mov edx, str.:__malloc__Error_in_VirtualFree___n
call fcn.10054c10
jmp 0x1000aa0a
or ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
and dword [ecx + 4], 1
jmp 0x1000af3a
mov eax, esi
and eax, 0xfffffffe
mov edx, dword [esp]
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [edx + 8], ecx
jmp 0x1000b831
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test esi, esi
je 0x1000cf67
mov dword [esi + 4], 0
and dword [esi + 8], 1
xor ecx, ecx
jmp 0x1000bbe6
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
and dword [ebx + 8], 1
jmp 0x1000a15c
mov dword [esi + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
call fcn.1004f684
jmp 0x1000bdd5
mov dword [eax], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
push 0x8000
push 0
push eax
call dword [sym.imp.kernel32.dll_VirtualFree]
test eax, eax
jne 0x1000bff1
mov ecx, str._jemalloc_
mov edx, str.:__malloc__Error_in_VirtualFree___n
call fcn.10054c10
jmp 0x1000bff1
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test esi, esi
je 0x1000d080
mov eax, esi
mov dword [esi + 4], 0
and dword [esi + 8], 1
xor ecx, ecx
jmp 0x1000c055
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov eax, dword [esp]
and dword [eax + 8], 1
jmp 0x1000c06e
mov dword [ebx + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
cmp ecx, 0x46
jne 0x1000d1d8
mov eax, dword [0x100a5024]
test eax, eax
je 0x1000d21d
add eax, eax
je 0x1000c2cc
mov dword [0x100a5024], eax
jmp 0x1000c2cc
mov dword [0x100a5744], 0
jmp 0x1000d10d
mov dword [0x100a57b4], 0
push 0x100a5810
call dword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
jmp 0x1000a19a
call fcn.1004f684
jmp 0x1000c20e
mov ecx, str._jemalloc_
mov edx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.10054c10
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_CRASH__
int3
call fcn.1004f684
mov eax, dword [0x100a5744]
jmp 0x1000c3a6
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea esi, [eax + eax*4]
add esi, 5
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
push 4
push 0x1000
push dword [esp + 0x44]
push ebx
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov dword [esp + 0x40], eax
call dword [sym.imp.kernel32.dll_GetLastError]
cmp dword [esp + 0x40], 0
jne 0x1000d1e9
cmp eax, 0x5af
je 0x1000d1a7
cmp eax, 8
jne 0x1000c451
xor eax, eax
dec esi
jne 0x1000d16c
jmp 0x100094a6
xor ebx, ebx
lea ecx, [ebx + ebx*4]
lea ebx, [eax + ecx*2]
mov eax, dword [esp + 0x10]
movsx eax, byte [eax + edi + 1]
inc edi
add eax, 0xffffffd0
cmp eax, 0xa
jb 0x1000d1b3
test ebx, ebx
je 0x1000c2cf
jmp 0x1000c2b2
cmp ecx, 0x52
jne 0x1000d20d
mov byte [0x100a5774], 0
jmp 0x1000c2cc
cmp eax, 0x5af
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x44]
je 0x1000d201
cmp eax, 8
jne 0x10009489
push ecx
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x10009489
cmp ecx, 0x66
jne 0x1000d22c
shr dword [0x100a5024], 1
jmp 0x1000c2cc
mov dword [0x100a5024], 1
jmp 0x1000c2cc
lea ecx, [esp + 0x70]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov eax, 2
push 0xa
push str._jemalloc_
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
push 0x35
push str.:__malloc__Unsupported_character_in_malloc_options:_
mov eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
lea ecx, [esp + 0x70]
mov edx, 0x1009afc9
call fcn.10054c10
jmp 0x1000c2cc
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea eax, [eax + eax*4]
add eax, 5
mov dword [esp + 0x50], eax
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
push 4
push 0x1000
push dword [esp + 0x54]
push esi
call dword [sym.imp.kernel32.dll_VirtualAlloc]
mov edi, eax
call dword [sym.imp.kernel32.dll_GetLastError]
test edi, edi
jne 0x1000d308
cmp eax, 0x5af
je 0x1000d2c1
cmp eax, 8
jne 0x1000c5d1
xor eax, eax
dec dword [esp + 0x50]
jne 0x1000d28b
jmp 0x1000a2f9
cmp eax, 0x5af
mov edi, dword [esp]
je 0x1000d2e1
cmp eax, 8
jne 0x1000a666
push esi
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x1000a666
cmp eax, 0x5af
je 0x1000d2f9
cmp eax, 8
jne 0x1000d300
push esi
call dword [sym.imp.kernel32.dll_SetLastError]
mov eax, dword [esp]
jmp 0x1000a9e3
cmp eax, 0x5af
mov edi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x54]
je 0x1000d320
cmp eax, 8
jne 0x1000a2dc
push ecx
call dword [sym.imp.kernel32.dll_SetLastError]
jmp 0x1000a2dc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c5f7
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c47e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x1000c428