Function at 0x1001feb0
Capabilities:
Get system information on windows
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb8
mov esi, edx
mov ebx, ecx
mov edx, dword [ebp + 8]
mov eax, dword [0x1009a00c]
xor eax, ebp
mov dword [esp + 0xb0], eax
test edx, edx
je 0x10026357
mov eax, dword [0x1009a804]
test esi, esi
je 0x10020227
test eax, eax
je 0x1002638b
mov edi, esi
and edi, 0xfff00000
cmp edi, esi
mov dword [esp + 4], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x20], edx
je 0x1002563c
mov eax, esi
shr eax, 0xc
movzx eax, al
lea eax, [eax + eax*2]
mov eax, dword [edi + eax*4 + 0x18]
mov ecx, eax
and ecx, 0xfffff000
test al, 2
jne 0x1001ff2d
mov eax, dword [ecx]
mov ecx, dword [eax + 8]
cmp ecx, 0xfd000
ja 0x10025675
mov esi, dword [edi]
mov eax, dword [ebx]
test eax, eax
je 0x1001ff49
cmp esi, eax
jne 0x10026431
cmp edx, 0xfd000
ja 0x10025116
cmp edx, 8
jbe 0x10021012
cmp edx, 0x1f0
ja 0x10020325
lea ebx, [edx + 0xf]
and ebx, 0xfffffff0
xor eax, eax
cmp ebx, ecx
mov edi, ecx
sete cl
mov dword [esp + 0x48], edi
cmp edi, 0xfd001
jae 0x10022d92
test cl, cl
jne 0x10020464
mov ecx, dword [esp + 0x48]
add ecx, 0xfffff0ff
cmp ecx, 0xfc100
setae cl
xor al, 1
or al, cl
je 0x10020af3
cmp byte [esi + 0x3d], 0
mov edi, esi
mov dword [esp + 0x18], esi
jne 0x10020445
cmp edx, 0x1f1
jae 0x1002043f
mov eax, dword [0x1009a3c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov edi, dword [eax + 8]
test edi, edi
je 0x10026446
cmp edx, 9
jb 0x10021044
cmp edx, 0x1f1
jae 0x10020950
lea ebx, [edx + 0xf]
mov eax, ebx
and eax, 0xfffffff0
mov dword [esp + 0x24], eax
shr ebx, 4
shl ebx, 5
lea eax, [edi + ebx]
add eax, 0x58
mov dword [esp + 0x14], eax
cmp byte [edi + 0x3c], 0
mov dword [esp + 0x10], edi
mov dword [esp], ebx
je 0x1002002f
cmp dword [edi + 0x40], 0
je 0x10025d89
lea eax, [edi + 0xc]
mov dword [esp + 0x38], eax
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
test edx, edx
je 0x1002057e
cmp dword [edx + 8], 0
je 0x1002057e
mov eax, dword [edx + 4]
mov dword [esp + 8], edx
mov edx, dword [edx + eax*4 + 0xc]
test edx, edx
je 0x10020a1a
mov edi, dword [edi + 0x40]
test edi, edi
jne 0x10020342
tzcnt edi, edx
mov ebx, eax
shl ebx, 5
or ebx, edi
btc edx, edi
mov ecx, dword [esp + 0x10]
mov esi, eax
mov eax, dword [esp]
imul ebx, dword [ecx + eax + 0x60]
mov eax, dword [ecx + eax + 0x6c]
mov edi, dword [esp + 8]
mov dword [edi + esi*4 + 0xc], edx
mov edx, edi
add eax, edi
add ebx, eax
mov esi, dword [esp + 0x18]
dec dword [edx + 8]
test ebx, ebx
je 0x100245ba
mov eax, dword [esp + 0x24]
add dword [ecx + 0x2c], eax
push dword [esp + 0x38]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
mov ecx, dword [esp + 0x48]
je 0x100246c2
mov eax, dword [esp + 0x20]
cmp ecx, eax
cmovb eax, ecx
push eax
mov edi, dword [esp + 0x10]
push edi
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
and edi, 0xfffff
je 0x10025b73
mov eax, dword [esp + 4]
cmp dword [eax], esi
jne 0x100263a0
mov ecx, edi
shr ecx, 0xc
mov dword [esp + 0x10], ecx
lea ecx, [ecx + ecx*2]
lea edx, [eax + ecx*4]
add edx, 0x18
mov dword [esp + 0x20], edx
mov dword [esp + 8], ecx
mov ecx, dword [eax + ecx*4 + 0x18]
mov eax, ecx
and eax, 0xfffff000
test cl, 2
jne 0x1002012c
mov eax, dword [eax]
mov eax, dword [eax + 8]
push eax
push 0xe5
push dword [esp + 0x14]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi + 0xc]
mov dword [esp + 0x48], eax
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
test al, 0x20
jne 0x100263b5
mov dword [esp + 0x14], ebx
test al, 1
je 0x100263ca
mov ebx, eax
and ebx, 0xfffff000
test al, 2
jne 0x10020c7f
mov edx, dword [ebx]
mov ecx, dword [edx + 8]
mov dword [esp + 0x20], ecx
mov ecx, dword [edx + 0x14]
add ecx, ebx
mov esi, dword [esp + 0xc]
sub esi, ecx
mov dword [esp + 0xc], edx
movzx edx, word [edx + 0x1c]
imul edx, esi
mov ecx, edx
shr ecx, 0x11
shr edx, 0x16
cmp edx, dword [ebx + 4]
jb 0x10020bb0
mov esi, dword [ebx + edx*4 + 0xc]
mov edi, 1
shl edi, cl
bt esi, ecx
jb 0x100263df
or esi, edi
mov dword [ebx + edx*4 + 0xc], esi
mov ecx, dword [ebx + 8]
lea edx, [ecx + 1]
mov dword [ebx + 8], edx
mov esi, dword [esp + 0xc]
cmp edx, dword [esi + 0xc]
mov edx, esi
je 0x1002126f
xor esi, esi
test ecx, ecx
je 0x10020479
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
sub dword [eax + 0x2c], ecx
push dword [esp + 0x48]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test esi, esi
jne 0x100252eb
mov esi, edi
mov ebx, esi
test esi, esi
je 0x100246c2
mov ecx, dword [esp + 0xb0]
xor ecx, ebp
call fcn.100468e0
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
test eax, eax
je 0x10025ec0
mov ebx, dword [ebx]
test ebx, ebx
jne 0x10021d78
cmp edx, 0x1f1
jae 0x10021d72
mov eax, dword [0x1009a3c8]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
mov ebx, dword [eax + 8]
test ebx, ebx
je 0x100263f4
cmp edx, 9
jb 0x1002107f
cmp edx, 0x1f1
jae 0x1002096c
add edx, 0xf
mov eax, edx
and eax, 0xfffffff0
mov dword [esp + 0x18], eax
shr edx, 4
shl edx, 5
mov dword [esp + 0x20], edx
lea esi, [ebx + edx]
add esi, 0x58
cmp byte [ebx + 0x3c], 0
je 0x100202a3
cmp dword [ebx + 0x40], 0
je 0x10025e0d
lea eax, [ebx + 0xc]
mov dword [esp + 0x48], eax
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi]
test ecx, ecx
je 0x1002076a
cmp dword [ecx + 8], 0
je 0x1002076a
mov eax, dword [ecx + 4]
mov edx, dword [ecx + eax*4 + 0xc]
test edx, edx
je 0x10020a8f
mov esi, dword [ebx + 0x40]
test esi, esi
jne 0x100203af
tzcnt edi, edx
mov esi, eax
shl esi, 5
or esi, edi
btc edx, edi
mov edi, eax
mov eax, dword [esp + 0x20]
imul esi, dword [ebx + eax + 0x60]
mov eax, dword [ebx + eax + 0x6c]
mov dword [ecx + edi*4 + 0xc], edx
add eax, ecx
add esi, eax
dec dword [ecx + 8]
test esi, esi
je 0x100246b8
mov eax, dword [esp + 0x18]
add dword [ebx + 0x2c], eax
push dword [esp + 0x48]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x10020205
cmp edx, 0xf00
ja 0x1002042c
lea ebx, [edx + 0xff]
and ebx, 0xffffff00
jmp 0x1001ff70
mov dword [esp + 0x30], eax
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov ebx, eax
shld ebx, ecx, 0x17
mov esi, ecx
shl esi, 0x17
xor esi, ecx
mov ecx, dword [edi + 0xc]
xor ebx, eax
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, ebx
mov dword [esp + 0x14], ebx
shr ebx, 0x11
xor ebx, eax
mov eax, dword [edi + 8]
mov dword [edi + 4], ecx
shld dword [esp + 0x14], esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, dword [esp + 0x14]
mov dword [edi], eax
mov dword [edi + 0xc], ebx
mov dword [edi + 8], ecx
add ecx, eax
mov esi, edx
ror esi, cl
test esi, esi
je 0x1002056a
tzcnt edi, esi
mov eax, dword [esp + 0x30]
add edi, ecx
and edi, 0x1f
jmp 0x10020077
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp + 4], ebx
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov edi, eax
shld edi, ecx, 0x17
mov ebx, ecx
shl ebx, 0x17
xor ebx, ecx
mov ecx, dword [esi + 0xc]
xor edi, eax
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, edi
mov dword [esp + 0xc], edi
shr edi, 0x11
xor edi, eax
mov eax, dword [esi + 8]
mov dword [esi + 4], ecx
shld dword [esp + 0xc], ebx, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, ebx
xor ecx, dword [esp + 0xc]
mov dword [esi], eax
mov dword [esi + 0xc], edi
mov dword [esi + 8], ecx
add ecx, eax
mov esi, edx
ror esi, cl
test esi, esi
je 0x10020574
tzcnt edi, esi
mov eax, dword [esp + 0x10]
add edi, ecx
and edi, 0x1f
mov ebx, dword [esp + 4]
mov ecx, dword [esp + 0x14]
jmp 0x100202e3
lea ebx, [edx + 0xfff]
and ebx, 0x1ff000
mov al, 1
jmp 0x1001ff72
mov edi, dword [0x1009a744]
cmp edx, 0xf00
jbe 0x1001ffe7
mov ecx, edi
push 0
call fcn.1001acc0
add esp, 4
mov ebx, eax
jmp 0x100200c1
mov eax, dword [esp + 0x48]
sub eax, edx
ja 0x10021d15
mov esi, dword [esp + 0xc]
jmp 0x10020205
mov ecx, dword [edx]
cmp ecx, ebx
je 0x100201e2
test ecx, ecx
je 0x1002200f
cmp ebx, ecx
jae 0x10020bb8
cmp dword [ecx + 8], 0
je 0x1002200f
mov eax, ecx
and eax, 0xfff00000
shr ecx, 0xa
and ecx, 0x3fc
lea edi, [ecx + ecx*2]
or edi, eax
add edi, 0x10
mov eax, dword [edx + 4]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
test eax, eax
je 0x10021998
lea ecx, [esp + 0x88]
mov dword [esp + 4], 0
mov edx, dword [esp + 4]
mov dword [esp + 0x10], edx
mov dword [esp + 4], ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x10020521
mov edx, dword [ecx + 4]
test dl, 1
je 0x10020521
mov esi, edi
mov edi, dword [ecx]
test edi, edi
je 0x10020509
test byte [edi + 4], 1
jne 0x1002052d
mov ecx, eax
mov edi, esi
xor esi, esi
cmp ecx, edi
seta dl
jbe 0x10020525
mov eax, dword [ecx]
test eax, eax
jne 0x100204e1
jmp 0x10021f98
mov ecx, eax
jmp 0x1002050f
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
jmp 0x10020518
and edx, 0xfffffffe
mov dword [eax], edx
mov edx, eax
and edx, 0xfffffffe
mov dword [esp + 8], edx
mov edx, dword [ecx]
mov edi, dword [ecx + 4]
and edi, 1
add edi, dword [esp + 8]
mov dword [ecx + 4], edi
test edx, edx
je 0x100264d4
and byte [edx + 4], 0xfe
mov edx, dword [esp + 4]
cmp dword [edx], eax
mov eax, edx
mov edi, esi
jne 0x10021f10
mov dword [eax], ecx
jmp 0x1002050d
mov edi, 0x20
jmp 0x100203a1
mov edi, 0x20
jmp 0x10020416
mov edx, dword [edi + ebx + 0x5c]
test edx, edx
je 0x100224f1
lea eax, [edi + ebx]
add eax, 0x5c
mov dword [esp + 0x30], eax
mov eax, edx
mov edi, eax
mov eax, dword [eax]
test eax, eax
jne 0x10020596
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], 0
xor eax, eax
mov dword [esp + 8], edi
cmp edx, edi
setb al
mov edi, 0xffffffff
cmova eax, edi
cmp eax, 0xffffffff
jne 0x10021496
mov ecx, dword [edx]
test ecx, ecx
je 0x10026643
mov eax, dword [ecx + 4]
mov dword [esp + 0x1c], 0
test al, 1
je 0x100210ba
mov edi, edx
mov esi, dword [esp + 0x18]
mov edx, ecx
xor eax, eax
cmp ecx, dword [esp + 8]
setb al
mov ecx, 0xffffffff
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x10020676
test edx, edx
je 0x100229fe
mov ecx, dword [edx]
test ecx, ecx
je 0x100229fe
mov eax, dword [ecx + 4]
test al, 1
je 0x10020624
mov edi, edx
jmp 0x100205ef
mov esi, dword [ecx]
test esi, esi
je 0x10020630
test byte [esi + 4], 1
jne 0x100205e9
or eax, 1
mov dword [ecx + 4], eax
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x100260da
mov ecx, dword [eax]
test ecx, ecx
jne 0x10020696
or esi, 1
mov dword [edx + 4], esi
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
mov ebx, dword [esp]
mov eax, edi
cmp dword [edi], edx
mov edx, edi
mov esi, dword [esp + 0x18]
jne 0x100266d9
mov dword [edx], ecx
jmp 0x100205ef
test eax, eax
jne 0x100206a3
xor ecx, ecx
test edx, edx
je 0x10020992
mov eax, dword [edx + 4]
mov dword [esp + 0x1c], edi
cmp eax, 1
jbe 0x10020988
jmp 0x100206ae
mov ebx, dword [ecx + 4]
test bl, 1
je 0x1002064a
jmp 0x100220ac
test edx, edx
je 0x10026561
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x100206c5
mov esi, dword [ecx]
test esi, esi
je 0x100206c5
test byte [esi + 4], 1
jne 0x100205e9
mov esi, dword [edx]
test esi, esi
je 0x10026561
mov ecx, dword [esi + 4]
test cl, 1
je 0x1002241d
mov dword [esp + 0x2c], esi
and ecx, 0xfffffffe
je 0x10026570
mov esi, dword [ecx]
test esi, esi
je 0x100206f8
test byte [esi + 4], 1
jne 0x10022ac5
and eax, 1
or eax, ecx
mov esi, dword [esp + 0x2c]
mov dword [esi + 4], eax
or byte [ecx + 4], 1
mov ecx, dword [edx]
test ecx, ecx
je 0x100262c7
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov ebx, dword [edx + 4]
mov eax, ebx
and eax, 0xfffffffe
je 0x10026589
mov esi, dword [eax]
and esi, 0xfffffffe
and ebx, 1
or ebx, esi
mov dword [edx + 4], ebx
mov dword [eax], edx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
or byte [edx + 4], 1
mov ebx, dword [esp]
cmp dword [edi], edx
jne 0x100225b9
mov dword [edi], ecx
mov edx, edi
jmp 0x100205e9
mov eax, dword [esp + 0x20]
mov edx, dword [ebx + eax + 0x5c]
test edx, edx
mov dword [esp + 4], ebx
mov dword [esp + 0x10], esi
je 0x10022552
lea ecx, [ebx + eax]
add ecx, 0x5c
mov eax, edx
mov esi, eax
mov eax, dword [eax]
test eax, eax
jne 0x1002078a
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], 0
xor edi, edi
dec edi
xor eax, eax
cmp edx, esi
setb al
cmova eax, edi
cmp eax, 0xffffffff
jne 0x100214c0
mov dword [esp + 8], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10026652
mov eax, dword [ecx + 4]
mov dword [esp + 0x14], 0
test al, 1
je 0x10021117
mov eax, edx
mov edx, ecx
xor ecx, ecx
cmp edx, esi
setb cl
cmova ecx, edi
cmp ecx, 0xffffffff
jne 0x10020867
test edx, edx
je 0x10022a5b
mov ecx, dword [edx]
test ecx, ecx
je 0x10022a5b
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x100207db
mov dword [esp + 0xc], eax
mov eax, dword [ecx]
test eax, eax
je 0x10020818
test byte [eax + 4], 1
jne 0x100207db
or ebx, 1
mov dword [ecx + 4], ebx
mov ebx, dword [edx + 4]
mov edi, ebx
and edi, 0xfffffffe
je 0x100260ec
mov ecx, dword [edi]
test ecx, ecx
je 0x1002083d
mov eax, dword [ecx + 4]
test al, 1
jne 0x10022122
or ebx, 1
mov dword [edx + 4], ebx
mov eax, dword [edi]
or eax, 1
mov dword [edx + 4], eax
mov dword [edi], edx
mov ecx, edi
mov eax, dword [esp + 0xc]
cmp dword [eax], edx
mov edi, 0xffffffff
jne 0x100266fa
mov dword [eax], ecx
jmp 0x100207dd
test ecx, ecx
jne 0x10020887
xor ecx, ecx
test edx, edx
je 0x100209dd
mov ebx, dword [edx + 4]
mov dword [esp + 0x14], eax
cmp ebx, 1
jbe 0x100209d3
jmp 0x10020892
test edx, edx
je 0x100265e3
mov ebx, dword [edx + 4]
mov dword [esp + 0xc], eax
mov ecx, ebx
and ecx, 0xfffffffe
je 0x100208ad
mov eax, dword [ecx]
test eax, eax
je 0x100208ad
test byte [eax + 4], 1
jne 0x100207db
mov eax, dword [edx]
test eax, eax
je 0x100265e3
mov ecx, dword [eax + 4]
test cl, 1
je 0x10022457
and ecx, 0xfffffffe
je 0x100265f2
mov edi, dword [ecx]
test edi, edi
je 0x100208dc
test byte [edi + 4], 1
jne 0x10022b2f
and ebx, 1
or ebx, ecx
mov dword [eax + 4], ebx
or byte [ecx + 4], 1
mov ecx, dword [edx]
test ecx, ecx
je 0x100262dc
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
mov ebx, dword [edx + 4]
mov edi, ebx
and edi, 0xfffffffe
je 0x100265c5
mov eax, dword [edi]
and eax, 0xfffffffe
and ebx, 1
or ebx, eax
mov dword [edx + 4], ebx
mov dword [edi], edx
mov eax, dword [ecx + 4]
and eax, 1
or eax, edi
mov dword [ecx + 4], eax
or byte [edx + 4], 1
mov ebx, dword [esp + 0xc]
cmp dword [ebx], edx
mov edi, 0xffffffff
jne 0x100225d0
mov dword [ebx], ecx
mov edx, ebx
jmp 0x100207db
lea ebx, [edx + 0xff]
mov eax, ebx
and eax, 0x1f00
mov dword [esp + 0x24], eax
shr ebx, 8
add ebx, 0x1e
jmp 0x1002000b
add edx, 0xff
mov eax, edx
and eax, 0x1f00
mov dword [esp + 0x18], eax
shr edx, 8
add edx, 0x1e
jmp 0x10020286
mov eax, dword [edx]
test eax, eax
jne 0x10021da3
cmp dword [edi], edx
jne 0x10022349
mov dword [edi], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x88]
mov dword [edx], eax
xor eax, eax
mov edi, dword [esp + 8]
mov dword [edi], eax
mov dword [edi + 4], eax
mov edx, 0xfffff000
and edx, dword [edi + 8]
mov dword [ecx], edx
test edx, edx
mov edi, dword [esp + 0x10]
jne 0x10020055
jmp 0x100245ba
mov edi, dword [edx]
test edi, edi
jne 0x10021dd9
cmp dword [eax], edx
mov ebx, dword [esp + 4]
jne 0x1002235c
mov dword [eax], ecx
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x88]
mov dword [ecx], eax
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov ecx, 0xfffff000
and ecx, dword [esi + 8]
mov eax, dword [esp + 0x10]
mov dword [eax], ecx
test ecx, ecx
jne 0x100202c5
jmp 0x100246b8
mov ecx, dword [edi + ebx + 0x68]
mov ebx, eax
shl ebx, 5
inc eax
cmp eax, ecx
jae 0x100266b2
mov edx, eax
mov eax, dword [esp + 8]
mov eax, dword [eax + edx*4 + 0xc]
add ebx, 0x20
mov dword [esp + 0x1c], eax
test eax, eax
mov eax, edx
je 0x10020a23
mov dword [esp + 0x30], eax
mov edi, dword [edi + 0x40]
test edi, edi
jne 0x10021146
mov edi, dword [esp + 0x1c]
tzcnt edx, edi
mov dword [esp + 0x14], edx
add ebx, edx
mov ecx, dword [esp + 0x10]
mov eax, dword [esp]
imul ebx, dword [ecx + eax + 0x60]
mov eax, dword [ecx + eax + 0x6c]
mov edx, dword [esp + 8]
add eax, edx
add ebx, eax
mov eax, dword [esp + 0x14]
btc edi, eax
mov eax, dword [esp + 0x30]
mov dword [edx + eax*4 + 0xc], edi
mov dword [edx + 4], eax
jmp 0x100200a5
mov dword [esp + 0x14], ecx
mov edi, eax
mov eax, dword [esp + 0x20]
mov ecx, dword [ebx + eax + 0x68]
mov esi, edi
shl esi, 5
inc edi
cmp edi, ecx
jae 0x100266be
mov edx, dword [esp + 0x14]
mov edx, dword [edx + edi*4 + 0xc]
add esi, 0x20
test edx, edx
je 0x10020aa2
mov dword [esp + 0x10], edi
mov edi, dword [ebx + 0x40]
test edi, edi
jne 0x100211b5
tzcnt edi, edx
add esi, edi
imul esi, dword [ebx + eax + 0x60]
mov eax, dword [ebx + eax + 0x6c]
mov ecx, dword [esp + 0x14]
add eax, ecx
add esi, eax
btc edx, edi
mov eax, dword [esp + 0x10]
mov dword [ecx + eax*4 + 0xc], edx
mov dword [ecx + 4], eax
jmp 0x10020304
mov eax, ebx
mov edi, dword [esp + 0x48]
sub eax, edi
mov dword [esp + 0x14], eax
jb 0x100217c8
mov eax, dword [esp + 0xc]
shr eax, 0xc
movzx eax, al
mov dword [esp + 0x10], eax
shr edi, 0xc
lea eax, [esi + 0xc]
mov dword [esp + 8], eax
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x10]
add edi, eax
cmp edi, 0xfe
mov ecx, dword [esp + 4]
ja 0x10021133
lea edx, [edi + edi*2]
mov eax, dword [ecx + edx*4 + 0x18]
test al, 1
jne 0x10021133
and eax, 0xfffff000
cmp eax, dword [esp + 0x14]
jb 0x10021133
shl edi, 0xc
add edi, ecx
mov ecx, esi
mov dword [esp], edx
mov edx, edi
push dword [esp + 0x14]
call fcn.1002e9d0
mov edx, dword [esp + 4]
mov ecx, dword [esp + 8]
add esp, 4
test al, al
je 0x10021133
or ebx, 3
mov eax, dword [esp + 0x10]
lea eax, [eax + eax*2]
mov dword [ecx + eax*4 + 0x18], ebx
lea eax, [ecx + edx*4]
add eax, 0x18
mov dword [eax], 3
mov eax, dword [esp + 0x14]
add dword [esi + 0x30], eax
push dword [esp + 8]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x10020470
mov dword [ebx + 4], edx
jmp 0x100201a6
mov ecx, dword [esp + 4]
sub eax, ecx
shr eax, 0xc
lea eax, [eax + eax*2]
lea edi, [ecx + eax*4]
add edi, 0x10
mov eax, dword [edx + 4]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], 0
test eax, eax
mov dword [esp + 8], edi
je 0x10021d2f
lea ecx, [esp + 0x88]
mov dword [esp + 4], 0
mov ebx, dword [esp + 4]
mov dword [esp + 0x10], ebx
mov dword [esp + 4], ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x10020c38
mov ebx, dword [ecx + 4]
test bl, 1
je 0x10020c38
mov edi, dword [ecx]
test edi, edi
je 0x10020c20
test byte [edi + 4], 1
jne 0x10020c44
mov ecx, eax
mov edi, dword [esp + 8]
cmp ecx, edi
seta bl
jbe 0x10020c3c
mov eax, dword [ecx]
test eax, eax
jne 0x10020bfa
jmp 0x100222af
mov ecx, eax
jmp 0x10020c26
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
jmp 0x10020c2f
and ebx, 0xfffffffe
mov dword [eax], ebx
mov edi, eax
and edi, 0xfffffffe
mov ebx, dword [ecx]
mov edx, dword [ecx + 4]
and edx, 1
or edx, edi
mov dword [ecx + 4], edx
test ebx, ebx
je 0x10026534
and byte [ebx + 4], 0xfe
mov ebx, dword [esp + 4]
cmp dword [ebx], eax
mov edx, dword [esp + 0xc]
mov edi, dword [esp + 8]
jne 0x10022238
mov dword [ebx], ecx
jmp 0x10020c26
sub dword [esi + 0x30], ebx
cmp edi, 0xff000
jae 0x10026726
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
test al, 2
mov ecx, dword [esp + 0xc]
je 0x100217b4
mov ecx, eax
and ecx, 0xfffff000
mov dword [esp + 0xc], ecx
shr eax, 0xc
test eax, eax
je 0x10020d63
lea ecx, [eax - 1]
movd xmm0, ecx
pshufd xmm0, xmm0, 0
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
lea ecx, [ecx + edx*4]
add ecx, 0x3c
lea edx, [eax*4 + 0xc]
and edx, 0xfffffff0
lea edx, [edx + edx*2]
movdqa xmm1, xmmword [0x10088110]
xor esi, esi
movdqa xmm2, xmmword [0x10088120]
pxor xmm0, xmm2
pcmpeqd xmm3, xmm3
movdqa xmm4, xmmword [0x10088130]
movdqa xmm5, xmm1
pxor xmm5, xmm2
pcmpgtd xmm5, xmm0
movd ebx, xmm5
not ebx
test bl, 1
je 0x10020d1f
mov dword [ecx + esi - 0x24], 8
pxor xmm5, xmm3
pextrw ebx, xmm5, 2
test bl, 1
je 0x10020d35
mov dword [ecx + esi - 0x18], 8
pextrw ebx, xmm5, 4
test bl, 1
je 0x10020d47
mov dword [ecx + esi - 0xc], 8
pextrw ebx, xmm5, 6
test bl, 1
je 0x10020d58
mov dword [ecx + esi], 8
paddd xmm1, xmm4
add esi, 0x30
cmp edx, esi
jne 0x10020d00
mov dword [esp], eax
mov ebx, dword [esp + 4]
mov ecx, dword [ebx + 0xc]
test ecx, ecx
mov esi, dword [esp + 0x18]
je 0x10021bb7
mov eax, dword [esp]
add ecx, eax
mov dword [ebx + 0xc], ecx
add dword [esi + 0x44], eax
mov edx, 0xfff
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
and ecx, edx
or ecx, dword [esp + 0xc]
mov esi, ebx
mov ebx, dword [esp + 0x20]
mov dword [ebx], ecx
add eax, dword [esp + 0x10]
lea ecx, [eax + eax*2]
and edx, dword [esi + ecx*4 + 0xc]
or edx, dword [esp + 0xc]
mov dword [esi + ecx*4 + 0xc], edx
cmp eax, 0xfe
ja 0x100230cf
mov eax, dword [esi + ecx*4 + 0x18]
test al, 1
je 0x10021508
mov ebx, dword [esp + 4]
cmp edi, 0x3000
jb 0x10020de7
mov eax, dword [esp + 8]
mov eax, dword [ebx + eax*4 + 0xc]
test al, 1
mov esi, dword [esp + 0x18]
je 0x100219b1
mov eax, dword [esp + 0x10]
lea eax, [eax + eax*2]
lea esi, [ebx + eax*4]
add esi, 0x10
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx + 0x54]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], 0
test ecx, ecx
je 0x10021d59
mov dword [esp + 0x20], esi
lea eax, [ebx + eax*4]
add eax, 0x18
mov dword [esp + 0xc], eax
lea ebx, [esp + 0x88]
xor edi, edi
mov eax, edi
mov edi, ebx
mov ebx, dword [ecx]
test ebx, ebx
je 0x10020e4a
mov edx, dword [ebx + 4]
test dl, 1
je 0x10020e4a
mov esi, dword [ebx]
test esi, esi
je 0x10020e4a
test byte [esi + 4], 1
jne 0x10020e9e
mov ebx, ecx
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov esi, dword [ebx + 8]
and esi, ecx
xor ecx, ecx
cmp edx, esi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
cmp ecx, 0xffffffff
je 0x10020e90
xor edx, edx
inc edx
test ecx, ecx
jne 0x10020ed2
test al, 0x10
mov eax, 0
cmove eax, dword [esp + 0x20]
xor edx, edx
cmp eax, ebx
seta al
jae 0x10020ed0
mov ecx, dword [ebx]
xor edx, edx
dec edx
test ecx, ecx
jne 0x10020e2c
jmp 0x10020f71
mov dword [esp + 0x10], eax
and edx, 0xfffffffe
mov dword [ecx], edx
mov esi, ecx
and esi, 0xfffffffe
mov edx, dword [ebx]
mov eax, dword [ebx + 4]
and eax, 1
or eax, esi
mov dword [ebx + 4], eax
test edx, edx
je 0x10026516
and byte [edx + 4], 0xfe
cmp dword [edi], ecx
jne 0x10020eda
mov dword [edi], ebx
jmp 0x10020e4c
mov dl, al
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
jmp 0x10020e95
and ebx, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
lea eax, [ecx + ebx]
mov dword [edi + 4], eax
test ebx, ebx
je 0x10026525
mov eax, dword [ebx]
and eax, 0xfffffffe
or eax, ecx
mov dword [edi + 4], eax
mov dword [ebx], edi
mov eax, dword [edi + 4]
and eax, 1
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
or byte [edi + 4], 1
mov eax, dword [esp + 0x10]
test eax, eax
je 0x10026119
cmp dword [eax], edi
je 0x10022016
jmp 0x10022197
mov eax, dword [esp + 0xc]
mov edx, dword [eax]
mov eax, edx
mov ecx, 0xfffff000
and eax, ecx
mov esi, dword [ebx + 8]
and esi, ecx
xor ecx, ecx
cmp eax, esi
seta cl
mov eax, 0xffffffff
cmovb ecx, eax
test ecx, ecx
jne 0x10021d48
jmp 0x10022381
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
mov eax, dword [esp + 0x10]
mov edi, ebx
test ecx, ecx
jne 0x10020e30
mov edi, eax
mov esi, dword [esp + 0x20]
mov dword [esi], 0
mov dword [esi + 4], 1
cmp edx, 1
je 0x10021232
mov dword [ebx], esi
mov ecx, dword [esp + 4]
mov eax, dword [esp + 0x88]
test eax, eax
je 0x1002673b
mov edx, dword [esp + 0x18]
add edx, 0x54
and byte [eax + 4], 0xfe
mov dword [edx], eax
mov eax, 0xfffff001
and eax, dword [ecx + 0x30]
xor ebx, ebx
mov esi, 0
cmp eax, 0xfd000
je 0x10024caa
mov ecx, dword [0x1009a754]
test ecx, ecx
je 0x10020fee
setle al
movzx eax, al
mov edx, dword [esp + 0x18]
mov eax, dword [edx + eax*4 + 0x4c]
test eax, eax
cmovne ecx, eax
test ecx, ecx
js 0x100249c9
mov ebx, ecx
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 0x48]
mov ecx, ebx
shl edx, cl
cmp dword [eax + 0x44], edx
mov edi, dword [esp + 0x14]
jbe 0x100201f1
mov ecx, eax
call fcn.10036c10
jmp 0x100201f1
mov edi, ecx
mov eax, edx
dec eax
je 0x100214ea
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor ebx, ebx
inc ebx
shl ebx, cl
cmp ebx, 9
mov eax, 8
cmovb ebx, eax
cmp edx, 2
cmovb ebx, eax
xor eax, eax
mov ecx, edi
jmp 0x1001ff72
mov eax, edx
dec eax
je 0x100214f4
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor ebx, ebx
inc ebx
shl ebx, cl
cmp ebx, 9
mov eax, 8
cmovb ebx, eax
cmp edx, 2
cmovb ebx, eax
mov dword [esp + 0x24], ebx
mov eax, ebx
shr eax, 3
or eax, 1
bsr ebx, eax
jmp 0x1002000b
mov eax, edx
dec eax
je 0x100214fe
bsr ecx, eax
xor ecx, 0x1f
neg cl
xor esi, esi
inc esi
shl esi, cl
cmp esi, 9
mov eax, 8
cmovb esi, eax
cmp edx, 2
cmovb esi, eax
mov dword [esp + 0x18], esi
mov eax, esi
shr eax, 3
or eax, 1
bsr edx, eax
jmp 0x10020286
mov esi, dword [ecx]
test esi, esi
je 0x100210ca
test byte [esi + 4], 1
jne 0x100205e9
or eax, 1
mov dword [ecx + 4], eax
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x10026140
mov ecx, dword [eax]
test ecx, ecx
je 0x100210f0
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10022f2b
or esi, 1
mov dword [edx + 4], esi
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
and byte [ecx + 4], 0xfe
lea edx, [esp + 0x88]
mov dword [edx], ecx
mov ebx, dword [esp]
jmp 0x100205e9
mov edi, dword [ecx]
test edi, edi
je 0x10021937
test byte [edi + 4], 1
je 0x10021937
xor edi, edi
dec edi
jmp 0x100207db
push dword [esp + 8]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [esp + 0x20]
jmp 0x1001ffae
mov dword [esp + 0x14], ebx
mov eax, dword [edi]
mov edx, dword [edi + 4]
mov ebx, edx
shld ebx, eax, 0x17
mov esi, eax
shl esi, 0x17
xor esi, eax
mov ecx, dword [edi + 0xc]
xor ebx, edx
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, ebx
mov edx, ebx
shr ebx, 0x11
xor ebx, eax
mov eax, dword [edi + 8]
mov dword [edi + 4], ecx
shld edx, esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, edx
mov dword [edi], eax
mov dword [edi + 0xc], ebx
mov dword [edi + 8], ecx
add ecx, eax
mov edi, dword [esp + 0x1c]
mov esi, edi
ror esi, cl
test esi, esi
je 0x10021984
tzcnt edx, esi
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
add edx, ecx
and edx, 0x1f
jmp 0x10020a5a
mov dword [esp + 4], ebx
mov dword [esp + 0xc], esi
mov eax, dword [edi]
mov ebx, dword [edi + 4]
mov dword [esp + 8], edx
mov edx, ebx
shld edx, eax, 0x17
mov esi, eax
shl esi, 0x17
xor esi, eax
mov ecx, dword [edi + 0xc]
xor edx, ebx
mov eax, ecx
shr eax, 0x1a
xor eax, ecx
xor eax, edx
mov ebx, edx
shr edx, 0x11
xor edx, eax
mov eax, dword [edi + 8]
mov dword [edi + 4], ecx
shld ebx, esi, 0xf
shld ecx, eax, 6
xor ecx, eax
xor ecx, esi
xor ecx, ebx
mov dword [edi], eax
mov dword [edi + 0xc], edx
mov dword [edi + 8], ecx
add ecx, eax
mov edx, dword [esp + 8]
ror edx, cl
test edx, edx
je 0x1002198e
tzcnt edi, edx
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0xc]
add edi, ecx
and edi, 0x1f
mov ebx, dword [esp + 4]
mov edx, dword [esp + 8]
jmp 0x10020acd
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, eax
or ecx, esi
mov dword [ebx + 4], ecx
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [ebx + 4], ecx
mov dword [esi], ebx
mov eax, dword [ebx + 4]
and eax, 1
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
or byte [ebx + 4], 1
cmp dword [edi], ebx
jne 0x10021cf4
mov dword [edi], esi
jmp 0x10020f8d
cmp dword [edx], ebx
je 0x10022227
test ecx, ecx
mov ecx, dword [esp + 0x18]
mov edi, edx
je 0x10021885
mov edx, dword [esp + 4]
sub eax, edx
shr eax, 0xc
lea eax, [eax + eax*2]
lea eax, [edx + eax*4]
add eax, 0x10
mov edx, dword [edi + 4]
mov edi, eax
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], 0
xor esi, esi
dec esi
xor eax, eax
cmp edx, edi
setb al
cmova eax, esi
cmp eax, 0xffffffff
mov dword [esp + 0x10], edi
jne 0x10022925
test edx, edx
je 0x1002684f
mov ecx, dword [edx]
test ecx, ecx
je 0x1002684f
mov eax, dword [ecx + 4]
mov dword [esp + 8], 0
test al, 1
je 0x1002201d
mov dword [esp + 4], edx
xor esi, esi
dec esi
mov edx, ecx
xor eax, eax
cmp edx, edi
setb al
cmova eax, esi
cmp eax, 0xffffffff
jne 0x1002137c
test edx, edx
je 0x10024a49
mov ecx, dword [edx]
test ecx, ecx
je 0x10024a49
mov eax, dword [ecx + 4]
test al, 1
jne 0x10021373
mov esi, dword [ecx]
test esi, esi
je 0x1002132a
test byte [esi + 4], 1
jne 0x100212ed
or eax, 1
mov dword [ecx + 4], eax
mov eax, dword [edx + 4]
mov esi, eax
and esi, 0xfffffffe
je 0x10026180
mov edi, dword [esi]
test edi, edi
jne 0x1002139c
or eax, 1
mov dword [edx + 4], eax
mov eax, dword [esi]
or eax, 1
mov dword [edx + 4], eax
mov dword [esi], edx
mov edi, esi
mov eax, dword [esp + 4]
cmp dword [eax], edx
mov edx, eax
mov esi, 0xffffffff
jne 0x1002690f
mov dword [edx], edi
mov edx, edi
mov edi, dword [esp + 0x10]
jmp 0x100212f6
mov dword [esp + 4], edx
jmp 0x100212f4
test eax, eax
jne 0x100213ac
xor ecx, ecx
test edx, edx
je 0x10021858
mov esi, dword [edx + 4]
mov eax, dword [esp + 4]
cmp esi, 1
jbe 0x1002184e
jmp 0x100213bb
mov ecx, dword [edi + 4]
mov dword [esp], ecx
test cl, 1
je 0x10021344
jmp 0x10022d99
test edx, edx
je 0x1002680a
mov esi, dword [edx + 4]
mov eax, dword [esp + 8]
mov dword [esp + 8], eax
mov ecx, esi
and ecx, 0xfffffffe
je 0x100213d6
mov eax, dword [ecx]
test eax, eax
je 0x100213d6
test byte [eax + 4], 1
jne 0x100212ed
mov eax, dword [edx]
test eax, eax
je 0x1002680a
mov ecx, dword [eax + 4]
test cl, 1
je 0x10023110
mov dword [esp], eax
and ecx, 0xfffffffe
je 0x10026819
mov eax, dword [ecx]
test eax, eax
je 0x10021408
test byte [eax + 4], 1
jne 0x100245c3
and esi, 1
or esi, ecx
mov eax, dword [esp]
mov dword [eax + 4], esi
or byte [ecx + 4], 1
mov ecx, dword [edx]
test ecx, ecx
je 0x10026459
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov dword [esp], esi
and esi, 0xfffffffe
je 0x100267ec
mov eax, dword [esi]
and eax, 0xfffffffe
mov dword [esp + 0x38], eax
mov eax, dword [esp]
and eax, 1
add eax, dword [esp + 0x38]
mov dword [edx + 4], eax
mov dword [esi], edx
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
or byte [edx + 4], 1
mov eax, dword [esp + 4]
cmp dword [eax], edx
mov edx, eax
je 0x1002207c
mov eax, ecx
and eax, 0xfffffffe
mov esi, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov dword [esi + 4], edx
mov edx, esi
jmp 0x100212ed
test eax, eax
jne 0x10021e0f
mov eax, dword [edx + 4]
cmp eax, 1
ja 0x10024b6f
mov eax, dword [edx]
test eax, eax
jne 0x10024c25
mov dword [esp + 0x88], eax
jmp 0x100209a0
test eax, eax
jne 0x10021e8f
mov eax, dword [edx + 4]
cmp eax, 1
ja 0x10024bc9
mov eax, dword [edx]
test eax, eax
jne 0x10024c5d
mov dword [esp + 0x88], eax
jmp 0x100209ef
mov ecx, 0x20
jmp 0x10021023
mov ecx, 0x20
jmp 0x10021053
mov ecx, 0x20
jmp 0x1002108e
mov dword [esp + 0x30], eax
mov eax, dword [esp + 4]
lea edx, [eax + ecx*4]
add edx, 0x18
mov eax, 0xfffff000
mov esi, dword [esp + 0x18]
mov esi, dword [esi + 0x54]
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], 0
mov dword [esp + 0x38], edx
mov ebx, dword [edx]
mov dword [esp], ebx
and ebx, eax
mov edx, dword [esi + 8]
and edx, eax
xor eax, eax
cmp ebx, edx
seta al
mov edx, dword [esp + 4]
lea ecx, [edx + ecx*4 + 0x10]
mov dword [esp + 0x24], ecx
mov ecx, 0xffffffff
cmovb eax, ecx
test eax, eax
je 0x100229b6
cmp eax, 0xffffffff
jne 0x100221a9
mov ebx, dword [esi]
test ebx, ebx
je 0x1002693b
mov eax, dword [ebx + 4]
mov dword [esp + 0x1c], 0
test al, 1
jne 0x100215da
mov ecx, dword [ebx]
test ecx, ecx
je 0x10021595
test byte [ecx + 4], 1
jne 0x100215da
or eax, 1
mov dword [ebx + 4], eax
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1002616b
mov ebx, dword [eax]
test ebx, ebx
je 0x100215bb
mov edx, dword [ebx + 4]
test dl, 1
jne 0x10024d70
or ecx, 1
mov dword [esi + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ebx, eax
and byte [ebx + 4], 0xfe
lea esi, [esp + 0x88]
mov dword [esi], ebx
mov dword [esp], esi
mov esi, ebx
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
mov ecx, edx
mov eax, 0xfffff000
and ecx, eax
mov ebx, dword [ebx + 8]
and ebx, eax
xor eax, eax
cmp ecx, ebx
seta al
mov ecx, 0xffffffff
cmovb eax, ecx
test eax, eax
je 0x10021631
cmp eax, 0xffffffff
jne 0x1002164b
mov ebx, dword [esi]
test ebx, ebx
je 0x100231fa
mov eax, dword [ebx + 4]
test al, 1
jne 0x100215da
mov ecx, dword [ebx]
test ecx, ecx
je 0x10021730
test byte [ecx + 4], 1
jne 0x100215da
jmp 0x10021730
test dl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x24]
xor eax, eax
cmp ecx, esi
seta cl
jb 0x1002160b
mov al, cl
jmp 0x10021606
test eax, eax
je 0x10021718
mov edx, dword [esi + 4]
mov ebx, edx
and ebx, 0xfffffffe
je 0x1002166d
mov eax, dword [ebx]
test eax, eax
je 0x1002166d
test byte [eax + 4], 1
jne 0x100215da
mov eax, dword [esi]
test eax, eax
je 0x100267aa
mov ebx, dword [eax + 4]
test bl, 1
je 0x1002177a
and ebx, 0xfffffffe
je 0x100261ef
mov ecx, dword [ebx]
test ecx, ecx
je 0x1002169c
test byte [ecx + 4], 1
jne 0x10023017
and edx, 1
or edx, ebx
mov dword [eax + 4], edx
or byte [ebx + 4], 1
mov ebx, dword [esi]
test ebx, ebx
je 0x10026777
mov eax, dword [ebx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
mov edx, dword [esi + 4]
mov eax, edx
and eax, 0xfffffffe
je 0x1002678c
mov ecx, dword [eax]
and ecx, 0xfffffffe
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
mov dword [eax], esi
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
or byte [esi + 4], 1
mov eax, dword [esp]
cmp dword [eax], esi
mov esi, eax
je 0x100215d8
mov eax, ebx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x100215da
mov edx, dword [esi + 4]
mov eax, dword [esp]
mov dword [esp + 0x1c], eax
cmp edx, 1
jbe 0x1002189b
jmp 0x10021656
or eax, 1
mov dword [ebx + 4], eax
mov edx, dword [esi + 4]
mov eax, edx
and eax, 0xfffffffe
je 0x10026107
mov ebx, dword [eax]
test ebx, ebx
je 0x10021756
mov ecx, dword [ebx + 4]
test cl, 1
jne 0x10022c44
or edx, 1
mov dword [esi + 4], edx
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ebx, eax
mov edx, dword [esp]
cmp dword [edx], esi
jne 0x10026926
mov dword [edx], ebx
jmp 0x100215dd
or ebx, 1
mov dword [eax + 4], ebx
mov eax, dword [eax]
test eax, eax
je 0x10021792
mov edx, dword [eax + 4]
test dl, 1
jne 0x10022ce8
mov eax, dword [esi + 4]
mov ebx, eax
and ebx, 0xfffffffe
je 0x100267b9
mov ecx, dword [ebx]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [esi + 4], eax
mov dword [ebx], esi
jmp 0x100216f6
mov eax, dword [ecx]
movzx eax, byte [eax + 0x1e]
mov ecx, eax
shl ecx, 0xc
mov dword [esp + 0xc], ecx
jmp 0x10020caf
mov eax, edi
sub eax, edx
add edx, dword [esp + 0xc]
push eax
push 0xe5
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi + 0xc]
mov dword [esp + 0x20], eax
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0xc]
shr eax, 0xc
movzx eax, al
mov dword [esp + 0x10], eax
mov ecx, ebx
or ecx, 3
lea edx, [eax + eax*2]
mov eax, dword [esp + 4]
mov dword [eax + edx*4 + 0x18], ecx
mov edx, eax
mov ecx, ebx
shr ecx, 0xc
add ecx, dword [esp + 0x10]
sub edi, ebx
or edi, 3
lea eax, [ecx + ecx*2]
mov dword [edx + eax*4 + 0x18], edi
mov edi, dword [esp + 0xc]
add ebx, edi
mov ecx, esi
mov edx, ebx
push 1
call fcn.10035100
add esp, 4
mov eax, dword [esp + 0x14]
add dword [esi + 0x30], eax
mov esi, edi
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x10020205
mov esi, dword [edx]
test esi, esi
jne 0x100230de
mov eax, dword [esp + 4]
cmp dword [eax], edx
mov edx, eax
jne 0x10024321
mov dword [edx], ecx
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x88]
mov dword [edi + 4], eax
xor eax, eax
mov edx, dword [esp + 0x10]
mov dword [edx], eax
mov dword [edx + 4], eax
mov edx, ebx
push 1
call fcn.10035100
add esp, 4
mov esi, eax
dec dword [edi + 0x18]
jmp 0x100201e2
mov eax, dword [esi]
test eax, eax
je 0x100218cc
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [esi], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
or byte [esi + 4], 1
and dword [eax + 4], 1
mov edx, dword [esp]
cmp dword [edx], esi
jne 0x10022993
mov dword [edx], eax
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x18]
mov dword [eax + 0x54], ecx
xor eax, eax
mov ecx, dword [esp + 0x24]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x30]
mov ecx, 0xfffff000
and eax, ecx
mov edx, dword [esp + 0xc]
add edx, eax
mov eax, 0xfff
mov esi, dword [esp + 0x20]
mov ecx, dword [esi]
and ecx, eax
or ecx, edx
mov dword [esi], ecx
mov ecx, edx
shr ecx, 0xc
add ecx, dword [esp + 0x10]
lea ecx, [ecx + ecx*2]
mov ebx, dword [esp + 4]
and eax, dword [ebx + ecx*4 + 0xc]
mov dword [esp + 0xc], edx
or eax, edx
mov dword [ebx + ecx*4 + 0xc], eax
jmp 0x10020dcb
or eax, 1
mov dword [ecx + 4], eax
mov edi, dword [edx + 4]
mov eax, edi
and eax, 0xfffffffe
je 0x10026152
mov ecx, dword [eax]
test ecx, ecx
je 0x1002195d
mov ebx, dword [ecx + 4]
test bl, 1
jne 0x10022fa1
or edi, 1
mov dword [edx + 4], edi
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
xor edi, edi
dec edi
and byte [ecx + 4], 0xfe
lea edx, [esp + 0x88]
mov dword [edx], ecx
jmp 0x100207db
mov edx, 0x20
jmp 0x100211a3
mov edi, 0x20
jmp 0x10021218
mov dword [edi], 0
mov dword [edi + 4], 1
lea ecx, [esp + 0x88]
jmp 0x10021ff7
mov dword [esp + 8], eax
shr eax, 0xc
mov ecx, dword [esp + 0x10]
sub ecx, eax
mov dword [esp + 0x10], ecx
lea eax, [ecx + ecx*2]
lea eax, [ebx + eax*4]
add eax, 0x10
mov esi, dword [esi + 0x54]
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], 0
mov dword [esp + 0x20], eax
mov ecx, dword [eax + 8]
mov edx, ecx
mov eax, 0xfffff000
and edx, eax
mov edi, dword [esi + 8]
and edi, eax
xor ebx, ebx
dec ebx
xor eax, eax
cmp edx, edi
seta al
cmovb eax, ebx
test eax, eax
je 0x10022b9b
cmp eax, 0xffffffff
jne 0x100223a2
mov edi, dword [esi]
test edi, edi
je 0x100269a4
mov eax, dword [edi + 4]
test al, 1
je 0x10022490
mov dword [esp], 0
mov ebx, esi
mov esi, edi
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 8]
mov edx, ecx
mov eax, 0xfffff000
and edx, eax
mov edi, dword [edi + 8]
and edi, eax
xor eax, eax
cmp edx, edi
seta al
mov edx, 0xffffffff
cmovb eax, edx
test eax, eax
je 0x10021a86
cmp eax, 0xffffffff
jne 0x10021aa0
mov edi, dword [esi]
test edi, edi
je 0x100242d1
mov eax, dword [edi + 4]
test al, 1
jne 0x10021a2f
mov ecx, dword [edi]
test ecx, ecx
je 0x10021b70
test byte [ecx + 4], 1
jne 0x10021a2f
jmp 0x10021b70
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x20]
xor eax, eax
cmp ecx, esi
seta cl
jb 0x10021a60
mov al, cl
jmp 0x10021a5b
test eax, eax
je 0x10021b5c
mov edx, dword [esi + 4]
mov edi, edx
and edi, 0xfffffffe
je 0x10021ac2
mov eax, dword [edi]
test eax, eax
je 0x10021ac2
test byte [eax + 4], 1
jne 0x10021a2f
mov eax, dword [esi]
test eax, eax
je 0x100268cd
mov ecx, dword [eax + 4]
test cl, 1
je 0x10022bc0
and ecx, 0xfffffffe
je 0x10026213
mov edi, dword [ecx]
test edi, edi
je 0x10021af1
test byte [edi + 4], 1
jne 0x1002435a
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
or byte [ecx + 4], 1
mov edi, dword [esi]
test edi, edi
je 0x1002689a
mov eax, dword [edi + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x100268af
mov edx, dword [eax]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
or byte [esi + 4], 1
cmp dword [ebx], esi
jne 0x10022e12
mov dword [ebx], edi
mov esi, ebx
jmp 0x10021a2f
mov edx, dword [esi + 4]
mov dword [esp], ebx
cmp edx, 1
jbe 0x10021c63
jmp 0x10021aab
or eax, 1
mov dword [edi + 4], eax
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1002612e
mov edi, dword [eax]
test edi, edi
je 0x10021b96
mov edx, dword [edi + 4]
test dl, 1
jne 0x100240ef
or ecx, 1
mov dword [esi + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov edi, eax
cmp dword [ebx], esi
jne 0x10026aaf
mov dword [ebx], edi
jmp 0x10021a31
mov ebx, dword [esi + 0x34]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], 0
test ebx, ebx
je 0x10022955
lea ecx, [esp + 0x88]
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, ecx
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x10021c07
mov edx, dword [ecx + 8]
test dl, 1
je 0x10021c07
mov esi, dword [ecx + 4]
test esi, esi
je 0x10021bff
test byte [esi + 8], 1
jne 0x10021c26
mov ecx, ebx
mov esi, dword [esp + 0x18]
jmp 0x10021c09
mov ecx, ebx
cmp ecx, dword [esp + 4]
seta dl
jbe 0x10021c1e
mov ebx, dword [ecx + 4]
test ebx, ebx
jne 0x10021bdd
jmp 0x10022ea0
mov ebx, dword [ecx + 8]
and ebx, 0xfffffffe
jmp 0x10021c15
and edx, 0xfffffffe
mov dword [ebx + 4], edx
mov edx, ebx
and edx, 0xfffffffe
mov dword [esp + 0x24], edx
mov edx, dword [ecx + 4]
mov esi, dword [ecx + 8]
and esi, 1
add esi, dword [esp + 0x24]
mov dword [ecx + 8], esi
test edx, edx
je 0x1002674a
and byte [edx + 8], 0xfe
cmp dword [eax + 4], ebx
mov esi, dword [esp + 0x18]
jne 0x10022e29
mov dword [eax + 4], ecx
jmp 0x10021c09
mov eax, dword [esi]
test eax, eax
je 0x10021c94
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [esi], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
or byte [esi + 4], 1
and dword [eax + 4], 1
cmp dword [ebx], esi
jne 0x10022ab2
mov dword [ebx], eax
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 8]
mov eax, 0xfffff000
and edx, eax
add edx, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
mov dword [eax + 0x54], ecx
xor eax, eax
mov esi, dword [esp + 0x20]
mov dword [esi], eax
mov dword [esi + 4], eax
mov eax, 0xfff
mov ecx, dword [esi + 8]
and ecx, eax
or ecx, edx
mov dword [esi + 8], ecx
mov ecx, edx
shr ecx, 0xc
add ecx, dword [esp + 0x10]
lea ecx, [ecx + ecx*2]
mov ebx, dword [esp + 4]
and eax, dword [ebx + ecx*4 + 0xc]
or eax, edx
mov dword [ebx + ecx*4 + 0xc], eax
jmp 0x10020de7
mov eax, dword [edi + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp ebx, ecx
mov ecx, dword [esp + 4]
jne 0x10020f91
and eax, 1
or eax, esi
mov dword [edi + 4], eax
jmp 0x10020f91
mov esi, dword [esp + 0xc]
add edx, esi
push eax
push 0xe5
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
jmp 0x10020205
mov dword [edi], 0
mov dword [edi + 4], 1
lea ecx, [esp + 0x88]
jmp 0x10022308
xor edx, edx
inc edx
cmp ecx, 0xffffffff
jne 0x10020f5b
jmp 0x100229d5
mov dword [esi], 0
mov dword [esi + 4], 1
lea ebx, [esp + 0x88]
jmp 0x10020f8b
mov ebx, dword [0x1009a744]
cmp edx, 0xf00
jbe 0x10020262
mov ecx, ebx
cmp edx, 0xfd000
ja 0x100231e6
push 0
call fcn.1001acc0
add esp, 4
mov esi, eax
jmp 0x10020205
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [esp + 0x18]
or byte [edx + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x10020992
mov ebx, eax
mov eax, dword [edi + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov eax, ebx
mov dword [edi + 4], ecx
or byte [edx + 4], 1
and dword [edi + 4], 1
mov ecx, edi
jmp 0x100209dd
mov eax, dword [edx + 4]
mov dword [esp + 0x1c], 0
mov ecx, eax
and ecx, 0xfffffffe
je 0x10021e31
mov esi, dword [ecx]
test esi, esi
je 0x10021e31
test byte [esi + 4], 1
jne 0x100205e9
mov ecx, dword [edx]
test ecx, ecx
je 0x10026ae2
test byte [ecx + 4], 1
jne 0x1002324e
or eax, 1
mov dword [edx + 4], eax
mov eax, dword [ecx]
test eax, eax
je 0x10021e5d
mov ebx, dword [eax + 4]
test bl, 1
jne 0x10024877
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x10026bc0
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
mov ebx, dword [esp]
lea edx, [esp + 0x88]
mov dword [edx], ecx
jmp 0x100205e9
mov dword [esp + 8], ecx
mov eax, dword [edx + 4]
mov dword [esp + 0x14], 0
mov ecx, eax
and ecx, 0xfffffffe
je 0x10021eb5
mov edi, dword [ecx]
test edi, edi
je 0x10021eb5
test byte [edi + 4], 1
jne 0x1002112b
mov ecx, dword [edx]
test ecx, ecx
je 0x10026af7
test byte [ecx + 4], 1
jne 0x10023260
or eax, 1
mov dword [edx + 4], eax
mov eax, dword [ecx]
test eax, eax
je 0x10021ee1
mov ebx, dword [eax + 4]
test bl, 1
jne 0x100248cc
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x10026bcf
mov edi, dword [ecx]
and edi, 0xfffffffe
and eax, 1
or eax, edi
mov dword [edx + 4], eax
mov dword [ecx], edx
lea edx, [esp + 0x88]
mov dword [edx], ecx
jmp 0x1002112b
and ecx, 0xfffffffe
mov esi, eax
mov eax, dword [eax + 4]
and eax, 1
lea edx, [eax + ecx]
mov dword [esp + 4], esi
mov dword [esi + 4], edx
test ecx, ecx
mov esi, 0
je 0x100264e3
mov edx, dword [ecx]
and edx, 0xfffffffe
or edx, eax
mov eax, dword [esp + 4]
mov dword [eax + 4], edx
mov dword [ecx], eax
mov edx, dword [eax + 4]
and edx, 1
mov dword [esp + 8], edx
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
add edx, dword [esp + 8]
mov dword [ecx + 4], edx
or byte [eax + 4], 1
mov edx, dword [esp + 0x10]
test edx, edx
je 0x100264f2
cmp dword [edx], eax
jne 0x100229a6
mov dword [edx], ecx
cmp edi, ecx
setb dl
jb 0x100229df
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [esp + 4], ecx
test eax, eax
jne 0x100204ed
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
mov dword [edi], 0
mov dword [edi + 4], 1
test dl, dl
jne 0x10021ff3
cmp ecx, edi
mov edx, dword [esp + 0xc]
jae 0x10021ff7
mov eax, dword [ecx + 4]
and eax, 1
mov edx, eax
or edx, edi
mov dword [ecx + 4], edx
mov edx, dword [edi]
and edx, 0xfffffffe
or edx, eax
mov dword [ecx + 4], edx
mov dword [edi], ecx
mov eax, dword [ecx + 4]
and eax, 1
mov edx, dword [edi + 4]
and edx, 0xfffffffe
or edx, eax
mov dword [edi + 4], edx
or byte [ecx + 4], 1
mov eax, dword [esp + 4]
cmp dword [eax], ecx
jne 0x10022083
mov dword [eax], edi
mov edx, dword [esp + 0xc]
jmp 0x10021ff9
mov edx, dword [esp + 0xc]
mov dword [ecx], edi
mov eax, dword [esp + 0x88]
test eax, eax
je 0x100266ca
and byte [eax + 4], 0xfe
mov dword [edx + 4], eax
mov dword [edx], ebx
jmp 0x100201e2
mov dword [eax], ebx
jmp 0x10020f2b
mov esi, dword [ecx]
test esi, esi
je 0x1002202d
test byte [esi + 4], 1
jne 0x100212ed
or eax, 1
mov dword [ecx + 4], eax
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x1002624f
mov ecx, dword [eax]
test ecx, ecx
je 0x1002205f
mov dword [esp], esi
mov esi, dword [ecx + 4]
mov dword [esp + 4], esi
mov esi, dword [esp]
test byte [esp + 4], 1
jne 0x10025097
or esi, 1
mov dword [edx + 4], esi
mov ecx, dword [eax]
or ecx, 1
mov dword [edx + 4], ecx
mov dword [eax], edx
mov ecx, eax
and byte [ecx + 4], 0xfe
lea edx, [esp + 0x88]
mov dword [edx], ecx
jmp 0x100212ed
mov dword [esp + 4], eax
mov eax, dword [eax + 4]
mov edx, eax
and edx, 0xfffffffe
cmp ecx, edx
mov edx, dword [esp + 0xc]
jne 0x10021ff9
and eax, 1
or eax, edi
mov ecx, dword [esp + 4]
mov dword [ecx + 4], eax
jmp 0x10021ff9
and ebx, 0xfffffffe
mov dword [eax], ebx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x100264c5
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x10022371
mov ebx, dword [eax + 4]
test bl, 1
je 0x10022371
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x100264b6
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
jmp 0x1002065c
and eax, 0xfffffffe
mov dword [edi], eax
mov eax, dword [ecx + 4]
and eax, 1
or eax, edi
mov dword [ecx + 4], eax
and ecx, 0xfffffffe
mov edi, dword [edx + 4]
and edi, 1
lea eax, [edi + ecx]
mov dword [edx + 4], eax
test ecx, ecx
je 0x1002647d
mov eax, dword [ecx]
and eax, 0xfffffffe
or eax, edi
mov dword [edx + 4], eax
mov dword [ecx], edx
mov edi, dword [edx + 4]
and edi, 0xfffffffe
je 0x10022379
mov eax, dword [edi + 4]
test al, 1
je 0x10022379
and eax, 0xfffffffe
mov dword [edi + 4], eax
mov edi, dword [edx + 4]
mov eax, edi
or eax, 1
mov dword [edx + 4], eax
and edi, 0xfffffffe
je 0x1002646e
mov eax, dword [edi]
or eax, 1
mov dword [edx + 4], eax
mov dword [edi], edx
mov dword [ecx], edi
jmp 0x1002084f
mov ecx, eax
mov eax, dword [eax + 4]
and eax, 1
or eax, ebx
mov dword [ecx + 4], eax
jmp 0x10020f2b
test eax, eax
je 0x10022bfa
mov eax, dword [esi + 4]
mov dword [esp + 0x1c], 0
mov ebx, eax
and ebx, 0xfffffffe
je 0x100221d3
mov ecx, dword [ebx]
test ecx, ecx
je 0x100221d3
test byte [ecx + 4], 1
jne 0x100215da
mov ecx, dword [esi]
test ecx, ecx
je 0x100261d4
mov edx, dword [ecx + 4]
test dl, 1
jne 0x10024259
or eax, 1
mov dword [esi + 4], eax
mov eax, dword [ecx]
test eax, eax
je 0x10022201
mov edx, dword [eax + 4]
test dl, 1
jne 0x10024abf
or byte [ecx + 4], 1
mov eax, dword [esi + 4]
mov ebx, eax
and ebx, 0xfffffffe
je 0x10026cf0
mov ecx, dword [ebx]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [esi + 4], eax
mov dword [ebx], esi
jmp 0x100215d1
mov dword [edx], 0
mov ecx, dword [esp + 0x18]
mov edi, edx
jmp 0x10021885
and ecx, 0xfffffffe
mov eax, dword [ebx + 4]
and eax, 1
lea edx, [eax + ecx]
mov dword [ebx + 4], edx
test ecx, ecx
je 0x10026543
mov edx, dword [ecx]
and edx, 0xfffffffe
or edx, eax
mov dword [ebx + 4], edx
mov dword [ecx], ebx
mov eax, dword [ebx + 4]
and eax, 1
mov edx, dword [ecx + 4]
and edx, 0xfffffffe
or edx, eax
mov dword [ecx + 4], edx
or byte [ebx + 4], 1
mov eax, dword [esp + 0x10]
test eax, eax
je 0x10026552
cmp dword [eax], ebx
mov edx, dword [esp + 0xc]
jne 0x100229e6
mov dword [eax], ecx
cmp edi, ecx
setb bl
jb 0x10022bb9
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [esp + 4], ecx
test eax, eax
jne 0x10020c06
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
mov dword [edi], 0
mov dword [edi + 4], 1
test bl, bl
jne 0x10022308
cmp ecx, edi
mov ebx, edi
mov edi, dword [esp + 0x14]
jae 0x1002230c
mov eax, dword [ecx + 4]
and eax, 1
mov edx, eax
or edx, ebx
mov dword [ecx + 4], edx
mov edx, dword [ebx]
and edx, 0xfffffffe
or edx, eax
mov dword [ecx + 4], edx
mov dword [ebx], ecx
mov eax, dword [ecx + 4]
and eax, 1
mov edx, dword [ebx + 4]
and edx, 0xfffffffe
or edx, eax
mov dword [ebx + 4], edx
or byte [ecx + 4], 1
mov eax, dword [esp + 4]
cmp dword [eax], ecx
jne 0x1002232d
mov dword [eax], ebx
mov edx, dword [esp + 0xc]
jmp 0x10022312
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 8]
mov dword [ecx], eax
mov eax, dword [esp + 0x88]
test eax, eax
je 0x10026717
and byte [eax + 4], 0xfe
mov dword [edx + 4], eax
jmp 0x100201e6
mov ebx, dword [eax + 4]
mov edx, ebx
and edx, 0xfffffffe
cmp ecx, edx
mov edx, dword [esp + 0xc]
jne 0x10022312
and ebx, 1
or ebx, dword [esp + 8]
mov dword [eax + 4], ebx
jmp 0x10022312
and ecx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
or eax, ecx
mov dword [edi + 4], eax
jmp 0x1002099c
and ecx, 0xfffffffe
mov edx, eax
mov eax, dword [eax + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x100209eb
mov dword [edx + 4], eax
jmp 0x1002065c
mov dword [edx + 4], edi
jmp 0x1002084f
test dl, 0x10
mov eax, 0
cmove eax, dword [esp + 0x20]
xor edx, edx
cmp eax, ebx
seta cl
jb 0x100229d5
mov dl, cl
jmp 0x10020f5b
test eax, eax
je 0x10023085
mov eax, dword [esi + 4]
xor edx, edx
mov edi, eax
and edi, 0xfffffffe
mov dword [esp], edx
je 0x100223c9
mov ecx, dword [edi]
test ecx, ecx
je 0x100223c9
test byte [ecx + 4], 1
jne 0x10021a2f
mov ebx, dword [esi]
test ebx, ebx
je 0x10026201
mov ecx, dword [ebx + 4]
test cl, 1
jne 0x100246dd
or eax, 1
mov dword [esi + 4], eax
mov eax, dword [ebx]
test eax, eax
je 0x100223f7
mov ecx, dword [eax + 4]
test cl, 1
jne 0x1002501a
or byte [ebx + 4], 1
mov eax, dword [esi + 4]
mov edi, eax
and edi, 0xfffffffe
je 0x10026d17
mov ecx, dword [edi]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [esi + 4], eax
mov dword [edi], esi
jmp 0x100224e3
or ecx, 1
mov dword [esi + 4], ecx
mov eax, dword [esi]
test eax, eax
je 0x10022435
mov ecx, dword [eax + 4]
test cl, 1
jne 0x10022c93
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x10026598
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
jmp 0x10020759
or ecx, 1
mov dword [eax + 4], ecx
mov ecx, dword [eax]
test ecx, ecx
je 0x1002246e
mov eax, dword [ecx + 4]
test al, 1
jne 0x10022d3d
mov edi, dword [edx + 4]
mov ecx, edi
and ecx, 0xfffffffe
je 0x10026607
mov eax, dword [ecx]
and eax, 0xfffffffe
and edi, 1
or edi, eax
mov dword [edx + 4], edi
mov dword [ecx], edx
jmp 0x10020936
mov ecx, dword [edi]
test ecx, ecx
je 0x100224a0
test byte [ecx + 4], 1
jne 0x10021a28
or eax, 1
mov dword [edi + 4], eax
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x100261bf
mov dword [esp], 0
mov edi, dword [eax]
test edi, edi
je 0x100224cd
mov edx, dword [edi + 4]
test dl, 1
jne 0x10025214
or ecx, 1
mov dword [esi + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov edi, eax
and byte [edi + 4], 0xfe
lea esi, [esp + 0x88]
mov dword [esi], edi
jmp 0x10021a2f
movzx eax, byte [edi + ebx + 0x76]
mov dword [esp + 0x2c], eax
lea eax, [edi + 0x54]
mov dword [esp + 0x40], eax
mov ecx, dword [edi + 0x54]
test ecx, ecx
je 0x100244cd
mov edx, dword [esp + 0x2c]
shl edx, 0xc
xor eax, eax
xor edi, edi
dec edi
mov esi, dword [ecx + 8]
mov ebx, 0xfffff000
and esi, ebx
xor ebx, ebx
cmp edx, esi
seta bl
cmovb ebx, edi
lea esi, [ebx + 1]
cmp esi, 2
jae 0x10022541
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x10022518
jmp 0x100225e7
cmp ebx, 1
jne 0x10026a9d
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
jmp 0x10022538
movzx eax, byte [ebx + eax + 0x76]
mov dword [esp + 0x38], eax
lea eax, [ebx + 0x54]
mov dword [esp + 0x28], eax
mov ecx, dword [ebx + 0x54]
test ecx, ecx
je 0x100244f8
mov edx, dword [esp + 0x38]
shl edx, 0xc
xor eax, eax
mov edi, esi
mov esi, dword [ecx + 8]
mov ebx, 0xfffff000
and esi, ebx
xor ebx, ebx
cmp edx, esi
seta bl
mov esi, 0xffffffff
cmovb ebx, esi
lea esi, [ebx + 1]
cmp esi, 2
jae 0x100225a8
mov eax, ecx
mov ecx, dword [ecx]
mov esi, edi
test ecx, ecx
jne 0x10022576
jmp 0x1002278e
cmp ebx, 1
jne 0x10026aa4
mov ecx, dword [ecx + 4]
and ecx, 0xfffffffe
jmp 0x1002259d
mov eax, ecx
and eax, 0xfffffffe
mov edx, dword [edi + 4]
and edx, 1
or edx, eax
mov dword [edi + 4], edx
mov edx, edi
jmp 0x100205e9
mov eax, ecx
and eax, 0xfffffffe
mov edx, dword [ebx + 4]
and edx, 1
or edx, eax
mov dword [ebx + 4], edx
mov edx, ebx
jmp 0x100207db
test eax, eax
mov edi, dword [esp + 0x10]
je 0x100244cd
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
and edx, 0xfffffff8
shl edx, 9
add edx, ecx
mov ebx, dword [esp]
mov esi, edx
and esi, 0xfff00000
mov eax, dword [esi + 0xc]
mov dword [esp + 0x5c], eax
mov eax, edx
shr eax, 0xc
movzx ecx, al
lea eax, [ecx*4]
lea eax, [eax + eax*2]
or eax, esi
mov dword [esp + 0x30], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 0x54], eax
mov edi, dword [esp + 0x2c]
test edi, edi
mov dword [esp + 0x28], esi
mov dword [esp + 8], edx
mov dword [esp + 0x3c], ecx
je 0x10023272
xor eax, eax
inc eax
cmp edi, 2
cmovae eax, edi
mov dword [esp + 0x44], eax
lea eax, [ecx + ecx*2]
lea eax, [esi + eax*4]
add eax, 0x18
mov dword [esp + 0x4c], 0
mov dword [esp + 0x34], edi
xor edi, edi
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x3c]
lea ecx, [edi + eax]
lea eax, [ecx + ecx*2]
test byte [esi + eax*4 + 0x18], 0x60
jne 0x100226b6
inc edi
cmp edi, dword [esp + 0x2c]
setae al
mov dword [esp + 0x4c], eax
dec dword [esp + 0x34]
mov eax, dword [esp + 0x1c]
add eax, 0xc
cmp edi, dword [esp + 0x44]
jne 0x1002267f
jmp 0x10023278
mov dword [esp + 0x58], ecx
mov dword [esp + 0x6c], edi
cmp edi, dword [esp + 0x2c]
jae 0x10024ab1
xor edi, edi
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x34]
mov ecx, dword [eax]
test cl, 0x60
je 0x10025d7b
and ecx, 0xffffff9f
mov dword [eax], ecx
mov ecx, edi
inc ecx
add eax, 0xc
mov edi, ecx
cmp esi, ecx
jne 0x100226d2
mov ecx, esi
mov dword [esp + 0x68], ecx
shl ecx, 0xc
jne 0x1002447f
jmp 0x1002273f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x64], eax
push 4
push 0x1000
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
je 0x10026bde
add esi, edi
mov ecx, dword [esp + 0x50]
sub ecx, edi
mov eax, 0x100000
cmp ecx, eax
mov edi, 0x100000
cmovb edi, ecx
mov dword [esp + 0x50], ecx
test ecx, ecx
jne 0x100226ff
mov al, 1
mov edi, dword [esp + 0x68]
test edi, edi
je 0x10022766
test al, al
mov ecx, 0x20
mov edx, 4
cmovne ecx, edx
mov edx, dword [esp + 0x1c]
mov esi, edi
or dword [edx], ecx
add edx, 0xc
dec esi
jne 0x1002275e
test al, al
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
je 0x10023926
mov eax, dword [esp + 0x10]
add dword [eax + 0x28], edi
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x6c]
jmp 0x10022694
test eax, eax
mov ebx, dword [esp + 4]
je 0x100244f8
mov ecx, eax
and ecx, 0xfff00000
and eax, 0xfffff
add eax, 0xfffffff0
mov edx, 0xaaaaaaab
mul edx
and edx, 0xfffffff8
shl edx, 9
add edx, ecx
mov edi, edx
and edi, 0xfff00000
mov eax, dword [edi + 0xc]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x14], edx
mov eax, edx
shr eax, 0xc
movzx edx, al
lea eax, [edx*4]
lea eax, [eax + eax*2]
or eax, edi
mov dword [esp + 0xc], eax
mov eax, dword [eax + 0x18]
mov dword [esp + 8], eax
mov esi, dword [esp + 0x38]
test esi, esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], edx
je 0x100239b9
xor eax, eax
inc eax
cmp esi, 2
cmovae eax, esi
mov dword [esp + 0x2c], eax
lea eax, [edx + edx*2]
lea edx, [edi + eax*4]
add edx, 0x18
mov dword [esp + 0x1c], 0
mov dword [esp], esi
xor esi, esi
mov eax, dword [esp + 0x30]
lea ecx, [esi + eax]
lea eax, [ecx + ecx*2]
test byte [edi + eax*4 + 0x18], 0x60
mov eax, dword [esp + 0x38]
jne 0x10022852
inc esi
cmp esi, eax
setae al
mov dword [esp + 0x1c], eax
dec dword [esp]
add edx, 0xc
cmp esi, dword [esp + 0x2c]
jne 0x10022822
jmp 0x100239bf
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], esi
cmp esi, eax
mov dword [esp + 0x3c], edx
jae 0x10024ab8
xor esi, esi
mov eax, edx
mov edi, dword [esp]
mov ecx, dword [eax]
test cl, 0x60
je 0x10025d82
and ecx, 0xffffff9f
mov dword [eax], ecx
mov ecx, esi
inc ecx
add eax, 0xc
mov esi, ecx
cmp edi, ecx
jne 0x1002286d
mov ecx, edi
mov dword [esp + 0x54], ecx
shl ecx, 0xc
jne 0x100244a6
jmp 0x100228da
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x5c], eax
push 4
push 0x1000
push esi
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
je 0x10026c5a
add edi, esi
mov ecx, dword [esp + 0x34]
sub ecx, esi
mov eax, 0x100000
cmp ecx, eax
mov esi, 0x100000
cmovb esi, ecx
mov dword [esp + 0x34], ecx
test ecx, ecx
jne 0x1002289a
mov al, 1
mov esi, dword [esp + 0x54]
test esi, esi
je 0x10022901
test al, al
mov ecx, 0x20
mov edx, 4
cmovne ecx, edx
mov edx, dword [esp + 0x3c]
mov edi, esi
or dword [edx], ecx
add edx, 0xc
dec edi
jne 0x100228f9
test al, al
mov ecx, dword [esp + 0x20]
je 0x10024057
add dword [ebx + 0x28], esi
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov esi, dword [esp + 0x44]
jmp 0x10022837
test eax, eax
jne 0x1002314e
xor esi, esi
test edx, edx
je 0x10022949
mov eax, dword [edx + 4]
cmp eax, 1
ja 0x10025a16
mov eax, dword [edx]
test eax, eax
jne 0x10025a26
mov dword [esp + 0x88], esi
jmp 0x1002186c
mov ebx, dword [esp + 4]
mov dword [ebx + 4], 0
mov dword [ebx + 8], 1
lea ecx, [esp + 0x88]
mov dword [ecx + 4], ebx
mov ecx, dword [esp + 0x8c]
test ecx, ecx
je 0x1002694a
and byte [ecx + 8], 0xfe
mov dword [esi + 0x34], ecx
mov ebx, dword [esp + 4]
mov ecx, dword [ebx + 0xc]
jmp 0x10020d79
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x100218d9
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10021f73
xor ecx, ecx
test byte [esp], 0x10
cmove ecx, dword [esp + 0x24]
xor eax, eax
cmp ecx, esi
seta cl
jb 0x10021570
mov al, cl
jmp 0x10021567
mov ecx, dword [ebx]
xor edx, edx
dec edx
jmp 0x10020f61
mov eax, dword [ecx]
jmp 0x10021f84
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
and eax, 1
or eax, ecx
mov ebx, dword [esp + 0x10]
mov dword [ebx + 4], eax
jmp 0x1002228a
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x10026b0c
mov eax, dword [esp + 8]
cmp dword [ecx], eax
jne 0x1002421b
mov dword [ecx], edx
test edx, edx
je 0x10026b1b
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [esp + 8]
mov ecx, dword [ecx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
cmp dword [edi], edx
jne 0x10026b2a
mov dword [edi], 0
jmp 0x1002099c
mov edi, dword [esp + 0x14]
test edi, edi
je 0x10026b33
cmp dword [edi], esi
mov ebx, dword [esp + 4]
jne 0x1002423c
mov dword [edi], edx
test edx, edx
je 0x10026b42
mov edi, eax
mov eax, dword [esi]
mov dword [edx], eax
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
mov eax, dword [esi + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
cmp dword [edi], edx
jne 0x10026b51
mov dword [edi], 0
jmp 0x100209eb
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
jmp 0x10021c9e
and eax, 1
mov ebx, dword [ecx + 4]
and ebx, 0xfffffffe
or ebx, eax
mov dword [ecx + 4], ebx
and byte [esi + 4], 0xfe
mov ebx, dword [esp + 0x2c]
mov eax, dword [ebx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x100265a7
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [ebx + 4], eax
mov dword [ecx], ebx
mov dword [edx], ecx
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov ebx, dword [edx + 4]
mov eax, ebx
and eax, 0xfffffffe
jne 0x10020738
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
and ebx, 1
mov dword [esp], eax
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
or eax, ebx
mov ebx, dword [esp]
mov dword [ecx + 4], eax
and byte [edi + 4], 0xfe
mov edi, dword [ebx + 4]
mov ecx, edi
and ecx, 0xfffffffe
je 0x100265d4
mov eax, dword [ecx]
and eax, 0xfffffffe
and edi, 1
or edi, eax
mov dword [ebx + 4], edi
mov dword [ecx], ebx
mov dword [edx], ecx
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
mov ebx, dword [edx + 4]
mov edi, ebx
and edi, 0xfffffffe
jne 0x10020918
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
xor edx, edx
test cl, 0x10
cmove edx, dword [esp + 0x20]
xor eax, eax
cmp edx, esi
seta cl
jb 0x10021a13
mov al, cl
jmp 0x10021a0a
mov eax, dword [ecx]
jmp 0x1002229b
or ecx, 1
mov dword [eax + 4], ecx
mov eax, dword [eax]
test eax, eax
je 0x10022bd8
mov ecx, dword [eax + 4]
test cl, 1
jne 0x100241c6
mov eax, dword [esi + 4]
mov edi, eax
and edi, 0xfffffffe
je 0x100268dc
mov ecx, dword [edi]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [esi + 4], eax
mov dword [edi], esi
jmp 0x10021b4b
mov eax, dword [esi + 4]
cmp eax, 1
ja 0x10025263
mov eax, dword [esi]
xor ecx, ecx
test eax, eax
je 0x100218e0
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [esi], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
or byte [esi + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x100218e0
and ecx, 0xfffffffe
mov dword [eax], ecx
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
and ebx, 0xfffffffe
mov eax, dword [esi + 4]
and eax, 1
lea ecx, [eax + ebx]
mov dword [esi + 4], ecx
test ebx, ebx
je 0x10026625
mov ecx, dword [ebx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
mov dword [ebx], esi
mov eax, dword [esi + 4]
and eax, 0xfffffffe
je 0x10022c8b
mov ecx, dword [eax + 4]
test cl, 1
jne 0x10024a1e
mov dword [esi + 4], eax
jmp 0x10021768
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10026361
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x100265b6
mov ebx, dword [eax]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [edx + 4], esi
mov dword [eax], edx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
jmp 0x10020756
and edx, 0xfffffffe
mov dword [eax + 4], edx
mov ebx, dword [esi]
test ebx, ebx
je 0x100267c8
mov eax, dword [ebx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
mov edx, dword [esi + 4]
mov eax, edx
and eax, 0xfffffffe
je 0x100267dd
mov ecx, dword [eax]
and ecx, 0xfffffffe
and edx, 1
or edx, ecx
mov dword [esi + 4], edx
mov dword [eax], esi
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
jmp 0x100216f6
and eax, 0xfffffffe
mov dword [ecx + 4], eax
mov ecx, dword [edx]
test ecx, ecx
je 0x10026376
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
mov ebx, dword [edx + 4]
mov edi, ebx
and edi, 0xfffffffe
je 0x10026616
mov eax, dword [edi]
and eax, 0xfffffffe
and ebx, 1
or ebx, eax
mov dword [edx + 4], ebx
mov dword [edi], edx
mov eax, dword [ecx + 4]
and eax, 1
or eax, edi
mov dword [ecx + 4], eax
jmp 0x10020936
xor ecx, ecx
jmp 0x1001ff89
mov eax, dword [esp]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, dword [edi + 4]
and eax, 1
or eax, esi
mov dword [edi + 4], eax
and edi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + edi]
mov dword [edx + 4], esi
test edi, edi
je 0x10026670
mov esi, dword [edi]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [edi], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x100230d6
mov ecx, dword [eax + 4]
test cl, 1
je 0x100230d6
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x10026661
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [edi], eax
jmp 0x10021356
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
mov esi, ebx
jmp 0x10021a2f
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
lea esi, [edx + ecx]
mov dword [eax + 8], esi
test ecx, ecx
je 0x10026759
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
or esi, edx
mov dword [eax + 8], esi
mov dword [ecx + 4], eax
mov edx, dword [eax + 8]
and edx, 1
mov esi, dword [ecx + 8]
and esi, 0xfffffffe
or esi, edx
mov dword [ecx + 8], esi
or byte [eax + 8], 1
mov ebx, dword [esp + 0x38]
test ebx, ebx
je 0x10026768
cmp dword [ebx + 4], eax
mov esi, dword [esp + 0x18]
jne 0x10024523
mov dword [ebx + 4], ecx
cmp ecx, dword [esp + 4]
seta dl
ja 0x100246d5
mov ebx, dword [ecx + 8]
and ebx, 0xfffffffe
mov eax, ecx
test ebx, ebx
jne 0x10021be3
mov eax, dword [esp + 0x38]
mov ebx, dword [esp + 4]
test ebx, ebx
je 0x10026995
cmp ecx, ebx
setae dh
mov dword [ebx + 4], 0
mov dword [ebx + 8], 1
or dl, dh
jne 0x1002296e
mov edx, dword [ecx + 8]
and edx, 1
mov esi, edx
or esi, ebx
mov dword [ecx + 8], esi
mov esi, dword [ebx + 4]
and esi, 0xfffffffe
or esi, edx
mov dword [ecx + 8], esi
mov dword [ebx + 4], ecx
mov edx, dword [ecx + 8]
and edx, 1
mov esi, dword [ebx + 8]
and esi, 0xfffffffe
or esi, edx
mov dword [ebx + 8], esi
or byte [ecx + 8], 1
cmp dword [eax + 4], ecx
jne 0x10022f08
mov dword [eax + 4], ebx
mov esi, dword [esp + 0x18]
jmp 0x10022971
mov edx, dword [eax + 8]
mov esi, edx
and esi, 0xfffffffe
cmp ecx, esi
mov esi, dword [esp + 0x18]
jne 0x10022971
and edx, 1
or edx, dword [esp + 4]
mov dword [eax + 8], edx
jmp 0x10022971
and ebx, 0xfffffffe
mov dword [eax], ebx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x10026ba2
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x100231d6
mov ebx, dword [eax + 4]
test bl, 1
je 0x100231d6
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x10026de3
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
jmp 0x10021102
and ebx, 0xfffffffe
mov dword [eax], ebx
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea edi, [eax + ecx]
mov dword [edx + 4], edi
test ecx, ecx
je 0x10026bb1
mov edi, dword [ecx]
and edi, 0xfffffffe
or edi, eax
mov dword [edx + 4], edi
mov dword [ecx], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
je 0x100231de
mov ebx, dword [eax + 4]
test bl, 1
je 0x100231de
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov eax, dword [edx + 4]
mov edi, eax
or edi, 1
mov dword [edx + 4], edi
and eax, 0xfffffffe
je 0x10026df2
mov edi, dword [eax]
or edi, 1
mov dword [edx + 4], edi
mov dword [eax], edx
mov dword [ecx], eax
jmp 0x1002196f
and edx, 1
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebx + 4]
and ecx, 0xfffffffe
or ecx, edx
mov dword [ebx + 4], ecx
mov ecx, dword [esp + 0x2c]
and byte [ecx + 4], 0xfe
mov edx, dword [eax + 4]
mov ebx, edx
and ebx, 0xfffffffe
je 0x1002679b
mov ecx, dword [ebx]
and ecx, 0xfffffffe
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov dword [ebx], eax
mov dword [esi], ebx
mov eax, dword [ebx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
mov edx, dword [esi + 4]
mov eax, edx
and eax, 0xfffffffe
jne 0x100216d8
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov eax, dword [esi + 4]
cmp eax, 1
ja 0x1002546d
mov eax, dword [esi]
xor ecx, ecx
test eax, eax
je 0x10021ca5
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [esi], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
or byte [esi + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x10021ca5
mov ebx, esi
jmp 0x10020dcb
mov dword [edx + 4], eax
jmp 0x10021356
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
or byte [edx + 4], 1
and dword [esi + 4], 1
mov ecx, esi
jmp 0x10021858
or ecx, 1
mov dword [eax + 4], ecx
mov eax, dword [eax]
test eax, eax
je 0x10023128
mov ecx, dword [eax + 4]
test cl, 1
jne 0x1002477f
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x10026831
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
mov edi, dword [esp + 0x10]
jmp 0x1002146f
test edx, edx
je 0x10026264
mov eax, dword [edx + 4]
mov dword [esp + 8], 0
mov ecx, eax
and ecx, 0xfffffffe
je 0x10023178
mov esi, dword [ecx]
test esi, esi
je 0x10023178
test byte [esi + 4], 1
jne 0x100212ed
mov ecx, dword [edx]
test ecx, ecx
je 0x10026e1f
test byte [ecx + 4], 1
jne 0x1002545b
or eax, 1
mov dword [edx + 4], eax
mov edi, dword [ecx]
test edi, edi
je 0x100231a3
mov eax, dword [edi + 4]
test al, 1
jne 0x10025896
or byte [ecx + 4], 1
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x10026f05
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [edx + 4], eax
mov dword [ecx], edx
lea edx, [esp + 0x88]
mov dword [edx], ecx
mov edi, dword [esp + 0x10]
jmp 0x100212ed
mov dword [edx + 4], eax
jmp 0x10021102
mov dword [edx + 4], eax
jmp 0x1002196f
push 0
push 0x100000
call fcn.10003720
add esp, 8
jmp 0x10021d9c
mov edx, dword [esp + 0x1c]
test edx, edx
je 0x10026cd8
mov eax, dword [esp + 0x24]
cmp dword [edx], eax
jne 0x10024c95
mov dword [edx], esi
mov edx, dword [esp + 0x24]
mov eax, dword [edx]
mov dword [esi], eax
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [esp]
cmp dword [eax], esi
jne 0x10026ce7
mov dword [eax], 0
jmp 0x100218d9
lea esi, [esp + 0x70]
mov ecx, esi
call fcn.10001f00
mov ecx, dword [esi]
jmp 0x10021e81
lea edi, [esp + 0x70]
mov ecx, edi
call fcn.10001f00
mov ecx, dword [edi]
jmp 0x10021f02
mov al, 1
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x30]
lea eax, [ecx + 0x10]
mov dword [esp + 0x34], eax
add ecx, 0x18
mov eax, dword [esp + 0x40]
mov edi, dword [eax]
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], 0
mov dword [esp + 0x30], ecx
mov ecx, dword [ecx]
mov edx, 0xfffff000
mov ebx, ecx
and ebx, edx
and edx, dword [edi + 8]
xor esi, esi
dec esi
xor eax, eax
cmp ebx, edx
seta al
cmovb eax, esi
test eax, eax
je 0x100243c8
cmp eax, 0xffffffff
jne 0x1002333d
mov edx, dword [edi]
test edx, edx
je 0x10026ac4
mov eax, dword [edx + 4]
mov dword [esp + 0x44], 0
test al, 1
mov ebx, dword [esp]
jne 0x10023372
mov ecx, dword [edx]
test ecx, ecx
je 0x100232f6
test byte [ecx + 4], 1
jne 0x10023372
or eax, 1
mov dword [edx + 4], eax
mov ecx, dword [edi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026225
mov edx, dword [eax]
test edx, edx
je 0x1002331c
mov ebx, dword [edx + 4]
test bl, 1
jne 0x100257f8
or ecx, 1
mov dword [edi + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [edi + 4], ecx
mov dword [eax], edi
mov edx, eax
and byte [edx + 4], 0xfe
lea edi, [esp + 0x88]
mov dword [edi], edx
jmp 0x1002336f
test eax, eax
je 0x100247d4
mov eax, dword [edi + 4]
mov dword [esp + 0x44], 0
mov edx, eax
and edx, 0xfffffffe
je 0x10024921
mov ecx, dword [edx]
test ecx, ecx
je 0x10024921
test byte [ecx + 4], 1
je 0x10024921
mov ebx, dword [esp]
mov dword [esp + 0x1c], edi
mov edi, edx
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov edx, ecx
mov eax, 0xfffff000
and edx, eax
mov esi, dword [edi + 8]
and esi, eax
xor eax, eax
cmp edx, esi
seta al
mov edx, 0xffffffff
cmovb eax, edx
test eax, eax
je 0x100233ca
cmp eax, 0xffffffff
jne 0x100233e4
mov edx, dword [edi]
test edx, edx
je 0x10024f43
mov eax, dword [edx + 4]
test al, 1
jne 0x10023372
mov ecx, dword [edx]
test ecx, ecx
je 0x100234b9
test byte [ecx + 4], 1
jne 0x10023372
jmp 0x100234b9
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x34]
xor eax, eax
cmp ecx, edi
seta cl
jb 0x100233a4
mov al, cl
jmp 0x1002339f
test eax, eax
je 0x100234a4
mov ecx, dword [edi + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10023406
mov eax, dword [edx]
test eax, eax
je 0x10023406
test byte [eax + 4], 1
jne 0x10023372
mov eax, dword [edi]
test eax, eax
je 0x100269b3
mov edx, dword [eax + 4]
test dl, 1
je 0x10024404
and edx, 0xfffffffe
je 0x1002629d
mov esi, dword [edx]
test esi, esi
je 0x10023435
test byte [esi + 4], 1
jne 0x10025141
and ecx, 1
or ecx, edx
mov dword [eax + 4], ecx
or byte [edx + 4], 1
mov edx, dword [edi]
test edx, edx
je 0x100269c2
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [edi], eax
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [edi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x100269d7
mov esi, dword [eax]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [edi + 4], ecx
mov dword [eax], edi
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
or byte [edi + 4], 1
mov eax, dword [esp + 0x1c]
cmp dword [eax], edi
mov edi, eax
jne 0x10024755
mov dword [edi], edx
jmp 0x10023372
mov ecx, dword [edi + 4]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x44], eax
cmp ecx, 1
jbe 0x10023507
jmp 0x100233ef
or eax, 1
mov dword [edx + 4], eax
mov ecx, dword [edi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026195
mov edx, dword [eax]
test edx, edx
je 0x100234df
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10024dbf
or ecx, 1
mov dword [edi + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [edi + 4], ecx
mov dword [eax], edi
mov edx, eax
mov esi, dword [esp + 0x1c]
cmp dword [esi], edi
mov ebx, dword [esp]
jne 0x10026b78
mov dword [esi], edx
jmp 0x10023376
mov eax, dword [edi]
test eax, eax
je 0x10023538
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edi], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [edi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
or byte [edi + 4], 1
and dword [eax + 4], 1
mov edx, dword [esp + 0x1c]
cmp dword [edx], edi
jne 0x10024334
mov dword [edx], eax
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x54]
shr edx, 0xc
mov eax, dword [esp + 0x40]
mov dword [eax], ecx
xor eax, eax
mov esi, dword [esp + 0x34]
mov dword [esi], eax
mov dword [esi + 4], eax
mov eax, dword [esp + 0x2c]
cmp edx, eax
mov esi, dword [esp + 0x3c]
jne 0x10023704
test al, al
je 0x100235be
mov edx, eax
mov eax, dword [esp + 8]
or eax, 1
xor ecx, ecx
inc ecx
cmp edx, 2
cmovae ecx, edx
shl ecx, 2
lea ecx, [ecx + ecx*2]
lea edx, [esi + esi*2]
mov esi, dword [esp + 0x28]
lea edx, [esi + edx*4]
add edx, 0x18
xor esi, esi
test byte [edx + esi], 8
je 0x100235b4
mov edi, dword [esp + 0x28]
dec dword [edi + 0xc]
mov edi, dword [esp + 0x10]
dec dword [edi + 0x44]
mov dword [edx + esi], eax
add esi, 0xc
cmp ecx, esi
jne 0x100235a0
mov eax, dword [esp + 0x28]
cmp dword [eax + 0xc], 0
jne 0x1002391a
cmp dword [esp + 0x5c], 0
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
je 0x10023926
mov eax, dword [esp + 0x10]
mov ebx, dword [eax + 0x34]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], 0
xor ecx, ecx
dec ecx
xor eax, eax
cmp ebx, dword [esp + 0x28]
setb al
cmova eax, ecx
cmp eax, 0xffffffff
je 0x10024cdc
test eax, eax
je 0x100255e5
test ebx, ebx
je 0x10026324
mov ecx, dword [ebx + 8]
xor esi, esi
mov eax, ecx
and eax, 0xfffffffe
je 0x10025520
mov edx, dword [eax + 4]
test edx, edx
je 0x10025520
test byte [edx + 8], 1
je 0x10025520
mov edi, ebx
mov ecx, dword [esp + 0x28]
mov ebx, eax
xor eax, eax
cmp ebx, ecx
setb al
mov ecx, 0xffffffff
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x10023694
test ebx, ebx
je 0x10025b8f
mov eax, dword [ebx + 4]
test eax, eax
je 0x10025b8f
test byte [eax + 8], 1
jne 0x10023649
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10025929
test byte [ecx + 8], 1
jne 0x10023649
jmp 0x10025929
test eax, eax
jne 0x100236b2
xor ecx, ecx
test ebx, ebx
je 0x10024568
mov eax, dword [ebx + 8]
mov esi, edi
cmp eax, 1
jbe 0x10024533
jmp 0x100236b9
test ebx, ebx
je 0x100236cf
mov eax, dword [ebx + 8]
and eax, 0xfffffffe
je 0x100236cf
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x100236cf
test byte [ecx + 8], 1
jne 0x10023649
lea ecx, [esp + 0x80]
mov edx, ebx
call fcn.1001ce60
mov eax, dword [esp + 0x80]
cmp dword [edi + 4], ebx
je 0x10025a02
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [edi + 8], edx
mov ebx, edi
jmp 0x10023649
lea ecx, [esi + edx]
mov dword [esp + 0x30], ecx
sub edx, eax
shl edx, 0xc
add eax, esi
lea eax, [eax + eax*2]
mov ecx, edx
mov dword [esp + 0x54], edx
mov edi, dword [esp + 0x28]
mov dword [esp + 0x34], eax
lea eax, [edi + eax*4]
add eax, 0x10
mov edx, 0xfff
mov esi, dword [eax + 8]
and esi, edx
or esi, ecx
mov dword [esp + 0x1c], eax
mov dword [eax + 8], esi
mov eax, dword [esp + 0x30]
lea ecx, [eax + eax*2]
and edx, dword [edi + ecx*4 + 0xc]
add edx, dword [esp + 0x54]
mov dword [edi + ecx*4 + 0xc], edx
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], 0
test ecx, ecx
je 0x10024b36
mov eax, dword [esp + 0x34]
lea eax, [edi + eax*4]
add eax, 0x18
mov dword [esp + 0x30], eax
lea edi, [esp + 0x88]
xor edx, edx
mov esi, edx
mov edx, edi
mov edi, dword [ecx]
test edi, edi
je 0x100237a7
mov eax, dword [edi + 4]
test al, 1
je 0x100237a7
mov dword [esp + 0x34], esi
mov esi, dword [edi]
test esi, esi
je 0x100237a7
test byte [esi + 4], 1
jne 0x100237ff
mov edi, ecx
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
mov eax, ecx
mov ebx, 0xfffff000
and eax, ebx
mov esi, dword [edi + 8]
and esi, ebx
xor ebx, ebx
cmp eax, esi
seta bl
mov eax, 0xffffffff
cmovb ebx, eax
cmp ebx, 0xffffffff
je 0x100237ee
xor eax, eax
inc eax
test ebx, ebx
jne 0x1002382f
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x1c]
xor eax, eax
cmp ecx, edi
seta cl
jae 0x1002382d
mov ecx, dword [edi]
xor eax, eax
dec eax
test ecx, ecx
mov ebx, dword [esp]
jne 0x10023786
jmp 0x100238d4
and eax, 0xfffffffe
mov dword [ecx], eax
mov esi, ecx
and esi, 0xfffffffe
mov eax, dword [edi]
mov ebx, dword [edi + 4]
and ebx, 1
or ebx, esi
mov dword [edi + 4], ebx
test eax, eax
je 0x10026959
and byte [eax + 4], 0xfe
cmp dword [edx], ecx
jne 0x10023837
mov dword [edx], edi
jmp 0x100237a9
mov al, cl
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
jmp 0x100237f3
and edi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + edi]
mov dword [edx + 4], ecx
test edi, edi
je 0x10026968
mov ecx, dword [edi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [edi], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
or byte [edx + 4], 1
cmp dword [esp + 0x34], 0
je 0x100262f1
mov eax, dword [esp + 0x34]
cmp dword [eax], edx
je 0x10024f07
jmp 0x1002506f
mov eax, dword [esp + 0x30]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov esi, dword [edi + 8]
and esi, ecx
xor ecx, ecx
cmp edx, esi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x10024b14
jmp 0x100253f1
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
mov edx, edi
test ecx, ecx
mov ebx, dword [esp]
mov esi, dword [esp + 0x34]
jne 0x1002378a
mov edx, esi
mov ecx, dword [esp + 0x1c]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x1002413e
mov eax, dword [esp + 0x1c]
mov dword [edi], eax
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x88]
test eax, eax
mov esi, dword [esp + 0x3c]
je 0x10026b5a
and byte [eax + 4], 0xfe
mov dword [ecx], eax
mov eax, dword [esp + 0x2c]
jmp 0x10023575
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 8]
test byte [esp + 0x4c], 1
je 0x100245b4
test edx, edx
je 0x100245b4
cmp dword [ecx], edx
mov edi, dword [esp + 0x10]
je 0x100209c0
mov dword [edx], ecx
xor eax, eax
cmp dword [edi + ebx + 0x68], 1
mov edx, 0
je 0x10023971
lea ecx, [edi + ebx]
add ecx, 0x68
xor edx, edx
mov esi, dword [esp + 8]
mov dword [esi + edx*4 + 0xc], 0xffffffff
inc edx
mov esi, dword [ecx]
dec esi
cmp edx, esi
jb 0x1002395d
mov ecx, dword [esp]
mov ebx, dword [edi + ecx + 0x64]
and ebx, 0x1f
mov ecx, ebx
neg cl
xor esi, esi
dec esi
shr esi, cl
cmp ebx, 1
mov ebx, dword [esp]
sbb eax, eax
or eax, esi
mov ecx, dword [esp + 8]
mov dword [ecx + edx*4 + 0xc], eax
mov dword [ecx + 4], 0
mov eax, dword [edi + ebx + 0x64]
mov dword [ecx + 8], eax
inc dword [edi + ebx + 0x70]
mov eax, dword [esp + 0x14]
mov dword [eax], ecx
mov esi, dword [esp + 0x18]
mov edx, ecx
jmp 0x10020055
mov al, 1
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0xc]
lea eax, [ecx + 0x10]
mov dword [esp + 0x2c], eax
add ecx, 0x18
mov eax, dword [esp + 0x28]
mov esi, dword [eax]
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], 0
mov dword [esp + 0xc], ecx
mov ecx, dword [ecx]
mov edx, 0xfffff000
mov ebx, ecx
and ebx, edx
and edx, dword [esi + 8]
xor edi, edi
dec edi
xor eax, eax
cmp ebx, edx
seta al
cmovb eax, edi
test eax, eax
je 0x100243e6
cmp eax, 0xffffffff
jne 0x10023a85
mov edx, dword [esi]
test edx, edx
je 0x10026ad3
mov eax, dword [edx + 4]
mov dword [esp + 0x3c], 0
test al, 1
mov ebx, dword [esp + 4]
jne 0x10023abb
mov ecx, dword [edx]
test ecx, ecx
je 0x10023a3e
test byte [ecx + 4], 1
jne 0x10023abb
or eax, 1
mov dword [edx + 4], eax
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1002623a
mov edx, dword [eax]
test edx, edx
je 0x10023a64
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10025847
or ecx, 1
mov dword [esi + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov edx, eax
and byte [edx + 4], 0xfe
lea esi, [esp + 0x88]
mov dword [esi], edx
jmp 0x10023ab7
test eax, eax
je 0x10024821
mov eax, dword [esi + 4]
mov dword [esp + 0x3c], 0
mov edx, eax
and edx, 0xfffffffe
je 0x10024975
mov ecx, dword [edx]
test ecx, ecx
je 0x10024975
test byte [ecx + 4], 1
je 0x10024975
mov ebx, dword [esp + 4]
mov dword [esp], esi
mov esi, edx
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
mov edx, ecx
mov eax, 0xfffff000
and edx, eax
mov edi, dword [esi + 8]
and edi, eax
xor eax, eax
cmp edx, edi
seta al
mov edx, 0xffffffff
cmovb eax, edx
test eax, eax
mov edx, dword [esp + 8]
je 0x10023b16
cmp eax, 0xffffffff
jne 0x10023b30
mov edx, dword [esi]
test edx, edx
je 0x10024fad
mov eax, dword [edx + 4]
test al, 1
jne 0x10023abb
mov ecx, dword [edx]
test ecx, ecx
je 0x10023c03
test byte [ecx + 4], 1
jne 0x10023abb
jmp 0x10023c03
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x2c]
xor eax, eax
cmp ecx, esi
seta cl
jb 0x10023af0
mov al, cl
jmp 0x10023aeb
test eax, eax
je 0x10023bef
mov ecx, dword [esi + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10023b52
mov eax, dword [edx]
test eax, eax
je 0x10023b52
test byte [eax + 4], 1
jne 0x10023abb
mov eax, dword [esi]
test eax, eax
je 0x10026a5b
mov edx, dword [eax + 4]
test dl, 1
je 0x10024441
and edx, 0xfffffffe
je 0x100262b2
mov edi, dword [edx]
test edi, edi
je 0x10023b81
test byte [edi + 4], 1
jne 0x100251aa
and ecx, 1
or ecx, edx
mov dword [eax + 4], ecx
or byte [edx + 4], 1
mov edx, dword [esi]
test edx, edx
je 0x10026a28
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026a3d
mov edi, dword [eax]
and edi, 0xfffffffe
and ecx, 1
or ecx, edi
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
or byte [esi + 4], 1
mov eax, dword [esp]
cmp dword [eax], esi
mov esi, eax
jne 0x1002476a
mov dword [esi], edx
jmp 0x10023abb
mov ecx, dword [esi + 4]
mov eax, dword [esp]
mov dword [esp + 0x3c], eax
cmp ecx, 1
jbe 0x10023c53
jmp 0x10023b3b
or eax, 1
mov dword [edx + 4], eax
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x100261aa
mov edx, dword [eax]
test edx, edx
je 0x10023c29
mov ebx, dword [edx + 4]
test bl, 1
jne 0x10024e0e
or ecx, 1
mov dword [esi + 4], ecx
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov edx, eax
mov eax, dword [esp]
cmp dword [eax], esi
mov esi, eax
mov ebx, dword [esp + 4]
jne 0x10026b8d
mov dword [esi], edx
jmp 0x10023abe
mov eax, dword [esi]
test eax, eax
je 0x10023c88
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [esi], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esp + 8]
or byte [esi + 4], 1
and dword [eax + 4], 1
mov ecx, dword [esp]
cmp dword [ecx], esi
mov esi, ecx
jne 0x10024347
mov dword [esi], eax
mov ecx, dword [esp + 0x88]
shr edx, 0xc
mov eax, dword [esp + 0x28]
mov dword [eax], ecx
xor eax, eax
mov esi, dword [esp + 0x2c]
mov dword [esi], eax
mov dword [esi + 4], eax
mov eax, dword [esp + 0x38]
cmp edx, eax
mov esi, dword [esp + 0x30]
jne 0x10023e41
test al, al
je 0x10023d07
mov edx, eax
mov eax, dword [esp + 0x14]
or eax, 1
xor ecx, ecx
inc ecx
cmp edx, 2
cmovae ecx, edx
shl ecx, 2
lea ecx, [ecx + ecx*2]
lea edx, [esi + esi*2]
mov esi, dword [esp + 0x24]
lea edx, [esi + edx*4]
add edx, 0x18
xor esi, esi
mov edi, dword [esp + 0x24]
test byte [edx + esi], 8
je 0x10023cfd
dec dword [edi + 0xc]
dec dword [ebx + 0x44]
mov dword [edx + esi], eax
add esi, 0xc
cmp ecx, esi
jne 0x10023cf1
mov eax, dword [esp + 0x24]
cmp dword [eax + 0xc], 0
jne 0x10024053
cmp dword [esp + 0x4c], 0
mov ecx, dword [esp + 0x20]
je 0x10024057
mov edi, dword [ebx + 0x34]
mov dword [esp + 0x8c], edi
mov dword [esp + 0x90], 0
xor ecx, ecx
dec ecx
xor eax, eax
cmp edi, dword [esp + 0x24]
setb al
cmova eax, ecx
cmp eax, 0xffffffff
je 0x10024d26
test eax, eax
je 0x100256b1
test edi, edi
je 0x10026333
mov ecx, dword [edi + 8]
xor ebx, ebx
mov eax, ecx
and eax, 0xfffffffe
je 0x10025576
mov edx, dword [eax + 4]
test edx, edx
je 0x10025576
test byte [edx + 8], 1
je 0x10025576
mov esi, edi
mov ecx, dword [esp + 0x24]
mov edi, eax
xor eax, eax
cmp edi, ecx
setb al
mov ecx, 0xffffffff
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x10023dd1
test edi, edi
je 0x10025bf5
mov eax, dword [edi + 4]
test eax, eax
je 0x10025bf5
test byte [eax + 8], 1
jne 0x10023d86
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10025955
test byte [ecx + 8], 1
jne 0x10023d86
jmp 0x10025955
test eax, eax
jne 0x10023def
xor ecx, ecx
test edi, edi
je 0x10024669
mov eax, dword [edi + 8]
mov ebx, esi
cmp eax, 1
jbe 0x10024634
jmp 0x10023df6
test edi, edi
je 0x10023e0c
mov eax, dword [edi + 8]
and eax, 0xfffffffe
je 0x10023e0c
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10023e0c
test byte [ecx + 8], 1
jne 0x10023d86
lea ecx, [esp + 0x80]
mov edx, edi
call fcn.1001ce60
mov eax, dword [esp + 0x80]
cmp dword [esi + 4], edi
je 0x10025a0c
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [esi + 8], edx
mov edi, esi
jmp 0x10023d86
lea ecx, [esi + edx]
mov dword [esp + 0xc], ecx
sub edx, eax
shl edx, 0xc
add eax, esi
lea eax, [eax + eax*2]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x2c], eax
lea eax, [edi + eax*4 + 0x10]
mov ecx, edx
mov dword [esp + 8], edx
mov edx, 0xfff
mov esi, dword [eax + 8]
and esi, edx
or esi, ecx
mov dword [esp], eax
mov dword [eax + 8], esi
mov eax, dword [esp + 0xc]
lea ecx, [eax + eax*2]
and edx, dword [edi + ecx*4 + 0xc]
add edx, dword [esp + 8]
mov dword [edi + ecx*4 + 0xc], edx
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], 0
test ecx, ecx
je 0x10024b53
mov eax, dword [esp + 0x2c]
lea eax, [edi + eax*4]
add eax, 0x18
mov dword [esp + 0xc], eax
lea esi, [esp + 0x88]
xor edx, edx
mov edi, edx
mov edx, esi
mov esi, dword [ecx]
test esi, esi
je 0x10023ee1
mov eax, dword [esi + 4]
test al, 1
je 0x10023ee1
mov dword [esp + 8], edi
mov edi, dword [esi]
test edi, edi
je 0x10023ee1
test byte [edi + 4], 1
jne 0x10023f39
mov esi, ecx
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
mov eax, ecx
mov ebx, 0xfffff000
and eax, ebx
mov edi, dword [esi + 8]
and edi, ebx
xor ebx, ebx
cmp eax, edi
seta bl
mov eax, 0xffffffff
cmovb ebx, eax
cmp ebx, 0xffffffff
je 0x10023f27
xor eax, eax
inc eax
test ebx, ebx
jne 0x10023f69
test cl, 0x10
mov ecx, 0
cmove ecx, dword [esp]
xor eax, eax
cmp ecx, esi
seta cl
jae 0x10023f67
mov ecx, dword [esi]
xor eax, eax
dec eax
test ecx, ecx
mov ebx, dword [esp + 4]
jne 0x10023ec0
jmp 0x1002400f
and eax, 0xfffffffe
mov dword [ecx], eax
mov edi, ecx
and edi, 0xfffffffe
mov eax, dword [esi]
mov ebx, dword [esi + 4]
and ebx, 1
or ebx, edi
mov dword [esi + 4], ebx
test eax, eax
je 0x10026977
and byte [eax + 4], 0xfe
cmp dword [edx], ecx
jne 0x10023f71
mov dword [edx], esi
jmp 0x10023ee3
mov al, cl
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
jmp 0x10023f2c
and esi, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea ecx, [eax + esi]
mov dword [edx + 4], ecx
test esi, esi
je 0x10026986
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edx + 4], ecx
mov dword [esi], edx
mov eax, dword [edx + 4]
and eax, 1
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
or byte [edx + 4], 1
cmp dword [esp + 8], 0
je 0x10026300
mov eax, dword [esp + 8]
cmp dword [eax], edx
je 0x10024f12
jmp 0x10025083
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov edx, eax
mov ecx, 0xfffff000
and edx, ecx
mov edi, dword [esi + 8]
and edi, ecx
xor ecx, ecx
cmp edx, edi
seta cl
mov edx, 0xffffffff
cmovb ecx, edx
test ecx, ecx
jne 0x10024b25
jmp 0x10025411
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
mov edx, esi
test ecx, ecx
mov ebx, dword [esp + 4]
mov edi, dword [esp + 8]
jne 0x10023ec4
mov edx, edi
mov ecx, dword [esp]
mov dword [ecx], 0
mov dword [ecx + 4], 1
cmp eax, 1
je 0x10024183
mov eax, dword [esp]
mov dword [esi], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x88]
test eax, eax
mov esi, dword [esp + 0x30]
je 0x10026b69
and byte [eax + 4], 0xfe
mov dword [ecx], eax
mov eax, dword [esp + 0x38]
jmp 0x10023cc2
mov ecx, dword [esp + 0x20]
test byte [esp + 0x1c], 1
mov edi, dword [esp + 0x14]
je 0x100246ae
test edi, edi
je 0x100246ae
mov eax, dword [esp + 0x10]
cmp dword [eax], edi
je 0x10026164
mov dword [edi], eax
xor eax, eax
cmp dword [ebx + ecx + 0x68], 1
mov edx, 0
je 0x100240a5
mov ecx, dword [esp + 0x20]
add ecx, ebx
add ecx, 0x68
xor edx, edx
mov dword [edi + edx*4 + 0xc], 0xffffffff
inc edx
mov esi, dword [ecx]
dec esi
cmp edx, esi
jb 0x10024095
mov ecx, dword [esp + 4]
mov esi, dword [esp + 0x20]
mov ebx, dword [ecx + esi + 0x64]
and ebx, 0x1f
mov ecx, ebx
neg cl
xor esi, esi
dec esi
shr esi, cl
cmp ebx, 1
mov ebx, dword [esp + 4]
sbb eax, eax
or eax, esi
mov dword [edi + edx*4 + 0xc], eax
mov dword [edi + 4], 0
mov ecx, dword [esp + 0x20]
mov eax, dword [ebx + ecx + 0x64]
mov dword [edi + 8], eax
inc dword [ebx + ecx + 0x70]
mov eax, dword [esp + 0x10]
mov dword [eax], edi
mov ecx, edi
jmp 0x100202c5
and edx, 0xfffffffe
mov dword [eax], edx
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
and edi, 0xfffffffe
mov eax, dword [esi + 4]
and eax, 1
lea ecx, [eax + edi]
mov dword [esi + 4], ecx
test edi, edi
je 0x100266a3
mov ecx, dword [edi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
mov dword [edi], esi
mov eax, dword [esi + 4]
and eax, 0xfffffffe
je 0x10024136
mov ecx, dword [eax + 4]
test cl, 1
jne 0x10025430
mov dword [esi + 4], eax
jmp 0x10021ba8
mov eax, dword [edi + 4]
and eax, 1
mov ecx, eax
mov esi, dword [esp + 0x1c]
or ecx, esi
mov dword [edi + 4], ecx
mov ecx, dword [esi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
mov dword [esi], edi
mov eax, dword [edi + 4]
and eax, 1
mov ecx, dword [esi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
or byte [edi + 4], 1
cmp dword [edx], edi
jne 0x100249d9
mov eax, dword [esp + 0x1c]
mov dword [edx], eax
jmp 0x100238f4
mov eax, dword [esi + 4]
and eax, 1
mov ecx, eax
mov edi, dword [esp]
or ecx, edi
mov dword [esi + 4], ecx
mov ecx, dword [edi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
mov dword [edi], esi
mov eax, dword [esi + 4]
and eax, 1
mov ecx, dword [edi + 4]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
or byte [esi + 4], 1
cmp dword [edx], esi
jne 0x100249fc
mov eax, dword [esp]
mov dword [edx], eax
jmp 0x1002402d
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov edi, dword [esi]
test edi, edi
je 0x100268eb
mov eax, dword [edi + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026900
mov edx, dword [eax]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
jmp 0x10021b4b
mov eax, edx
and eax, 0xfffffffe
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx + 4]
and ecx, 1
or ecx, eax
mov eax, dword [esp + 0x1c]
mov dword [eax + 4], ecx
jmp 0x10022a18
mov dword [esp + 0xc], eax
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov eax, dword [esp + 0xc]
mov dword [edi + 4], ecx
jmp 0x10022a75
and edx, 0xfffffffe
je 0x1002630f
mov ebx, dword [edx]
test ebx, ebx
je 0x10024272
test byte [ebx + 4], 1
jne 0x10025273
and eax, 1
or eax, edx
mov dword [ecx + 4], eax
or byte [edx + 4], 1
mov ebx, dword [esi]
test ebx, ebx
je 0x10026d26
mov eax, dword [ebx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026d3b
mov edx, dword [eax]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
or byte [esi + 4], 1
jmp 0x100215d1
mov edx, dword [esp]
test edx, edx
je 0x10026cff
mov eax, dword [esp + 0x20]
cmp dword [edx], eax
jne 0x1002512c
mov dword [edx], esi
mov edx, dword [esp + 0x20]
mov eax, dword [edx]
mov dword [esi], eax
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
cmp dword [ebx], esi
jne 0x10026d0e
mov dword [ebx], 0
jmp 0x10021c9e
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
or eax, ecx
mov dword [edx + 4], eax
jmp 0x10021868
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x10023546
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x10023c97
and edx, 1
mov dword [esp + 0x38], edi
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
or edi, edx
mov dword [ecx + 4], edi
mov ecx, dword [esp + 0x38]
and byte [ecx + 4], 0xfe
mov ecx, dword [eax + 4]
mov edi, ecx
and edi, 0xfffffffe
je 0x100268be
mov edx, dword [edi]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [eax + 4], ecx
mov dword [edi], eax
mov dword [esi], edi
mov eax, dword [edi + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
jne 0x10021b2d
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
xor edx, edx
test cl, 0x10
cmove edx, dword [esp + 0x34]
xor eax, eax
cmp edx, edi
seta cl
jb 0x100232ca
mov al, cl
jmp 0x100232c5
xor edx, edx
test cl, 0x10
cmove edx, dword [esp + 0x2c]
xor eax, eax
cmp edx, esi
seta cl
jb 0x10023a11
mov al, cl
jmp 0x10023a0c
or edx, 1
mov dword [eax + 4], edx
mov eax, dword [eax]
test eax, eax
je 0x1002441c
mov ecx, dword [eax + 4]
test cl, 1
jne 0x10024e5d
mov eax, dword [edi + 4]
mov edx, eax
and edx, 0xfffffffe
je 0x100269e6
mov ecx, dword [edx]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [edi + 4], eax
mov dword [edx], edi
mov ebx, dword [esp]
jmp 0x1002348f
or edx, 1
mov dword [eax + 4], edx
mov eax, dword [eax]
test eax, eax
je 0x10024459
mov ecx, dword [eax + 4]
test cl, 1
jne 0x10024eb2
mov eax, dword [esi + 4]
mov edx, eax
and edx, 0xfffffffe
je 0x10026a6a
mov ecx, dword [edx]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [esi + 4], eax
mov dword [edx], esi
mov ebx, dword [esp + 4]
jmp 0x10023bdb
mov esi, dword [esp + 0x58]
shl esi, 0xc
mov eax, esi
and eax, 0xff000
mov edi, 0x100000
sub edi, eax
cmp edi, ecx
mov dword [esp + 0x50], ecx
cmovae edi, ecx
add esi, dword [esp + 0x28]
jmp 0x100226ff
mov edi, dword [esp + 0x40]
shl edi, 0xc
mov eax, edi
and eax, 0xff000
mov esi, 0x100000
sub esi, eax
cmp esi, ecx
mov dword [esp + 0x34], ecx
cmovae esi, ecx
add edi, dword [esp + 0x24]
jmp 0x1002289a
mov edx, dword [edi + 0x38]
test edx, edx
je 0x10024b7f
mov dword [edi + 0x38], 0
lea esi, [edx + 0x2000]
add edx, 0x28
mov ecx, dword [esp + 0x40]
call fcn.10047dd0
mov edx, esi
jmp 0x10022612
mov edx, dword [ebx + 0x38]
test edx, edx
je 0x10024bdd
mov dword [ebx + 0x38], 0
lea edi, [edx + 0x2000]
add edx, 0x28
mov ecx, dword [esp + 0x28]
call fcn.10047dd0
mov edx, edi
jmp 0x100227b9
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [ebx + 8], edx
jmp 0x10022e7f
mov eax, dword [ebx + 4]
test eax, eax
je 0x10024568
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [ebx + 8], 1
and dword [eax + 8], 1
mov ecx, eax
cmp dword [edi + 4], ebx
jne 0x10024f1d
mov dword [edi + 4], ecx
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x10]
mov dword [ecx + 0x34], eax
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x10026d4a
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov edx, dword [esp + 8]
test edx, edx
setne al
test byte [esp + 0x4c], al
mov esi, dword [esp + 0x18]
mov ebx, dword [esp]
mov ecx, dword [esp + 0x14]
jne 0x10023939
mov dword [ecx], 0
push dword [esp + 0x38]
jmp 0x100246bc
and esi, 1
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
or edi, esi
mov dword [ecx + 4], edi
and byte [eax + 4], 0xfe
mov eax, dword [esp]
mov eax, dword [eax + 4]
mov ecx, eax
and ecx, 0xfffffffe
je 0x100267fb
mov esi, dword [ecx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov esi, dword [esp]
mov dword [esi + 4], eax
mov dword [ecx], esi
mov dword [edx], ecx
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov dword [esp], esi
and esi, 0xfffffffe
mov edi, dword [esp + 0x10]
jne 0x10021448
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov eax, dword [edi + 4]
test eax, eax
je 0x10024669
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [edi + 8], 1
and dword [eax + 8], 1
mov ecx, eax
cmp dword [esi + 4], edi
jne 0x10024f30
mov dword [esi + 4], ecx
mov eax, dword [esp + 0x8c]
mov ebx, dword [esp + 4]
mov dword [ebx + 0x34], eax
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x10026d59
xor eax, eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov edi, dword [esp + 0x14]
test edi, edi
setne al
test byte [esp + 0x1c], al
mov ecx, dword [esp + 0x20]
jne 0x1002406e
mov eax, dword [esp + 0x10]
mov dword [eax], 0
push dword [esp + 0x48]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [eax], 0xc
xor ebx, ebx
jmp 0x1002020f
mov ebx, dword [ecx + 4]
jmp 0x10022e92
and ecx, 0xfffffffe
je 0x10026342
mov edx, dword [ecx]
test edx, edx
je 0x100246f6
test byte [edx + 4], 1
jne 0x100254ba
and eax, 1
or eax, ecx
mov dword [ebx + 4], eax
or byte [ecx + 4], 1
mov edi, dword [esi]
test edi, edi
je 0x10026dbf
mov eax, dword [edi + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026dd4
mov edx, dword [eax]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
or byte [esi + 4], 1
jmp 0x100224e3
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
jmp 0x10023372
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x10023abb
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov ecx, dword [edx]
test ecx, ecx
je 0x10026501
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x10026840
mov edi, dword [eax]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [edx + 4], esi
mov dword [eax], edx
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
jmp 0x10023145
mov eax, dword [edi + 4]
cmp eax, 1
ja 0x10025a5c
mov eax, dword [edi]
xor ecx, ecx
test eax, eax
mov ebx, dword [esp]
je 0x1002354d
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edi], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [edi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
or byte [edi + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x1002354d
mov eax, dword [esi + 4]
cmp eax, 1
ja 0x10025a6c
mov eax, dword [esi]
xor ecx, ecx
test eax, eax
mov ebx, dword [esp + 4]
mov edx, dword [esp + 8]
je 0x10023c9e
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [esi], ecx
mov ecx, esi
and ecx, 0xfffffffe
mov edx, dword [eax + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esi + 4]
and edx, 1
or edx, ecx
mov dword [eax + 4], edx
mov edx, dword [esp + 8]
or byte [esi + 4], 1
and dword [eax + 4], 1
mov ecx, eax
jmp 0x10023c9e
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov ecx, dword [edx]
test ecx, ecx
je 0x1002648c
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x10026e01
mov ebx, dword [eax]
and ebx, 0xfffffffe
and esi, 1
or esi, ebx
mov dword [edx + 4], esi
mov dword [eax], edx
mov edx, dword [ecx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x10021e7e
and ebx, 0xfffffffe
mov dword [eax + 4], ebx
mov ecx, dword [edx]
test ecx, ecx
je 0x100264a1
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov edi, dword [ecx + 4]
and edi, 1
or edi, eax
mov dword [ecx + 4], edi
mov edi, dword [edx + 4]
mov eax, edi
and eax, 0xfffffffe
je 0x10026e10
mov ebx, dword [eax]
and ebx, 0xfffffffe
and edi, 1
or edi, ebx
mov dword [edx + 4], edi
mov dword [eax], edx
mov edx, dword [ecx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x10021f02
mov ecx, dword [edi]
test ecx, ecx
je 0x10026273
mov edx, dword [ecx + 4]
test dl, 1
jne 0x10025301
or eax, 1
mov dword [edi + 4], eax
mov eax, dword [ecx]
test eax, eax
je 0x1002494f
mov edx, dword [eax + 4]
test dl, 1
jne 0x1002571c
or byte [ecx + 4], 1
mov eax, dword [edi + 4]
mov edx, eax
and edx, 0xfffffffe
je 0x10026f23
mov ecx, dword [edx]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [edi + 4], eax
mov dword [edx], edi
jmp 0x10023332
mov ecx, dword [esi]
test ecx, ecx
je 0x10026288
mov edx, dword [ecx + 4]
test dl, 1
jne 0x10025379
or eax, 1
mov dword [esi + 4], eax
mov eax, dword [ecx]
test eax, eax
je 0x100249a3
mov edx, dword [eax + 4]
test dl, 1
jne 0x10025771
or byte [ecx + 4], 1
mov eax, dword [esi + 4]
mov edx, eax
and edx, 0xfffffffe
je 0x10026f32
mov ecx, dword [edx]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [esi + 4], eax
mov dword [edx], esi
jmp 0x10023a7a
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 0x48]
neg cl
shr edx, cl
jmp 0x10020ff9
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp edi, ecx
mov ecx, dword [esp + 0x40]
jne 0x100238f8
and eax, 1
or eax, dword [esp + 0x1c]
mov dword [edx + 4], eax
jmp 0x100238f8
mov eax, dword [edx + 4]
mov ecx, eax
and ecx, 0xfffffffe
cmp esi, ecx
mov ecx, dword [esp + 0x28]
jne 0x10024031
and eax, 1
or eax, dword [esp]
mov dword [edx + 4], eax
jmp 0x10024031
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov eax, dword [esi + 4]
mov ecx, eax
or ecx, 1
mov dword [esi + 4], ecx
and eax, 0xfffffffe
je 0x10026634
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov dword [ebx], eax
jmp 0x10021768
cmp dword [esp + 8], 0
je 0x10026e34
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 8]
cmp dword [ecx], eax
jne 0x100255cc
mov eax, dword [esp + 8]
mov dword [eax], edx
test edx, edx
je 0x10026e43
mov esi, dword [esp + 0x10]
mov eax, dword [esi]
mov dword [edx], eax
mov eax, dword [esi + 4]
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov eax, dword [esp + 4]
cmp dword [eax], edx
jne 0x10026e52
mov eax, dword [esp + 4]
mov dword [eax], 0
jmp 0x10021868
xor edi, edi
jmp 0x1002277a
xor esi, esi
jmp 0x1002290d
and edx, 0xfffffffe
mov dword [eax + 4], edx
mov ebx, dword [esi]
test ebx, ebx
je 0x10026e5f
mov eax, dword [ebx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026e74
mov edx, dword [eax]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
jmp 0x100215d1
xor eax, eax
inc eax
cmp ecx, 0xffffffff
jne 0x100238bb
jmp 0x10025708
xor eax, eax
inc eax
cmp ecx, 0xffffffff
jne 0x10023ff5
jmp 0x10025712
mov eax, dword [esp + 0x1c]
mov dword [eax], 0
mov dword [eax + 4], 1
lea edi, [esp + 0x88]
jmp 0x100238ee
mov eax, dword [esp]
mov dword [eax], 0
mov dword [eax + 4], 1
lea esi, [esp + 0x88]
jmp 0x10024028
lea ecx, [esp + 0x88]
mov dword [esp + 0x1c], ecx
jmp 0x10021e1a
lea eax, [esp + 0x88]
mov ecx, 0x100000
mov edx, 0x100000
push eax
push 0
call fcn.10047a20
add esp, 8
test eax, eax
je 0x10026e83
mov esi, eax
movzx eax, byte [esp + 0x88]
mov ecx, dword [esp + 0x10]
mov edx, esi
push eax
call fcn.10047940
mov edx, esi
add esp, 4
add edx, 0x2000
jmp 0x10022612
mov dword [esp + 8], ecx
lea ecx, [esp + 0x88]
mov dword [esp + 0x14], ecx
jmp 0x10021e9e
lea eax, [esp + 0x88]
mov ecx, 0x100000
mov edx, 0x100000
push eax
push 0
call fcn.10047a20
add esp, 8
test eax, eax
je 0x100246ae
mov esi, eax
movzx eax, byte [esp + 0x88]
mov ecx, ebx
mov edx, esi
push eax
call fcn.10047940
mov edx, esi
add esp, 4
add edx, 0x2000
jmp 0x100227b9
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov ecx, dword [esp + 0x14]
mov dword [eax + 4], esi
mov esi, dword [esp + 0x18]
or byte [edx + 4], 1
and dword [eax + 4], 1
jmp 0x100214b4
mov dword [esp + 8], ecx
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov edi, dword [eax + 4]
and edi, 1
or edi, ecx
mov dword [eax + 4], edi
mov edi, dword [edx + 4]
and edi, 1
or edi, ecx
mov ecx, dword [esp + 8]
mov dword [eax + 4], edi
or byte [edx + 4], 1
and dword [eax + 4], 1
jmp 0x100214de
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x10023214
mov dword [esp + 0xc], edx
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 0x38]
test edx, edx
jne 0x10025479
mov edi, dword [esp + 4]
lea edx, [edi + 0x28]
mov ecx, dword [esp + 0xc]
call fcn.10037270
mov eax, dword [esp + 0x18]
mov esi, dword [eax + 0x38]
mov dword [eax + 0x38], edi
jmp 0x10020fc7
test ebx, ebx
je 0x10024d04
mov eax, dword [ebx + 4]
test eax, eax
je 0x10024d04
xor esi, esi
test byte [eax + 8], 1
jne 0x10023649
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10024d04
test byte [ecx + 8], 1
jne 0x10023649
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, ebx
call fcn.10001010
mov eax, dword [esi]
test eax, eax
je 0x100270d9
and byte [eax + 8], 0xfe
xor esi, esi
jmp 0x100258fc
test edi, edi
je 0x10024d4e
mov eax, dword [edi + 4]
test eax, eax
je 0x10024d4e
xor ebx, ebx
test byte [eax + 8], 1
jne 0x10023d86
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10024d4e
test byte [ecx + 8], 1
jne 0x10023d86
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, edi
call fcn.10001010
mov eax, dword [esi]
test eax, eax
je 0x100270e8
and byte [eax + 8], 0xfe
xor ebx, ebx
jmp 0x1002591a
and edx, 0xfffffffe
mov dword [eax], edx
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
and ebx, 0xfffffffe
mov eax, dword [esi + 4]
and eax, 1
lea ecx, [eax + ebx]
mov dword [esi + 4], ecx
test ebx, ebx
je 0x10026e8c
mov ecx, dword [ebx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
mov dword [ebx], esi
mov eax, dword [esi + 4]
and eax, 0xfffffffe
je 0x10024db7
mov ecx, dword [eax + 4]
test cl, 1
jne 0x10025981
mov dword [esi + 4], eax
jmp 0x100215cd
and ebx, 0xfffffffe
mov dword [eax], ebx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
and edx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
lea ecx, [eax + edx]
mov dword [edi + 4], ecx
test edx, edx
je 0x1002685e
mov ecx, dword [edx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
mov dword [edx], edi
mov eax, dword [edi + 4]
and eax, 0xfffffffe
je 0x10024e06
mov ecx, dword [eax + 4]
test cl, 1
jne 0x100259ac
mov dword [edi + 4], eax
jmp 0x100234f1
and ebx, 0xfffffffe
mov dword [eax], ebx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
and edx, 0xfffffffe
mov eax, dword [esi + 4]
and eax, 1
lea ecx, [eax + edx]
mov dword [esi + 4], ecx
test edx, edx
je 0x1002687c
mov ecx, dword [edx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
mov dword [edx], esi
mov eax, dword [esi + 4]
and eax, 0xfffffffe
je 0x10024e55
mov ecx, dword [eax + 4]
test cl, 1
jne 0x100259d7
mov dword [esi + 4], eax
jmp 0x10023c3b
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov edx, dword [edi]
test edx, edx
je 0x100269f5
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [edi], eax
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [edi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026a0a
mov esi, dword [eax]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [edi + 4], ecx
mov dword [eax], edi
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x10024439
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov edx, dword [esi]
test edx, edx
je 0x10026a79
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026a8e
mov edi, dword [eax]
and edi, 0xfffffffe
and ecx, 1
or ecx, edi
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x10024476
mov eax, dword [esp + 0x34]
mov dword [eax], edi
jmp 0x1002388b
mov eax, dword [esp + 8]
mov dword [eax], esi
jmp 0x10023fc5
and ecx, 0xfffffffe
mov eax, dword [edi + 8]
and eax, 1
or eax, ecx
mov dword [edi + 8], eax
jmp 0x10024574
and ecx, 0xfffffffe
mov eax, dword [esi + 8]
and eax, 1
or eax, ecx
mov dword [esi + 8], eax
jmp 0x10024675
cmp dword [esp + 0x44], 0
je 0x10026e9b
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x44]
cmp dword [ecx], eax
jne 0x100257c6
mov eax, dword [esp + 0x44]
mov dword [eax], edi
mov edx, dword [esp + 0x34]
mov eax, dword [edx]
mov dword [edi], eax
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov eax, dword [esp + 0x1c]
cmp dword [eax], edi
jne 0x10026eaa
mov eax, dword [esp + 0x1c]
mov dword [eax], 0
mov ecx, dword [esp + 0x88]
mov ebx, dword [esp]
jmp 0x1002354d
cmp dword [esp + 0x3c], 0
je 0x10026eb7
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x3c]
cmp dword [ecx], eax
jne 0x100257df
mov eax, dword [esp + 0x3c]
mov dword [eax], esi
mov edx, dword [esp + 0x2c]
mov eax, dword [edx]
mov dword [esi], eax
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [esp]
cmp dword [eax], esi
jne 0x10026ec6
mov eax, dword [esp]
mov dword [eax], 0
mov ecx, dword [esp + 0x88]
mov ebx, dword [esp + 4]
mov edx, dword [esp + 8]
jmp 0x10023c9e
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov edi, dword [esi]
test edi, edi
je 0x10026ed2
mov eax, dword [edi + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026ee7
mov edx, dword [eax]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
jmp 0x100224e3
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx + 4]
and eax, 1
or eax, edi
mov dword [ecx + 4], eax
jmp 0x1002388b
mov ecx, dword [esp + 8]
mov eax, dword [ecx + 4]
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
jmp 0x10023fc5
mov esi, dword [esp + 4]
and esi, 0xfffffffe
mov dword [eax], esi
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
and ecx, 0xfffffffe
mov eax, dword [edx + 4]
and eax, 1
lea esi, [eax + ecx]
mov dword [edx + 4], esi
test ecx, ecx
je 0x10026ef6
mov esi, dword [ecx]
and esi, 0xfffffffe
or esi, eax
mov dword [edx + 4], esi
mov dword [ecx], edx
mov edi, dword [edx + 4]
and edi, 0xfffffffe
je 0x100252df
mov eax, dword [edi + 4]
test al, 1
je 0x100252df
mov esi, eax
and esi, 0xfffffffe
mov dword [edi + 4], esi
mov eax, dword [edx + 4]
mov esi, eax
or esi, 1
mov dword [edx + 4], esi
and eax, 0xfffffffe
je 0x10027019
mov esi, dword [eax]
or esi, 1
mov dword [edx + 4], esi
mov dword [eax], edx
mov dword [ecx], eax
mov edi, dword [esp + 0x10]
jmp 0x10022071
mov edi, ecx
mov ecx, esi
mov eax, edx
mov edx, dword [esp + 0xc]
push edi
push eax
call fcn.100038c0
jmp 0x100231f2
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x100242ea
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
and byte [esi + 4], 0xfe
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10026a19
mov esi, dword [edx]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [eax + 4], ecx
mov dword [edx], eax
mov dword [edi], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [edi], eax
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [edi + 4]
mov eax, ecx
and eax, 0xfffffffe
mov ebx, dword [esp]
jne 0x10023471
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
and ecx, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, ecx
mov dword [edx + 4], ebx
and byte [edi + 4], 0xfe
mov ecx, dword [eax + 4]
mov edx, ecx
and edx, 0xfffffffe
je 0x10026a4c
mov edi, dword [edx]
and edi, 0xfffffffe
and ecx, 1
or ecx, edi
mov dword [eax + 4], ecx
mov dword [edx], eax
mov dword [esi], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
mov ebx, dword [esp + 4]
jne 0x10023bbd
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
and edx, 0xfffffffe
mov dword [eax], edx
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
and edi, 0xfffffffe
mov eax, dword [esi + 4]
and eax, 1
lea ecx, [eax + edi]
mov dword [esi + 4], ecx
test edi, edi
je 0x10026f14
mov ecx, dword [edi]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
mov dword [edi], esi
mov eax, dword [esi + 4]
and eax, 0xfffffffe
je 0x1002525b
mov ecx, dword [eax + 4]
test cl, 1
jne 0x10025b48
mov dword [esi + 4], eax
jmp 0x100224df
lea ecx, [esp + 0x88]
mov dword [esp + 0x1c], ecx
jmp 0x100221bc
and eax, 1
mov dword [esp], ebx
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, eax
mov dword [edx + 4], ebx
mov eax, dword [esp]
and byte [eax + 4], 0xfe
mov eax, dword [ecx + 4]
mov ebx, eax
and ebx, 0xfffffffe
je 0x10026f41
mov edx, dword [ebx]
and edx, 0xfffffffe
and eax, 1
or eax, edx
mov dword [ecx + 4], eax
mov dword [ebx], ecx
mov dword [esi], ebx
mov eax, dword [ebx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
jne 0x100242ae
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [edx + 4], edi
mov edi, dword [esp + 0x10]
jmp 0x10022071
mov ecx, esi
mov edx, 0x100000
push 2
call fcn.10003c40
add esp, 4
jmp 0x10020203
and edx, 0xfffffffe
je 0x10026407
mov esi, dword [edx]
test esi, esi
je 0x1002531a
test byte [esi + 4], 1
jne 0x10025a7c
and eax, 1
or eax, edx
mov dword [ecx + 4], eax
or byte [edx + 4], 1
mov edx, dword [edi]
test edx, edx
je 0x10026f50
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [edi], eax
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [edi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026f65
mov esi, dword [eax]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [edi + 4], ecx
mov dword [eax], edi
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
or byte [edi + 4], 1
jmp 0x10023332
and edx, 0xfffffffe
je 0x1002641c
mov edi, dword [edx]
test edi, edi
je 0x10025392
test byte [edi + 4], 1
jne 0x10025ae2
and eax, 1
or eax, edx
mov dword [ecx + 4], eax
or byte [edx + 4], 1
mov edx, dword [esi]
test edx, edx
je 0x10026f74
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026f89
mov edi, dword [eax]
and edi, 0xfffffffe
and ecx, 1
or ecx, edi
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
or byte [esi + 4], 1
jmp 0x10023a7a
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp + 0x1c]
xor eax, eax
cmp ecx, edi
seta cl
jb 0x10025708
mov al, cl
jmp 0x100238bb
test al, 0x10
mov ecx, 0
cmove ecx, dword [esp]
xor eax, eax
cmp ecx, esi
seta cl
jb 0x10025712
mov al, cl
jmp 0x10023ff5
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov eax, dword [esi + 4]
mov ecx, eax
or ecx, 1
mov dword [esi + 4], ecx
and eax, 0xfffffffe
je 0x10026694
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov dword [edi], eax
jmp 0x10021ba8
lea esi, [esp + 0x70]
mov ecx, esi
call fcn.10001f00
mov ecx, dword [esi]
jmp 0x100231c4
lea edx, [esp + 0x88]
jmp 0x100223af
cmp dword [edx + 0xc], 0
je 0x10025b83
mov eax, dword [esp + 4]
mov ecx, dword [eax]
add ecx, 0x34
call fcn.10036da0
mov esi, dword [esp + 0x18]
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x38]
mov edx, dword [ecx + 0xc]
sub dword [esi + 0x44], edx
sub eax, dword [ecx + 0xc]
mov ecx, dword [esp + 0x18]
add dword [ecx + 0x24], 0xfff00000
add eax, 0xfffffffe
mov dword [ecx + 0x28], eax
jmp 0x10024cbd
and eax, 1
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
or edi, eax
mov dword [ecx + 4], edi
and byte [edx + 4], 0xfe
mov eax, dword [ebx + 4]
mov edi, eax
and edi, 0xfffffffe
je 0x10026f98
mov ecx, dword [edi]
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov dword [ebx + 4], eax
mov dword [edi], ebx
mov dword [esi], edi
mov eax, dword [edi + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edi + 4]
and ecx, 1
or ecx, eax
mov dword [edi + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
jne 0x10024732
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov eax, dword [ebx + 4]
test eax, eax
je 0x10026fa7
test byte [eax + 8], 1
jne 0x100258ed
or ecx, 1
mov dword [ebx + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1002554e
mov edx, dword [ecx + 8]
test dl, 1
jne 0x10025c5b
or byte [eax + 8], 1
mov ecx, dword [ebx + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x10027046
mov edx, dword [eax + 4]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [ebx + 8], ecx
mov dword [eax + 4], ebx
jmp 0x100258fc
mov eax, dword [edi + 4]
test eax, eax
je 0x10026fbc
test byte [eax + 8], 1
jne 0x1002590b
or ecx, 1
mov dword [edi + 8], ecx
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x100255a4
mov edx, dword [ecx + 8]
test dl, 1
jne 0x10025cb4
or byte [eax + 8], 1
mov ecx, dword [edi + 8]
mov eax, ecx
and eax, 0xfffffffe
je 0x10027055
mov edx, dword [eax + 4]
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
mov dword [edi + 8], ecx
mov dword [eax + 4], edi
jmp 0x1002591a
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [esp + 8]
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x10024a6a
xor edx, edx
test ebx, ebx
je 0x1002562c
mov ecx, dword [ebx + 8]
cmp ecx, 1
ja 0x10025d0d
mov eax, dword [ebx + 4]
test eax, eax
je 0x1002562c
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [ebx + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [ebx + 8], 1
and dword [eax + 8], 1
mov edx, eax
mov eax, dword [esp + 0x10]
mov dword [eax + 0x34], edx
mov ecx, dword [esp + 0x28]
jmp 0x1002458e
push 0x1009a770
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [0x1009a788]
xor eax, eax
dec eax
mov edx, dword [esp + 0xc]
xor ecx, ecx
cmp dword [edi + 0x10], edx
setb cl
cmova ecx, eax
test ecx, ecx
je 0x10025698
cmp ecx, 0xffffffff
je 0x10025670
mov edi, dword [edi + 0xc]
and edi, 0xfffffffe
jmp 0x10025654
mov edi, dword [edi + 8]
jmp 0x10025654
mov eax, dword [edi]
mov esi, dword [edi + 0x18]
cmp eax, dword [esi + 8]
je 0x1001ff3b
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode__mArenaId__mNode__mArena__mId_
int3
mov esi, dword [edi + 0x14]
push 0x1009a770
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, esi
mov edx, dword [esp + 0x20]
jmp 0x1001ff2d
xor edx, edx
test edi, edi
je 0x100256f8
mov ecx, dword [edi + 8]
cmp ecx, 1
ja 0x10025d19
mov eax, dword [edi + 4]
test eax, eax
je 0x100256f8
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
or byte [edi + 8], 1
and dword [eax + 8], 1
mov edx, eax
mov ebx, dword [esp + 4]
mov dword [ebx + 0x34], edx
mov ecx, dword [esp + 0x24]
jmp 0x1002468f
mov ecx, dword [edi]
xor eax, eax
dec eax
jmp 0x100238c1
mov ecx, dword [esi]
xor eax, eax
dec eax
jmp 0x10023ffb
and edx, 0xfffffffe
mov dword [eax + 4], edx
mov edx, dword [edi]
test edx, edx
je 0x10026fd1
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [edi], eax
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [edi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x10026fe6
mov esi, dword [eax]
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
mov dword [edi + 4], ecx
mov dword [eax], edi
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x10023332
and edx, 0xfffffffe
mov dword [eax + 4], edx
mov edx, dword [esi]
test edx, edx
je 0x10026ff5
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
je 0x1002700a
mov edi, dword [eax]
and edi, 0xfffffffe
and ecx, 1
or ecx, edi
mov dword [esi + 4], ecx
mov dword [eax], esi
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x10023a7a
mov eax, edi
and eax, 0xfffffffe
mov edx, dword [esp + 0x44]
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x10024f64
mov eax, esi
and eax, 0xfffffffe
mov edx, dword [esp + 0x3c]
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x10024fce
and ebx, 0xfffffffe
mov dword [eax], ebx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
and edx, 0xfffffffe
mov eax, dword [edi + 4]
and eax, 1
lea ecx, [eax + edx]
mov dword [edi + 4], ecx
test edx, edx
je 0x10027028
mov ecx, dword [edx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [edi + 4], ecx
mov dword [edx], edi
mov eax, dword [edi + 4]
and eax, 0xfffffffe
je 0x1002583f
mov ecx, dword [eax + 4]
test cl, 1
jne 0x10025d25
mov dword [edi + 4], eax
jmp 0x1002332e
and ebx, 0xfffffffe
mov dword [eax], ebx
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
and edx, 0xfffffffe
mov eax, dword [esi + 4]
and eax, 1
lea ecx, [eax + edx]
mov dword [esi + 4], ecx
test edx, edx
je 0x10027037
mov ecx, dword [edx]
and ecx, 0xfffffffe
or ecx, eax
mov dword [esi + 4], ecx
mov dword [edx], esi
mov eax, dword [esi + 4]
and eax, 0xfffffffe
je 0x1002588e
mov ecx, dword [eax + 4]
test cl, 1
jne 0x10025d50
mov dword [esi + 4], eax
jmp 0x10023a76
mov esi, eax
and esi, 0xfffffffe
mov dword [edi + 4], esi
mov ecx, dword [edx]
test ecx, ecx
je 0x1002667f
mov eax, dword [ecx + 4]
and eax, 0xfffffffe
mov dword [edx], eax
mov eax, edx
and eax, 0xfffffffe
mov esi, dword [ecx + 4]
and esi, 1
or esi, eax
mov dword [ecx + 4], esi
mov esi, dword [edx + 4]
mov eax, esi
and eax, 0xfffffffe
je 0x10027064
mov edi, dword [eax]
and edi, 0xfffffffe
and esi, 1
or esi, edi
mov dword [edx + 4], esi
mov dword [eax], edx
mov edx, dword [ecx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x100231c4
lea edi, [esp + 0x70]
mov ecx, edi
mov edx, ebx
call fcn.1001ce60
mov eax, dword [edi]
lea ebx, [esp + 0x88]
mov dword [ebx + 4], eax
jmp 0x10023649
lea esi, [esp + 0x70]
mov ecx, esi
mov edx, edi
call fcn.1001ce60
mov eax, dword [esi]
lea edi, [esp + 0x88]
mov dword [edi + 4], eax
jmp 0x10023d86
lea ecx, [esp + 0x84]
mov edx, ebx
call fcn.10001010
mov eax, dword [esp + 0x84]
cmp dword [edi + 4], ebx
jne 0x10027073
mov dword [edi + 4], eax
mov ebx, eax
mov ecx, dword [esp + 0x28]
jmp 0x10023651
lea ecx, [esp + 0x84]
mov edx, edi
call fcn.10001010
mov eax, dword [esp + 0x84]
cmp dword [esi + 4], edi
jne 0x10027088
mov dword [esi + 4], eax
mov edi, eax
mov ecx, dword [esp + 0x24]
jmp 0x10023d8e
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov eax, dword [esi + 4]
mov ecx, eax
or ecx, 1
mov dword [esi + 4], ecx
and eax, 0xfffffffe
je 0x1002709d
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov dword [ebx], eax
jmp 0x100215cd
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov eax, dword [edi + 4]
mov ecx, eax
or ecx, 1
mov dword [edi + 4], ecx
and eax, 0xfffffffe
je 0x1002686d
mov ecx, dword [eax]
or ecx, 1
mov dword [edi + 4], ecx
mov dword [eax], edi
mov dword [edx], eax
jmp 0x100234f1
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov eax, dword [esi + 4]
mov ecx, eax
or ecx, 1
mov dword [esi + 4], ecx
and eax, 0xfffffffe
je 0x1002688b
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov dword [edx], eax
jmp 0x10023c3b
mov dword [edi + 4], eax
mov ebx, edi
jmp 0x10023649
mov dword [esi + 4], eax
mov edi, esi
jmp 0x10023d86
lea ecx, [esp + 0x88]
mov dword [esp + 8], ecx
jmp 0x10023161
mov ecx, dword [eax + 4]
and ecx, 0xfffffffe
mov dword [edx], ecx
mov ecx, edx
and ecx, 0xfffffffe
mov esi, dword [eax + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov esi, dword [edx + 4]
and esi, 1
or esi, ecx
mov dword [eax + 4], esi
mov ecx, dword [esp + 0x18]
or byte [edx + 4], 1
and dword [eax + 4], 1
mov esi, eax
jmp 0x10022949
lea ecx, [esp + 0x88]
mov dword [esp + 0x44], ecx
jmp 0x10023350
lea ecx, [esp + 0x88]
mov dword [esp + 0x3c], ecx
jmp 0x10023a98
and eax, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, eax
mov dword [edx + 4], ebx
and byte [esi + 4], 0xfe
mov eax, dword [ecx + 4]
mov edx, eax
and edx, 0xfffffffe
je 0x100270ac
mov esi, dword [edx]
and esi, 0xfffffffe
and eax, 1
or eax, esi
mov dword [ecx + 4], eax
mov dword [edx], ecx
mov dword [edi], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [edi], eax
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [edi + 4]
mov eax, ecx
and eax, 0xfffffffe
jne 0x10025356
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
and eax, 1
mov ebx, dword [edx + 4]
and ebx, 0xfffffffe
or ebx, eax
mov dword [edx + 4], ebx
and byte [edi + 4], 0xfe
mov eax, dword [ecx + 4]
mov edx, eax
and edx, 0xfffffffe
je 0x100270bb
mov edi, dword [edx]
and edi, 0xfffffffe
and eax, 1
or eax, edi
mov dword [ecx + 4], eax
mov dword [edx], ecx
mov dword [esi], edx
mov eax, dword [edx + 4]
and eax, 0xfffffffe
mov dword [esi], eax
mov eax, esi
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
mov ecx, dword [esi + 4]
mov eax, ecx
and eax, 0xfffffffe
jne 0x100253ce
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov eax, dword [esi + 4]
mov ecx, eax
or ecx, 1
mov dword [esi + 4], ecx
and eax, 0xfffffffe
je 0x100270ca
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov dword [edi], eax
jmp 0x100224df
mov ecx, dword [esp + 0xc]
mov edx, esi
call fcn.10003b30
jmp 0x1002020f
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x28]
jmp 0x100254a4
test esi, esi
je 0x100270f7
mov eax, dword [esp + 0x28]
cmp dword [esi + 4], eax
jne 0x10025e96
mov dword [esi + 4], ebx
cmp dword [esp + 0x28], 0
je 0x10027112
test ebx, ebx
je 0x10027131
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 4]
mov dword [ebx + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [ebx + 8]
and ecx, 1
or ecx, eax
mov dword [ebx + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [ebx + 8], ecx
cmp dword [edi + 4], ebx
jne 0x10027128
mov dword [edi + 4], 0
jmp 0x10024574
test ebx, ebx
je 0x10027140
mov eax, dword [esp + 0x24]
cmp dword [ebx + 4], eax
jne 0x10025eab
mov dword [ebx + 4], edi
cmp dword [esp + 0x24], 0
je 0x1002715b
test edi, edi
je 0x10027171
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 4]
mov dword [edi + 4], eax
mov eax, dword [edx + 8]
and eax, 0xfffffffe
mov ecx, dword [edi + 8]
and ecx, 1
or ecx, eax
mov dword [edi + 8], ecx
mov ecx, dword [edx + 8]
and ecx, 1
or ecx, eax
mov dword [edi + 8], ecx
cmp dword [esi + 4], edi
jne 0x10027180
mov dword [esi + 4], 0
jmp 0x10024675
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov eax, dword [ebx + 4]
test eax, eax
je 0x10027189
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [ebx + 4], ecx
mov ecx, ebx
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [ebx + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x1002719f
mov edi, dword [ecx + 4]
and edi, 0xfffffffe
and edx, 1
or edx, edi
mov dword [ebx + 8], edx
mov dword [ecx + 4], ebx
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x100258fc
and edx, 0xfffffffe
mov dword [ecx + 8], edx
mov eax, dword [edi + 4]
test eax, eax
je 0x100271ae
mov ecx, dword [eax + 8]
and ecx, 0xfffffffe
mov dword [edi + 4], ecx
mov ecx, edi
and ecx, 0xfffffffe
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
mov edx, dword [edi + 8]
mov ecx, edx
and ecx, 0xfffffffe
je 0x100271c4
mov esi, dword [ecx + 4]
and esi, 0xfffffffe
and edx, 1
or edx, esi
mov dword [edi + 8], edx
mov dword [ecx + 4], edi
mov edx, dword [eax + 8]
and edx, 1
or edx, ecx
mov dword [eax + 8], edx
jmp 0x1002591a
lea esi, [esp + 0x88]
jmp 0x10023629
lea ebx, [esp + 0x88]
jmp 0x10023d66
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov eax, dword [edi + 4]
mov ecx, eax
or ecx, 1
mov dword [edi + 4], ecx
and eax, 0xfffffffe
je 0x100271d3
mov ecx, dword [eax]
or ecx, 1
mov dword [edi + 4], ecx
mov dword [eax], edi
mov dword [edx], eax
jmp 0x1002332e
and ecx, 0xfffffffe
mov dword [eax + 4], ecx
mov eax, dword [esi + 4]
mov ecx, eax
or ecx, 1
mov dword [esi + 4], ecx
and eax, 0xfffffffe
je 0x100271e2
mov ecx, dword [eax]
or ecx, 1
mov dword [esi + 4], ecx
mov dword [eax], esi
mov dword [edx], eax
jmp 0x10023a76
mov ecx, edi
jmp 0x100226f0
mov ecx, esi
jmp 0x1002288b
mov byte [edi + 0x3c], 0
lea eax, [esp + 0x88]
push eax
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
lea esi, [esp + 0x70]
push esi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
mov ecx, 0x10
call fcn.1000c400
xor edx, edx
cmp byte [esi + 8], 0
mov ecx, 0
mov esi, 0
je 0x10025dce
mov ecx, dword [esp + 0x74]
mov esi, dword [esp + 0x70]
cmp byte [esp + 0x90], 0
mov edi, 0
je 0x10025deb
mov edx, dword [esp + 0x8c]
mov edi, dword [esp + 0x88]
mov dword [eax], edi
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], ecx
mov edi, dword [esp + 0x10]
mov dword [edi + 0x40], eax
mov byte [edi + 0x3c], 1
mov esi, dword [esp + 0x18]
mov ebx, dword [esp]
jmp 0x1002002f
mov dword [esp + 0x10], esi
mov dword [esp + 4], ebx
mov byte [ebx + 0x3c], 0
lea eax, [esp + 0x88]
push eax
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
lea esi, [esp + 0x70]
push esi
call sym.mozglue.dll_class_mozilla::Maybe_unsigned_long_long_unsigned___int64_____cdecl_mozilla::RandomUint64_void_
add esp, 4
mov ecx, 0x10
call fcn.1000c400
xor edx, edx
cmp byte [esi + 8], 0
mov ecx, 0
mov esi, 0
je 0x10025e5a
mov ecx, dword [esp + 0x74]
mov esi, dword [esp + 0x70]
cmp byte [esp + 0x90], 0
mov edi, 0
je 0x10025e77
mov edx, dword [esp + 0x8c]
mov edi, dword [esp + 0x88]
mov dword [eax], edi
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov dword [eax + 0xc], ecx
mov ebx, dword [esp + 4]
mov dword [ebx + 0x40], eax
mov byte [ebx + 0x3c], 1
mov esi, dword [esp + 0x10]
jmp 0x100202a3
mov eax, ebx
and eax, 0xfffffffe
mov ecx, dword [esi + 8]
and ecx, 1
or ecx, eax
mov dword [esi + 8], ecx
jmp 0x10025ba7
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [ebx + 8]
and ecx, 1
or ecx, eax
mov dword [ebx + 8], ecx
jmp 0x10025c0d
mov dword [esp + 0x20], edx
push 0x1009a808
call dword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov eax, dword [0x1009a804]
test eax, eax
jne 0x100260c6
mov eax, dword [0x1009a3c8]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x1009a810]
mov dword [esp + 0x48], ecx
cmp eax, dword [ecx + 4]
jle 0x10025f35
push 0x1009a810
call fcn.10046148
add esp, 4
cmp dword [0x1009a810], 0xffffffff
jne 0x10025f35
lea esi, [esp + 0x88]
push esi
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [esi + 4]
mov dword [0x1009a80c], eax
push 0x1009a810
call fcn.100460fe
add esp, 4
mov eax, 0x1000
xor edx, edx
div dword [0x1009a80c]
test edx, edx
jne 0x10027219
mov esi, 0x1009a814
push 0x40
push esi
push str.MALLOC_OPTIONS
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
cmove esi, eax
je 0x10025fb2
mov al, byte [esi]
test al, al
je 0x10025fb2
mov dword [esp + 0xc], 0
movsx eax, al
add eax, 0xffffffd0
cmp eax, 9
jbe 0x10027263
xor edi, edi
inc edi
mov eax, dword [esp + 0xc]
mov al, byte [esi + eax]
movsx ecx, al
cmp ecx, 0x72
jne 0x100271f1
mov byte [0x1009a76c], 1
dec edi
jne 0x10025f84
mov ecx, dword [esp + 0xc]
mov al, byte [esi + ecx + 1]
inc ecx
mov dword [esp + 0xc], ecx
test al, al
jne 0x10025f72
mov dword [0x1009a7d0], 0
mov eax, 0x1388
mov edi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
push eax
push 0x1009a7b0
call edi
xor esi, esi
mov dword [0x1009a7c8], esi
mov dword [0x1009a7cc], esi
mov eax, 0x1388
push eax
push 0x1009a770
call edi
mov dword [0x1009a788], esi
mov dword [0x1009a78c], esi
mov dword [0x1009a790], esi
mov eax, 0x1388
push eax
push 0x1009a7d4
call edi
mov dword [0x1009a800], esi
mov dword [0x1009a7f8], esi
mov dword [0x1009a74c], esi
mov dword [0x1009a750], esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x94], esi
mov eax, dword [0x1009a024]
mov dword [esp + 0x88], eax
mov eax, 0x1388
push eax
push 0x1009a72c
call edi
test eax, eax
je 0x1002723d
lea edx, [esp + 0x88]
xor ecx, ecx
call fcn.1003b4f0
mov dword [0x1009a744], eax
test eax, eax
je 0x10027253
mov ecx, dword [esp + 0x48]
lea ecx, [ecx + 8]
mov dword [ecx], eax
push 0x1388
push 0x1009a794
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x4000
call fcn.1000c400
test eax, eax
je 0x10027249
mov esi, eax
push 0x4000
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [0x1009a7ac], esi
xor eax, eax
inc eax
xchg dword [0x1009a804], eax
call fcn.10002140
push 0x1009a808
call dword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov edx, dword [esp + 0x20]
jmp 0x1002022f
or esi, 1
mov dword [edx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or ebx, 1
mov dword [edx + 4], ebx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
or edx, 1
mov dword [esi + 4], edx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
or ecx, 1
mov dword [esi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or esi, 1
mov dword [edx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or edi, 1
mov dword [edx + 4], edi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov ecx, edi
jmp 0x10020a07
or ecx, 1
mov dword [esi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or ecx, 1
mov dword [edi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or ecx, 1
mov dword [esi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or ecx, 1
mov dword [esi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or eax, 1
mov dword [esi + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
and edx, 1
mov dword [eax + 4], edx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
or eax, 1
mov dword [esi + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
and edx, 1
mov dword [eax + 4], edx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
or ecx, 1
mov dword [edi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or ecx, 1
mov dword [esi + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or esi, 1
mov dword [edx + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
or eax, 1
mov dword [edi + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
or eax, 1
mov dword [esi + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
and ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
and ecx, 1
mov dword [eax + 4], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
and eax, 1
mov dword [ecx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
and eax, 1
mov dword [ebx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov edx, 1
jmp 0x1001fedc
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_malloc_initialized_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__aArena__arena__aArena_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x20U____0___Freeing_in_decommitted_page._
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x01U_____0___Double_free__
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__run__mRegionsMask_elm____1U____bit____0___Double_free__
int3
lea eax, [eax + 8]
mov ebx, dword [0x1009a744]
mov dword [eax], ebx
jmp 0x10020262
and eax, 1
mov dword [ecx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
and eax, 1
mov dword [ecx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT__mArena__arena__mArena_
int3
lea eax, [eax + 8]
mov edi, dword [0x1009a744]
mov dword [eax], edi
jmp 0x1001ffe7
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
and eax, 1
mov ecx, dword [esp + 0x2c]
mov dword [ecx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
and ebx, 1
mov dword [eax + 4], ebx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [edx], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov eax, dword [esp + 8]
dec dword [eax + 8]
jmp 0x100245ba
mov eax, dword [esp + 0x14]
dec dword [eax + 8]
jmp 0x100246b8
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov eax, ecx
and eax, 0xfffffffe
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x2c]
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov eax, dword [esp + 0x2c]
mov dword [eax + 4], edx
jmp 0x100205ef
mov eax, ecx
and eax, 0xfffffffe
mov edx, dword [esp + 0xc]
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov eax, dword [esp + 0xc]
mov dword [eax + 4], edx
jmp 0x100207dd
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_run_ind___gChunkNumPages___1_
int3
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
and esi, 1
mov eax, dword [esp]
mov dword [eax + 4], esi
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov eax, edi
and eax, 0xfffffffe
mov ecx, edx
mov edx, dword [edx + 4]
and edx, 1
or edx, eax
mov dword [ecx + 4], edx
jmp 0x1002136b
mov eax, ebx
and eax, 0xfffffffe
mov ecx, dword [edx + 4]
and ecx, 1
or ecx, eax
mov dword [edx + 4], ecx
jmp 0x100215dd
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [edi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [edi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov eax, ecx
jmp 0x100225f3
mov eax, ecx
mov ebx, dword [esp + 4]
jmp 0x1002279a
mov eax, edi
and eax, 0xfffffffe
mov ecx, dword [ebx + 4]
and ecx, 1
or ecx, eax
mov dword [ebx + 4], ecx
jmp 0x10021a31
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
and dword [edi + 4], 1
jmp 0x1002099c
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
and dword [edi + 4], 1
jmp 0x100209eb
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x10023376
mov eax, edx
and eax, 0xfffffffe
mov ecx, dword [esi + 4]
and ecx, 1
or ecx, eax
mov dword [esi + 4], ecx
jmp 0x10023abe
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [esp + 0x60], edi
mov dword [esp + 0x58], esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x10026bf8
cmp eax, 8
jne 0x10026c50
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea esi, [eax + eax*4]
add esi, 5
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push 4
push 0x1000
push dword [esp + 0x68]
push dword [esp + 0x64]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
test edi, edi
jne 0x10026d68
cmp eax, 0x5af
je 0x10026c43
cmp eax, 8
jne 0x10026c50
xor eax, eax
dec esi
mov ebx, dword [esp]
jne 0x10026c0a
jmp 0x10022741
xor eax, eax
mov ebx, dword [esp]
jmp 0x10022741
mov dword [esp + 0x50], esi
mov dword [esp + 0x40], edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x10026c74
cmp eax, 8
jne 0x10026ccd
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea edi, [eax + eax*4]
add edi, 5
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push 4
push 0x1000
push dword [esp + 0x58]
push dword [esp + 0x4c]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
test esi, esi
jne 0x10026d93
cmp eax, 0x5af
je 0x10026cbf
cmp eax, 8
jne 0x10026ccd
xor eax, eax
dec edi
mov ebx, dword [esp + 4]
jne 0x10026c86
jmp 0x100228dc
xor eax, eax
mov ebx, dword [esp + 4]
jmp 0x100228dc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
and dword [eax + 4], 1
jmp 0x100218d9
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
and dword [ebx + 4], 1
jmp 0x10021c9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
cmp eax, 0x5af
mov ebx, dword [esp]
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
je 0x10026d87
cmp eax, 8
jne 0x10022720
push ecx
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10022720
cmp eax, 0x5af
mov ebx, dword [esp + 4]
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0x50]
mov ecx, dword [esp + 0x5c]
je 0x10026db3
cmp eax, 8
jne 0x100228bb
push ecx
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x100228bb
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or eax, 1
mov dword [edx + 4], eax
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov eax, dword [esp + 4]
and dword [eax + 4], 1
jmp 0x10021868
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov ecx, dword [esp + 0x14]
jmp 0x100245b4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov eax, dword [esp + 0x1c]
and dword [eax + 4], 1
jmp 0x10024f9e
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov eax, dword [esp]
and dword [eax + 4], 1
jmp 0x10025006
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [edi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
or ecx, 1
mov dword [edi + 8], ecx
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [edi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [esi], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [edi + 8]
and edx, 1
or edx, ecx
mov dword [edi + 8], edx
jmp 0x1002594a
mov ecx, eax
and ecx, 0xfffffffe
mov edx, dword [esi + 8]
and edx, 1
or edx, ecx
mov dword [esi + 8], edx
jmp 0x10025976
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100261e4
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test ebx, ebx
je 0x10027131
mov dword [ebx + 4], 0
and dword [ebx + 8], 1
xor ecx, ecx
jmp 0x10025bdd
and dword [edi + 8], 1
jmp 0x10024574
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
int3
test edi, edi
je 0x10027171
mov dword [edi + 4], 0
and dword [edi + 8], 1
xor ecx, ecx
jmp 0x10025c43
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
and dword [esi + 8], 1
jmp 0x10024675
mov dword [ebx + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [edi + 4], 0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x10026123
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_RELEASE_ASSERT_mNode_
jmp 0x100260fc
cmp ecx, 0x46
jne 0x1002728e
mov eax, dword [0x1009a024]
test eax, eax
je 0x100272af
add eax, eax
je 0x10025f9e
mov dword [0x1009a024], eax
jmp 0x10025f9e
mov ecx, str._jemalloc_
mov edx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.1004cde0
mov dword [sym.mozglue.dll_gMozCrashReason], str.MOZ_CRASH__
int3
mov dword [0x1009a744], 0
jmp 0x10027253
mov dword [0x1009a7ac], 0
push 0x1009a808
call dword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x100246c2
xor edi, edi
lea ecx, [edi + edi*4]
lea edi, [eax + ecx*2]
mov ecx, dword [esp + 0xc]
movsx eax, byte [esi + ecx + 1]
inc ecx
mov dword [esp + 0xc], ecx
add eax, 0xffffffd0
cmp eax, 0xa
jb 0x10027265
test edi, edi
je 0x10025fa1
jmp 0x10025f84
cmp ecx, 0x52
jne 0x1002729f
mov byte [0x1009a76c], 0
jmp 0x10025f9e
cmp ecx, 0x66
jne 0x100272be
shr dword [0x1009a024], 1
jmp 0x10025f9e
mov dword [0x1009a024], 1
jmp 0x10025f9e
lea ecx, [esp + 0x88]
mov byte [ecx], al
mov byte [ecx + 1], 0
mov eax, 2
push 0xa
push str._jemalloc_
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
push 0x35
push str.:__malloc__Unsupported_character_in_malloc_options:_
mov eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
add esp, 0xc
lea ecx, [esp + 0x88]
mov edx, 0x10090196
call fcn.1004cde0
jmp 0x10025f9e