Function at 0x180049a80
Capabilities:
Encode data using base64
Generate random numbers via rtlgenrandom
Get system information on windows
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x178
movaps xmmword [rsp + 0x160], xmm6
mov rdi, rdx
mov rbx, rcx
mov rax, qword [0x1800cb028]
xor rax, rsp
mov qword [rsp + 0x158], rax
mov eax, dword [0x1800cb774]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x18004c430
cmp rdi, 0x1000
ja 0x180049b00
cmp byte [0x1800cb770], 0
je 0x180049b00
mov rax, qword [0x1800cb648]
mov eax, dword [rax + 0x14810]
cmp eax, 1
je 0x18004cc7b
cmp dword [0x1800cb718], 0
je 0x18004cc74
test bl, 1
je 0x180049cd3
mov rsi, qword [0x1800cb588]
test rsi, rsi
je 0x18004ce5e
xor eax, eax
cmp qword [rsi + 0x10], rbx
setb cl
ja 0x18004ac7e
mov al, cl
test eax, eax
jne 0x180049e1d
cmp dword [0x1800cb718], 0
je 0x18004c7e0
cmp rdi, 1
adc rdi, 0
test rsi, rsi
jne 0x180049e3a
cmp rdi, 0x1f1
jae 0x180049e33
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x18004ce54
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x10]
test rsi, rsi
je 0x18004c1d9
cmp rdi, 9
jb 0x18004a261
cmp rdi, 0x1f1
jae 0x180049d83
add rdi, 0xf
mov r13, rdi
and r13, 0xfffffffffffffff0
shr rdi, 4
dec rdi
lea rbp, [rdi + rdi*2]
shl rbp, 4
cmp byte [rsi + 0x78], 0
je 0x180049bf2
cmp qword [rsi + 0x80], 0
je 0x18004c75a
lea r14, [rsi + rbp]
add r14, 0xa8
lea rdi, [rsi + 0x18]
cmp dword [rsi + 0x40], 0
jne 0x180049c10
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbx, qword [r14]
test rbx, rbx
je 0x180049da1
cmp dword [rbx + 0xc], 0
je 0x180049da1
mov eax, dword [rbx + 8]
mov edx, dword [rbx + rax*4 + 0x10]
test edx, edx
je 0x18004a0b3
mov r8, qword [rsi + 0x80]
test r8, r8
jne 0x180049d3d
tzcnt r8d, edx
mov r14d, eax
shl r14d, 5
or r14d, r8d
mov ecx, dword [rsi + rbp + 0xc8]
imul r14, qword [rsi + rbp + 0xb8]
add rcx, rbx
add r14, rcx
btc edx, r8d
mov dword [rbx + rax*4 + 0x10], edx
dec dword [rbx + 0xc]
test r14, r14
je 0x18004aecc
add qword [rsi + 0x58], r13
xor ebx, ebx
cmp dword [rsi + 0x40], 0
jne 0x180049c93
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test bl, bl
jne 0x18004ec22
test r14, r14
je 0x18004ec22
mov rcx, qword [rsp + 0x158]
xor rcx, rsp
call fcn.180062020
mov rax, r14
movaps xmm6, xmmword [rsp + 0x160]
add rsp, 0x178
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [0x1800cb540]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rsi, qword [0x1800cb580]
test rsi, rsi
je 0x180049d12
mov eax, 0xffffffff
xor ecx, ecx
cmp qword [rsi + 0x10], rbx
setb cl
cmova ecx, eax
test ecx, ecx
je 0x180049d2b
cmp ecx, 0xffffffff
jne 0x18004ce77
mov rsi, qword [rsi]
test rsi, rsi
jne 0x180049cf1
lea rax, str.MOZ_RELEASE_ASSERT_result_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rcx, [0x1800cb540]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x180049b3f
mov r9, qword [r8]
mov rcx, qword [r8 + 8]
mov qword [r8], rcx
mov r10, r9
shl r10, 0x17
xor r10, r9
mov r9, rcx
shr r9, 0x1a
xor r9, rcx
xor r9, r10
shr r10, 0x11
xor r10, r9
add ecx, r10d
mov r9d, edx
ror r9d, cl
mov qword [r8 + 8], r10
tzcnt r8d, r9d
add r8d, ecx
and r8d, 0x1f
jmp 0x180049c4a
add rdi, 0xff
mov r13d, edi
and r13d, 0x1f00
shr rdi, 8
add rdi, 0x1d
jmp 0x180049bd6
mov rdx, qword [rsi + rbp + 0xb0]
test rdx, rdx
je 0x18004a536
lea r12, [rsi + rbp]
add r12, 0xb0
mov rax, rdx
mov r15, rax
mov rax, qword [rax]
test rax, rax
jne 0x180049dc0
mov qword [rsp + 0xd0], rdx
mov qword [rsp + 0xd8], 0
xor ecx, ecx
cmp rdx, r15
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x18004a26e
mov r9, qword [rdx]
test r9, r9
je 0x18004ce84
mov rax, qword [r9 + 8]
test al, 1
je 0x18004a116
xor ebx, ebx
mov r8d, 0xffffffff
jmp 0x18004dbb5
cmp eax, 0xffffffff
je 0x18004ac88
mov rsi, qword [rsi + 8]
and rsi, 0xfffffffffffffffe
jmp 0x180049b1d
mov rsi, qword [0x1800cb568]
cmp rdi, 0xf00
jbe 0x180049bad
cmp rdi, 0xfc000
ja 0x18004ba37
add rdi, 0xfff
lea r14, [rsi + 0x18]
cmp dword [rsi + 0x40], 0
jne 0x180049e6e
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbp, rdi
and rbp, 0xfffffffffffff000
mov rcx, qword [rsi + 0xa0]
test rcx, rcx
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], r14
je 0x18004a45a
xor eax, eax
mov rdx, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r9, rcx
mov r11, qword [r9 + 0x10]
and r11, rdx
xor r10d, r10d
cmp rbp, r11
seta r10b
cmovb r10d, r8d
lea r11d, [r10 + 1]
cmp r11d, 2
jae 0x180049ed0
mov rax, r9
mov r9, qword [r9]
test r9, r9
jne 0x180049ea4
jmp 0x180049ee7
cmp r10d, 1
jne 0x18004ce97
mov r9, qword [r9 + 8]
and r9, 0xfffffffffffffffe
test r9, r9
jne 0x180049ea4
test rax, rax
je 0x18004ce9f
mov r8, rax
and r8, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r14, rdx
and r14, 0xfffffffffffffff0
shl r14, 8
add r14, r8
mov r11, r14
and r11, 0xfffffffffff00000
mov rax, qword [r11 + 0x18]
mov qword [rsp + 0x50], rax
mov eax, r14d
shr eax, 0xc
movzx ebx, al
lea rax, [rbx*8]
lea r9, [rax + rax*2]
mov r13, qword [r11 + r9 + 0x30]
shr rdi, 0xc
test rbp, rbp
mov qword [rsp + 0x38], r11
mov qword [rsp + 0x58], rbx
je 0x18004a196
mov qword [rsp + 0x68], r13
cmp rdi, 1
mov r10, rdi
adc r10, 0
lea rax, [rbx + rbx*2]
lea r13, [r11 + rax*8]
add r13, 0x30
xor ebp, ebp
mov rdx, qword [sym.imp.KERNEL32.dll_GetLastError]
xor r12d, r12d
lea r15, [r12 + rbx]
lea rax, [r15 + r15*2]
test byte [r11 + rax*8 + 0x30], 0x60
jne 0x180049fb2
inc r12
cmp r12, rdi
setae bpl
add r13, 0x18
cmp r12, r10
jne 0x180049f8a
jmp 0x18004a185
cmp r12, rdi
jae 0x18004a82d
mov rax, r13
xor ebx, ebx
mov rcx, qword [rax]
test cl, 0x60
je 0x180049fe2
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
lea rcx, [r12 + rbx]
inc rcx
inc rbx
add rax, 0x18
cmp rcx, rdi
jb 0x180049fc0
mov rcx, rbx
shl rcx, 0xc
jne 0x18004a4cb
jmp 0x18004a5b2
mov qword [rsp + 0x78], r8
mov qword [rsp + 0x98], rcx
call rdx
mov dword [rsp + 0x90], eax
mov rcx, r15
mov rdx, qword [rsp + 0x78]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x18004ca3e
mov rax, qword [rsp + 0x78]
add r15, rax
mov rcx, qword [rsp + 0x98]
sub rcx, rax
mov eax, 0x100000
cmp rcx, rax
mov r8d, 0x100000
cmovb r8, rcx
test rcx, rcx
mov rdx, qword [sym.imp.KERNEL32.dll_GetLastError]
je 0x18004a4f9
jmp 0x180049ff4
test rbx, rbx
je 0x18004a096
test al, al
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
lea rdx, [rbx*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [r13 + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x18004a088
test al, al
mov rdx, qword [sym.imp.KERNEL32.dll_GetLastError]
je 0x18004e411
add qword [rsi + 0x50], rbx
mov rbx, qword [rsp + 0x58]
jmp 0x180049f9a
mov ecx, dword [rsi + rbp + 0xc4]
inc eax
cmp eax, ecx
jae 0x18004aec9
mov edx, eax
mov r8d, dword [rbx + rdx*4 + 0x10]
test r8d, r8d
je 0x18004a0ba
mov r9, qword [rsi + 0x80]
test r9, r9
jne 0x18004a21b
tzcnt r9d, r8d
mov r14d, eax
shl r14d, 5
or r14d, r9d
mov ecx, dword [rsi + rbp + 0xc8]
add rcx, rbx
imul r14, qword [rsi + rbp + 0xb8]
add r14, rcx
btc r8d, r9d
mov dword [rbx + rdx*4 + 0x10], r8d
mov dword [rbx + 8], eax
jmp 0x180049c72
mov rcx, qword [r9]
test rcx, rcx
je 0x18004a128
test byte [rcx + 8], 1
jne 0x180049e10
or rax, 1
mov qword [r9 + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18004caae
mov r9, qword [rax]
test r9, r9
je 0x18004a157
mov r8, qword [r9 + 8]
test r8b, 1
jne 0x18004adf7
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov r9, rax
and byte [r9 + 8], 0xfe
lea rdx, [rsp + 0xd0]
mov qword [rdx], r9
jmp 0x180049e10
mov rcx, qword [rsi + 0xa0]
mov rbp, qword [rsp + 0x40]
mov r13, qword [rsp + 0x68]
lea rax, [r11 + r9]
add rax, 0x20
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0xd8], 0
mov rdx, qword [rax + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
je 0x18004a3ab
cmp r8d, 0xffffffff
jne 0x18004a29d
mov r9, qword [rcx]
test r9, r9
je 0x18004d0bb
mov rdx, qword [r9 + 8]
test dl, 1
je 0x18004a33b
xor edx, edx
mov r10, 0xfffffffffffff000
mov r11d, 0xffffffff
jmp 0x18004e25b
mov r10, qword [r9]
mov rcx, qword [r9 + 8]
mov qword [r9], rcx
mov r11, r10
shl r11, 0x17
xor r11, r10
mov r10, rcx
shr r10, 0x1a
xor r10, rcx
xor r10, r11
shr r11, 0x11
xor r11, r10
add ecx, r11d
mov r10d, r8d
ror r10d, cl
mov qword [r9 + 8], r11
tzcnt r9d, r10d
add r9d, ecx
and r9d, 0x1f
jmp 0x18004a0e5
mov r13d, 0x10
xor edi, edi
jmp 0x180049bd6
test eax, eax
jne 0x18004a3cc
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x18004bc84
mov rax, qword [rdx]
test rax, rax
jne 0x18004bea8
mov qword [rsp + 0xd0], rax
jmp 0x18004db11
test r8d, r8d
je 0x18004a50f
mov r8, qword [rcx + 8]
xor edx, edx
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18004a2c8
mov r10, qword [r9]
test r10, r10
je 0x18004a2c8
test byte [r10 + 8], 1
jne 0x18004a209
mov r10, qword [rcx]
test r10, r10
je 0x18004cb85
mov r9, qword [r10 + 8]
test r9b, 1
jne 0x18004ac90
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [r10]
test r8, r8
je 0x18004a300
mov r9, qword [r8 + 8]
test r9b, 1
jne 0x18004af3c
or byte [r10 + 8], 1
mov r8, qword [rcx + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18004d3a8
mov r10, qword [r9]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [r9], rcx
lea rcx, [rsp + 0xd0]
mov qword [rcx], r9
jmp 0x18004a209
mov r8, qword [r9]
test r8, r8
je 0x18004a34e
test byte [r8 + 8], 1
jne 0x18004a207
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x18004ca93
mov r9, qword [rdx]
test r9, r9
je 0x18004a37d
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18004afaa
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xd0]
mov qword [rcx], r9
jmp 0x18004a207
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x18004a1ee
mov r8b, dl
jmp 0x18004a1e4
mov rax, qword [rdx + 8]
xor ebx, ebx
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x18004a3ed
mov rcx, qword [r9]
test rcx, rcx
je 0x18004a3ed
test byte [rcx + 8], 1
jne 0x180049e12
mov rcx, qword [rdx]
test rcx, rcx
je 0x18004d3bb
test byte [rcx + 8], 1
jne 0x18004af1f
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18004a421
mov r8, qword [rax + 8]
test r8b, 1
jne 0x18004bb43
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x18004d4e7
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [r9], rdx
lea rdx, [rsp + 0xd0]
mov qword [rdx], r9
jmp 0x180049e12
mov rcx, qword [rsi + 0x70]
test rcx, rcx
jne 0x18004a5b9
lea r15, [0x1800cb680]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb6a8]
test rax, rax
je 0x18004ad28
xor r12d, r12d
mov ecx, 0xffffffff
mov rbx, qword [rax + 0x28]
xor edx, edx
cmp rbx, 0x100000
setb dl
cmova edx, ecx
cmp edx, 0xffffffff
jne 0x18004a4b7
mov r12, rax
mov rax, qword [rax]
test rax, rax
jne 0x18004a48f
jmp 0x18004a834
test edx, edx
jne 0x18004d460
cmp qword [rax + 0x20], 0
jne 0x18004a4a7
jmp 0x18004d472
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x60], r9
shl r15, 0xc
mov eax, r15d
and eax, 0xff000
mov r8d, 0x100000
sub r8, rax
cmp r8, rcx
cmovae r8, rcx
add r15, r11
jmp 0x180049ff4
mov al, 1
mov r11, qword [rsp + 0x38]
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x70]
jmp 0x18004a064
mov r8, qword [rcx + 8]
cmp r8, 1
ja 0x18004b785
mov rdx, qword [rcx]
test rdx, rdx
jne 0x18004ae8b
mov qword [rsp + 0xd0], rdx
jmp 0x18004e38e
movzx eax, byte [rsi + rbp + 0xd2]
mov qword [rsp + 0x40], rax
lea r15, [rsi + 0xa0]
mov rcx, qword [rsi + 0xa0]
test rcx, rcx
je 0x18004b99d
mov rdx, qword [rsp + 0x40]
shl rdx, 0xc
xor eax, eax
mov r8, 0xfffffffffffff000
mov r9d, 0xffffffff
mov r11, qword [rcx + 0x10]
and r11, r8
xor r10d, r10d
cmp rdx, r11
seta r10b
cmovb r10d, r9d
lea r11d, [r10 + 1]
cmp r11d, 2
jae 0x18004a59e
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x18004a572
jmp 0x18004a609
cmp r10d, 1
jne 0x18004d2f1
mov rcx, qword [rcx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18004a597
mov al, 1
jmp 0x18004a064
xor r8d, r8d
mov qword [rsi + 0x70], r8
lea r14, [rcx + 0x3000]
lea rax, [rcx + 0x68]
xorps xmm0, xmm0
lea rdx, [rsp + 0xd0]
movaps xmmword [rdx], xmm0
mov qword [rcx + 0x68], r8
mov qword [rcx + 0x70], 1
mov qword [rdx], rax
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x18004d367
and byte [rcx + 8], 0xfe
mov qword [rsi + 0xa0], rcx
jmp 0x180049f1e
test rax, rax
je 0x18004b99d
mov rcx, rax
and rcx, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov rbx, rdx
and rbx, 0xfffffffffffffff0
shl rbx, 8
add rbx, rcx
mov qword [rsp + 0x58], r15
mov r9, rbx
and r9, 0xfffffffffff00000
mov rax, qword [r9 + 0x18]
mov qword [rsp + 0x98], rax
mov eax, ebx
shr eax, 0xc
movzx r11d, al
lea rax, [r11*8]
lea rcx, [rax + rax*2]
mov rax, qword [r9 + rcx + 0x30]
mov qword [rsp + 0x78], rax
mov rdx, qword [rsp + 0x40]
test rdx, rdx
mov qword [rsp + 0x48], r9
mov qword [rsp + 0x68], r11
je 0x18004b00e
lea rax, [r11 + r11*2]
lea r12, [r9 + rax*8]
add r12, 0x30
xor r10d, r10d
xor r15d, r15d
lea r8, [r15 + r11]
lea rax, [r8 + r8*2]
test byte [r9 + rax*8 + 0x30], 0x60
jne 0x18004a6c9
inc r15
add r12, 0x18
cmp r15, rdx
setae r10b
jne 0x18004a6a4
jmp 0x18004b011
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x88], rcx
mov rax, r12
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov rcx, qword [rax]
test cl, 0x60
je 0x18004a70c
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
mov r8, qword [rsp + 0x38]
lea rcx, [r15 + r8]
inc rcx
inc r8
mov qword [rsp + 0x38], r8
add rax, 0x18
cmp rcx, rdx
jb 0x18004a6e0
mov rcx, qword [rsp + 0x38]
shl rcx, 0xc
je 0x18004bc35
mov qword [rsp + 0x50], r10
mov r10, qword [rsp + 0x60]
shl r10, 0xc
mov eax, r10d
and eax, 0xff000
mov edx, 0x100000
sub rdx, rax
cmp rdx, rcx
cmovae rdx, rcx
add r10, r9
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x60], r10
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x90], rcx
call r8
mov dword [rsp + 0x80], eax
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x18004cba0
mov r10, qword [rsp + 0x60]
mov rax, qword [rsp + 0x70]
add r10, rax
mov rcx, qword [rsp + 0x90]
sub rcx, rax
mov eax, 0x100000
cmp rcx, rax
mov edx, 0x100000
cmovb rdx, rcx
test rcx, rcx
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x18004a74a
mov al, 1
mov r9, qword [rsp + 0x48]
mov r10, qword [rsp + 0x50]
mov r11, qword [rsp + 0x68]
cmp qword [rsp + 0x38], 0
je 0x18004a80a
test al, al
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
mov rdx, qword [rsp + 0x38]
lea rdx, [rdx*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [r12 + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x18004a7fd
test al, al
je 0x18004b349
mov rax, qword [rsp + 0x38]
add qword [rsi + 0x50], rax
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x88]
jmp 0x18004a6b4
xor ebx, ebx
jmp 0x18004a0a5
test r12, r12
je 0x18004ad28
mov rbx, qword [r12 + 0x28]
mov r13, qword [r12 + 0x20]
lea r14, [r13 + 0xfffff]
mov rax, 0xfffffffffff00000
and r14, rax
mov rcx, r14
sub rcx, r13
sub rbx, rcx
add rbx, rax
mov ebp, dword [r12 + 0x30]
mov rcx, r12
call fcn.180001860
lea rcx, [0x1800cb6b0]
mov rdx, r12
call section..text
mov rax, r14
sub rax, r13
jne 0x18004d3d6
test rbx, rbx
je 0x18004aedf
lea rax, [r14 + 0x100000]
mov qword [r12 + 0x20], rax
mov qword [r12 + 0x28], rbx
mov dword [r12 + 0x30], ebp
mov rcx, r12
call fcn.180001530
lea rcx, [0x1800cb6b0]
mov rdx, r12
call fcn.180001ff0
lock add qword [0x1800cb6b8], 0xfffffffffff00000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 0x100000
mov rcx, r14
mov r8d, 0x1000
call fcn.180062260
test rax, rax
je 0x18004ad35
test r14, r14
je 0x18004ad35
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbx, qword [0x1800cb678]
mov r12, r14
shr r12, 0x3e
mov r15, qword [rbx + r12*8]
test r15, r15
je 0x18004c602
mov r12d, 2
xorps xmm6, xmm6
mov rbx, r14
mov ecx, r12d
shl rbx, cl
shr rbx, 0x3d
mov rax, qword [r15 + rbx*8]
test rax, rax
je 0x18004bd3f
add r12, 3
mov r15, rax
cmp r12d, 0x29
jne 0x18004a92d
mov ecx, r14d
shr ecx, 0x14
and ecx, 7
mov qword [rax + rcx*8], r14
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r14, r14
je 0x18004ec17
add qword [rsi + 0x48], 0x100000
mov qword [r14], rsi
xor eax, eax
mov qword [r14 + 0x18], rax
mov qword [r14 + 0x30], rax
mov qword [r14 + 0x48], rax
mov qword [r14 + 0x60], 0x20
mov qword [r14 + 0x78], 0xfc024
mov eax, 0xf0
mov qword [r14 + rax - 0x60], 0x24
mov qword [r14 + rax - 0x48], 0x24
mov qword [r14 + rax - 0x30], 0x24
mov qword [r14 + rax - 0x18], 0x24
mov qword [r14 + rax], 0x24
add rax, 0x78
cmp rax, 0x1860
jne 0x18004a9a5
mov qword [r14 + 0x1800], 0xfc024
mov qword [r14 + 0x1818], 0x20
lea r15, [r14 + 0x2000]
mov eax, r15d
and eax, 0xfffff
mov ebx, 0x100000
mov r12d, 0x100000
sub r12, rax
mov r13d, 0xfe000
cmp r12, r13
cmovae r12, r13
mov rbp, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, r15
mov rdx, r12
mov r8d, 0x4000
call rbp
test eax, eax
je 0x18004d245
add r15, r12
sub r13, r12
cmp r13, rbx
mov r12d, 0x100000
cmovb r12, r13
test r13, r13
jne 0x18004aa24
add qword [rsi + 0x50], 3
lea rax, [r14 + 0x68]
mov r11, qword [rsi + 0xa0]
mov qword [rsp + 0xd0], r11
mov qword [rsp + 0xd8], 0
test r11, r11
je 0x18004b9ef
lea rcx, [rsp + 0xd0]
xor r9d, r9d
mov rdx, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r10, r9
mov r9, rcx
mov rcx, qword [r11]
test rcx, rcx
je 0x18004aabd
mov rbx, qword [rcx + 8]
test bl, 1
je 0x18004aabd
mov r15, qword [rcx]
test r15, r15
je 0x18004aabd
test byte [r15 + 8], 1
jne 0x18004ab29
mov rcx, r11
mov r10, qword [r14 + 0x78]
mov rbx, r10
and rbx, rdx
mov r15, qword [rcx + 0x10]
and r15, rdx
xor r11d, r11d
cmp rbx, r15
seta r11b
cmovb r11d, r8d
test r11d, r11d
je 0x18004aafc
cmp r11d, 0xffffffff
jne 0x18004ab1a
mov r11, qword [rcx]
mov ebx, 0xffffffff
test r11, r11
jne 0x18004aa97
jmp 0x18004ac08
test r10b, 0x10
mov r10d, 0
cmove r10, rax
xor ebx, ebx
cmp r10, rcx
seta r10b
jb 0x18004aaea
mov bl, r10b
jmp 0x18004ab1f
mov ebx, 1
mov r11, qword [rcx + 8]
and r11, 0xfffffffffffffffe
jmp 0x18004aaf2
and rbx, 0xfffffffffffffffe
mov qword [r11], rbx
mov r15, r11
and r15, 0xfffffffffffffffe
mov rbx, qword [rcx]
mov r12, qword [rcx + 8]
and r12d, 1
or r12, r15
mov qword [rcx + 8], r12
test rbx, rbx
je 0x18004d0f4
and byte [rbx + 8], 0xfe
cmp qword [r9], r11
jne 0x18004ab63
mov qword [r9], rcx
jmp 0x18004aac0
and rcx, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
lea rbx, [r11 + rcx]
mov qword [r9 + 8], rbx
test rcx, rcx
je 0x18004d107
mov rbx, qword [rcx]
and rbx, 0xfffffffffffffffe
or rbx, r11
mov qword [r9 + 8], rbx
mov qword [rcx], r9
mov r11, qword [r9 + 8]
and r11d, 1
mov rbx, qword [rcx + 8]
and rbx, 0xfffffffffffffffe
or rbx, r11
mov qword [rcx + 8], rbx
or byte [r9 + 8], 1
test r10, r10
je 0x18004cbf8
cmp qword [r10], r9
je 0x18004ba53
jmp 0x18004bb2f
mov r9, qword [r14 + 0x78]
mov rbx, r9
and rbx, rdx
mov r15, qword [rcx + 0x10]
and r15, rdx
xor r11d, r11d
cmp rbx, r15
seta r11b
cmovb r11d, r8d
test r11d, r11d
jne 0x18004b81c
jmp 0x18004bc5f
mov r11, qword [rcx + 8]
and r11, 0xfffffffffffffffe
mov r9, rcx
test r11, r11
jne 0x18004aa9d
mov r9, r10
mov qword [r14 + 0x68], 0
mov qword [r14 + 0x70], 1
cmp ebx, 1
mov rbp, qword [rsp + 0x40]
jne 0x18004ba0c
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + rax]
mov qword [rcx + 8], r8
test rax, rax
je 0x18004d47a
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r9], rcx
jne 0x18004b7a9
mov qword [r9], rax
jmp 0x18004ba0f
mov eax, 0xffffffff
jmp 0x180049b37
mov rsi, qword [rsi]
jmp 0x180049b1d
and r9, 0xfffffffffffffffe
je 0x18004cb6a
mov r11, qword [r9]
test r11, r11
je 0x18004acad
test byte [r11 + 8], 1
jne 0x18004bbaf
and r8d, 1
or r8, r9
mov qword [r10 + 8], r8
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18004d4a7
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x18004d4c1
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
or byte [rcx + 8], 1
jmp 0x18004a32b
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov edx, 0x100000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
test rax, rax
je 0x18004cae4
mov rax, r14
shl rax, 0x2c
je 0x18004a8fc
mov rcx, r14
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x18004d66e
mov rbx, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, 0x1ff000
xor ecx, ecx
mov r8d, 0x3000
call fcn.180062260
test rax, rax
je 0x18004ec17
mov r14, rax
mov rcx, rax
xor edx, edx
mov r8d, 0x8000
call rbx
test eax, eax
je 0x18004d656
add r14, 0xfffff
and r14, 0xfffffffffff00000
mov edx, 0x100000
mov rcx, r14
mov r8d, 0x3000
call fcn.180062260
cmp rax, r14
jne 0x18004c7cf
test r14, r14
jne 0x18004a8fc
jmp 0x18004ad8f
and r8, 0xfffffffffffffffe
mov qword [rax], r8
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
and r9, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + r9]
mov qword [rdx + 8], rcx
test r9, r9
je 0x18004d4d4
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [r9], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18004aed6
mov rcx, qword [rax + 8]
test cl, 1
je 0x18004aed6
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x18004d5a4
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [r9], rax
jmp 0x18004a170
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x18004a529
dec dword [rbx + 0xc]
mov bl, 1
xor r14d, r14d
jmp 0x180049c84
mov qword [rdx + 8], rax
jmp 0x18004a170
lock add qword [0x1800cb6b8], 0xfffffffffff00000
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea r15, [0x1800cb6c0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb5a0]
mov qword [r12], rax
mov qword [0x1800cb5a0], r12
jmp 0x18004a8ce
lea rcx, [rsp + 0xc0]
call fcn.180008400
lea rax, [rsp + 0xc0]
mov r9, qword [rax]
jmp 0x18004a44a
and r9, 0xfffffffffffffffe
mov qword [r8 + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x18004d507
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x18004d521
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, r8
mov qword [r9 + 8], rcx
jmp 0x18004a32b
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x18004d53c
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18004b005
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18004c06f
mov qword [rcx + 8], rdx
jmp 0x18004a396
mov r10b, 1
mov qword [rsp + 0x50], r10
lea rax, [r9 + rcx]
add rax, 0x20
mov r11, qword [rsp + 0x58]
mov rcx, qword [r11]
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0xd8], 0
mov rdx, qword [rax + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
je 0x18004b764
cmp r8d, 0xffffffff
jne 0x18004b657
mov r9, qword [rcx]
test r9, r9
je 0x18004d395
mov rdx, qword [r9 + 8]
test dl, 1
je 0x18004b6f4
xor r11d, r11d
mov r10, 0xfffffffffffff000
mov r8, rcx
mov rcx, r9
mov r15, qword [rax + 0x10]
mov rdx, r15
and rdx, r10
mov r12, qword [r9 + 0x10]
and r12, r10
xor r9d, r9d
cmp rdx, r12
seta r9b
mov edx, 0xffffffff
cmovb r9d, edx
test r9d, r9d
jne 0x18004b0e3
test r15b, 0x10
mov edx, 0
cmove rdx, rax
xor r9d, r9d
cmp rdx, rcx
seta dl
jb 0x18004b0e9
mov r9b, dl
cmp r9d, 0xffffffff
jne 0x18004b165
mov r9, qword [rcx]
test r9, r9
je 0x18004bde5
mov rdx, qword [r9 + 8]
test dl, 1
jne 0x18004b099
mov r15, qword [r9]
test r15, r15
je 0x18004b10d
test byte [r15 + 8], 1
jne 0x18004b099
or rdx, 1
mov qword [r9 + 8], rdx
mov r12, qword [rcx + 8]
mov r15, r12
and r15, 0xfffffffffffffffe
je 0x18004cac9
mov r9, qword [r15]
test r9, r9
je 0x18004b13b
mov rdx, qword [r9 + 8]
test dl, 1
jne 0x18004be45
or r12, 1
mov qword [rcx + 8], r12
mov rdx, qword [r15]
or rdx, 1
mov qword [rcx + 8], rdx
mov qword [r15], rcx
mov r9, r15
cmp qword [r8], rcx
jne 0x18004d48d
mov qword [r8], r9
jmp 0x18004b09c
test r9d, r9d
je 0x18004b258
mov r15, qword [rcx + 8]
mov r9, r15
and r9, 0xfffffffffffffffe
je 0x18004b18d
mov rdx, qword [r9]
test rdx, rdx
je 0x18004b18d
test byte [rdx + 8], 1
jne 0x18004b099
mov r12, qword [rcx]
test r12, r12
je 0x18004d2cb
mov r9, qword [r12 + 8]
test r9b, 1
je 0x18004b7cc
and r9, 0xfffffffffffffffe
je 0x18004cbc1
mov rdx, qword [r9]
test rdx, rdx
mov qword [rsp + 0x38], r11
je 0x18004b1c9
test byte [rdx + 8], 1
jne 0x18004bf11
and r15d, 1
or r15, r9
mov qword [r12 + 8], r15
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18004d25e
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, rdx
mov qword [r9 + 8], r11
mov r12, qword [rcx + 8]
mov r15, r12
and r15, 0xfffffffffffffffe
je 0x18004d278
mov rdx, qword [r15]
and rdx, 0xfffffffffffffffe
and r12d, 1
or r12, rdx
mov qword [rcx + 8], r12
mov qword [r15], rcx
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, r15
mov qword [r9 + 8], rdx
or byte [rcx + 8], 1
mov r11, qword [rsp + 0x38]
cmp qword [r8], rcx
jne 0x18004ba5b
mov qword [r8], r9
mov rcx, r8
jmp 0x18004b099
mov r15, qword [rcx + 8]
mov r11, r8
cmp r15, 1
ja 0x18004b172
mov rdx, qword [rcx]
test rdx, rdx
je 0x18004b2aa
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x58]
jne 0x18004b792
mov qword [r8], rdx
mov r10, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x78]
shr rdx, 0xc
mov rcx, qword [rsp + 0xd0]
mov qword [r11], rcx
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov rcx, qword [rsp + 0x40]
cmp rdx, rcx
jne 0x18004b3e4
test cl, cl
je 0x18004b32e
mov rax, rbx
or rax, 1
shl rcx, 3
lea rcx, [rcx + rcx*2]
mov rdx, qword [rsp + 0x68]
lea rdx, [rdx + rdx*2]
lea rdx, [r10 + rdx*8]
add rdx, 0x30
xor r8d, r8d
test byte [rdx + r8], 8
je 0x18004b321
dec qword [r10 + 0x18]
dec qword [rsi + 0x88]
mov qword [rdx + r8], rax
add r8, 0x18
cmp rcx, r8
jne 0x18004b30f
cmp qword [r10 + 0x18], 0
jne 0x18004b344
cmp qword [rsp + 0x98], 0
jne 0x18004b830
mov r10, qword [rsp + 0x50]
test rbx, rbx
je 0x18004bb21
test r10b, 1
je 0x18004bb21
cmp qword [r14], rbx
je 0x18004db2f
mov qword [rbx], r14
xor eax, eax
cmp dword [rsi + rbp + 0xc4], 1
jne 0x18004b378
xor edx, edx
jmp 0x18004b39d
lea rdx, [rsi + rbp]
add rdx, 0xc4
xor ecx, ecx
mov dword [rbx + rcx*4 + 0x10], 0xffffffff
inc rcx
mov r8d, dword [rdx]
dec r8d
cmp rcx, r8
jb 0x18004b385
mov edx, ecx
mov r8d, dword [rsi + rbp + 0xc0]
and r8d, 0x1f
mov ecx, r8d
neg cl
mov r9d, 0xffffffff
shr r9d, cl
cmp r8d, 1
sbb eax, eax
or eax, r9d
mov dword [rbx + rdx*4 + 0x10], eax
mov dword [rbx + 8], 0
mov eax, dword [rsi + rbp + 0xc0]
mov dword [rbx + 0xc], eax
inc dword [rsi + rbp + 0xcc]
mov qword [r14], rbx
jmp 0x180049c26
mov rax, qword [rsp + 0x68]
mov r15, rdx
add rdx, rax
sub r15, rcx
shl r15, 0xc
add rax, rcx
lea rcx, [rax + rax*2]
lea rax, [r10 + rcx*8]
add rax, 0x20
mov r8d, 0xfff
mov r9, qword [rax + 0x10]
and r9, r8
or r9, r15
mov qword [rax + 0x10], r9
lea rdx, [rdx + rdx*2]
and r8, qword [r10 + rdx*8 + 0x18]
or r8, r15
mov qword [r10 + rdx*8 + 0x18], r8
mov r15, qword [r11]
mov qword [rsp + 0xd0], r15
mov qword [rsp + 0xd8], 0
test r15, r15
je 0x18004bcc6
lea rdx, [r10 + rcx*8]
add rdx, 0x30
lea rcx, [rsp + 0xd0]
xor r10d, r10d
mov r11, r10
mov r10, rcx
mov rcx, qword [r15]
test rcx, rcx
je 0x18004b484
mov r12, qword [rcx + 8]
test r12b, 1
je 0x18004b484
mov r9, qword [rcx]
test r9, r9
je 0x18004b484
test byte [r9 + 8], 1
jne 0x18004b4ff
mov rcx, r15
mov r11, qword [rdx]
mov r8, r11
mov r15, 0xfffffffffffff000
and r8, r15
mov r9, qword [rcx + 0x10]
and r9, r15
xor r15d, r15d
cmp r8, r9
seta r15b
mov r8d, 0xffffffff
cmovb r15d, r8d
test r15d, r15d
je 0x18004b4d0
cmp r15d, 0xffffffff
jne 0x18004b4ef
mov r15, qword [rcx]
mov r12d, 0xffffffff
test r15, r15
jne 0x18004b45d
jmp 0x18004b5ec
test r11b, 0x10
mov r8d, 0
cmove r8, rax
xor r12d, r12d
cmp r8, rcx
seta r9b
jb 0x18004b4bd
mov r12b, r9b
jmp 0x18004b4f5
mov r12d, 1
mov r15, qword [rcx + 8]
and r15, 0xfffffffffffffffe
jmp 0x18004b4c6
and r12, 0xfffffffffffffffe
mov qword [r15], r12
mov r9, r15
and r9, 0xfffffffffffffffe
mov r12, qword [rcx]
mov r8, qword [rcx + 8]
and r8d, 1
or r8, r9
mov qword [rcx + 8], r8
test r12, r12
je 0x18004d1e3
and byte [r12 + 8], 0xfe
cmp qword [r10], r15
jne 0x18004b53b
mov qword [r10], rcx
jmp 0x18004b487
and rcx, 0xfffffffffffffffe
mov r15, qword [r10 + 8]
and r15d, 1
lea r8, [r15 + rcx]
mov qword [r10 + 8], r8
test rcx, rcx
je 0x18004d1f6
mov r8, qword [rcx]
and r8, 0xfffffffffffffffe
or r8, r15
mov qword [r10 + 8], r8
mov qword [rcx], r10
mov r8, qword [r10 + 8]
and r8d, 1
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rcx + 8], r9
or byte [r10 + 8], 1
test r11, r11
je 0x18004cc0b
cmp qword [r11], r10
je 0x18004bd6a
jmp 0x18004befd
mov r10, qword [rdx]
mov r8, r10
mov r15, 0xfffffffffffff000
and r8, r15
mov r9, qword [rcx + 0x10]
and r9, r15
xor r15d, r15d
cmp r8, r9
seta r15b
mov r8d, 0xffffffff
cmovb r15d, r8d
test r15d, r15d
jne 0x18004bc91
jmp 0x18004bfac
mov r15, qword [rcx + 8]
and r15, 0xfffffffffffffffe
mov r10, rcx
test r15, r15
jne 0x18004b463
mov r10, r11
mov qword [rax], 0
mov qword [rax + 8], 1
cmp r12d, 1
jne 0x18004bcdd
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, rdx
or r8, rax
mov qword [rcx + 8], r8
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r10], rcx
mov r9, qword [rsp + 0x58]
jne 0x18004bc3c
mov qword [r10], rax
jmp 0x18004bce5
test r8d, r8d
je 0x18004ba78
mov r8, qword [rcx + 8]
xor r11d, r11d
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18004b682
mov rdx, qword [r9]
test rdx, rdx
je 0x18004b682
test byte [rdx + 8], 1
jne 0x18004b092
mov r10, qword [rcx]
test r10, r10
je 0x18004cc39
mov r9, qword [r10 + 8]
test r9b, 1
jne 0x18004bfd2
or r8, 1
mov qword [rcx + 8], r8
mov rdx, qword [r10]
test rdx, rdx
je 0x18004b6ba
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18004c21f
or byte [r10 + 8], 1
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18004d5e7
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [rcx + 8], rdx
mov qword [r9], rcx
lea rcx, [rsp + 0xd0]
mov qword [rcx], r9
jmp 0x18004b092
mov r8, qword [r9]
test r8, r8
je 0x18004b707
test byte [r8 + 8], 1
jne 0x18004b08f
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x18004cbdd
mov r9, qword [rdx]
test r9, r9
je 0x18004b736
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18004c28c
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xd0]
mov qword [rcx], r9
jmp 0x18004b08f
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x18004b076
mov r8b, dl
jmp 0x18004b06c
lea rdx, [rsp + 0xd0]
jmp 0x18004a2ac
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x18004b2bb
mov rdx, qword [r9 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
jne 0x18004ba0f
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
jmp 0x18004ba0f
or r9, 1
mov qword [r12 + 8], r9
mov rdx, qword [r12]
test rdx, rdx
je 0x18004b7ec
mov r9, qword [rdx + 8]
test r9b, 1
jne 0x18004bd72
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18004d2de
mov r15, r11
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and edx, 1
or rdx, r11
mov qword [rcx + 8], rdx
mov qword [r9], rcx
mov r11, r15
jmp 0x18004b244
mov ebx, 1
cmp r11d, 0xffffffff
jne 0x18004abf1
jmp 0x18004bf97
mov r12, qword [rsi + 0x68]
mov qword [rsp + 0xd8], r12
mov qword [rsp + 0xe0], 0
xor ecx, ecx
cmp r12, r10
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x18004bd0c
test eax, eax
je 0x18004c127
test r12, r12
je 0x18004cc61
mov rcx, qword [r12 + 0x10]
xor r15d, r15d
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18004c170
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18004c170
test byte [rdx + 0x10], 1
je 0x18004c170
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
mov r9, r15
mov r11d, 0xffffffff
xor r15d, r15d
mov r10, r12
mov r12, rax
xor eax, eax
cmp r12, rdx
setb al
cmova eax, r11d
cmp eax, 0xffffffff
jne 0x18004b905
test r12, r12
je 0x18004c6aa
mov rax, qword [r12 + 8]
test rax, rax
je 0x18004c6a7
test byte [rax + 0x10], 1
jne 0x18004b8b4
mov qword [rsp + 0x40], r10
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18004c311
test byte [rcx + 0x10], 1
jne 0x18004b8b4
jmp 0x18004c311
test eax, eax
jne 0x18004b926
test r12, r12
je 0x18004d534
mov rax, qword [r12 + 0x10]
mov r9, r10
cmp rax, 1
jbe 0x18004baa4
jmp 0x18004b934
test r12, r12
je 0x18004cc54
mov rax, qword [r12 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rsp + 0x40], r10
je 0x18004b952
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18004b952
test byte [rcx + 0x10], 1
jne 0x18004b8b4
mov qword [rsp + 0x38], r9
lea rcx, [rsp + 0xb0]
mov rdx, r12
call fcn.180039460
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x40]
cmp qword [rcx + 8], r12
jne 0x18004c2f0
jmp 0x18004c56e
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x38]
mov r11d, 0xffffffff
jmp 0x18004b8b4
mov rdx, qword [rsi + 0x70]
test rdx, rdx
jne 0x18004bca6
lea r9, [rsp + 0xd0]
mov ecx, 0x100000
mov edx, 0x100000
xor r8d, r8d
call fcn.180062350
test rax, rax
je 0x18004bb21
mov rbx, rax
mov r8b, byte [rsp + 0xd0]
mov rcx, rsi
mov rdx, rax
call fcn.180062ab0
add rbx, 0x3000
jmp 0x18004a640
mov qword [r14 + 0x68], 0
mov qword [r14 + 0x70], 1
lea rcx, [rsp + 0xd0]
mov rbp, qword [rsp + 0x40]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x18004d354
and byte [rcx + 8], 0xfe
mov qword [rsi + 0xa0], rcx
add r14, 0x3000
jmp 0x180049f1e
mov r8d, 0x100000
mov rcx, rsi
mov rdx, rdi
xor r9d, r9d
call fcn.180001df0
mov r14, rax
jmp 0x180049c9b
mov qword [r10], rcx
jmp 0x18004abc4
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
mov rcx, r8
jmp 0x18004b099
mov r8, qword [rcx + 8]
cmp r8, 1
mov r10, qword [rsp + 0x48]
ja 0x18004c37e
mov rdx, qword [rcx]
test rdx, rdx
jne 0x18004c0e9
mov qword [rsp + 0xd0], rdx
jmp 0x18004b2c0
mov r15, qword [r12 + 8]
test r15, r15
je 0x18004bfa4
mov rax, qword [r15 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [r12 + 8], rax
mov rax, r12
and rax, 0xfffffffffffffffe
mov rcx, qword [r15 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r15 + 0x10], rcx
mov rcx, qword [r12 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r15 + 0x10], rcx
or byte [r12 + 0x10], 1
and qword [r15 + 0x10], 1
cmp qword [r10 + 8], r12
jne 0x18004bee6
mov qword [r10 + 8], r15
mov rax, qword [rsp + 0xd8]
mov qword [rsi + 0x68], rax
test rdx, rdx
je 0x18004d54f
xorps xmm0, xmm0
movups xmmword [rdx + 8], xmm0
test r8b, r8b
jne 0x18004b35c
mov qword [r14], 0
mov bl, 1
jmp 0x180049c84
mov r9, qword [r10 + 8]
and r9d, 1
or r9, rcx
mov qword [r10 + 8], r9
jmp 0x18004abc4
and r8, 0xfffffffffffffffe
mov qword [rax + 8], r8
mov r9, qword [rdx]
test r9, r9
je 0x18004d577
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18004d591
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
jmp 0x18004a44a
and r8d, 1
mov rbx, qword [r9 + 8]
and rbx, 0xfffffffffffffffe
or rbx, r8
mov qword [r9 + 8], rbx
and byte [r11 + 8], 0xfe
mov r8, qword [r10 + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18004d5b7
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r8d, 1
or r8, r11
mov qword [r10 + 8], r8
mov qword [r9], r10
mov qword [rcx], r9
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
jne 0x18004acfb
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov al, 1
jmp 0x18004a7d1
mov rdx, qword [r10 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
jne 0x18004bce5
and edx, 1
or rdx, rax
mov qword [r10 + 8], rdx
jmp 0x18004bce5
test r9b, 0x10
mov r9d, 0
cmove r9, rax
xor ebx, ebx
cmp r9, rcx
seta r9b
jb 0x18004bf97
mov bl, r9b
jmp 0x18004abf1
lea rbx, [rsp + 0xd0]
jmp 0x18004a3d2
mov r12d, 1
cmp r15d, 0xffffffff
jne 0x18004b5d5
jmp 0x18004c162
mov qword [rsi + 0x70], 0
lea rbx, [rdx + 0x3000]
add rdx, 0x68
mov rcx, r15
call fcn.180062bd0
jmp 0x18004a640
mov qword [rax], 0
mov qword [rax + 8], 1
lea rcx, [rsp + 0xd0]
mov r9, qword [rsp + 0x58]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd0]
test rax, rax
je 0x18004d44d
and byte [rax + 8], 0xfe
mov qword [r9], rax
mov r10, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
jmp 0x18004b2e8
test r12, r12
je 0x18004c0be
mov rax, qword [r12 + 8]
test rax, rax
je 0x18004c0be
test byte [rax + 0x10], 1
je 0x18004c0ab
xor r9d, r9d
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
jmp 0x18004b8ab
mov ecx, 0x40
call fcn.1800022d0
test rax, rax
je 0x18004d223
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov qword [r15 + rbx*8], rax
jmp 0x18004a947
mov qword [r11], rcx
jmp 0x18004b59c
and r9, 0xfffffffffffffffe
mov qword [rdx + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x18004d29e
mov r12, r11
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, rdx
mov qword [r9 + 8], r11
mov rdx, qword [rcx + 8]
mov r15, rdx
and r15, 0xfffffffffffffffe
je 0x18004d2b8
mov r11, qword [r15]
and r11, 0xfffffffffffffffe
and edx, 1
or rdx, r11
mov qword [rcx + 8], rdx
mov qword [r15], rcx
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, r15
mov qword [r9 + 8], rdx
mov r11, r12
jmp 0x18004b244
test r11, r11
je 0x18004d5ca
cmp qword [r11], rax
jne 0x18004c363
mov qword [r11], rcx
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x18004d5dd
mov qword [r8], 0
mov r10, qword [rsp + 0x48]
mov r11, qword [rsp + 0x58]
jmp 0x18004b2c0
and rdx, 0xfffffffffffffffe
mov qword [r15], rdx
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, r15
mov qword [r9 + 8], rdx
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r15, [rdx + r9]
mov qword [rcx + 8], r15
test r9, r9
je 0x18004d0e1
mov r15, qword [r9]
and r15, 0xfffffffffffffffe
or r15, rdx
mov qword [rcx + 8], r15
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18004be9f
mov r15, qword [rdx + 8]
test r15b, 1
jne 0x18004c3f9
mov qword [rcx + 8], rdx
jmp 0x18004b154
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov r8, qword [rax + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
mov r8, qword [rdx + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18004a290
and r15, 0xfffffffffffffffe
mov rax, qword [r10 + 0x10]
and eax, 1
or rax, r15
mov qword [r10 + 0x10], rax
jmp 0x18004bafc
mov r8, qword [r11 + 8]
and r8d, 1
or r8, rcx
mov qword [r11 + 8], r8
jmp 0x18004b59c
and r15d, 1
mov r11, qword [r9 + 8]
and r11, 0xfffffffffffffffe
or r11, r15
mov qword [r9 + 8], r11
and byte [rdx + 8], 0xfe
mov rdx, qword [r12 + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18004d28b
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and edx, 1
or rdx, r11
mov qword [r12 + 8], rdx
mov qword [r9], r12
mov qword [rcx], r9
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, rdx
mov qword [r9 + 8], r11
mov r12, qword [rcx + 8]
mov r15, r12
and r15, 0xfffffffffffffffe
jne 0x18004b218
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov r11, qword [rcx]
mov ebx, 0xffffffff
jmp 0x18004abf9
xor r15d, r15d
jmp 0x18004baee
test r10b, 0x10
mov r8d, 0
cmove r8, rax
xor r12d, r12d
cmp r8, rcx
seta r9b
jb 0x18004c162
mov r12b, r9b
jmp 0x18004b5d5
and r9, 0xfffffffffffffffe
je 0x18004cc1e
mov r15, r11
mov r11, qword [r9]
test r11, r11
je 0x18004bff2
test byte [r11 + 8], 1
jne 0x18004c57d
and r8d, 1
or r8, r9
mov qword [r10 + 8], r8
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18004d60d
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x18004d627
mov rdx, qword [r8]
and rdx, 0xfffffffffffffffe
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, r8
mov qword [r9 + 8], rdx
or byte [rcx + 8], 1
mov r11, r15
jmp 0x18004b6e4
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x18004d5fa
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
mov rbp, qword [rsp + 0x40]
jmp 0x18004a396
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18004c0be
test byte [rcx + 0x10], 1
jne 0x18004bd2d
lea r15, [rsp + 0xc0]
mov rcx, r15
mov rdx, r12
call fcn.180039300
mov rax, qword [r15]
test rax, rax
je 0x18004d6ef
and byte [rax + 0x10], 0xfe
xor r15d, r15d
jmp 0x18004c3a6
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x18004ba97
test r12, r12
je 0x18004c149
mov rcx, qword [r12 + 0x10]
cmp rcx, 1
ja 0x18004c7c2
mov rax, qword [r12 + 8]
test rax, rax
jne 0x18004c3b8
xor eax, eax
mov qword [rsp + 0xd8], rax
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
jmp 0x18004bafc
mov r15, qword [rcx]
mov r12d, 0xffffffff
jmp 0x18004b5dd
mov rax, qword [r12 + 8]
test rax, rax
je 0x18004d63a
test byte [rax + 0x10], 1
jne 0x18004c38b
or rcx, 1
mov qword [r12 + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18004c1a7
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x18004c633
or byte [rax + 0x10], 1
mov rcx, qword [r12 + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18004d702
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [r12 + 0x10], rcx
mov qword [rax + 8], r12
jmp 0x18004c3a6
mov rsi, qword [0x1800cb568]
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x18004d686
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x10], rsi
jmp 0x180049bad
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov r9, qword [rcx]
test r9, r9
je 0x18004d690
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
je 0x18004d6aa
mov r10, qword [r8]
and r10, 0xfffffffffffffffe
and edx, 1
or rdx, r10
mov qword [rcx + 8], rdx
mov qword [r8], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, r8
mov qword [r9 + 8], rcx
jmp 0x18004b6e4
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x18004d6bd
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18004c2e7
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18004c723
mov qword [rcx + 8], rdx
jmp 0x18004b74f
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov r12, qword [rsp + 0x40]
mov rdx, qword [r12 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r12 + 0x10], rdx
jmp 0x18004b983
mov qword [rsp + 0x38], r9
lea rcx, [rsp + 0xb8]
mov rdx, r12
call fcn.180039300
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x40]
cmp qword [rcx + 8], r12
jne 0x18004d6d0
mov r10, qword [rsp + 0x40]
mov qword [r10 + 8], rax
mov r12, rax
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x38]
mov r11d, 0xffffffff
jmp 0x18004b8ba
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r9, qword [r11 + 8]
and r9d, 1
or r9, rdx
mov qword [r11 + 8], r9
jmp 0x18004bdfa
lea r11, [rsp + 0xd0]
jmp 0x18004b667
lea rcx, [rsp + 0xc0]
mov rdx, r12
call fcn.180039460
lea rax, [rsp + 0xc0]
mov rax, qword [rax]
lea r12, [rsp + 0xd0]
mov qword [r12 + 8], rax
jmp 0x18004b89e
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r12 + 8], rcx
mov rcx, r12
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r12 + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [r12 + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x18004c14b
and r15, 0xfffffffffffffffe
mov qword [rdx + 8], r15
mov rdx, qword [rcx + 8]
mov r15, rdx
or r15, 1
mov qword [rcx + 8], r15
and rdx, 0xfffffffffffffffe
je 0x18004d0ce
mov r15, qword [rdx]
or r15, 1
mov qword [rcx + 8], r15
mov qword [rdx], rcx
mov qword [r9], rdx
jmp 0x18004b154
lea rcx, [0x1800cb774]
call fcn.180060ac0
cmp dword [0x1800cb774], 0xffffffff
jne 0x180049ad8
mov eax, dword [0x1800cb600]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x18004c4a6
lea rcx, [0x1800cb600]
call fcn.180060ac0
cmp dword [0x1800cb600], 0xffffffff
jne 0x18004c4a6
lea rsi, [rsp + 0xd0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsi + 4]
mov qword [0x1800cb5f8], rax
lea rcx, [0x1800cb600]
call fcn.180060b40
mov r14, qword [0x1800cb5f8]
cmp r14, 0x1000
jne 0x18004c54f
call fcn.180002fa0
mov qword [0x1800cb640], rax
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x18004d95c
call fcn.180002e80
mov qword [0x1800cb648], rax
lea rsi, [0x1800cb618]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb648]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov qword [rax], rdx
mov r8, rcx
shl r8, 0x17
xor r8, rcx
mov rcx, rdx
shr rcx, 0x1a
xor rcx, rdx
xor rcx, r8
shr r8, 0x11
xor r8, rcx
mov qword [rax + 8], r8
add edx, r8d
and edx, 0x1ffff
inc edx
mov dword [0x1800cb610], edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp r14, 0x1000
sete byte [0x1800cb770]
lea rcx, [0x1800cb774]
call fcn.180060b40
jmp 0x180049ad8
mov r12, qword [rsp + 0x40]
mov qword [r12 + 8], rax
jmp 0x18004b983
and r8d, 1
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
or rdx, r8
mov qword [r9 + 8], rdx
and byte [r11 + 8], 0xfe
mov rdx, qword [r10 + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18004d715
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r10 + 8], rdx
mov qword [r9], r10
mov qword [rcx], r9
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
jne 0x18004c040
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov ecx, 0x40
call fcn.1800022d0
test rax, rax
je 0x18004d223
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [rbx + r12*8], rax
jmp 0x18004a924
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [r12 + 8]
test rax, rax
je 0x18004d728
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r12 + 8], rcx
mov rcx, r12
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r12 + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x18004d744
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r12 + 0x10], rdx
mov qword [rcx + 8], r12
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x18004c3a6
mov r15, r12
test r9, r9
je 0x18004d757
mov rax, qword [rsp + 0x48]
cmp qword [r9 + 8], rax
jne 0x18004ca24
mov qword [r9 + 8], r15
cmp qword [rsp + 0x48], 0
je 0x18004d777
test r12, r12
je 0x18004d790
mov rdx, qword [rsp + 0x48]
mov rax, qword [rdx + 8]
mov qword [r15 + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [r15 + 0x10]
and eax, 1
or rax, rcx
mov qword [r15 + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov qword [r15 + 0x10], rax
cmp qword [r10 + 8], r15
jne 0x18004d7a3
mov qword [r10 + 8], 0
jmp 0x18004c153
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x18004d7ad
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
jmp 0x18004b74f
mov byte [rsi + 0x78], 0
lea rcx, [rsp + 0xd0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
xor edi, edi
mov ebx, 0
test al, al
je 0x18004c783
mov rbx, qword [rsp + 0xd0]
lea rcx, [rsp + 0xd0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
test al, al
je 0x18004c7a1
mov rdi, qword [rsp + 0xd0]
mov ecx, 0x10
call fcn.1800022d0
mov qword [rax], rbx
mov qword [rax + 8], rdi
mov qword [rsi + 0x80], rax
mov byte [rsi + 0x78], 1
jmp 0x180049bf2
lea r15, [rsp + 0xd0]
jmp 0x18004b87a
test rax, rax
jne 0x18004d7c0
xor r14d, r14d
jmp 0x18004adec
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
cmp dword [0x1800cb718], 0
jne 0x18004ca12
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x18004d81e
mov eax, dword [0x1800cb600]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x18004c877
lea rcx, [0x1800cb600]
call fcn.180060ac0
cmp dword [0x1800cb600], 0xffffffff
jne 0x18004c877
lea rbx, [rsp + 0xd0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov qword [0x1800cb5f8], rax
lea rcx, [0x1800cb600]
call fcn.180060b40
mov eax, 0x1000
xor edx, edx
div qword [0x1800cb5f8]
test rdx, rdx
jne 0x18004d828
lea rcx, str.MALLOC_OPTIONS
lea rbx, [0x1800cb730]
mov rdx, rbx
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor r14d, r14d
test eax, eax
cmovne r14, rbx
je 0x18004c8c4
mov al, byte [0x1800cb730]
test al, al
jne 0x18004ca5f
xor r14d, r14d
mov qword [0x1800cb6b8], r14
lea rcx, [0x1800cb680]
mov rbx, qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov edx, 0x1388
call rbx
mov qword [0x1800cb6a8], r14
mov qword [0x1800cb6b0], r14
lea rcx, [0x1800cb5b8]
mov edx, 0x1388
call rbx
mov qword [0x1800cb5e0], r14
mov qword [0x1800cb5e8], r14
mov qword [0x1800cb5f0], r14
lea rcx, [0x1800cb6c0]
mov edx, 0x1388
call rbx
mov qword [0x1800cb710], r14
mov qword [0x1800cb700], r14
xorps xmm0, xmm0
movups xmmword [0x1800cb578], xmm0
mov qword [0x1800cb588], r14
lea rcx, [0x1800cb540]
mov qword [rsp + 0xd8], r14
mov dword [rsp + 0xe0], 0
mov rax, qword [0x1800cb038]
mov qword [rsp + 0xd0], rax
mov edx, 0x1388
call rbx
test eax, eax
je 0x18004d7f4
lea rdx, [rsp + 0xd0]
xor ecx, ecx
call fcn.180053590
mov qword [0x1800cb568], rax
test rax, rax
je 0x18004d80c
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp byte [rcx + 8], 0
je 0x18004d854
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x10], rax
lea rcx, [0x1800cb650]
mov edx, 0x1388
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x20
call fcn.1800022d0
test rax, rax
je 0x18004d801
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [0x1800cb678], rax
mov dword [0x1800cb718], 1
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x180049b4c
mov rax, r15
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r9 + 0x10], rcx
jmp 0x18004c6c6
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18004d865
cmp eax, 8
je 0x18004d865
xor eax, eax
jmp 0x18004a4fb
xor r15d, r15d
movsx edx, al
lea ecx, [rdx - 0x30]
cmp cl, 9
jbe 0x18004d8f3
xor ecx, ecx
cmp edx, 0x72
jne 0x18004d918
mov byte [0x1800cb5b0], 1
inc r15d
mov al, byte [r14 + r15]
test al, al
jne 0x18004ca62
jmp 0x18004c8c4
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
or rcx, 1
mov qword [rdx + 8], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
or r12, 1
mov qword [rcx + 8], r12
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18004cafa
cmp eax, 8
jne 0x18004ec17
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rbx, [rax + rax*4]
add rbx, 5
mov r15, qword [sym.imp.KERNEL32.dll_Sleep]
mov r12, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r13, qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x32
call r15
mov edx, 0x100000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call r12
mov r14, rax
call r13
test r14, r14
jne 0x18004daa2
cmp eax, 0x5af
je 0x18004cb60
cmp eax, 8
jne 0x18004ec17
dec rbx
jne 0x18004cb23
jmp 0x18004ec17
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18004da16
cmp eax, 8
je 0x18004da16
xor eax, eax
jmp 0x18004a7c2
and r15d, 1
mov qword [r12 + 8], r15
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
mov qword [rsp + 0x40], r10
xor r12d, r12d
jmp 0x18004b952
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
xor esi, esi
jmp 0x180049b3f
lock inc qword [0x1800cb608]
lock dec dword [0x1800cb610]
jne 0x180049b00
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x18004ccb1
call fcn.180060de8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 9], 0
jne 0x180049b00
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x18004ccf2
call fcn.180060de8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov byte [rax + 9], 1
lea r9, [rsp + 0xd0]
mov qword [r9], 0
mov rdx, qword [rsp + 0x1b8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rcx, [0x180067240]
mov r8d, 0x10
call fcn.18009d790
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rsi, qword [0x1800cb608]
mov r15, qword [0x1800cb648]
mov rcx, qword [r15]
mov rdx, qword [r15 + 8]
mov rax, rcx
shl rax, 0x17
xor rax, rcx
mov rcx, rdx
shr rcx, 0x1a
xor rcx, rdx
xor rcx, rax
shr rax, 0x11
xor rax, rcx
lea ecx, [rdx + rax]
and ecx, 0x7fff
inc ecx
mov dword [rsp + 0x40], ecx
mov qword [r15], rax
mov rcx, rdx
shl rcx, 0x17
xor rcx, rdx
mov r13, rcx
shr r13, 0x11
mov rdx, rax
shr rdx, 0x1a
xor r13, rcx
xor r13, rax
xor r13, rdx
mov qword [r15 + 8], r13
add r13, rax
mov ebp, 0x100
movzx r13d, r13b
imul r12, r13, 0x148
cmp dword [r15 + r12 + 0x10], 1
je 0x18004ce1f
cmp qword [r15 + r12 + 0x150], rsi
ja 0x18004ce1f
mov rax, qword [0x1800cb640]
mov rax, qword [rax]
mov rcx, r13
shl rcx, 0xd
lea r14, [rax + rcx]
add r14, 0x1000
mov edx, 0x1000
mov rcx, r14
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r15, qword [0x1800cb648]
test rax, rax
jne 0x18004d11a
inc r13
dec rbp
jne 0x18004cdbc
xor r14d, r14d
mov eax, dword [rsp + 0x40]
mov dword [0x1800cb610], eax
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.180067250
test r14, r14
jne 0x180049ca4
jmp 0x180049b00
call fcn.180060de8
jmp 0x180049b8a
lea rax, str.MOZ_RELEASE_ASSERT_result_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov rsi, qword [rsi + 8]
and rsi, 0xfffffffffffffffe
jmp 0x180049d0d
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
mov rax, r9
jmp 0x180049ef0
mov r8, qword [rsi + 0x70]
test r8, r8
je 0x18004a467
xor r11d, r11d
mov qword [rsi + 0x70], r11
lea r14, [r8 + 0x3000]
lea rax, [r8 + 0x68]
lea rdx, [rsp + 0xd0]
mov qword [rdx], rcx
mov qword [rdx + 8], r11
mov r9, 0xfffffffffffff000
mov r10d, 0xffffffff
mov rbx, r11
mov r11, rdx
mov rdx, qword [rcx]
test rdx, rdx
je 0x18004cf02
mov r15, qword [rdx + 8]
test r15b, 1
je 0x18004cf02
mov r12, qword [rdx]
test r12, r12
je 0x18004cf02
test byte [r12 + 8], 1
jne 0x18004cf67
mov rdx, rcx
mov rcx, qword [r8 + 0x78]
mov r15, rcx
and r15, r9
mov r12, qword [rdx + 0x10]
and r12, r9
xor ebx, ebx
cmp r15, r12
seta bl
cmovb ebx, r10d
test ebx, ebx
je 0x18004cf3d
cmp ebx, 0xffffffff
jne 0x18004cf58
mov rcx, qword [rdx]
mov ebp, 0xffffffff
test rcx, rcx
jne 0x18004ceda
jmp 0x18004d045
test cl, 0x10
mov ecx, 0
cmove rcx, rax
xor ebp, ebp
cmp rcx, rdx
seta cl
jb 0x18004cf2b
mov bpl, cl
jmp 0x18004cf5d
mov ebp, 1
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18004cf33
and r15, 0xfffffffffffffffe
mov qword [rcx], r15
mov r12, rcx
and r12, 0xfffffffffffffffe
mov r15, qword [rdx]
mov r13, qword [rdx + 8]
and r13d, 1
or r13, r12
mov qword [rdx + 8], r13
test r15, r15
je 0x18004daf1
and byte [r15 + 8], 0xfe
cmp qword [r11], rcx
jne 0x18004cfa2
mov qword [r11], rdx
jmp 0x18004cf05
and rdx, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
lea r15, [rcx + rdx]
mov qword [r11 + 8], r15
test rdx, rdx
je 0x18004db01
mov r15, qword [rdx]
and r15, 0xfffffffffffffffe
or r15, rcx
mov qword [r11 + 8], r15
mov qword [rdx], r11
mov rcx, qword [r11 + 8]
and ecx, 1
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
or r15, rcx
mov qword [rdx + 8], r15
or byte [r11 + 8], 1
test rbx, rbx
je 0x18004d9b0
cmp qword [rbx], r11
je 0x18004d37a
jmp 0x18004d382
mov rcx, qword [r8 + 0x78]
mov r15, rcx
and r15, r9
mov r12, qword [rdx + 0x10]
and r12, r9
xor r11d, r11d
cmp r15, r12
seta r11b
cmovb r11d, r10d
test r11d, r11d
jne 0x18004d340
jmp 0x18004d42b
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
mov r11, rdx
test rcx, rcx
jne 0x18004cee0
mov r11, rbx
mov qword [r8 + 0x68], 0
mov qword [r8 + 0x70], 1
cmp ebp, 1
jne 0x18004d1d9
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea r8, [rcx + rax]
mov qword [rdx + 8], r8
test rax, rax
je 0x18004dae1
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rcx
mov qword [rdx + 8], r8
mov qword [rax], rdx
mov rcx, qword [rdx + 8]
and ecx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x18004d2f9
mov qword [r11], rax
mov rbp, qword [rsp + 0x40]
jmp 0x18004a5e8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
cmp rdi, 8
ja 0x18004d209
mov rax, rdi
mov ecx, 0x40
dec rax
je 0x18004d139
bsr rcx, rax
xor rcx, 0x3f
neg cl
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov ecx, 0x10
cmovb rax, rcx
cmp rdi, 2
cmovb rax, rcx
sub r14, rax
add r14, 0x1000
lea rsi, [r15 + r12]
add rsi, 0x30
mov dword [rsi - 0x20], 1
mov qword [rsi - 0x18], rbx
mov bpl, 1
mov byte [rsi - 0x10], bpl
mov eax, dword [rsp + 0xc9]
mov ecx, dword [rsp + 0xcc]
mov dword [rsi - 0xf], eax
mov dword [rsi - 0xc], ecx
mov qword [rsi - 8], r14
lea rdx, [rsp + 0xd0]
mov r8d, 0x88
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + 0x88], bpl
cmp byte [rsi + 0x118], 0
je 0x18004d1c8
mov eax, 0x148
add rax, r12
add rax, r15
mov byte [rax], 0
mov qword [r15 + r12 + 0x150], 0xffffffffffffffff
jmp 0x18004ce2a
mov rbp, qword [rsp + 0x40]
jmp 0x18004a5e5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
cmp rdi, 0x1f0
ja 0x18004d31c
lea rax, [rdi + 0xf]
and rax, 0xfffffffffffffff0
jmp 0x18004d158
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 0x100000
mov rcx, r14
xor r8d, r8d
call fcn.180039740
jmp 0x18004ec17
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov rax, rcx
jmp 0x18004a612
mov rcx, qword [r11 + 8]
mov r8, rcx
and r8, 0xfffffffffffffffe
cmp rdx, r8
jne 0x18004d0b1
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
jmp 0x18004d0b1
mov eax, 0x1000
cmp rdi, 0xf00
ja 0x18004d158
lea rax, [rdi + 0xff]
and rax, 0xffffffffffffff00
jmp 0x18004d158
mov ebp, 1
cmp r11d, 0xffffffff
jne 0x18004d02e
jmp 0x18004d4fa
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
mov qword [rbx], rdx
jmp 0x18004d001
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rdx
mov qword [rbx + 8], rcx
jmp 0x18004d001
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
or rax, 1
mov qword [rdx + 8], rax
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
mov qword [r12 + 0x28], rax
mov rcx, r12
call fcn.180001530
lea rcx, [0x1800cb6b0]
mov rdx, r12
call fcn.180001ff0
test rbx, rbx
je 0x18004a8c2
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.18001fbb0
test rax, rax
je 0x18004d562
mov r12, rax
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x18004a895
test cl, 0x10
mov ecx, 0
cmove rcx, rax
xor ebp, ebp
cmp rcx, rdx
seta cl
jb 0x18004d4fa
mov bpl, cl
jmp 0x18004d02e
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
cmp edx, 1
jne 0x18004d472
mov rax, qword [rax + 8]
and rax, 0xfffffffffffffffe
jmp 0x18004a4ad
mov r12, rax
jmp 0x18004a842
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
jmp 0x18004b09c
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov rcx, qword [rdx]
mov ebp, 0xffffffff
jmp 0x18004d036
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
xor r12d, r12d
jmp 0x18004baee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov edx, 0x100000
mov rcx, r14
mov r8d, ebp
call fcn.180039740
jmp 0x18004ad35
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
and qword [r8 + 8], 1
jmp 0x18004be36
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
or rcx, 1
mov qword [r12 + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x18004adc2
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x18004ad88
call fcn.180060de8
jmp 0x18004c200
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov r10, qword [rsp + 0x40]
mov rdx, qword [r10 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r10 + 0x10], rdx
jmp 0x18004c346
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov qword [r12 + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test r12, r12
je 0x18004d790
mov qword [r15 + 8], 0
and qword [r15 + 0x10], 1
xor eax, eax
jmp 0x18004c708
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
and qword [r10 + 0x10], 1
jmp 0x18004c153
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
xor r14d, r14d
mov rcx, rax
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x18004adec
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x18004c7d8
mov qword [0x1800cb568], 0
jmp 0x18004d80c
mov qword [0x1800cb678], 0
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x18004ec22
call fcn.180060de8
jmp 0x18004c81a
lea rcx, str._jemalloc_
lea rdx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.180066f70
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
call fcn.180060de8
mov rax, qword [0x1800cb568]
jmp 0x18004c9b8
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0x80], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r15
mov rdx, qword [rsp + 0x78]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x88], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0x88], 0
jne 0x18004d977
cmp eax, 0x5af
je 0x18004d8d3
cmp eax, 8
jne 0x18004ca58
xor eax, eax
dec qword [rsp + 0x80]
mov r11, qword [rsp + 0x38]
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x70]
jne 0x18004d881
jmp 0x18004a064
xor ecx, ecx
lea eax, [rcx + rcx*4]
lea ecx, [rdx + rax*2]
add ecx, 0xffffffd0
inc r15d
mov al, byte [r14 + r15]
movsx edx, al
lea r8d, [rax - 0x30]
cmp r8b, 0xa
jae 0x18004ca73
jmp 0x18004d8f5
cmp edx, 0x46
jne 0x18004d966
cmp ecx, 1
adc ecx, 0
mov rax, qword [0x1800cb038]
xor edx, edx
test rax, rax
sete dl
cmp rax, 1
adc rax, 0
sub ecx, edx
shl rax, cl
test rax, rax
movabs rcx, 0x8000000000000000
cmovne rcx, rax
mov qword [0x1800cb038], rcx
jmp 0x18004ca83
call fcn.180060de8
jmp 0x18004c4e6
cmp edx, 0x52
jne 0x18004d999
mov byte [0x1800cb5b0], 0
jmp 0x18004ca83
cmp eax, 0x5af
mov ecx, dword [rsp + 0x90]
je 0x18004d98e
cmp eax, 8
jne 0x18004a02d
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18004a02d
cmp edx, 0x66
jne 0x18004d9c3
cmp ecx, 1
adc ecx, 0
shr qword [0x1800cb038], cl
jmp 0x18004ca83
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rbx, [rsp + 0xd0]
mov byte [rbx], al
mov byte [rbx + 1], 0
lea rdx, str._jemalloc_
mov r12, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, 2
mov r8d, 0xa
call r12
lea rdx, str.:__malloc__Unsupported_character_in_malloc_options:_
mov ecx, 2
mov r8d, 0x35
call r12
lea rdx, [0x1800bf740]
mov rcx, rbx
call fcn.180066f70
jmp 0x18004ca83
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0xa0], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0xa8], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0xa8], 0
jne 0x18004dabf
cmp eax, 0x5af
je 0x18004da82
cmp eax, 8
jne 0x18004cbba
xor eax, eax
dec qword [rsp + 0xa0]
mov r9, qword [rsp + 0x48]
mov r10, qword [rsp + 0x50]
mov r11, qword [rsp + 0x68]
jne 0x18004da32
jmp 0x18004a7d1
cmp eax, 0x5af
je 0x18004dab2
cmp eax, 8
jne 0x18004ad62
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18004ad62
cmp eax, 0x5af
mov ecx, dword [rsp + 0x80]
je 0x18004dad6
cmp eax, 8
jne 0x18004a78b
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18004a78b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov rax, qword [rsp + 0xd0]
mov qword [r12], rax
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov rbx, 0xfffffffffffff000
and rbx, qword [r15 + 0x10]
mov qword [r14], rbx
test rbx, rbx
jne 0x180049c26
jmp 0x18004bb28
int3
int3
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
nop dword [rax]
mov rdx, r9
xor r9d, r9d
cmp rdx, r15
setb r9b
cmova r9d, r8d
cmp r9d, 0xffffffff
jne 0x18004dbba
test rdx, rdx
je 0x18004e03e
mov r9, qword [rdx]
test r9, r9
je 0x18004dea6
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18004dbb5
mov r11, qword [r9]
test r11, r11
je 0x18004dbdf
test byte [r11 + 8], 1
je 0x18004dbdf
mov rcx, rdx
jmp 0x18004db70
test r9d, r9d
jne 0x18004dc44
test rdx, rdx
je 0x18004e06b
mov r10, qword [rdx + 8]
mov rbx, rcx
cmp r10, 1
jbe 0x18004dd37
jmp 0x18004dc51
or r10, 1
mov qword [r9 + 8], r10
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18004e023
mov rax, rbx
mov rbx, r12
mov r9, qword [r10]
test r9, r9
je 0x18004dc14
mov r12, qword [r9 + 8]
test r12b, 1
jne 0x18004dd8d
or r11, 1
mov qword [rdx + 8], r11
mov r9, qword [r10]
or r9, 1
mov qword [rdx + 8], r9
mov qword [r10], rdx
mov r9, r10
mov r12, rbx
mov rbx, rax
cmp qword [rcx], rdx
jne 0x18004db56
mov qword [rcx], r9
jmp 0x18004db70
test rdx, rdx
je 0x18004e0cd
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x18004dc6d
mov r11, qword [r9]
test r11, r11
je 0x18004dc6d
test byte [r11 + 8], 1
jne 0x18004dbb5
mov r11, qword [rdx]
test r11, r11
je 0x18004e0cd
mov r9, qword [r11 + 8]
test r9b, 1
je 0x18004de28
and r9, 0xfffffffffffffffe
je 0x18004e072
mov rax, qword [r9]
test rax, rax
mov qword [rsp + 0x40], r12
je 0x18004dca8
test byte [rax + 8], 1
jne 0x18004df08
and r10d, 1
or r10, r9
mov qword [r11 + 8], r10
or byte [r9 + 8], 1
mov r9, qword [rdx]
test r9, r9
je 0x18004e08d
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18004e0a7
mov r12, qword [r10]
and r12, 0xfffffffffffffffe
and r11d, 1
or r11, r12
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
or byte [rdx + 8], 1
mov r12, qword [rsp + 0x40]
cmp qword [rcx], rdx
jne 0x18004de88
mov qword [rcx], r9
mov rdx, rcx
jmp 0x18004dbb5
mov rax, qword [rdx]
test rax, rax
jne 0x18004dd52
xor eax, eax
cmp qword [rcx], rdx
jne 0x18004de71
mov qword [rcx], rax
jmp 0x18004db11
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
mov qword [rdx], r8
mov r8, rdx
and r8, 0xfffffffffffffffe
mov r9, qword [rax + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18004dd41
and r12, 0xfffffffffffffffe
mov qword [r10], r12
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
lea r11, [r10 + r9]
mov qword [rdx + 8], r11
test r9, r9
je 0x18004e058
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
or r11, r10
mov qword [rdx + 8], r11
mov qword [r9], rdx
mov r10, qword [rdx + 8]
and r10, 0xfffffffffffffffe
je 0x18004de1f
mov r11, qword [r10 + 8]
test r11b, 1
je 0x18004de1f
and r11, 0xfffffffffffffffe
mov qword [r10 + 8], r11
mov r10, qword [rdx + 8]
mov r11, r10
or r11, 1
mov qword [rdx + 8], r11
and r10, 0xfffffffffffffffe
je 0x18004e045
mov r12, rbx
mov r11, qword [r10]
or r11, 1
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov qword [r9], r10
jmp 0x18004dc30
mov qword [rdx + 8], r10
jmp 0x18004dc2d
or r9, 1
mov qword [r11 + 8], r9
mov r9, qword [r11]
test r9, r9
je 0x18004de46
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18004df8d
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x18004e0e0
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rdx + 8], r10
mov qword [r9], rdx
jmp 0x18004dd23
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, rax
mov qword [rcx + 8], rdx
jmp 0x18004db11
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
mov rdx, rcx
jmp 0x18004dbb5
mov rax, rdx
test rbx, rbx
je 0x18004e11d
cmp qword [rbx], r15
jne 0x18004e008
mov qword [rbx], rax
test rdx, rdx
je 0x18004e12d
mov rdx, qword [r15]
mov qword [rax], rdx
mov rdx, qword [r15 + 8]
and rdx, 0xfffffffffffffffe
mov r8, qword [rax + 8]
and r8d, 1
or r8, rdx
mov qword [rax + 8], r8
mov r8, qword [r15 + 8]
and r8d, 1
or r8, rdx
mov qword [rax + 8], r8
cmp qword [rcx], rax
jne 0x18004e140
mov qword [rcx], 0
jmp 0x18004db11
and r10d, 1
mov r12, qword [r9 + 8]
and r12, 0xfffffffffffffffe
or r12, r10
mov qword [r9 + 8], r12
and byte [rax + 8], 0xfe
mov r10, qword [r11 + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x18004e0ba
mov r12, qword [r9]
and r12, 0xfffffffffffffffe
and r10d, 1
or r10, r12
mov qword [r11 + 8], r10
mov qword [r9], r11
mov qword [rdx], r9
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
jne 0x18004dcf6
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
and r10, 0xfffffffffffffffe
mov qword [r9 + 8], r10
mov r9, qword [rdx]
test r9, r9
je 0x18004e0f3
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18004e10a
mov rax, rbx
mov rbx, r12
mov r12, qword [r10]
and r12, 0xfffffffffffffffe
and r11d, 1
or r11, r12
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r12, rbx
mov rbx, rax
jmp 0x18004dd23
mov r8, rax
and r8, 0xfffffffffffffffe
mov r9, qword [rbx + 8]
and r9d, 1
or r9, r8
mov qword [rbx + 8], r9
jmp 0x18004debe
or r11, 1
mov qword [rdx + 8], r11
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
xor eax, eax
jmp 0x18004dea9
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
xor edx, edx
jmp 0x18004dd3f
and r10d, 1
mov qword [r11 + 8], r10
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
and qword [rcx + 8], 1
jmp 0x18004db11
int3
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rbx, qword [r8 + 8]
and ebx, 1
or rbx, rcx
mov qword [r8 + 8], rbx
mov rcx, r9
mov rbx, qword [rax + 0x10]
mov r15, rbx
and r15, 0xfffffffffffff000
mov r12, qword [r9 + 0x10]
and r12, r10
xor r9d, r9d
cmp r15, r12
seta r9b
cmovb r9d, r11d
test r9d, r9d
jne 0x18004e1af
mov r15, rax
test bl, 0x10
jne 0x18004ec75
xor r9d, r9d
cmp r15, rcx
seta bl
jb 0x18004e1b9
mov r9b, bl
cmp r9d, 0xffffffff
jne 0x18004e23a
mov r9, qword [rcx]
test r9, r9
je 0x18004e818
mov rbx, qword [r9 + 8]
test bl, 1
jne 0x18004e25b
mov r15, qword [r9]
test r15, r15
je 0x18004e1e1
test byte [r15 + 8], 1
jne 0x18004e25b
or rbx, 1
mov qword [r9 + 8], rbx
mov r15, qword [rcx + 8]
mov rbx, r15
and rbx, 0xfffffffffffffffe
je 0x18004ec5a
mov r9, qword [rbx]
test r9, r9
je 0x18004e210
mov r12, qword [r9 + 8]
test r12b, 1
jne 0x18004e878
or r15, 1
mov qword [rcx + 8], r15
mov r9, qword [rbx]
or r9, 1
mov qword [rcx + 8], r9
mov qword [rbx], rcx
mov r9, rbx
cmp qword [r8], rcx
jne 0x18004e155
mov qword [r8], r9
jmp 0x18004e16a
test r9d, r9d
je 0x18004e263
mov rbx, qword [rcx + 8]
mov r9, rbx
and r9, 0xfffffffffffffffe
je 0x18004e276
mov r15, qword [r9]
test r15, r15
je 0x18004e276
test byte [r15 + 8], 1
je 0x18004e276
mov r8, rcx
jmp 0x18004e16a
mov rbx, qword [rcx + 8]
mov rdx, r8
cmp rbx, 1
jbe 0x18004e337
jmp 0x18004e243
mov r15, qword [rcx]
test r15, r15
je 0x18004ed44
mov r9, qword [r15 + 8]
test r9b, 1
je 0x18004e4e7
and r9, 0xfffffffffffffffe
je 0x18004ec7d
mov r12, qword [r9]
test r12, r12
je 0x18004e2ae
test byte [r12 + 8], 1
jne 0x18004e8f3
and ebx, 1
or rbx, r9
mov qword [r15 + 8], rbx
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18004ecea
mov rbx, qword [r9 + 8]
and rbx, 0xfffffffffffffffe
mov qword [rcx], rbx
mov rbx, rcx
and rbx, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rbx
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rbx, r15
and rbx, 0xfffffffffffffffe
je 0x18004ed04
mov r12, qword [rbx]
and r12, 0xfffffffffffffffe
and r15d, 1
or r15, r12
mov qword [rcx + 8], r15
mov qword [rbx], rcx
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rbx
mov qword [r9 + 8], r15
or byte [rcx + 8], 1
cmp qword [r8], rcx
jne 0x18004e5f8
mov qword [r8], r9
mov rcx, r8
jmp 0x18004e25b
mov rdx, qword [rcx]
test rdx, rdx
je 0x18004e378
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x58]
jne 0x18004e4d0
mov qword [r8], rdx
shr r13, 0xc
mov rcx, qword [rsp + 0xd0]
mov qword [rsi + 0xa0], rcx
xorps xmm0, xmm0
movups xmmword [rax], xmm0
cmp r13, rdi
jne 0x18004e447
test rbp, rbp
je 0x18004e3f7
cmp rdi, 1
adc rdi, 0
shl rdi, 3
lea rcx, [rdi + rdi*2]
lea rdx, [rbx + rbx*2]
lea rdx, [r11 + rdx*8]
add rdx, 0x30
xor r8d, r8d
test byte [rdx + r8], 8
je 0x18004e3e6
dec qword [r11 + 0x18]
dec qword [rsi + 0x88]
mov qword [rdx + r8], 3
add r8, 0x18
cmp rcx, r8
jne 0x18004e3d4
or qword [rax + 0x10], rbp
cmp qword [r11 + 0x18], 0
mov bpl, 1
jne 0x18004e411
cmp qword [rsp + 0x50], 0
jne 0x18004e52e
test r14, r14
je 0x18004ec17
test bpl, 1
je 0x18004ec17
mov rax, qword [rsp + 0x40]
add qword [rsi + 0x60], rax
mov rcx, qword [rsp + 0x48]
cmp dword [rcx + 0x28], 0
jne 0x180049c9b
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x180049c9b
lea r8, [rbx + r13]
sub r13, rdi
shl r13, 0xc
lea rcx, [rbx + rdi]
lea rdx, [rcx + rcx*2]
lea rcx, [r11 + rdx*8]
add rcx, 0x20
mov r9d, 0xfff
mov r10, qword [rcx + 0x10]
and r10, r9
or r10, r13
mov qword [rcx + 0x10], r10
lea r8, [r8 + r8*2]
and r9, qword [r11 + r8*8 + 0x18]
or r9, r13
mov qword [r11 + r8*8 + 0x18], r9
mov r15, qword [rsi + 0xa0]
mov qword [rsp + 0xd0], r15
mov qword [rsp + 0xd8], 0
test r15, r15
je 0x18004e615
lea r8, [r11 + rdx*8]
add r8, 0x30
lea rdx, [rsp + 0xd0]
xor r11d, r11d
mov r9, 0xfffffffffffff000
mov r10d, 0xffffffff
jmp 0x18004eea6
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x18004e38e
or r9, 1
mov qword [r15 + 8], r9
mov r9, qword [r15]
test r9, r9
je 0x18004e504
mov rbx, qword [r9 + 8]
test bl, 1
jne 0x18004e7a9
mov rbx, qword [rcx + 8]
mov r9, rbx
and r9, 0xfffffffffffffffe
je 0x18004ed57
mov r15, qword [r9]
and r15, 0xfffffffffffffffe
and ebx, 1
or rbx, r15
mov qword [rcx + 8], rbx
mov qword [r9], rcx
jmp 0x18004e323
mov rdi, qword [rsi + 0x68]
mov qword [rsp + 0xd8], rdi
mov qword [rsp + 0xe0], 0
xor ecx, ecx
cmp rdi, r11
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x18004e631
test eax, eax
je 0x18004e9cc
test rdi, rdi
je 0x18004ec9e
mov rcx, qword [rdi + 0x10]
xor r12d, r12d
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18004e593
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18004e593
test byte [rdx + 0x10], 1
jne 0x18004e654
mov rax, qword [rdi + 8]
test rax, rax
je 0x18004eda1
test byte [rax + 0x10], 1
jne 0x18004ea69
or rcx, 1
mov qword [rdi + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18004e5c8
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x18004eb12
or byte [rax + 0x10], 1
mov rcx, qword [rdi + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18004ede9
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [rdi + 0x10], rcx
mov qword [rax + 8], rdi
jmp 0x18004ea84
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rbx, qword [r8 + 8]
and ebx, 1
or rbx, rcx
mov qword [r8 + 8], rbx
mov rcx, r8
jmp 0x18004e25b
mov qword [rcx], 0
mov qword [rcx + 8], 1
lea rdx, [rsp + 0xd0]
jmp 0x18004f062
test rdi, rdi
je 0x18004e99c
mov rax, qword [rdi + 8]
test rax, rax
je 0x18004e99c
test byte [rax + 0x10], 1
je 0x18004e989
xor r12d, r12d
mov ebx, 0xffffffff
xor ebp, ebp
lea rcx, [rsp + 0xb8]
lea r8, [rsp + 0xb0]
mov r13, rdi
mov rdi, rax
xor eax, eax
cmp rdi, r11
setb al
cmova eax, ebx
cmp eax, 0xffffffff
jne 0x18004e6b5
test rdi, rdi
je 0x18004eb8a
mov rax, qword [rdi + 8]
test rax, rax
je 0x18004eb87
test byte [rax + 0x10], 1
jne 0x18004e66b
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18004ea15
test byte [rdx + 0x10], 1
jne 0x18004e66b
jmp 0x18004ea15
test eax, eax
jne 0x18004e6d1
test rdi, rdi
je 0x18004ed6a
mov rax, qword [rdi + 0x10]
mov r12, r13
cmp rax, 1
jbe 0x18004e734
jmp 0x18004e6de
test rdi, rdi
je 0x18004ec97
mov rax, qword [rdi + 0x10]
and rax, 0xfffffffffffffffe
je 0x18004e6f7
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18004e6f7
test byte [rdx + 0x10], 1
jne 0x18004e66b
mov r15, r8
mov rcx, r8
mov rdx, rdi
call fcn.180039460
mov rax, qword [rsp + 0xb0]
cmp qword [r13 + 8], rdi
jne 0x18004e9fb
jmp 0x18004eb09
mov rdi, r13
mov r11, qword [rsp + 0x38]
lea rcx, [rsp + 0xb8]
mov r8, r15
jmp 0x18004e66b
mov rbp, qword [rdi + 8]
test rbp, rbp
je 0x18004e982
mov rax, qword [rbp + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rdi + 8], rax
mov rax, rdi
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 0x10]
and ecx, 1
or rcx, rax
mov qword [rbp + 0x10], rcx
mov rcx, qword [rdi + 0x10]
and ecx, 1
or rcx, rax
mov qword [rbp + 0x10], rcx
or byte [rdi + 0x10], 1
and qword [rbp + 0x10], 1
cmp qword [r13 + 8], rdi
jne 0x18004e8dc
mov qword [r13 + 8], rbp
mov rax, qword [rsp + 0xd8]
mov qword [rsi + 0x68], rax
test r11, r11
je 0x18004ed71
xorps xmm0, xmm0
movups xmmword [r11 + 8], xmm0
jmp 0x18004e424
and rbx, 0xfffffffffffffffe
mov qword [r9 + 8], rbx
mov r9, qword [rcx]
test r9, r9
je 0x18004ed17
mov rbx, qword [r9 + 8]
and rbx, 0xfffffffffffffffe
mov qword [rcx], rbx
mov rbx, rcx
and rbx, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rbx
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rbx, r15
and rbx, 0xfffffffffffffffe
je 0x18004ed31
mov r12, qword [rbx]
and r12, 0xfffffffffffffffe
and r15d, 1
or r15, r12
mov qword [rcx + 8], r15
mov qword [rbx], rcx
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rbx
mov qword [r9 + 8], r15
jmp 0x18004e323
test rdx, rdx
je 0x18004ed84
cmp qword [rdx], rax
mov r11, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x58]
jne 0x18004ea4e
mov qword [rdx], rcx
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x18004ed97
mov qword [r8], 0
jmp 0x18004e38e
and r12, 0xfffffffffffffffe
mov qword [rbx], r12
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rbx
mov qword [r9 + 8], r15
and r9, 0xfffffffffffffffe
mov rbx, qword [rcx + 8]
and ebx, 1
lea r15, [rbx + r9]
mov qword [rcx + 8], r15
test r9, r9
je 0x18004ecc4
mov r15, qword [r9]
and r15, 0xfffffffffffffffe
or r15, rbx
mov qword [rcx + 8], r15
mov qword [r9], rcx
mov rbx, qword [rcx + 8]
and rbx, 0xfffffffffffffffe
je 0x18004e8d3
mov r15, qword [rbx + 8]
test r15b, 1
jne 0x18004ead2
mov qword [rcx + 8], rbx
jmp 0x18004e229
and rbp, 0xfffffffffffffffe
mov rax, qword [r13 + 0x10]
and eax, 1
or rax, rbp
mov qword [r13 + 0x10], rax
jmp 0x18004e787
mov qword [rsp + 0x68], r13
and ebx, 1
mov r13, qword [r9 + 8]
and r13, 0xfffffffffffffffe
or r13, rbx
mov qword [r9 + 8], r13
and byte [r12 + 8], 0xfe
mov rbx, qword [r15 + 8]
mov r9, rbx
and r9, 0xfffffffffffffffe
je 0x18004ecd7
mov r12, qword [r9]
and r12, 0xfffffffffffffffe
and ebx, 1
or rbx, r12
mov qword [r15 + 8], rbx
mov qword [r9], r15
mov qword [rcx], r9
mov rbx, qword [r9 + 8]
and rbx, 0xfffffffffffffffe
mov qword [rcx], rbx
mov rbx, rcx
and rbx, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rbx
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rbx, r15
and rbx, 0xfffffffffffffffe
mov r13, qword [rsp + 0x68]
jne 0x18004e2fb
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
xor ebp, ebp
jmp 0x18004e779
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18004e99c
test byte [rcx + 0x10], 1
jne 0x18004e651
lea r15, [rsp + 0xc0]
mov rcx, r15
mov rdx, rdi
call fcn.180039300
mov rax, qword [r15]
test rax, rax
je 0x18004edd6
and byte [rax + 0x10], 0xfe
xor r12d, r12d
mov r11, qword [rsp + 0x38]
jmp 0x18004ea84
test rdi, rdi
je 0x18004e9ec
mov rcx, qword [rdi + 0x10]
cmp rcx, 1
ja 0x18004ec0a
mov rax, qword [rdi + 8]
test rax, rax
jne 0x18004ea95
xor eax, eax
mov qword [rsp + 0xd8], rax
jmp 0x18004e787
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [r13 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r13 + 0x10], rdx
jmp 0x18004e71c
mov r15, rcx
mov rdx, rdi
call fcn.180039300
mov rax, qword [rsp + 0xb8]
cmp qword [r13 + 8], rdi
jne 0x18004edbc
mov qword [r13 + 8], rax
mov rdi, rax
mov r11, qword [rsp + 0x38]
mov rcx, r15
lea r8, [rsp + 0xb0]
jmp 0x18004e671
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
jmp 0x18004e837
lea r15, [rsp + 0xc0]
mov rcx, r15
mov rdx, rdi
call fcn.180039460
mov r11, qword [rsp + 0x38]
mov rax, qword [r15]
lea rdi, [rsp + 0xd0]
mov qword [rdi + 8], rax
jmp 0x18004e654
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rdi + 8], rcx
mov rcx, rdi
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [rdi + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x18004e9ee
and r15, 0xfffffffffffffffe
mov qword [rbx + 8], r15
mov rbx, qword [rcx + 8]
mov r15, rbx
or r15, 1
mov qword [rcx + 8], r15
and rbx, 0xfffffffffffffffe
je 0x18004ecb1
mov r15, qword [rbx]
or r15, 1
mov qword [rcx + 8], r15
mov qword [rbx], rcx
mov qword [r9], rbx
jmp 0x18004e229
mov qword [r13 + 8], rax
jmp 0x18004e71c
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [rdi + 8]
test rax, rax
je 0x18004edfc
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rdi + 8], rcx
mov rcx, rdi
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rdi + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x18004ee17
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [rdi + 0x10], rdx
mov qword [rcx + 8], rdi
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov r11, qword [rsp + 0x38]
jmp 0x18004ea84
mov rbp, rdi
test r12, r12
je 0x18004ee2a
mov rax, qword [rsp + 0x38]
cmp qword [r12 + 8], rax
jne 0x18004ec3e
mov qword [r12 + 8], rbp
cmp qword [rsp + 0x38], 0
je 0x18004ee4a
test rdi, rdi
je 0x18004ee5e
mov rdx, qword [rsp + 0x38]
mov rax, qword [rdx + 8]
mov qword [rbp + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [rbp + 0x10]
and eax, 1
or rax, rcx
mov qword [rbp + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov qword [rbp + 0x10], rax
cmp qword [r13 + 8], rbp
jne 0x18004ee71
mov qword [r13 + 8], 0
mov r11, qword [rsp + 0x38]
jmp 0x18004e787
lea r12, [rsp + 0xd0]
jmp 0x18004e577
mov rcx, qword [rsp + 0x48]
cmp dword [rcx + 0x28], 0
je 0x18004ec36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0xc
xor r14d, r14d
jmp 0x180049ca4
xor r14d, r14d
jmp 0x18004e43c
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r12 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r12 + 0x10], rcx
jmp 0x18004eba8
or r15, 1
mov qword [rcx + 8], r15
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
xor r15d, r15d
jmp 0x18004e1a1
and ebx, 1
mov qword [r15 + 8], rbx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
xor edi, edi
jmp 0x18004e6f7
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
xor edi, edi
jmp 0x18004e779
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
and qword [r8 + 8], 1
jmp 0x18004e38e
or rcx, 1
mov qword [rdi + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [r13 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r13 + 0x10], rdx
jmp 0x18004ea36
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
mov qword [rdi + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test rdi, rdi
je 0x18004ee5e
mov qword [rbp + 8], 0
xor eax, eax
jmp 0x18004ebea
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
and qword [r13 + 0x10], 1
jmp 0x18004ec00
test bl, 0x10
mov ebx, 0
cmove rbx, rcx
xor ebp, ebp
cmp rbx, rdx
seta bl
jae 0x18004ef49
mov r15, qword [rdx]
mov ebp, 0xffffffff
test r15, r15
je 0x18004eff2
mov rbx, r11
mov r11, rdx
mov rdx, qword [r15]
test rdx, rdx
je 0x18004eecd
mov r12, qword [rdx + 8]
test r12b, 1
je 0x18004eecd
mov r13, qword [rdx]
test r13, r13
je 0x18004eecd
test byte [r13 + 8], 1
jne 0x18004ef11
mov rdx, r15
mov rbx, qword [r8]
mov r15, rbx
and r15, 0xfffffffffffff000
mov r12, qword [rdx + 0x10]
and r12, r9
xor ebp, ebp
cmp r15, r12
seta bpl
cmovb ebp, r10d
test ebp, ebp
je 0x18004ee7b
cmp ebp, 0xffffffff
je 0x18004ee95
mov ebp, 1
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
test r15, r15
jne 0x18004eea6
jmp 0x18004eff2
and r12, 0xfffffffffffffffe
mov qword [r15], r12
mov r13, r15
and r13, 0xfffffffffffffffe
mov r12, qword [rdx]
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, r13
mov qword [rdx + 8], rbp
test r12, r12
je 0x18004f133
and byte [r12 + 8], 0xfe
cmp qword [r11], r15
jne 0x18004ef4e
mov qword [r11], rdx
jmp 0x18004eed0
mov bpl, bl
jmp 0x18004eeff
and rdx, 0xfffffffffffffffe
mov r15, qword [r11 + 8]
and r15d, 1
lea r12, [r15 + rdx]
mov qword [r11 + 8], r12
test rdx, rdx
je 0x18004f120
mov r12, qword [rdx]
and r12, 0xfffffffffffffffe
or r12, r15
mov qword [r11 + 8], r12
mov qword [rdx], r11
mov r15, qword [r11 + 8]
and r15d, 1
mov r12, qword [rdx + 8]
and r12, 0xfffffffffffffffe
or r12, r15
mov qword [rdx + 8], r12
or byte [r11 + 8], 1
test rbx, rbx
je 0x18004f10d
cmp qword [rbx], r11
je 0x18004f0c3
jmp 0x18004f0cb
mov r11, qword [r8]
mov r12, r11
and r12, r9
mov r13, qword [rdx + 0x10]
and r13, r9
xor r15d, r15d
cmp r12, r13
seta r15b
cmovb r15d, r10d
test r15d, r15d
jne 0x18004f0b2
jmp 0x18004f0df
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
mov r11, rdx
test r15, r15
jne 0x18004eeac
mov r11, rbx
mov qword [rcx], 0
mov qword [rcx + 8], 1
cmp ebp, 1
jne 0x18004f058
mov r8, qword [rdx + 8]
and r8d, 1
mov r9, r8
or r9, rcx
mov qword [rdx + 8], r9
mov r9, qword [rcx]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rdx + 8], r9
mov qword [rcx], rdx
mov r8, qword [rdx + 8]
and r8d, 1
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rcx + 8], r9
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x18004f08b
mov qword [r11], rcx
mov rbp, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
jmp 0x18004f065
mov rbp, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
mov qword [rdx], rcx
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x18004f146
and byte [rcx + 8], 0xfe
mov qword [rsi + 0xa0], rcx
mov r11, qword [rsp + 0x38]
jmp 0x18004e3b0
mov r8, qword [r11 + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
cmp rdx, r9
mov rbp, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
jne 0x18004f065
and r8d, 1
or r8, rcx
mov qword [r11 + 8], r8
jmp 0x18004f065
mov ebp, 1
cmp r15d, 0xffffffff
jne 0x18004efdb
jmp 0x18004f100
mov qword [rbx], rdx
jmp 0x18004efaf
mov r11, qword [rbx + 8]
and r11d, 1
or r11, rdx
mov qword [rbx + 8], r11
jmp 0x18004efaf
test r11b, 0x10
mov r11d, 0
cmove r11, rcx
xor ebp, ebp
cmp r11, rdx
seta r11b
jb 0x18004f100
mov bpl, r11b
jmp 0x18004efdb
mov r15, qword [rdx]
mov ebp, 0xffffffff
jmp 0x18004efe3
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004e14a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db4b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18004db40