Function at 0x180022940
Capabilities:
Encode data using base64
Generate random numbers via rtlgenrandom
Get system information on windows
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x198
movaps xmmword [rsp + 0x180], xmm6
mov rsi, rdx
mov rax, qword [0x1800cb028]
xor rax, rsp
mov qword [rsp + 0x178], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0xc0], xmm0
mov eax, dword [0x1800cb774]
mov r8d, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rdx, qword [rdx + r8*8]
mov edx, dword [rdx + 4]
mov qword [rsp + 0x68], rcx
test rcx, rcx
jne 0x180022b72
cmp eax, edx
jg 0x180025f69
cmp rsi, 0x1000
ja 0x1800229d9
cmp byte [0x1800cb770], 0
je 0x1800229d9
mov rax, qword [0x1800cb648]
mov eax, dword [rax + 0x14810]
cmp eax, 1
je 0x180026ab3
cmp byte [rsp + 0xc8], 0
jne 0x180026a92
cmp dword [0x1800cb718], 0
je 0x1800265c7
cmp rsi, 1
mov r12, rsi
adc r12, 0
cmp r12, 0x1f0
ja 0x180022c20
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x180026c8f
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rbx, qword [rax + 0x10]
test rbx, rbx
je 0x180025a9c
cmp r12, 9
jb 0x180022d9f
add r12, 0xf
mov rbp, r12
and rbp, 0xfffffffffffffff0
shr r12, 4
dec r12
lea r13, [r12 + r12*2]
shl r13, 4
cmp byte [rbx + 0x78], 0
je 0x180022a87
cmp qword [rbx + 0x80], 0
je 0x180026506
lea r14, [rbx + r13]
add r14, 0xa8
lea r15, [rbx + 0x18]
cmp dword [rbx + 0x40], 0
jne 0x180022aa5
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r12, qword [r14]
test r12, r12
je 0x180022c51
cmp dword [r12 + 0xc], 0
je 0x180022c51
mov eax, dword [r12 + 8]
mov edx, dword [r12 + rax*4 + 0x10]
test edx, edx
je 0x180022cc9
mov r8, qword [rbx + 0x80]
test r8, r8
jne 0x180022bda
tzcnt r8d, edx
mov r14d, eax
shl r14d, 5
or r14d, r8d
mov ecx, dword [rbx + r13 + 0xc8]
imul r14, qword [rbx + r13 + 0xb8]
add rcx, r12
add r14, rcx
btc edx, r8d
mov dword [r12 + rax*4 + 0x10], edx
dec dword [r12 + 0xc]
test r14, r14
je 0x180023eff
add qword [rbx + 0x58], rbp
xor edi, edi
cmp dword [rbx + 0x40], 0
jne 0x180022b31
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test dil, dil
jne 0x1800269b1
test r14, r14
je 0x1800269b1
mov rcx, qword [rsp + 0x178]
xor rcx, rsp
call fcn.180062020
mov rax, r14
movaps xmm6, xmmword [rsp + 0x180]
add rsp, 0x198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp eax, edx
jg 0x18002626e
cmp byte [0x1800cb770], 0
je 0x180022ba3
mov rax, qword [0x1800cb640]
mov rcx, qword [rsp + 0x68]
cmp qword [rax + 8], rcx
jbe 0x180022ba3
mov rax, qword [rax]
cmp rax, qword [rsp + 0x68]
jbe 0x180026cb3
cmp byte [rsp + 0xc8], 0
jne 0x180026c99
mov qword [rsp + 0xf0], 0
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0x68]
mov r8, rsi
call fcn.180028560
mov r14, rax
jmp 0x180022b43
mov r9, qword [r8]
mov rcx, qword [r8 + 8]
mov qword [r8], rcx
mov r10, r9
shl r10, 0x17
xor r10, r9
mov r9, rcx
shr r9, 0x1a
xor r9, rcx
xor r9, r10
shr r10, 0x11
xor r10, r9
add ecx, r10d
mov r9d, edx
ror r9d, cl
mov qword [r8 + 8], r10
tzcnt r8d, r9d
add r8d, ecx
and r8d, 0x1f
jmp 0x180022ae4
mov rbx, qword [0x1800cb568]
cmp r12, 0xf01
jae 0x180022e21
add r12, 0xff
mov ebp, r12d
and ebp, 0x1f00
shr r12, 8
add r12, 0x1d
jmp 0x180022a6b
mov rdx, qword [rbx + r13 + 0xb0]
test rdx, rdx
je 0x1800236c6
lea r12, [rbx + r13]
add r12, 0xb0
mov rax, rdx
mov rdi, rax
mov rax, qword [rax]
test rax, rax
jne 0x180022c70
mov qword [rsp + 0xf0], rdx
mov qword [rsp + 0xf8], 0
xor ecx, ecx
cmp rdx, rdi
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x180022df2
mov r9, qword [rdx]
test r9, r9
je 0x180026e0c
mov rax, qword [r9 + 8]
test al, 1
je 0x180022d30
xor eax, eax
mov r8d, 0xffffffff
jmp 0x180027f55
mov ecx, dword [rbx + r13 + 0xc4]
inc eax
cmp eax, ecx
jae 0x180023efa
mov edx, eax
mov r8d, dword [r12 + rdx*4 + 0x10]
test r8d, r8d
je 0x180022cd1
mov r9, qword [rbx + 0x80]
test r9, r9
jne 0x180022dac
tzcnt r9d, r8d
mov r14d, eax
shl r14d, 5
or r14d, r9d
mov ecx, dword [rbx + r13 + 0xc8]
add rcx, r12
imul r14, qword [rbx + r13 + 0xb8]
add r14, rcx
btc r8d, r9d
mov dword [r12 + rdx*4 + 0x10], r8d
mov dword [r12 + 8], eax
jmp 0x180022b0e
mov rcx, qword [r9]
test rcx, rcx
je 0x180022d42
test byte [rcx + 8], 1
jne 0x180022cbc
or rax, 1
mov qword [r9 + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002688a
mov r9, qword [rax]
test r9, r9
je 0x180022d71
mov r8, qword [r9 + 8]
test r8b, 1
jne 0x180023d6a
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov r9, rax
and byte [r9 + 8], 0xfe
lea rdx, [rsp + 0xf0]
mov qword [rdx], r9
jmp 0x180022cbc
mov ebp, 0x10
xor r12d, r12d
jmp 0x180022a6b
mov r10, qword [r9]
mov rcx, qword [r9 + 8]
mov qword [r9], rcx
mov r11, r10
shl r11, 0x17
xor r11, r10
mov r10, rcx
shr r10, 0x1a
xor r10, rcx
xor r10, r11
shr r11, 0x11
xor r11, r10
add ecx, r11d
mov r10d, r8d
ror r10d, cl
mov qword [r9 + 8], r11
tzcnt r9d, r10d
add r9d, ecx
and r9d, 0x1f
jmp 0x180022cfc
test eax, eax
jne 0x180023428
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x1800251c5
mov rax, qword [rdx]
test rax, rax
jne 0x1800255e5
mov qword [rsp + 0xf0], rax
jmp 0x1800280ff
cmp r12, 0xfc000
ja 0x180025ae2
add r12, 0xfff
lea r14, [rbx + 0x18]
cmp dword [rbx + 0x40], 0
jne 0x180022e48
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbp, r12
and rbp, 0xfffffffffffff000
mov rcx, qword [rbx + 0xa0]
test rcx, rcx
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x80], r14
je 0x180023cfa
xor eax, eax
mov rdx, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r9, rcx
mov r11, qword [r9 + 0x10]
and r11, rdx
xor r10d, r10d
cmp rbp, r11
seta r10b
cmovb r10d, r8d
lea r11d, [r10 + 1]
cmp r11d, 2
jae 0x180022ead
mov rax, r9
mov r9, qword [r9]
test r9, r9
jne 0x180022e81
jmp 0x180022ec1
cmp r10d, 1
jne 0x1800270a5
mov r9, qword [r9 + 8]
and r9, 0xfffffffffffffffe
jmp 0x180022ea6
test rax, rax
je 0x180027199
mov r8, rax
and r8, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r14, rdx
and r14, 0xfffffffffffffff0
shl r14, 8
add r14, r8
mov r11, r14
and r11, 0xfffffffffff00000
mov rax, qword [r11 + 0x18]
mov qword [rsp + 0x60], rax
mov eax, r14d
shr eax, 0xc
movzx r9d, al
lea rax, [r9*8]
lea rdx, [rax + rax*2]
mov r10, qword [r11 + rdx + 0x30]
shr r12, 0xc
test rbp, rbp
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r9
mov qword [rsp + 0x58], r10
je 0x1800230cc
cmp r12, 1
mov rcx, r12
adc rcx, 0
lea rax, [r9 + r9*2]
lea rbp, [r11 + rax*8]
add rbp, 0x30
xor r15d, r15d
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
xor edi, edi
lea r13, [rdi + r9]
lea rax, [r13*2]
add rax, r13
test byte [r11 + rax*8 + 0x30], 0x60
jne 0x180022f94
inc rdi
cmp rdi, r12
setae r15b
add rbp, 0x18
cmp rdi, rcx
jne 0x180022f65
jmp 0x1800230c0
cmp rdi, r12
jae 0x180024a2a
mov qword [rsp + 0x88], rcx
mov rax, rbp
xor ecx, ecx
mov qword [rsp + 0x50], rcx
mov rcx, qword [rax]
test cl, 0x60
je 0x180022fdb
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
mov r10, qword [rsp + 0x50]
lea rcx, [rdi + r10]
inc rcx
inc r10
mov qword [rsp + 0x50], r10
add rax, 0x18
cmp rcx, r12
jb 0x180022faf
mov rcx, qword [rsp + 0x50]
shl rcx, 0xc
mov qword [rsp + 0x78], rdx
jne 0x180023e1b
jmp 0x180023f5e
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0xa8], rcx
call r8
mov dword [rsp + 0x90], eax
mov rcx, r13
mov rdx, qword [rsp + 0x70]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x1800268a5
mov rax, qword [rsp + 0x70]
add r13, rax
mov rcx, qword [rsp + 0xa8]
sub rcx, rax
mov eax, 0x100000
cmp rcx, rax
mov edx, 0x100000
cmovb rdx, rcx
test rcx, rcx
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
je 0x180023e3e
jmp 0x180022ff4
mov r13, qword [rsp + 0x50]
test r13, r13
je 0x18002309b
test al, al
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
lea rdx, [r13*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [rbp + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x18002308d
test al, al
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x88]
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
je 0x1800233ef
add qword [rbx + 0x50], r13
jmp 0x180022f7c
mov rcx, qword [rbx + 0xa0]
mov rbp, qword [rsp + 0x38]
lea rax, [r11 + rdx]
add rax, 0x20
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], 0
mov rdx, qword [rax + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
je 0x180023b2c
cmp r8d, 0xffffffff
jne 0x18002374b
mov r9, qword [rcx]
test r9, r9
je 0x180027469
mov rdx, qword [r9 + 8]
test dl, 1
je 0x180023a1c
xor edx, edx
mov r10, 0xfffffffffffff000
mov r11d, 0xffffffff
mov r8, rcx
mov rcx, r9
mov rdi, qword [rax + 0x10]
mov r15, rdi
and r15, r10
mov r13, qword [r9 + 0x10]
and r13, r10
xor r9d, r9d
cmp r15, r13
seta r9b
cmovb r9d, r11d
test r9d, r9d
jne 0x180023192
test dil, 0x10
mov edi, 0
cmove rdi, rax
xor r9d, r9d
cmp rdi, rcx
seta dil
jb 0x180023198
mov r9b, dil
cmp r9d, 0xffffffff
jne 0x180023216
mov r9, qword [rcx]
test r9, r9
je 0x180024892
mov rdi, qword [r9 + 8]
test dil, 1
jne 0x18002314c
mov r15, qword [r9]
test r15, r15
je 0x1800231bd
test byte [r15 + 8], 1
jne 0x18002314c
or rdi, 1
mov qword [r9 + 8], rdi
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
je 0x18002686f
mov r9, qword [rdi]
test r9, r9
je 0x1800231ec
mov r13, qword [r9 + 8]
test r13b, 1
jne 0x1800248f2
or r15, 1
mov qword [rcx + 8], r15
mov r9, qword [rdi]
or r9, 1
mov qword [rcx + 8], r9
mov qword [rdi], rcx
mov r9, rdi
cmp qword [r8], rcx
jne 0x1800274fd
mov qword [r8], r9
jmp 0x18002314f
test r9d, r9d
je 0x1800232ff
mov rdi, qword [rcx + 8]
mov r9, rdi
and r9, 0xfffffffffffffffe
je 0x18002323f
mov r15, qword [r9]
test r15, r15
je 0x18002323f
test byte [r15 + 8], 1
jne 0x18002314c
mov r15, qword [rcx]
test r15, r15
je 0x180027052
mov r9, qword [r15 + 8]
test r9b, 1
je 0x180023b64
and r9, 0xfffffffffffffffe
je 0x1800268c6
mov r13, qword [r9]
test r13, r13
je 0x180023276
test byte [r13 + 8], 1
jne 0x180024a77
and edi, 1
or rdi, r9
mov qword [r15 + 8], rdi
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x180027012
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
mov qword [rcx], rdi
mov rdi, rcx
and rdi, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
je 0x18002702c
mov r13, qword [rdi]
and r13, 0xfffffffffffffffe
and r15d, 1
or r15, r13
mov qword [rcx + 8], r15
mov qword [rdi], rcx
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
or byte [rcx + 8], 1
cmp qword [r8], rcx
jne 0x180023dfe
mov qword [r8], r9
mov rcx, r8
jmp 0x18002314c
mov rdi, qword [rcx + 8]
mov rdx, r8
cmp rdi, 1
ja 0x180023223
mov rdx, qword [rcx]
test rdx, rdx
je 0x180023351
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x40]
jne 0x180023b4d
mov qword [r8], rdx
mov r9, qword [rsp + 0x48]
mov r10, qword [rsp + 0x58]
shr r10, 0xc
mov rcx, qword [rsp + 0xf0]
mov qword [rbx + 0xa0], rcx
xorps xmm0, xmm0
movups xmmword [rax], xmm0
cmp r10, r12
jne 0x180023460
test rbp, rbp
je 0x1800233d5
cmp r12, 1
adc r12, 0
shl r12, 3
lea rcx, [r12 + r12*2]
lea rdx, [r9 + r9*2]
lea rdx, [r11 + rdx*8]
add rdx, 0x30
xor r8d, r8d
test byte [rdx + r8], 8
je 0x1800233c4
dec qword [r11 + 0x18]
dec qword [rbx + 0x88]
mov qword [rdx + r8], 3
add r8, 0x18
cmp rcx, r8
jne 0x1800233b2
or qword [rax + 0x10], rbp
cmp qword [r11 + 0x18], 0
mov r15b, 1
jne 0x1800233ef
cmp qword [rsp + 0x60], 0
jne 0x180023bac
test r14, r14
je 0x1800269a3
test r15b, 1
je 0x1800269a3
mov rax, qword [rsp + 0x38]
add qword [rbx + 0x60], rax
mov rcx, qword [rsp + 0x80]
cmp dword [rcx + 0x28], 0
jne 0x180022b3a
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x180022b3a
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x180023a8c
mov rcx, qword [r9]
test rcx, rcx
je 0x180023a8c
test byte [rcx + 8], 1
je 0x180023a8c
mov rax, qword [rsp + 0x38]
jmp 0x180022cbe
lea r8, [r9 + r10]
sub r10, r12
shl r10, 0xc
lea rcx, [r9 + r12]
lea rdx, [rcx + rcx*2]
lea rcx, [r11 + rdx*8]
add rcx, 0x20
mov r9d, 0xfff
mov rdi, r10
mov r10, qword [rcx + 0x10]
and r10, r9
or r10, rdi
mov qword [rcx + 0x10], r10
lea r8, [r8 + r8*2]
and r9, qword [r11 + r8*8 + 0x18]
or r9, rdi
mov qword [r11 + r8*8 + 0x18], r9
mov r15, qword [rbx + 0xa0]
mov qword [rsp + 0xf0], r15
mov qword [rsp + 0xf8], 0
test r15, r15
je 0x18002478a
lea r8, [r11 + rdx*8]
add r8, 0x30
lea rdx, [rsp + 0xf0]
xor r11d, r11d
mov r9, 0xfffffffffffff000
mov rdi, r11
mov r11, rdx
mov rdx, qword [r15]
test rdx, rdx
je 0x180023507
mov r13, qword [rdx + 8]
test r13b, 1
je 0x180023507
mov rbp, qword [rdx]
test rbp, rbp
je 0x180023507
test byte [rbp + 8], 1
jne 0x180023575
mov rdx, r15
mov rdi, qword [r8]
mov r10, rdi
and r10, r9
mov r15, qword [rdx + 0x10]
and r15, r9
xor ebp, ebp
cmp r10, r15
seta bpl
mov r10d, 0xffffffff
cmovb ebp, r10d
test ebp, ebp
je 0x180023548
cmp ebp, 0xffffffff
jne 0x180023566
mov r15, qword [rdx]
mov ebp, 0xffffffff
test r15, r15
jne 0x1800234e1
jmp 0x18002365a
test dil, 0x10
mov r10d, 0
cmove r10, rcx
xor ebp, ebp
cmp r10, rdx
seta dil
jb 0x180023536
mov bpl, dil
jmp 0x18002356b
mov ebp, 1
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
jmp 0x18002353e
and r13, 0xfffffffffffffffe
mov qword [r15], r13
mov rbp, r15
and rbp, 0xfffffffffffffffe
mov r13, qword [rdx]
mov r10, qword [rdx + 8]
and r10d, 1
or r10, rbp
mov qword [rdx + 8], r10
test r13, r13
je 0x180026f00
and byte [r13 + 8], 0xfe
cmp qword [r11], r15
jne 0x1800235b0
mov qword [r11], rdx
jmp 0x18002350a
and rdx, 0xfffffffffffffffe
mov r15, qword [r11 + 8]
and r15d, 1
lea r10, [r15 + rdx]
mov qword [r11 + 8], r10
test rdx, rdx
je 0x180026f13
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
or r10, r15
mov qword [r11 + 8], r10
mov qword [rdx], r11
mov r10, qword [r11 + 8]
and r10d, 1
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
or r15, r10
mov qword [rdx + 8], r15
or byte [r11 + 8], 1
test rdi, rdi
je 0x180026955
cmp qword [rdi], r11
je 0x1800247ce
jmp 0x180024a49
mov r11, qword [r8]
mov r10, r11
and r10, r9
mov r13, qword [rdx + 0x10]
and r13, r9
xor r15d, r15d
cmp r10, r13
seta r15b
mov r10d, 0xffffffff
cmovb r15d, r10d
test r15d, r15d
jne 0x180023f65
jmp 0x180024fcb
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
mov r11, rdx
test r15, r15
jne 0x1800234e7
mov r11, rdi
mov qword [rcx], 0
mov qword [rcx + 8], 1
cmp ebp, 1
jne 0x180023af9
mov r8, qword [rdx + 8]
and r8d, 1
mov r9, r8
or r9, rcx
mov qword [rdx + 8], r9
mov r9, qword [rcx]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rdx + 8], r9
mov qword [rcx], rdx
mov r8, qword [rdx + 8]
and r8d, 1
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rcx + 8], r9
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x180023f30
mov qword [r11], rcx
mov rbp, qword [rsp + 0x38]
jmp 0x180023b01
movzx eax, byte [rbx + r13 + 0xd2]
mov qword [rsp + 0x38], rax
lea rdi, [rbx + 0xa0]
mov rcx, qword [rbx + 0xa0]
test rcx, rcx
mov qword [rsp + 0x40], rdi
je 0x1800249d8
mov rdx, qword [rsp + 0x38]
shl rdx, 0xc
xor eax, eax
mov r8, 0xfffffffffffff000
mov r9d, 0xffffffff
mov r11, qword [rcx + 0x10]
and r11, r8
xor r10d, r10d
cmp rdx, r11
seta r10b
cmovb r10d, r9d
lea r11d, [r10 + 1]
cmp r11d, 2
jae 0x180023737
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x180023708
jmp 0x1800237e9
cmp r10d, 1
jne 0x180027461
mov rcx, qword [rcx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18002372d
test r8d, r8d
je 0x180023e4f
mov r8, qword [rcx + 8]
xor edx, edx
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x180023776
mov r10, qword [r9]
test r10, r10
je 0x180023776
test byte [r10 + 8], 1
jne 0x18002313f
mov r10, qword [rcx]
test r10, r10
je 0x1800269e5
mov r9, qword [r10 + 8]
test r9b, 1
jne 0x180024ff8
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [r10]
test r8, r8
je 0x1800237ae
mov r9, qword [r8 + 8]
test r9b, 1
jne 0x18002578c
or byte [r10 + 8], 1
mov r8, qword [rcx + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x1800276b5
mov r10, qword [r9]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [r9], rcx
lea rcx, [rsp + 0xf0]
mov qword [rcx], r9
jmp 0x18002313f
test rax, rax
je 0x1800249d8
mov rcx, rax
and rcx, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r12, rdx
and r12, 0xfffffffffffffff0
shl r12, 8
add r12, rcx
mov r9, r12
and r9, 0xfffffffffff00000
mov rax, qword [r9 + 0x18]
mov qword [rsp + 0xa8], rax
mov eax, r12d
shr eax, 0xc
movzx ecx, al
lea rax, [rcx*8]
lea rax, [rax + rax*2]
mov qword [rsp + 0x60], rax
mov rax, qword [r9 + rax + 0x30]
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x38]
test rdx, rdx
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x80], rcx
je 0x180023f79
lea rax, [rcx + rcx*2]
lea r8, [r9 + rax*8]
add r8, 0x30
xor r10d, r10d
xor edi, edi
lea r11, [rdi + rcx]
lea rax, [r11 + r11*2]
test byte [r9 + rax*8 + 0x30], 0x60
jne 0x1800238ab
inc rdi
add r8, 0x18
cmp rdi, rdx
setae r10b
jne 0x180023886
jmp 0x180023f7c
mov qword [rsp + 0x78], r11
mov rax, r8
xor ecx, ecx
mov qword [rsp + 0x48], rcx
mov rcx, qword [rax]
test cl, 0x60
je 0x1800238e6
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
mov r11, qword [rsp + 0x48]
lea rcx, [rdi + r11]
inc rcx
inc r11
mov qword [rsp + 0x48], r11
add rax, 0x18
cmp rcx, rdx
jb 0x1800238ba
mov rdx, qword [rsp + 0x48]
shl rdx, 0xc
mov qword [rsp + 0x90], r8
je 0x180024ff0
mov qword [rsp + 0x58], r10
mov rcx, qword [rsp + 0x78]
shl rcx, 0xc
mov eax, ecx
and eax, 0xff000
mov r8d, 0x100000
sub r8, rax
cmp r8, rdx
cmovae r8, rdx
add rcx, r9
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x88], r8
mov qword [rsp + 0xa0], rdx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x98], eax
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x88]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x18002691c
mov rcx, qword [rsp + 0x78]
mov rax, qword [rsp + 0x88]
add rcx, rax
mov rdx, qword [rsp + 0xa0]
sub rdx, rax
mov eax, 0x100000
cmp rdx, rax
mov r8d, 0x100000
cmovb r8, rdx
test rdx, rdx
jne 0x180023925
mov r11b, 1
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
cmp qword [rsp + 0x48], 0
mov rax, qword [rsp + 0x90]
je 0x1800239f0
test r11b, r11b
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
mov rdx, qword [rsp + 0x48]
lea rdx, [rdx*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [rax + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x1800239e3
test r11b, r11b
je 0x1800242c7
mov rax, qword [rsp + 0x48]
add qword [rbx + 0x50], rax
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
jmp 0x180023896
mov r8, qword [r9]
test r8, r8
je 0x180023a2f
test byte [r8 + 8], 1
jne 0x18002313d
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x180026901
mov r9, qword [rdx]
test r9, r9
je 0x180023a5e
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x1800257ff
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xf0]
mov qword [rcx], r9
jmp 0x18002313d
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002752a
test byte [rcx + 8], 1
jne 0x180023f13
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x180023ac0
mov r8, qword [rax + 8]
test r8b, 1
jne 0x180024f5f
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x1800275f0
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [r9], rdx
lea rdx, [rsp + 0xf0]
mov qword [rdx], r9
jmp 0x180023456
mov rbp, qword [rsp + 0x38]
mov qword [rdx], rcx
mov r9, qword [rsp + 0x48]
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x1800274a0
and byte [rcx + 8], 0xfe
mov qword [rbx + 0xa0], rcx
mov r11, qword [rsp + 0x40]
jmp 0x18002338e
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x180023124
mov r8b, dl
jmp 0x18002311a
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x180023362
or r9, 1
mov qword [r15 + 8], r9
mov r9, qword [r15]
test r9, r9
je 0x180023b82
mov rdi, qword [r9 + 8]
test dil, 1
jne 0x18002481e
mov rdi, qword [rcx + 8]
mov r9, rdi
and r9, 0xfffffffffffffffe
je 0x180027065
mov r15, qword [r9]
and r15, 0xfffffffffffffffe
and edi, 1
or rdi, r15
mov qword [rcx + 8], rdi
mov qword [r9], rcx
jmp 0x1800232eb
mov r12, qword [rbx + 0x68]
mov qword [rsp + 0xf8], r12
mov qword [rsp + 0x100], 0
xor ecx, ecx
cmp r12, r11
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x1800247a6
test eax, eax
je 0x18002546c
test r12, r12
je 0x180026a1b
mov rcx, qword [r12 + 0x10]
xor ebp, ebp
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180025630
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x180025630
test byte [rdx + 0x10], 1
je 0x180025630
mov r11, qword [rsp + 0x40]
mov r15d, 0xffffffff
xor r13d, r13d
lea rcx, [rsp + 0xe0]
lea r8, [rsp + 0xd8]
mov rdi, r12
mov r12, rax
xor eax, eax
cmp r12, r11
setb al
cmova eax, r15d
cmp eax, 0xffffffff
jne 0x180023c83
test r12, r12
je 0x180026134
mov rax, qword [r12 + 8]
test rax, rax
je 0x180026131
test byte [rax + 0x10], 1
jne 0x180023c37
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18002588e
test byte [rdx + 0x10], 1
jne 0x180023c37
jmp 0x18002588e
test eax, eax
jne 0x180023ca4
test r12, r12
je 0x1800275a8
mov rax, qword [r12 + 0x10]
mov rbp, rdi
cmp rax, 1
jbe 0x180023e80
jmp 0x180023cb2
test r12, r12
je 0x180026a13
mov rax, qword [r12 + 0x10]
and rax, 0xfffffffffffffffe
je 0x180023ccb
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x180023ccb
test byte [rdx + 0x10], 1
jne 0x180023c37
mov rcx, r8
mov rdx, r12
call fcn.180039460
mov rax, qword [rsp + 0xd8]
cmp qword [rdi + 8], r12
jne 0x180025874
jmp 0x180025bf3
mov r12, rdi
mov r11, qword [rsp + 0x40]
jmp 0x180023c27
mov rcx, qword [rbx + 0x70]
test rcx, rcx
jne 0x180024723
lea r13, [0x1800cb680]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb6a8]
test rax, rax
je 0x180025095
xor ebp, ebp
mov ecx, 0xffffffff
mov rdi, qword [rax + 0x28]
xor edx, edx
cmp rdi, 0x100000
setb dl
cmova edx, ecx
cmp edx, 0xffffffff
jne 0x180023d56
mov rbp, rax
mov rax, qword [rax]
test rax, rax
jne 0x180023d2e
jmp 0x180024b36
test edx, edx
jne 0x18002777e
cmp qword [rax + 0x20], 0
jne 0x180023d46
jmp 0x180027790
and r8, 0xfffffffffffffffe
mov qword [rax], r8
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
and r9, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + r9]
mov qword [rdx + 8], rcx
test r9, r9
je 0x1800275dd
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [r9], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x180023f0a
mov rcx, qword [rax + 8]
test cl, 1
je 0x180023f0a
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x18002776b
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [r9], rax
jmp 0x180022d8a
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdi, qword [r8 + 8]
and edi, 1
or rdi, rcx
mov qword [r8 + 8], rdi
mov rcx, r8
jmp 0x18002314c
shl r13, 0xc
mov eax, r13d
and eax, 0xff000
mov edx, 0x100000
sub rdx, rax
cmp rdx, rcx
cmovae rdx, rcx
add r13, r11
jmp 0x180022ff4
mov al, 1
mov r11, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
jmp 0x180023064
mov r8, qword [rcx + 8]
cmp r8, 1
ja 0x180025909
mov rdx, qword [rcx]
test rdx, rdx
mov r9, qword [rsp + 0x48]
mov r10, qword [rsp + 0x58]
jne 0x180025421
mov qword [rsp + 0xf0], rdx
jmp 0x18002336c
mov r13, qword [r12 + 8]
test r13, r13
je 0x180024f57
mov rax, qword [r13 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [r12 + 8], rax
mov rax, r12
and rax, 0xfffffffffffffffe
mov rcx, qword [r13 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r13 + 0x10], rcx
mov rcx, qword [r12 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r13 + 0x10], rcx
or byte [r12 + 0x10], 1
and qword [r13 + 0x10], 1
cmp qword [rdi + 8], r12
jne 0x180024a32
mov qword [rdi + 8], r13
mov rax, qword [rsp + 0xf8]
mov qword [rbx + 0x68], rax
test r11, r11
je 0x1800275ca
xorps xmm0, xmm0
movups xmmword [r11 + 8], xmm0
jmp 0x180023402
dec dword [r12 + 0xc]
mov dil, 1
xor r14d, r14d
jmp 0x180022b22
mov qword [rdx + 8], rax
jmp 0x180022d8a
lea rcx, [rsp + 0xe8]
call fcn.180008400
lea rax, [rsp + 0xe8]
mov r9, qword [rax]
jmp 0x180023ae9
mov r8, qword [r11 + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
cmp rdx, r9
mov rbp, qword [rsp + 0x38]
mov r9, qword [rsp + 0x48]
jne 0x180023b06
and r8d, 1
or r8, rcx
mov qword [r11 + 8], r8
jmp 0x180023b06
mov al, 1
jmp 0x180023064
mov ebp, 1
cmp r15d, 0xffffffff
jne 0x180023643
jmp 0x180025623
mov r10b, 1
mov qword [rsp + 0x58], r10
mov rax, qword [rsp + 0x60]
lea rdx, [r9 + rax]
add rdx, 0x20
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax]
mov rax, rdx
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], 0
mov rdx, qword [rdx + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
mov qword [rsp + 0x48], rax
je 0x180024702
cmp r8d, 0xffffffff
jne 0x1800245e9
mov r9, qword [rcx]
test r9, r9
je 0x180027517
mov rdx, qword [r9 + 8]
test dl, 1
je 0x180024686
xor edx, edx
mov qword [rsp + 0x60], rdx
mov r10, 0xfffffffffffff000
mov r8, rcx
mov rcx, r9
mov r9, qword [rax + 0x10]
mov r11, r9
and r11, r10
mov rdi, qword [rcx + 0x10]
and rdi, r10
xor edx, edx
cmp r11, rdi
seta dl
mov r11d, 0xffffffff
cmovb edx, r11d
test edx, edx
jne 0x18002405e
test r9b, 0x10
mov r9d, 0
cmove r9, rax
xor edx, edx
cmp r9, rcx
seta r9b
jb 0x180024063
mov dl, r9b
cmp edx, 0xffffffff
jne 0x1800240e0
mov r9, qword [rcx]
test r9, r9
je 0x18002550f
mov rdx, qword [r9 + 8]
test dl, 1
jne 0x180024015
mov r11, qword [r9]
test r11, r11
je 0x180024087
test byte [r11 + 8], 1
jne 0x180024015
or rdx, 1
mov qword [r9 + 8], rdx
mov rdi, qword [rcx + 8]
mov rdx, rdi
and rdx, 0xfffffffffffffffe
je 0x1800268e6
mov r9, qword [rdx]
test r9, r9
je 0x1800240b6
mov r11, qword [r9 + 8]
test r11b, 1
jne 0x18002557c
or rdi, 1
mov qword [rcx + 8], rdi
mov r9, qword [rdx]
or r9, 1
mov qword [rcx + 8], r9
mov qword [rdx], rcx
mov r9, rdx
cmp qword [r8], rcx
jne 0x1800275b0
mov qword [r8], r9
jmp 0x180024018
test edx, edx
je 0x1800241c9
mov rdi, qword [rcx + 8]
mov r9, rdi
and r9, 0xfffffffffffffffe
je 0x180024107
mov rdx, qword [r9]
test rdx, rdx
je 0x180024107
test byte [rdx + 8], 1
jne 0x180024015
mov rdx, qword [rcx]
test rdx, rdx
je 0x18002740e
mov r9, qword [rdx + 8]
test r9b, 1
je 0x1800247d6
and r9, 0xfffffffffffffffe
je 0x18002693e
mov r11, qword [r9]
test r11, r11
je 0x18002413e
test byte [r11 + 8], 1
jne 0x180025708
and edi, 1
or rdi, r9
mov qword [rdx + 8], rdi
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x1800273ce
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov rdi, qword [rcx + 8]
mov rdx, rdi
and rdx, 0xfffffffffffffffe
je 0x1800273e8
mov rax, qword [rdx]
and rax, 0xfffffffffffffffe
and edi, 1
or rdi, rax
mov qword [rcx + 8], rdi
mov qword [rdx], rcx
mov rax, qword [r9 + 8]
and eax, 1
or rax, rdx
mov qword [r9 + 8], rax
or byte [rcx + 8], 1
cmp qword [r8], rcx
jne 0x180024a5d
mov qword [r8], r9
mov rcx, r8
mov rax, qword [rsp + 0x48]
jmp 0x180024015
mov rdi, qword [rcx + 8]
mov rdx, r8
mov qword [rsp + 0x60], r8
cmp rdi, 1
ja 0x1800240ec
mov rdx, qword [rcx]
test rdx, rdx
je 0x180024220
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x70]
jne 0x180024773
mov qword [r8], rdx
mov r10, qword [rsp + 0x50]
shr rdi, 0xc
mov rax, qword [rsp + 0xf0]
mov qword [r11], rax
xorps xmm0, xmm0
mov rax, qword [rsp + 0x48]
movups xmmword [rax], xmm0
mov rcx, qword [rsp + 0x38]
cmp rdi, rcx
jne 0x18002436c
test cl, cl
je 0x1800242ac
mov rax, r12
or rax, 1
shl rcx, 3
lea rcx, [rcx + rcx*2]
mov rdx, qword [rsp + 0x80]
lea rdx, [rdx + rdx*2]
lea rdx, [r10 + rdx*8]
add rdx, 0x30
xor r8d, r8d
test byte [rdx + r8], 8
je 0x18002429f
dec qword [r10 + 0x18]
dec qword [rbx + 0x88]
mov qword [rdx + r8], rax
add r8, 0x18
cmp rcx, r8
jne 0x18002428d
cmp qword [r10 + 0x18], 0
jne 0x1800242c2
cmp qword [rsp + 0xa8], 0
jne 0x18002495b
mov r10, qword [rsp + 0x58]
test r12, r12
je 0x180025412
test r10b, 1
je 0x180025412
cmp qword [r14], r12
je 0x18002811c
mov qword [r12], r14
xor eax, eax
cmp dword [rbx + r13 + 0xc4], 1
jne 0x1800242f8
xor edx, edx
jmp 0x18002431e
lea rdx, [rbx + r13]
add rdx, 0xc4
xor ecx, ecx
mov dword [r12 + rcx*4 + 0x10], 0xffffffff
inc rcx
mov r8d, dword [rdx]
dec r8d
cmp rcx, r8
jb 0x180024305
mov edx, ecx
mov r8d, dword [rbx + r13 + 0xc0]
and r8d, 0x1f
mov ecx, r8d
neg cl
mov r9d, 0xffffffff
shr r9d, cl
cmp r8d, 1
sbb eax, eax
or eax, r9d
mov dword [r12 + rdx*4 + 0x10], eax
mov dword [r12 + 8], 0
mov eax, dword [rbx + r13 + 0xc0]
mov dword [r12 + 0xc], eax
inc dword [rbx + r13 + 0xcc]
mov qword [r14], r12
jmp 0x180022abd
mov rax, qword [rsp + 0x80]
lea rdx, [rax + rdi]
sub rdi, rcx
shl rdi, 0xc
add rax, rcx
lea rcx, [rax + rax*2]
lea rax, [r10 + rcx*8]
add rax, 0x20
mov r8d, 0xfff
mov r9, qword [rax + 0x10]
and r9, r8
or r9, rdi
mov qword [rax + 0x10], r9
lea rdx, [rdx + rdx*2]
and r8, qword [r10 + rdx*8 + 0x18]
or r8, rdi
mov qword [r10 + rdx*8 + 0x18], r8
mov rdi, qword [r11]
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0xf8], 0
test rdi, rdi
je 0x180025207
lea rcx, [r10 + rcx*8]
add rcx, 0x30
mov qword [rsp + 0x48], rcx
lea rcx, [rsp + 0xf0]
xor r10d, r10d
mov r11, r10
mov r10, rcx
mov rcx, qword [rdi]
test rcx, rcx
je 0x180024412
mov r9, qword [rcx + 8]
test r9b, 1
je 0x180024412
mov r8, qword [rcx]
test r8, r8
je 0x180024412
test byte [r8 + 8], 1
jne 0x180024490
mov rcx, rdi
mov rdx, qword [rsp + 0x48]
mov r9, qword [rdx]
mov rdx, r9
mov r11, 0xfffffffffffff000
and rdx, r11
mov r8, qword [rcx + 0x10]
and r8, r11
xor r11d, r11d
cmp rdx, r8
seta r11b
mov edx, 0xffffffff
cmovb r11d, edx
test r11d, r11d
je 0x180024462
cmp r11d, 0xffffffff
jne 0x180024480
mov rdi, qword [rcx]
mov r9d, 0xffffffff
test rdi, rdi
jne 0x1800243eb
jmp 0x18002457e
test r9b, 0x10
mov edx, 0
cmove rdx, rax
xor r9d, r9d
cmp rdx, rcx
seta r8b
jb 0x18002444f
mov r9b, r8b
jmp 0x180024486
mov r9d, 1
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
jmp 0x180024458
and r9, 0xfffffffffffffffe
mov qword [rdi], r9
mov r8, rdi
and r8, 0xfffffffffffffffe
mov r9, qword [rcx]
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, r8
mov qword [rcx + 8], rdx
test r9, r9
je 0x180027173
and byte [r9 + 8], 0xfe
cmp qword [r10], rdi
jne 0x1800244ca
mov qword [r10], rcx
jmp 0x180024415
and rcx, 0xfffffffffffffffe
mov r9, qword [r10 + 8]
and r9d, 1
lea rdx, [r9 + rcx]
mov qword [r10 + 8], rdx
test rcx, rcx
je 0x180027186
mov rdx, qword [rcx]
and rdx, 0xfffffffffffffffe
or rdx, r9
mov qword [r10 + 8], rdx
mov qword [rcx], r10
mov rdx, qword [r10 + 8]
and edx, 1
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
or byte [r10 + 8], 1
test r11, r11
je 0x180026a00
cmp qword [r11], r10
je 0x180025464
jmp 0x1800256f5
mov rdx, qword [rsp + 0x48]
mov r9, qword [rdx]
mov rdx, r9
mov r10, 0xfffffffffffff000
and rdx, r10
mov r8, qword [rcx + 0x10]
and r8, r10
xor r10d, r10d
cmp rdx, r8
seta r10b
mov edx, 0xffffffff
cmovb r10d, edx
test r10d, r10d
jne 0x1800251d2
jmp 0x1800258e4
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
mov r10, rcx
test rdi, rdi
jne 0x1800243f1
mov r10, r11
mov qword [rax], 0
mov qword [rax + 8], 1
cmp r9d, 1
jne 0x18002521e
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, rdx
or r8, rax
mov qword [rcx + 8], r8
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r10], rcx
mov r9, qword [rsp + 0x40]
jne 0x180025164
mov qword [r10], rax
jmp 0x180025226
test r8d, r8d
je 0x180024b00
mov r8, qword [rcx + 8]
xor edx, edx
mov qword [rsp + 0x60], rdx
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x180024618
mov rdx, qword [r9]
test rdx, rdx
je 0x180024618
test byte [rdx + 8], 1
jne 0x18002400e
mov r10, qword [rcx]
test r10, r10
je 0x180026a49
mov rdx, qword [r10 + 8]
test dl, 1
jne 0x18002593e
or r8, 1
mov qword [rcx + 8], r8
mov rdx, qword [r10]
test rdx, rdx
je 0x18002464f
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x180025d0a
or byte [r10 + 8], 1
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18002781e
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [rcx + 8], rdx
mov qword [r9], rcx
lea rcx, [rsp + 0xf0]
mov qword [rcx], r9
jmp 0x1800246f8
mov r8, qword [r9]
test r8, r8
je 0x180024699
test byte [r8 + 8], 1
jne 0x180024007
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x18002696e
mov r9, qword [rdx]
test r9, r9
je 0x1800246c8
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x180025d80
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xf0]
mov qword [rcx], r9
xor eax, eax
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x48]
jmp 0x18002400e
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x180023fee
mov r8b, dl
jmp 0x180023fe4
xor r8d, r8d
mov qword [rbx + 0x70], r8
lea r14, [rcx + 0x3000]
lea rax, [rcx + 0x68]
xorps xmm0, xmm0
lea rdx, [rsp + 0xf0]
movaps xmmword [rdx], xmm0
mov qword [rcx + 0x68], r8
mov qword [rcx + 0x70], 1
mov qword [rdx], rax
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x180027657
and byte [rcx + 8], 0xfe
mov qword [rbx + 0xa0], rcx
jmp 0x180022ef8
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x180024236
mov qword [rcx], 0
mov qword [rcx + 8], 1
lea rdx, [rsp + 0xf0]
jmp 0x180023afe
test r12, r12
je 0x18002519a
mov rax, qword [r12 + 8]
test rax, rax
je 0x18002519a
test byte [rax + 0x10], 1
je 0x180025187
xor ebp, ebp
jmp 0x180023c1e
mov qword [rdi], rdx
jmp 0x180023611
or r9, 1
mov qword [rdx + 8], r9
mov rdx, qword [rdx]
test rdx, rdx
je 0x1800247f4
mov r9, qword [rdx + 8]
test r9b, 1
jne 0x1800254a2
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x180027421
mov rax, qword [r9]
and rax, 0xfffffffffffffffe
and edx, 1
or rdx, rax
mov qword [rcx + 8], rdx
mov qword [r9], rcx
jmp 0x1800241b0
and rdi, 0xfffffffffffffffe
mov qword [r9 + 8], rdi
mov r9, qword [rcx]
test r9, r9
je 0x180027078
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
mov qword [rcx], rdi
mov rdi, rcx
and rdi, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
je 0x180027092
mov r13, qword [rdi]
and r13, 0xfffffffffffffffe
and r15d, 1
or r15, r13
mov qword [rcx + 8], r15
mov qword [rdi], rcx
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
mov rbp, qword [rsp + 0x38]
jmp 0x1800232eb
test rdx, rdx
je 0x180027672
cmp qword [rdx], rax
jne 0x1800258c9
mov qword [rdx], rcx
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x180027685
mov qword [r8], 0
mov rbp, qword [rsp + 0x38]
mov r11, qword [rsp + 0x40]
jmp 0x180023362
and r13, 0xfffffffffffffffe
mov qword [rdi], r13
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
and r9, 0xfffffffffffffffe
mov rdi, qword [rcx + 8]
and edi, 1
lea r15, [rdi + r9]
mov qword [rcx + 8], r15
test r9, r9
je 0x180026e4e
mov r15, qword [r9]
and r15, 0xfffffffffffffffe
or r15, rdi
mov qword [rcx + 8], r15
mov qword [r9], rcx
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
je 0x18002494d
mov r15, qword [rdi + 8]
test r15b, 1
jne 0x180025b85
mov qword [rcx + 8], rdi
mov rbp, qword [rsp + 0x38]
jmp 0x180023205
mov r8, qword [rbx + 0x68]
mov qword [rsp + 0xf8], r8
mov qword [rsp + 0x100], 0
xor ecx, ecx
cmp r8, r10
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x18002524d
test eax, eax
je 0x180025bc1
test r8, r8
je 0x180026a7f
mov rdx, r8
mov rcx, qword [r8 + 0x10]
xor eax, eax
mov qword [rsp + 0x40], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180025c1e
mov r8, qword [rax + 8]
test r8, r8
je 0x180025c1e
test byte [r8 + 0x10], 1
je 0x180025c1e
mov r8, rdx
jmp 0x180025274
mov rdx, qword [rbx + 0x70]
test rdx, rdx
jne 0x1800251e7
lea r9, [rsp + 0xf0]
mov ecx, 0x100000
mov edx, 0x100000
xor r8d, r8d
call fcn.180062350
test rax, rax
je 0x180025412
mov r12, rax
mov r8b, byte [rsp + 0xf0]
mov rcx, rbx
mov rdx, rax
call fcn.180062ab0
add r12, 0x3000
jmp 0x180023820
xor r13d, r13d
jmp 0x1800230b7
and r13, 0xfffffffffffffffe
mov rax, qword [rdi + 0x10]
and eax, 1
or rax, r13
mov qword [rdi + 0x10], rax
jmp 0x180023ed8
mov r10, qword [rdi + 8]
and r10d, 1
or r10, rdx
mov qword [rdi + 8], r10
jmp 0x180023611
mov rax, r9
and rax, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rax
mov qword [r8 + 8], rcx
jmp 0x1800241bc
and edi, 1
mov rbp, qword [r9 + 8]
and rbp, 0xfffffffffffffffe
or rbp, rdi
mov qword [r9 + 8], rbp
and byte [r13 + 8], 0xfe
mov rdi, qword [r15 + 8]
mov r9, rdi
and r9, 0xfffffffffffffffe
je 0x18002703f
mov r13, qword [r9]
and r13, 0xfffffffffffffffe
and edi, 1
or rdi, r13
mov qword [r15 + 8], rdi
mov qword [r9], r15
mov qword [rcx], r9
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
mov qword [rcx], rdi
mov rdi, rcx
and rdi, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
mov rbp, qword [rsp + 0x38]
jne 0x1800232c3
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov r8, qword [rcx + 8]
cmp r8, 1
ja 0x180025e86
mov rdx, qword [rcx]
test rdx, rdx
jne 0x180025b47
mov qword [rsp + 0xf0], rdx
mov r10, qword [rsp + 0x50]
mov r11, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x70]
jmp 0x18002423b
test rbp, rbp
je 0x180025095
mov rdi, qword [rbp + 0x28]
mov r15, qword [rbp + 0x20]
lea r14, [r15 + 0xfffff]
mov rax, 0xfffffffffff00000
and r14, rax
mov rcx, r14
sub rcx, r15
sub rdi, rcx
add rdi, rax
mov eax, dword [rbp + 0x30]
mov dword [rsp + 0x40], eax
mov rcx, rbp
call fcn.180001860
lea rcx, [0x1800cb6b0]
mov rdx, rbp
call section..text
mov rax, r14
sub rax, r15
jne 0x1800276c8
test rdi, rdi
je 0x180025699
lea rax, [r14 + 0x100000]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rdi
mov eax, dword [rsp + 0x40]
mov dword [rbp + 0x30], eax
mov rcx, rbp
call fcn.180001530
lea rcx, [0x1800cb6b0]
mov rdx, rbp
call fcn.180001ff0
lock add qword [0x1800cb6b8], 0xfffffffffff00000
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 0x100000
mov rcx, r14
mov r8d, 0x1000
call fcn.180062260
test rax, rax
je 0x1800250a2
test r14, r14
je 0x1800250a2
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [0x1800cb678]
mov r13, r14
shr r13, 0x3e
mov r15, qword [rdi + r13*8]
test r15, r15
je 0x180026596
mov r13d, 2
xorps xmm6, xmm6
mov rdi, r14
mov ecx, r13d
shl rdi, cl
shr rdi, 0x3d
mov rax, qword [r15 + rdi*8]
test rax, rax
je 0x180025e9d
add r13, 3
mov r15, rax
cmp r13d, 0x29
jne 0x180024c2f
mov ecx, r14d
shr ecx, 0x14
and ecx, 7
mov qword [rax + rcx*8], r14
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r14, r14
je 0x1800269a3
add qword [rbx + 0x48], 0x100000
mov qword [r14], rbx
xor eax, eax
mov qword [r14 + 0x18], rax
mov qword [r14 + 0x30], rax
mov qword [r14 + 0x48], rax
mov qword [r14 + 0x60], 0x20
mov qword [r14 + 0x78], 0xfc024
mov eax, 0x90
mov qword [r14 + rax], 0x24
add rax, 0x18
cmp rax, 0x1800
jne 0x180024ca7
mov qword [r14 + 0x1800], 0xfc024
mov qword [r14 + 0x1818], 0x20
lea r15, [r14 + 0x2000]
mov eax, r15d
and eax, 0xfffff
mov r13d, 0x100000
sub r13, rax
mov ebp, 0xfe000
cmp r13, rbp
cmovae r13, rbp
mov rdi, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, r15
mov rdx, r13
mov r8d, 0x4000
call rdi
test eax, eax
je 0x18002758f
add r15, r13
sub rbp, r13
mov eax, 0x100000
cmp rbp, rax
mov r13d, 0x100000
cmovb r13, rbp
test rbp, rbp
jne 0x180024cfc
add qword [rbx + 0x50], 3
lea rax, [r14 + 0x68]
mov r11, qword [rbx + 0xa0]
mov qword [rsp + 0xf0], r11
mov qword [rsp + 0xf8], 0
test r11, r11
je 0x180025a2b
lea rcx, [rsp + 0xf0]
xor r9d, r9d
mov rdx, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r10, r9
mov r9, rcx
mov rcx, qword [r11]
test rcx, rcx
je 0x180024d9b
mov rdi, qword [rcx + 8]
test dil, 1
je 0x180024d9b
mov r15, qword [rcx]
test r15, r15
je 0x180024d9b
test byte [r15 + 8], 1
jne 0x180024e07
mov rcx, r11
mov r10, qword [r14 + 0x78]
mov rdi, r10
and rdi, rdx
mov r15, qword [rcx + 0x10]
and r15, rdx
xor r11d, r11d
cmp rdi, r15
seta r11b
cmovb r11d, r8d
test r11d, r11d
je 0x180024dda
cmp r11d, 0xffffffff
jne 0x180024df8
mov r11, qword [rcx]
mov edi, 0xffffffff
test r11, r11
jne 0x180024d74
jmp 0x180024ee6
test r10b, 0x10
mov r10d, 0
cmove r10, rax
xor edi, edi
cmp r10, rcx
seta r10b
jb 0x180024dc8
mov dil, r10b
jmp 0x180024dfd
mov edi, 1
mov r11, qword [rcx + 8]
and r11, 0xfffffffffffffffe
jmp 0x180024dd0
and rdi, 0xfffffffffffffffe
mov qword [r11], rdi
mov r15, r11
and r15, 0xfffffffffffffffe
mov rdi, qword [rcx]
mov r13, qword [rcx + 8]
and r13d, 1
or r13, r15
mov qword [rcx + 8], r13
test rdi, rdi
je 0x1800274b3
and byte [rdi + 8], 0xfe
cmp qword [r9], r11
jne 0x180024e41
mov qword [r9], rcx
jmp 0x180024d9e
and rcx, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
lea rdi, [r11 + rcx]
mov qword [r9 + 8], rdi
test rcx, rcx
je 0x1800274c6
mov rdi, qword [rcx]
and rdi, 0xfffffffffffffffe
or rdi, r11
mov qword [r9 + 8], rdi
mov qword [rcx], r9
mov r11, qword [r9 + 8]
and r11d, 1
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
or rdi, r11
mov qword [rcx + 8], rdi
or byte [r9 + 8], 1
test r10, r10
je 0x180026a64
cmp qword [r10], r9
je 0x180025b3f
jmp 0x180025bfc
mov r9, qword [r14 + 0x78]
mov rdi, r9
and rdi, rdx
mov r15, qword [rcx + 0x10]
and r15, rdx
xor r11d, r11d
cmp rdi, r15
seta r11b
cmovb r11d, r8d
test r11d, r11d
jne 0x180025a17
jmp 0x180025de4
mov r11, qword [rcx + 8]
and r11, 0xfffffffffffffffe
mov r9, rcx
test r11, r11
jne 0x180024d7a
mov r9, r10
mov qword [r14 + 0x68], 0
mov qword [r14 + 0x70], 1
cmp edi, 1
jne 0x180025a43
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + rax]
mov qword [rcx + 8], r8
test rax, rax
je 0x180027798
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r9], rcx
jne 0x180025916
mov qword [r9], rax
jmp 0x180025a46
xor r13d, r13d
jmp 0x180023eca
and r8, 0xfffffffffffffffe
mov qword [rax + 8], r8
mov r9, qword [rdx]
test r9, r9
je 0x18002773e
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180027758
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
jmp 0x180023ae9
test r11b, 0x10
mov r10d, 0
cmove r10, rcx
xor ebp, ebp
cmp r10, rdx
seta r11b
jb 0x180025623
mov bpl, r11b
jmp 0x180023643
mov r11b, 1
jmp 0x1800239ae
and r9, 0xfffffffffffffffe
je 0x1800269ca
mov r11, qword [r9]
test r11, r11
je 0x180025015
test byte [r11 + 8], 1
jne 0x180025c84
and r8d, 1
or r8, r9
mov qword [r10 + 8], r8
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x1800277ab
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x1800277c5
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
or byte [rcx + 8], 1
mov rbp, qword [rsp + 0x38]
jmp 0x1800237d9
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov edx, 0x100000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
test rax, rax
je 0x180026989
mov rax, r14
shl rax, 0x2c
je 0x180024bfe
mov rcx, r14
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x180027a8f
mov rdi, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, 0x1ff000
xor ecx, ecx
mov r8d, 0x3000
call fcn.180062260
test rax, rax
je 0x1800269a3
mov r14, rax
mov rcx, rax
xor edx, edx
mov r8d, 0x8000
call rdi
test eax, eax
je 0x180027a77
add r14, 0xfffff
and r14, 0xfffffffffff00000
mov edx, 0x100000
mov rcx, r14
mov r8d, 0x3000
call fcn.180062260
cmp rax, r14
jne 0x18002685e
test r14, r14
jne 0x180024bfe
jmp 0x1800250fc
mov rdx, qword [r10 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
jne 0x180025226
and edx, 1
or rdx, rax
mov qword [r10 + 8], rdx
jmp 0x180025226
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002519a
test byte [rcx + 0x10], 1
jne 0x1800247c7
lea r13, [rsp + 0xe8]
mov rcx, r13
mov rdx, r12
call fcn.180039300
mov rax, qword [r13]
test rax, rax
je 0x1800278d9
and byte [rax + 0x10], 0xfe
xor ebp, ebp
jmp 0x180025a8a
lea rcx, [rsp + 0xf0]
jmp 0x18002342e
mov r9d, 1
cmp r10d, 0xffffffff
jne 0x180024567
jmp 0x180025c10
mov qword [rbx + 0x70], 0
lea r12, [rdx + 0x3000]
add rdx, 0x68
mov rcx, rdi
call fcn.180062bd0
jmp 0x180023820
mov qword [rax], 0
mov qword [rax + 8], 1
lea rcx, [rsp + 0xf0]
mov r9, qword [rsp + 0x40]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf0]
test rax, rax
je 0x18002754f
and byte [rax + 8], 0xfe
mov qword [r9], rax
mov r10, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x38]
jmp 0x180024263
test r8, r8
je 0x1800259e8
mov rax, qword [r8 + 8]
test rax, rax
je 0x1800259e8
test byte [rax + 0x10], 1
je 0x1800259d5
xor ecx, ecx
mov qword [rsp + 0x40], rcx
mov r9d, 0xffffffff
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x50]
mov rdx, rax
xor eax, eax
cmp rdx, rcx
setb al
cmova eax, r9d
cmp eax, 0xffffffff
jne 0x1800252bf
test rdx, rdx
je 0x180027562
mov rax, qword [rdx + 8]
test rax, rax
je 0x18002642f
test byte [rax + 0x10], 1
je 0x180025354
mov r8, rdx
jmp 0x180025286
test eax, eax
jne 0x1800252e4
test rdx, rdx
je 0x180027626
mov rax, qword [rdx + 0x10]
mov rdi, r8
mov qword [rsp + 0x40], r8
cmp rax, 1
jbe 0x180025386
jmp 0x1800252f4
mov rdi, r8
test rdx, rdx
je 0x180026a77
mov rax, qword [rdx + 0x10]
and rax, 0xfffffffffffffffe
je 0x180025d78
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180025d78
test byte [rcx + 0x10], 1
mov rcx, qword [rsp + 0x50]
mov r8, rdx
mov r9d, 0xffffffff
jne 0x180025286
mov qword [rsp + 0x48], r8
lea rcx, [rsp + 0xd8]
mov rdx, r8
call fcn.180039460
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x48]
cmp qword [rdi + 8], rcx
jne 0x180025e09
jmp 0x1800260b4
mov rdi, r8
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180025e23
test byte [rcx + 0x10], 1
je 0x180025e23
mov r8, rdx
mov rcx, qword [rsp + 0x50]
mov r9d, 0xffffffff
jmp 0x180025286
mov r8, rdi
jmp 0x180025371
mov r8, qword [rdx + 8]
test r8, r8
je 0x180025868
mov rax, qword [r8 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rdx + 8], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r8 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r8 + 0x10], rcx
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [r8 + 0x10], rcx
or byte [rdx + 0x10], 1
mov rax, r8
mov qword [rsp + 0x38], r8
and qword [r8 + 0x10], 1
cmp qword [rdi + 8], rdx
jne 0x1800256d9
mov rax, qword [rsp + 0x38]
mov qword [rdi + 8], rax
mov rax, qword [rsp + 0xf8]
mov qword [rbx + 0x68], rax
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x18002768f
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
cmp byte [rsp + 0x58], 0
jne 0x1800242da
mov qword [r14], 0
mov dil, 1
jmp 0x180022b22
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rsp + 0x48]
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x180023e73
mov qword [r11], rcx
jmp 0x18002452a
test r12, r12
je 0x18002548e
mov rcx, qword [r12 + 0x10]
cmp rcx, 1
ja 0x1800263ac
mov rax, qword [r12 + 8]
test rax, rax
jne 0x180025afe
xor eax, eax
mov qword [rsp + 0xf8], rax
mov r11, qword [rsp + 0x40]
jmp 0x180023ed8
and r9, 0xfffffffffffffffe
mov qword [rdx + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x180027434
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov r11, qword [rcx + 8]
mov rdx, r11
and rdx, 0xfffffffffffffffe
je 0x18002744e
mov rax, qword [rdx]
and rax, 0xfffffffffffffffe
and r11d, 1
or r11, rax
mov qword [rcx + 8], r11
mov qword [rdx], rcx
mov rax, qword [r9 + 8]
and eax, 1
or rax, rdx
mov qword [r9 + 8], rax
jmp 0x1800241b0
cmp qword [rsp + 0x60], 0
je 0x1800277d8
mov rax, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x60]
cmp qword [rdx], rax
jne 0x180025e66
mov rax, qword [rsp + 0x60]
mov qword [rax], rcx
mov rax, qword [rsp + 0x48]
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x1800277eb
mov qword [r8], 0
jmp 0x180024b22
and r11, 0xfffffffffffffffe
mov qword [rdx], r11
mov r11, qword [r9 + 8]
and r11d, 1
or r11, rdx
mov qword [r9 + 8], r11
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r11, [rdx + r9]
mov qword [rcx + 8], r11
test r9, r9
je 0x180026f39
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
or r11, rdx
mov qword [rcx + 8], r11
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x1800255d7
mov r11, qword [rdx + 8]
test r11b, 1
jne 0x180025f2d
mov qword [rcx + 8], rdx
mov rax, qword [rsp + 0x48]
jmp 0x1800240cf
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov r8, qword [rax + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
mov r8, qword [rdx + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x180022e14
mov r15, qword [rdx]
mov ebp, 0xffffffff
jmp 0x18002364b
mov rax, qword [r12 + 8]
test rax, rax
je 0x180027802
test byte [rax + 0x10], 1
jne 0x180025a73
or rcx, 1
mov qword [r12 + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180025667
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x1800260bd
or byte [rax + 0x10], 1
mov rcx, qword [r12 + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x1800278ec
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [r12 + 0x10], rcx
mov qword [rax + 8], r12
jmp 0x180025a8a
lock add qword [0x1800cb6b8], 0xfffffffffff00000
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea r13, [0x1800cb6c0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb5a0]
mov qword [rbp], rax
mov qword [0x1800cb5a0], rbp
jmp 0x180024bd0
mov rcx, qword [rsp + 0x38]
and rcx, 0xfffffffffffffffe
mov rax, qword [rdi + 0x10]
and eax, 1
or rax, rcx
mov qword [rdi + 0x10], rax
jmp 0x1800253e6
mov rdx, qword [r11 + 8]
and edx, 1
or rdx, rcx
mov qword [r11 + 8], rdx
jmp 0x18002452a
and edi, 1
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
or rax, rdi
mov qword [r9 + 8], rax
and byte [r11 + 8], 0xfe
mov r11, qword [rdx + 8]
mov r9, r11
and r9, 0xfffffffffffffffe
je 0x1800273fb
mov rax, qword [r9]
and rax, 0xfffffffffffffffe
and r11d, 1
or r11, rax
mov qword [rdx + 8], r11
mov qword [r9], rdx
mov qword [rcx], r9
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov rdi, qword [rcx + 8]
mov rdx, rdi
and rdx, 0xfffffffffffffffe
jne 0x18002418a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
and r9, 0xfffffffffffffffe
mov qword [r8 + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x180027831
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x18002784b
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, r8
mov qword [r9 + 8], rcx
mov rbp, qword [rsp + 0x38]
jmp 0x1800237d9
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x18002785e
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18002585a
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x180026232
mov qword [rcx + 8], rdx
mov rbp, qword [rsp + 0x38]
jmp 0x180023a77
xor eax, eax
mov qword [rsp + 0x38], rax
jmp 0x1800253d3
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
jmp 0x180023ced
mov rdx, r12
call fcn.180039300
mov rax, qword [rsp + 0xe0]
cmp qword [rdi + 8], r12
jne 0x180027871
mov qword [rdi + 8], rax
mov r12, rax
mov r11, qword [rsp + 0x40]
lea rcx, [rsp + 0xe0]
lea r8, [rsp + 0xd8]
jmp 0x180023c3d
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
jmp 0x1800248a7
test r9b, 0x10
mov edx, 0
cmove rdx, rax
xor r9d, r9d
cmp rdx, rcx
seta r8b
jb 0x180025c10
mov r9b, r8b
jmp 0x180024567
lea rdx, [rsp + 0xf0]
jmp 0x18002375a
mov rdx, qword [r9 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
mov rbp, qword [rsp + 0x38]
jne 0x180025a4b
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
jmp 0x180025a4b
and rdx, 0xfffffffffffffffe
je 0x180026a2e
mov r9, qword [rdx]
test r9, r9
je 0x18002595b
test byte [r9 + 8], 1
jne 0x1800261ad
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
or byte [rdx + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18002788b
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x1800278a5
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
or byte [rcx + 8], 1
jmp 0x180024679
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x1800259e8
test byte [rcx + 0x10], 1
jne 0x18002526d
lea rdi, [rsp + 0xe8]
mov rcx, rdi
mov rdx, r8
call fcn.180039300
mov rax, qword [rdi]
test rax, rax
je 0x18002798a
and byte [rax + 0x10], 0xfe
xor ecx, ecx
mov qword [rsp + 0x40], rcx
jmp 0x180025edb
mov edi, 1
cmp r11d, 0xffffffff
jne 0x180024ecf
jmp 0x1800260a7
mov qword [r14 + 0x68], 0
mov qword [r14 + 0x70], 1
lea rcx, [rsp + 0xf0]
mov qword [rcx], rax
mov rbp, qword [rsp + 0x38]
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x180027644
and byte [rcx + 8], 0xfe
mov qword [rbx + 0xa0], rcx
add r14, 0x3000
jmp 0x180022ef8
lea r13, [rsp + 0xe8]
mov rcx, r13
mov rdx, r12
call fcn.180039460
mov rax, qword [r13]
lea r12, [rsp + 0xf0]
mov qword [r12 + 8], rax
jmp 0x180023c19
mov rbx, qword [0x1800cb568]
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x1800278b8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x10], rbx
jmp 0x180022a4f
mov r8d, 0x100000
mov rcx, rbx
mov rdx, r12
xor r9d, r9d
call fcn.180001df0
mov r14, rax
jmp 0x180022b3a
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r12 + 8], rcx
mov rcx, r12
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r12 + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [r12 + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x180025490
mov qword [r10], rcx
jmp 0x180024ea2
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x180024b1a
and r15, 0xfffffffffffffffe
mov qword [rdi + 8], r15
mov rdi, qword [rcx + 8]
mov r15, rdi
or r15, 1
mov qword [rcx + 8], r15
and rdi, 0xfffffffffffffffe
je 0x180026e3b
mov r15, qword [rdi]
or r15, 1
mov qword [rcx + 8], r15
mov qword [rdi], rcx
mov qword [r9], rdi
mov rbp, qword [rsp + 0x38]
jmp 0x180023205
test r8, r8
je 0x180025be4
mov rdx, r8
mov rcx, qword [r8 + 0x10]
cmp rcx, 1
ja 0x18002656f
mov rax, qword [rdx + 8]
test rax, rax
jne 0x180025eec
xor eax, eax
mov qword [rsp + 0xf8], rax
jmp 0x1800253e6
mov qword [rdi + 8], rax
jmp 0x180023ced
mov r9, qword [r10 + 8]
and r9d, 1
or r9, rcx
mov qword [r10 + 8], r9
jmp 0x180024ea2
mov rdi, qword [rcx]
mov r9d, 0xffffffff
jmp 0x18002456f
mov rax, qword [rdx + 8]
test rax, rax
je 0x1800278ff
test byte [rax + 0x10], 1
jne 0x180025ec8
or rcx, 1
mov qword [rdx + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180025c54
mov r8, qword [rcx + 0x10]
test r8b, 1
jne 0x1800263b9
or byte [rax + 0x10], 1
mov rcx, qword [rdx + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002799d
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 0x10], rcx
mov qword [rax + 8], rdx
jmp 0x180025edb
and r8d, 1
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
or rdi, r8
mov qword [r9 + 8], rdi
and byte [r11 + 8], 0xfe
mov r8, qword [r10 + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18002791a
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r8d, 1
or r8, r11
mov qword [r10 + 8], r8
mov qword [r9], r10
mov qword [rcx], r9
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
jne 0x180025063
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov r9, qword [rcx]
test r9, r9
je 0x18002792d
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x180027947
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rdx
mov qword [r9 + 8], rcx
jmp 0x180024679
mov r8, rdx
jmp 0x180025323
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x18002795a
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x180025ddb
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x1800264cf
mov qword [rcx + 8], rdx
jmp 0x1800246e1
test r9b, 0x10
mov r9d, 0
cmove r9, rax
xor edi, edi
cmp r9, rcx
seta r9b
jb 0x1800260a7
mov dil, r9b
jmp 0x180024ecf
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
jmp 0x180025381
lea rcx, [rsp + 0xe0]
mov qword [rsp + 0x48], rdx
call fcn.180039300
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0x48]
cmp qword [rdi + 8], rcx
jne 0x18002796d
mov r8, rdi
mov qword [rdi + 8], rax
mov rdx, rax
mov rcx, qword [rsp + 0x50]
mov r9d, 0xffffffff
jmp 0x180025289
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov rax, qword [rsp + 0x60]
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rax + 8], r9
jmp 0x180025536
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x48]
jmp 0x1800245fd
mov ecx, 0x40
call fcn.1800022d0
test rax, rax
je 0x18002756d
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov qword [r15 + rdi*8], rax
jmp 0x180024c49
lea rdi, [rsp + 0xe8]
mov rcx, rdi
call fcn.180039460
mov rax, qword [rdi]
lea r8, [rsp + 0xf0]
mov qword [r8 + 8], rax
jmp 0x180025274
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov r8, rdx
mov qword [rdx + 8], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r8 + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [r8 + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x180025be6
and r11, 0xfffffffffffffffe
mov qword [rdx + 8], r11
mov rdx, qword [rcx + 8]
mov r11, rdx
or r11, 1
mov qword [rcx + 8], r11
and rdx, 0xfffffffffffffffe
je 0x180026f26
mov r11, qword [rdx]
or r11, 1
mov qword [rcx + 8], r11
mov qword [rdx], rcx
mov qword [r9], rdx
mov rax, qword [rsp + 0x48]
jmp 0x1800240cf
lea rcx, [0x1800cb774]
call fcn.180060ac0
cmp dword [0x1800cb774], 0xffffffff
jne 0x1800229b1
mov eax, dword [0x1800cb600]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x180025fdf
lea rcx, [0x1800cb600]
call fcn.180060ac0
cmp dword [0x1800cb600], 0xffffffff
jne 0x180025fdf
lea rbx, [rsp + 0xf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov qword [0x1800cb5f8], rax
lea rcx, [0x1800cb600]
call fcn.180060b40
mov rdi, qword [0x1800cb5f8]
cmp rdi, 0x1000
jne 0x180026088
call fcn.180002fa0
mov qword [0x1800cb640], rax
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x180027c1d
call fcn.180002e80
mov qword [0x1800cb648], rax
lea rbx, [0x1800cb618]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb648]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov qword [rax], rdx
mov r8, rcx
shl r8, 0x17
xor r8, rcx
mov rcx, rdx
shr rcx, 0x1a
xor rcx, rdx
xor rcx, r8
shr r8, 0x11
xor r8, rcx
mov qword [rax + 8], r8
add edx, r8d
and edx, 0x1ffff
inc edx
mov dword [0x1800cb610], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp rdi, 0x1000
sete byte [0x1800cb770]
lea rcx, [0x1800cb774]
call fcn.180060b40
jmp 0x1800229b1
mov r11, qword [rcx]
mov edi, 0xffffffff
jmp 0x180024ed7
mov qword [rdi + 8], rax
jmp 0x180025381
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [r12 + 8]
test rax, rax
je 0x1800279b0
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r12 + 8], rcx
mov rcx, r12
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r12 + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x1800279cc
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r12 + 0x10], rdx
mov qword [rcx + 8], r12
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x180025a8a
mov r13, r12
test rbp, rbp
je 0x1800279df
mov rax, qword [rsp + 0x40]
cmp qword [rbp + 8], rax
jne 0x18002657c
mov qword [rbp + 8], r13
cmp qword [rsp + 0x40], 0
je 0x1800279ff
test r12, r12
je 0x180027a13
mov rdx, qword [rsp + 0x40]
mov rax, qword [rdx + 8]
mov qword [r13 + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [r13 + 0x10]
and eax, 1
or rax, rcx
mov qword [r13 + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov qword [r13 + 0x10], rax
cmp qword [rdi + 8], r13
jne 0x180027a26
mov qword [rdi + 8], 0
jmp 0x180025498
and r8d, 1
mov r11, qword [rdx + 8]
and r11, 0xfffffffffffffffe
or r11, r8
mov qword [rdx + 8], r11
and byte [r9 + 8], 0xfe
mov rdx, qword [r10 + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x180027a30
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r10 + 8], rdx
mov qword [r9], r10
mov qword [rcx], r9
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
jne 0x1800259a8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x180027a43
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
mov rbp, qword [rsp + 0x38]
jmp 0x180023a77
lea rcx, [0x1800cb774]
call fcn.180060ac0
cmp dword [0x1800cb774], 0xffffffff
jne 0x180022b7a
mov eax, dword [0x1800cb600]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x1800262e4
lea rcx, [0x1800cb600]
call fcn.180060ac0
cmp dword [0x1800cb600], 0xffffffff
jne 0x1800262e4
lea rbx, [rsp + 0xf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov qword [0x1800cb5f8], rax
lea rcx, [0x1800cb600]
call fcn.180060b40
mov rdi, qword [0x1800cb5f8]
cmp rdi, 0x1000
jne 0x18002638d
call fcn.180002fa0
mov qword [0x1800cb640], rax
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x180027c27
call fcn.180002e80
mov qword [0x1800cb648], rax
lea rbx, [0x1800cb618]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb648]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov qword [rax], rdx
mov r8, rcx
shl r8, 0x17
xor r8, rcx
mov rcx, rdx
shr rcx, 0x1a
xor rcx, rdx
xor rcx, r8
shr r8, 0x11
xor r8, rcx
mov qword [rax + 8], r8
add edx, r8d
and edx, 0x1ffff
inc edx
mov dword [0x1800cb610], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp rdi, 0x1000
sete byte [0x1800cb770]
lea rcx, [0x1800cb774]
call fcn.180060b40
jmp 0x180022b7a
lea rbp, [rsp + 0xf0]
jmp 0x180023bf5
and r8, 0xfffffffffffffffe
mov qword [rcx + 0x10], r8
mov rax, qword [rdx + 8]
test rax, rax
je 0x180027aa7
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov r8, rdx
mov qword [rdx + 8], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r8 + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x180027ac2
mov r9, r8
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r9 + 0x10], rdx
mov qword [rcx + 8], r9
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x180025edb
mov r9, r8
mov r8, rdx
mov qword [rsp + 0x38], rdx
cmp qword [rsp + 0x40], 0
je 0x180027ad5
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
cmp qword [rcx + 8], rax
jne 0x180026809
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 8], rcx
cmp qword [rsp + 0x50], 0
je 0x180027af5
test r8, r8
je 0x180027b13
mov rdx, qword [rsp + 0x50]
mov rax, qword [rdx + 8]
mov r8, qword [rsp + 0x38]
mov qword [r8 + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [r8 + 0x10]
and eax, 1
or rax, rcx
mov qword [r8 + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 0x10], rax
cmp qword [r9 + 8], rcx
jne 0x180027b26
mov qword [r9 + 8], 0
jmp 0x1800253e6
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x180027b30
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
jmp 0x1800246e1
mov byte [rbx + 0x78], 0
lea rcx, [rsp + 0xf0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
xor edi, edi
mov r14d, 0
test al, al
je 0x180026530
mov r14, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
test al, al
je 0x18002654e
mov rdi, qword [rsp + 0xf0]
mov ecx, 0x10
call fcn.1800022d0
mov qword [rax], r14
mov qword [rax + 8], rdi
mov qword [rbx + 0x80], rax
mov byte [rbx + 0x78], 1
jmp 0x180022a87
lea rax, [rsp + 0xf0]
jmp 0x1800249a6
mov rax, r13
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 0x10]
and ecx, 1
or rcx, rax
mov qword [rbp + 0x10], rcx
jmp 0x180026150
mov ecx, 0x40
call fcn.1800022d0
test rax, rax
je 0x18002756d
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [rdi + r13*8], rax
jmp 0x180024c26
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
cmp dword [0x1800cb718], 0
jne 0x1800267f7
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x180027b6d
mov eax, dword [0x1800cb600]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x18002665e
lea rcx, [0x1800cb600]
call fcn.180060ac0
cmp dword [0x1800cb600], 0xffffffff
jne 0x18002665e
lea rbx, [rsp + 0xf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov qword [0x1800cb5f8], rax
lea rcx, [0x1800cb600]
call fcn.180060b40
mov eax, 0x1000
xor edx, edx
div qword [0x1800cb5f8]
test rdx, rdx
jne 0x180027b77
lea rcx, str.MALLOC_OPTIONS
lea rbx, [0x1800cb730]
mov rdx, rbx
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor edi, edi
test eax, eax
cmovne rdi, rbx
je 0x1800266aa
mov al, byte [0x1800cb730]
test al, al
jne 0x18002682a
xor ebx, ebx
mov qword [0x1800cb6b8], rbx
lea rcx, [0x1800cb680]
mov rdi, qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov edx, 0x1388
call rdi
mov qword [0x1800cb6a8], rbx
mov qword [0x1800cb6b0], rbx
lea rcx, [0x1800cb5b8]
mov edx, 0x1388
call rdi
mov qword [0x1800cb5e0], rbx
mov qword [0x1800cb5e8], rbx
mov qword [0x1800cb5f0], rbx
lea rcx, [0x1800cb6c0]
mov edx, 0x1388
call rdi
mov qword [0x1800cb710], rbx
mov qword [0x1800cb700], rbx
xorps xmm0, xmm0
movups xmmword [0x1800cb578], xmm0
mov qword [0x1800cb588], rbx
lea rcx, [0x1800cb540]
mov qword [rsp + 0xf8], rbx
mov dword [rsp + 0x100], 0
mov rax, qword [0x1800cb038]
mov qword [rsp + 0xf0], rax
mov edx, 0x1388
call rdi
test eax, eax
je 0x180027b43
lea rdx, [rsp + 0xf0]
xor ecx, ecx
call fcn.180053590
mov qword [0x1800cb568], rax
test rax, rax
je 0x180027b5b
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp byte [rcx + 8], 0
je 0x180027ba3
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x10], rax
lea rcx, [0x1800cb650]
mov edx, 0x1388
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x20
call fcn.1800022d0
test rax, rax
je 0x180027b50
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [0x1800cb678], rax
mov dword [0x1800cb718], 1
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x1800229f4
mov rax, qword [rsp + 0x38]
and rax, 0xfffffffffffffffe
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
jmp 0x180026468
xor r14d, r14d
movsx edx, al
lea ecx, [rdx - 0x30]
cmp cl, 9
jbe 0x180027bb4
xor ecx, ecx
cmp edx, 0x72
jne 0x180027bd9
mov byte [0x1800cb5b0], 1
inc r14d
mov al, byte [rdi + r14]
test al, al
jne 0x18002682d
jmp 0x1800266aa
test rax, rax
jne 0x180027c42
xor r14d, r14d
jmp 0x180025159
or r15, 1
mov qword [rcx + 8], r15
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
or rcx, 1
mov qword [rdx + 8], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x180027c91
cmp eax, 8
je 0x180027c91
xor eax, eax
jmp 0x180023e40
and edi, 1
mov qword [r15 + 8], rdi
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
or rdi, 1
mov qword [rcx + 8], rdi
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x180027d6d
cmp eax, 8
je 0x180027d6d
xor r11d, r11d
jmp 0x1800239a4
and edi, 1
mov qword [rdx + 8], rdi
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x180027e3c
cmp eax, 8
je 0x180027e3c
mov rcx, qword [rsp + 0x80]
cmp dword [rcx + 0x28], 0
je 0x1800269c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0xc
jmp 0x180022ba3
xor r14d, r14d
jmp 0x18002341d
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
xor r12d, r12d
jmp 0x180023ccb
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
xor r8d, r8d
jmp 0x180025323
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
mov rcx, qword [rsp + 0xc0]
mov rdx, rsi
call fcn.18000ba00
mov r14, rax
test r14, r14
jne 0x180022b43
jmp 0x180022ba3
lock inc qword [0x1800cb608]
lock dec dword [0x1800cb610]
jne 0x1800229d9
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x180026ae9
call fcn.180060de8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 9], 0
jne 0x1800229d9
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x180026b2a
call fcn.180060de8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov byte [rax + 9], 1
lea r9, [rsp + 0xf0]
mov qword [r9], 0
mov rdx, qword [rsp + 0x1d8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rcx, [0x180067240]
mov r8d, 0x10
call fcn.18009d790
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbx, qword [0x1800cb608]
mov r15, qword [0x1800cb648]
mov rcx, qword [r15]
mov rdx, qword [r15 + 8]
mov rax, rcx
shl rax, 0x17
xor rax, rcx
mov rcx, rdx
shr rcx, 0x1a
xor rcx, rdx
xor rcx, rax
shr rax, 0x11
xor rax, rcx
lea ecx, [rdx + rax]
and ecx, 0x7fff
inc ecx
mov dword [rsp + 0x38], ecx
mov qword [r15], rax
mov rcx, rdx
shl rcx, 0x17
xor rcx, rdx
mov r13, rcx
shr r13, 0x11
mov rdx, rax
shr rdx, 0x1a
xor r13, rcx
xor r13, rax
xor r13, rdx
mov qword [r15 + 8], r13
add r13, rax
mov ebp, 0x100
mov rdi, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
movzx r13d, r13b
imul r12, r13, 0x148
cmp dword [r15 + r12 + 0x10], 1
je 0x180026c5a
cmp qword [r15 + r12 + 0x150], rbx
ja 0x180026c5a
mov rax, qword [0x1800cb640]
mov rax, qword [rax]
mov rcx, r13
shl rcx, 0xd
lea r14, [rax + rcx]
add r14, 0x1000
mov edx, 0x1000
mov rcx, r14
mov r8d, 0x1000
mov r9d, 4
call rdi
mov r15, qword [0x1800cb648]
test rax, rax
jne 0x1800270ad
inc r13
dec rbp
jne 0x180026bfb
xor r14d, r14d
mov eax, dword [rsp + 0x38]
mov dword [0x1800cb610], eax
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.180067250
test r14, r14
je 0x1800229d9
jmp 0x180022b43
call fcn.180060de8
jmp 0x180022a2c
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0x68]
mov r8, rsi
call fcn.18001e170
jmp 0x180022bd2
mov r14, qword [rsp + 0x68]
sub r14, rax
bt r14d, 0xc
jae 0x180027a56
mov byte [rsp + 0xe1], 0
mov qword [rsp + 0xf0], 0
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x180026cfb
call fcn.180060de8
mov rbx, r14
shr rbx, 0xd
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 9], 0
jne 0x180026d5c
lea rcx, [rsp + 0xe0]
call fcn.180067310
lea r9, [rsp + 0xf0]
mov qword [r9], 0
mov rdx, qword [rsp + 0x1d8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rcx, [0x180067240]
mov r8d, 0x10
call fcn.18009d790
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [0x1800cb648]
mov rdx, qword [rsp + 0x68]
mov r8, rbx
call fcn.180067380
cmp rsi, 0x1000
ja 0x180026d9d
mov r15, qword [0x1800cb648]
mov eax, dword [r15 + 0x14810]
cmp eax, 1
je 0x180026f4c
cmp byte [rsp + 0xc8], 0
je 0x180026deb
mov rcx, qword [rsp + 0xc0]
mov rdx, rsi
call fcn.18000ba00
mov r14, rax
test rax, rax
jne 0x180026e61
xor r14d, r14d
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [rsp + 0xe1], 0
je 0x180026aa5
call fcn.180067250
jmp 0x180026aa5
mov rax, qword [0x1800cb648]
imul rcx, rbx, 0x148
cmp byte [rax + rcx + 0x20], 0
je 0x180026e1f
add rax, rcx
add rax, 0x18
mov rcx, qword [rax]
jmp 0x180026daf
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rcx, [rsp + 0xe8]
mov qword [rcx], 0
mov rdx, rsi
call fcn.180067460
jmp 0x180026db7
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov rax, qword [0x1800cb648]
mov rcx, qword [rax]
mov r15, qword [rax + 8]
mov qword [rax], r15
mov rdx, rcx
shl rdx, 0x17
xor rdx, rcx
mov rcx, r15
shr rcx, 0x1a
xor rcx, r15
xor rcx, rdx
shr rdx, 0x11
xor rdx, rcx
mov qword [rax + 8], rdx
add r15d, edx
and r15d, 0x3ffff
add r15d, 0x20001
imul rcx, rbx, 0x148
mov rdx, qword [rax + rcx + 0x28]
and edx, 0xfff
mov r9d, 0x1000
sub r9, rdx
xor r8d, r8d
cmp dword [rax + rcx + 0x10], 0
cmovne r8, r9
cmp r8, rsi
cmovae r8, rsi
mov rcx, r14
mov rdx, qword [rsp + 0x68]
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0xc0]
lea r8, [rsp + 0xf0]
mov rcx, rbx
mov r9d, r15d
call fcn.18006c590
jmp 0x180026dc6
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
imul rax, rbx, 0x148
mov rcx, qword [r15 + rax + 0x28]
and ecx, 0xfff
mov edx, 0x1000
sub rdx, rcx
xor r8d, r8d
cmp dword [r15 + rax + 0x10], 0
cmovne r8, rdx
cmp rsi, 8
ja 0x180027159
mov rax, rsi
mov ecx, 0x40
dec rax
je 0x180026f92
bsr rcx, rax
xor rcx, 0x3f
neg cl
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov ecx, 0x10
cmovb rax, rcx
cmp rsi, 2
cmovb rax, rcx
mov rcx, qword [0x1800cb640]
and r14, 0xffffffffffffe000
add r14, qword [rcx]
sub r14, rax
add r14, 0x2000
cmp r8, rsi
cmovae r8, rsi
mov rcx, r14
mov rdx, qword [rsp + 0x68]
call sub.VCRUNTIME140.dll_memmove
mov r8, qword [rsp + 0xc0]
mov r9b, byte [rsp + 0xc8]
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov rcx, r15
mov rdx, rbx
call fcn.1800673e0
jmp 0x180026dc6
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov rax, r9
jmp 0x180022eca
cmp rsi, 8
ja 0x1800273b4
mov rax, rsi
mov ecx, 0x40
dec rax
je 0x1800270cc
bsr rcx, rax
xor rcx, 0x3f
neg cl
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov ecx, 0x10
cmovb rax, rcx
cmp rsi, 2
cmovb rax, rcx
sub r14, rax
add r14, 0x1000
lea rbx, [r15 + r12]
add rbx, 0x30
mov dword [rbx - 0x20], 1
movaps xmm0, xmmword [rsp + 0xc0]
movups xmmword [rbx - 0x18], xmm0
mov qword [rbx - 8], r14
lea rdx, [rsp + 0xf0]
mov r8d, 0x88
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x88], 1
cmp byte [rbx + 0x118], 0
je 0x180027148
mov eax, 0x148
add rax, r12
add rax, r15
mov byte [rax], 0
mov qword [r15 + r12 + 0x150], 0xffffffffffffffff
jmp 0x180026c65
cmp rsi, 0x1f0
ja 0x18002747c
lea rax, [rsi + 0xf]
and rax, 0xfffffffffffffff0
jmp 0x180026fb1
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov r8, qword [rbx + 0x70]
test r8, r8
je 0x180023d07
xor r11d, r11d
mov qword [rbx + 0x70], r11
lea r14, [r8 + 0x3000]
lea rax, [r8 + 0x68]
lea rdx, [rsp + 0xf0]
mov qword [rdx], rcx
mov qword [rdx + 8], r11
mov r9, 0xfffffffffffff000
mov r10d, 0xffffffff
mov rdi, r11
mov r11, rdx
mov rdx, qword [rcx]
test rdx, rdx
je 0x1800271fb
mov r15, qword [rdx + 8]
test r15b, 1
je 0x1800271fb
mov r13, qword [rdx]
test r13, r13
je 0x1800271fb
test byte [r13 + 8], 1
jne 0x180027261
mov rdx, rcx
mov rcx, qword [r8 + 0x78]
mov r15, rcx
and r15, r9
mov r13, qword [rdx + 0x10]
and r13, r9
xor edi, edi
cmp r15, r13
seta dil
cmovb edi, r10d
test edi, edi
je 0x180027237
cmp edi, 0xffffffff
jne 0x180027252
mov rcx, qword [rdx]
mov ebp, 0xffffffff
test rcx, rcx
jne 0x1800271d4
jmp 0x18002733e
test cl, 0x10
mov ecx, 0
cmove rcx, rax
xor ebp, ebp
cmp rcx, rdx
seta cl
jb 0x180027225
mov bpl, cl
jmp 0x180027257
mov ebp, 1
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18002722d
and r15, 0xfffffffffffffffe
mov qword [rcx], r15
mov r13, rcx
and r13, 0xfffffffffffffffe
mov r15, qword [rdx]
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, r13
mov qword [rdx + 8], rbp
test r15, r15
je 0x180027ee4
and byte [r15 + 8], 0xfe
cmp qword [r11], rcx
jne 0x18002729b
mov qword [r11], rdx
jmp 0x1800271fe
and rdx, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
lea r15, [rcx + rdx]
mov qword [r11 + 8], r15
test rdx, rdx
je 0x180027ef7
mov r15, qword [rdx]
and r15, 0xfffffffffffffffe
or r15, rcx
mov qword [r11 + 8], r15
mov qword [rdx], r11
mov rcx, qword [r11 + 8]
and ecx, 1
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
or r15, rcx
mov qword [rdx + 8], r15
or byte [r11 + 8], 1
test rdi, rdi
je 0x180027ea4
cmp qword [rdi], r11
je 0x18002766a
jmp 0x1800276a2
mov rcx, qword [r8 + 0x78]
mov r15, rcx
and r15, r9
mov r13, qword [rdx + 0x10]
and r13, r9
xor r11d, r11d
cmp r15, r13
seta r11b
cmovb r11d, r10d
test r11d, r11d
jne 0x180027630
jmp 0x18002771c
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
mov r11, rdx
test rcx, rcx
jne 0x1800271da
mov r11, rdi
mov qword [r8 + 0x68], 0
mov qword [r8 + 0x70], 1
cmp ebp, 1
jne 0x180027545
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea r8, [rcx + rax]
mov qword [rdx + 8], r8
test rax, rax
je 0x180027ed4
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rcx
mov qword [rdx + 8], r8
mov qword [rax], rdx
mov rcx, qword [rdx + 8]
and ecx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x180027603
mov qword [r11], rax
mov rbp, qword [rsp + 0x38]
jmp 0x180024752
cmp rsi, 0x1f0
ja 0x1800274d9
lea rax, [rsi + 0xf]
and rax, 0xfffffffffffffff0
jmp 0x1800270eb
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov rax, rcx
jmp 0x1800237f2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
mov eax, 0x1000
cmp rsi, 0xf00
ja 0x180026fb1
lea rax, [rsi + 0xff]
and rax, 0xffffffffffffff00
jmp 0x180026fb1
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov eax, 0x1000
cmp rsi, 0xf00
ja 0x1800270eb
lea rax, [rsi + 0xff]
and rax, 0xffffffffffffff00
jmp 0x1800270eb
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdi, qword [r8 + 8]
and edi, 1
or rdi, rcx
mov qword [r8 + 8], rdi
jmp 0x18002314f
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
or rax, 1
mov qword [rdx + 8], rax
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
mov rbp, qword [rsp + 0x38]
jmp 0x18002474f
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
mov r9, r8
mov r8, rdx
jmp 0x18002643a
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 0x100000
mov rcx, r14
xor r8d, r8d
call fcn.180039740
jmp 0x1800269a3
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
xor r12d, r12d
jmp 0x180023eca
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
jmp 0x180024018
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov rcx, qword [r11 + 8]
mov r8, rcx
and r8, 0xfffffffffffffffe
cmp rdx, r8
jne 0x1800273aa
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
jmp 0x1800273aa
mov rdi, r8
xor edx, edx
jmp 0x1800253d3
mov ebp, 1
cmp r11d, 0xffffffff
jne 0x180027327
jmp 0x1800277f5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
mov qword [rdi], rdx
jmp 0x1800272fa
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
and qword [r8 + 8], 1
jmp 0x1800248e3
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov rcx, qword [rdi + 8]
and ecx, 1
or rcx, rdx
mov qword [rdi + 8], rcx
jmp 0x1800272fa
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov qword [rbp + 0x28], rax
mov rcx, rbp
call fcn.180001530
lea rcx, [0x1800cb6b0]
mov rdx, rbp
call fcn.180001ff0
test rdi, rdi
je 0x180024bc4
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.18001fbb0
test rax, rax
je 0x1800278c2
mov rbp, rax
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x180024b97
test cl, 0x10
mov ecx, 0
cmove rcx, rax
xor ebp, ebp
cmp rcx, rdx
seta cl
jb 0x1800277f5
mov bpl, cl
jmp 0x180027327
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
cmp edx, 1
jne 0x180027790
mov rax, qword [rax + 8]
and rax, 0xfffffffffffffffe
jmp 0x180023d4c
mov rbp, rax
jmp 0x180024b43
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
and qword [r8 + 8], 1
jmp 0x180024b22
mov rcx, qword [rdx]
mov ebp, 0xffffffff
jmp 0x18002732f
or rcx, 1
mov qword [r12 + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
jmp 0x1800258ac
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
call fcn.180060de8
jmp 0x180025ac3
mov edx, 0x100000
mov rcx, r14
mov r8d, dword [rsp + 0x40]
call fcn.180039740
jmp 0x1800250a2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
or rcx, 1
mov qword [rdx + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov r8, rdi
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
jmp 0x180025e53
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov qword [r12 + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test r12, r12
je 0x180027a13
mov qword [r13 + 8], 0
xor eax, eax
jmp 0x180026192
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
and qword [rdi + 0x10], 1
jmp 0x180025498
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov rax, qword [rsp + 0x68]
mov byte [rax], 0
lea rax, str.MOZ_CRASH_unreachable_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x18002512f
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x1800250f5
mov qword [rdx + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test r8, r8
je 0x180027b13
mov rax, qword [rsp + 0x38]
mov qword [rax + 8], 0
and qword [rax + 0x10], 1
xor eax, eax
jmp 0x1800264af
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
and qword [r9 + 0x10], 1
jmp 0x1800253e6
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov qword [0x1800cb568], 0
jmp 0x180027b5b
mov qword [0x1800cb678], 0
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x1800269b1
call fcn.180060de8
jmp 0x180026601
lea rcx, str._jemalloc_
lea rdx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.180066f70
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
call fcn.180060de8
mov rax, qword [0x1800cb568]
jmp 0x18002679d
xor ecx, ecx
lea eax, [rcx + rcx*4]
lea ecx, [rdx + rax*2]
add ecx, 0xffffffd0
inc r14d
mov al, byte [rdi + r14]
movsx edx, al
lea r8d, [rax - 0x30]
cmp r8b, 0xa
jae 0x18002683e
jmp 0x180027bb6
cmp edx, 0x46
jne 0x180027c31
cmp ecx, 1
adc ecx, 0
mov rax, qword [0x1800cb038]
xor edx, edx
test rax, rax
sete dl
cmp rax, 1
adc rax, 0
sub ecx, edx
shl rax, cl
test rax, rax
movabs rcx, 0x8000000000000000
cmovne rcx, rax
mov qword [0x1800cb038], rcx
jmp 0x18002684e
call fcn.180060de8
jmp 0x18002601f
call fcn.180060de8
jmp 0x180026324
cmp edx, 0x52
jne 0x180027c76
mov byte [0x1800cb5b0], 0
jmp 0x18002684e
xor r14d, r14d
mov rcx, rax
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x180025159
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x180026867
cmp edx, 0x66
jne 0x180027d1a
cmp ecx, 1
adc ecx, 0
shr qword [0x1800cb038], cl
jmp 0x18002684e
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0x98], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r13
mov rdx, qword [rsp + 0x70]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0xa0], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0xa0], 0
jne 0x180027df8
cmp eax, 0x5af
je 0x180027cff
cmp eax, 8
jne 0x1800268bf
xor eax, eax
dec qword [rsp + 0x98]
mov r11, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
jne 0x180027cad
jmp 0x180023064
lea rbx, [rsp + 0xf0]
mov byte [rbx], al
mov byte [rbx + 1], 0
lea rdx, str._jemalloc_
mov r15, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, 2
mov r8d, 0xa
call r15
lea rdx, str.:__malloc__Unsupported_character_in_malloc_options:_
mov ecx, 2
mov r8d, 0x35
call r15
lea rdx, [0x1800bf740]
mov rcx, rbx
call fcn.180066f70
jmp 0x18002684e
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0xb0], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x88]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0xb8], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0xb8], 0
jne 0x180027e1a
cmp eax, 0x5af
je 0x180027ddc
cmp eax, 8
jne 0x180026936
xor r11d, r11d
dec qword [rsp + 0xb0]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
jne 0x180027d89
jmp 0x1800239ae
cmp eax, 0x5af
mov ecx, dword [rsp + 0x90]
je 0x180027e0f
cmp eax, 8
jne 0x18002302e
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18002302e
cmp eax, 0x5af
mov ecx, dword [rsp + 0x98]
je 0x180027e31
cmp eax, 8
jne 0x18002396f
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18002396f
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rdi, [rax + rax*4]
add rdi, 5
mov r13, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r15, qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x100000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call r13
mov r14, rax
call r15
test r14, r14
jne 0x180027eb7
cmp eax, 0x5af
je 0x180027e9a
cmp eax, 8
jne 0x1800269a3
dec rdi
jne 0x180027e5e
jmp 0x1800269a3
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
cmp eax, 0x5af
je 0x180027ec7
cmp eax, 8
jne 0x1800250cf
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1800250cf
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov rdx, r9
xor r9d, r9d
cmp rdx, rdi
setb r9b
cmova r9d, r8d
cmp r9d, 0xffffffff
jne 0x180027f5a
test rdx, rdx
je 0x180028425
mov r9, qword [rdx]
test r9, r9
je 0x180028281
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x180027f55
mov r11, qword [r9]
test r11, r11
je 0x180027f7f
test byte [r11 + 8], 1
je 0x180027f7f
mov rcx, rdx
jmp 0x180027f10
test r9d, r9d
jne 0x180027fea
test rdx, rdx
je 0x180028453
mov r10, qword [rdx + 8]
mov rax, rcx
cmp r10, 1
jbe 0x1800280e9
jmp 0x180027ff7
or r10, 1
mov qword [r9 + 8], r10
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18002840a
mov r8, rax
mov rax, r12
mov r9, qword [r10]
test r9, r9
je 0x180027fb4
mov r12, qword [r9 + 8]
test r12b, 1
jne 0x180028168
or r11, 1
mov qword [rdx + 8], r11
mov r9, qword [r10]
or r9, 1
mov qword [rdx + 8], r9
mov qword [r10], rdx
mov r9, r10
mov r12, rax
mov rax, r8
cmp qword [rcx], rdx
mov r8d, 0xffffffff
jne 0x180028508
mov qword [rcx], r9
jmp 0x180027f10
test rdx, rdx
je 0x1800284c8
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x180028013
mov r11, qword [r9]
test r11, r11
je 0x180028013
test byte [r11 + 8], 1
jne 0x180027f55
mov r11, qword [rdx]
test r11, r11
je 0x1800284c8
mov r9, qword [r11 + 8]
test r9b, 1
je 0x180028203
mov qword [rsp + 0x40], r12
and r9, 0xfffffffffffffffe
je 0x18002845a
mov r12, qword [r9]
mov qword [rsp + 0x38], r12
test r12, r12
je 0x18002805a
mov r12, qword [rsp + 0x38]
test byte [r12 + 8], 1
jne 0x1800282e3
and r10d, 1
or r10, r9
mov qword [r11 + 8], r10
or byte [r9 + 8], 1
mov r9, qword [rdx]
test r9, r9
je 0x180028475
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18002848f
mov r12, qword [r10]
and r12, 0xfffffffffffffffe
and r11d, 1
or r11, r12
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
or byte [rdx + 8], 1
mov r12, qword [rsp + 0x40]
cmp qword [rcx], rdx
jne 0x180028263
mov qword [rcx], r9
mov rdx, rcx
jmp 0x180027f55
mov rax, qword [rdx]
test rax, rax
jne 0x18002812d
xor eax, eax
cmp qword [rcx], rdx
jne 0x18002824c
mov qword [rcx], rax
mov rax, qword [rsp + 0xf0]
mov qword [r12], rax
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov r12, 0xfffffffffffff000
and r12, qword [rdi + 0x10]
mov qword [r14], r12
test r12, r12
jne 0x180022abd
jmp 0x180025419
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
mov qword [rdx], r8
mov r8, rdx
and r8, 0xfffffffffffffffe
mov r9, qword [rax + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x1800280f3
and r12, 0xfffffffffffffffe
mov qword [r10], r12
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
lea r11, [r10 + r9]
mov qword [rdx + 8], r11
test r9, r9
je 0x180028440
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
or r11, r10
mov qword [rdx + 8], r11
mov qword [r9], rdx
mov r10, qword [rdx + 8]
and r10, 0xfffffffffffffffe
je 0x1800281fa
mov r11, qword [r10 + 8]
test r11b, 1
je 0x1800281fa
and r11, 0xfffffffffffffffe
mov qword [r10 + 8], r11
mov r10, qword [rdx + 8]
mov r11, r10
or r11, 1
mov qword [rdx + 8], r11
and r10, 0xfffffffffffffffe
je 0x18002842d
mov r12, rax
mov r11, qword [r10]
or r11, 1
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov qword [r9], r10
jmp 0x180027fd0
mov qword [rdx + 8], r10
jmp 0x180027fcd
or r9, 1
mov qword [r11 + 8], r9
mov r9, qword [r11]
test r9, r9
je 0x180028221
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18002836e
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x1800284db
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rdx + 8], r10
mov qword [r9], rdx
jmp 0x1800280d5
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, rax
mov qword [rcx + 8], rdx
jmp 0x1800280ff
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
mov rdx, rcx
jmp 0x180027f55
mov r10, rdx
test rax, rax
je 0x180028523
cmp qword [rax], rdi
jne 0x1800283ef
mov qword [rax], r10
test rdx, rdx
je 0x180028536
mov rdx, qword [rdi]
mov qword [r10], rdx
mov rdx, qword [rdi + 8]
and rdx, 0xfffffffffffffffe
mov r8, qword [r10 + 8]
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
mov r8, qword [rdi + 8]
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
cmp qword [rcx], r10
jne 0x180028549
mov qword [rcx], 0
jmp 0x1800280ff
and r10d, 1
mov r12, qword [r9 + 8]
and r12, 0xfffffffffffffffe
or r12, r10
mov qword [r9 + 8], r12
mov r9, qword [rsp + 0x38]
and byte [r9 + 8], 0xfe
mov r10, qword [r11 + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x1800284a2
mov r12, qword [r9]
and r12, 0xfffffffffffffffe
and r10d, 1
or r10, r12
mov qword [r11 + 8], r10
mov qword [r9], r11
mov qword [rdx], r9
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
jne 0x1800280a8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
and r10, 0xfffffffffffffffe
mov qword [r9 + 8], r10
mov r9, qword [rdx]
test r9, r9
je 0x1800284ee
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x1800284b5
mov r8, rax
mov rax, r12
mov r12, qword [r10]
and r12, 0xfffffffffffffffe
and r11d, 1
or r11, r12
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r12, rax
mov rax, r8
mov r8d, 0xffffffff
jmp 0x1800280d5
mov r8, r10
and r8, 0xfffffffffffffffe
mov r9, qword [rax + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
jmp 0x180028299
or r11, 1
mov qword [rdx + 8], r11
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
xor r10d, r10d
jmp 0x180028284
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
xor edx, edx
jmp 0x1800280f1
and r10d, 1
mov qword [r11 + 8], r10
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800268db
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
jmp 0x180027f10
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180026963
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180027f05
and qword [rcx + 8], 1
jmp 0x1800280ff