Function at 0x180028560
Capabilities:
Generate random numbers via rtlgenrandom

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x148
movdqa xmmword [rsp + 0x130], xmm7
movdqa xmmword [rsp + 0x120], xmm6
mov r14, r8
mov r15, rcx
mov rax, qword [0x1800cb028]
xor rax, rsp
mov qword [rsp + 0x118], rax
cmp r8, 1
adc r14, 0
test rdx, rdx
je 0x18002db04
cmp dword [0x1800cb718], 0
je 0x18002db4d
mov rdi, rdx
mov r13, rdx
and r13, 0xfffffffffff00000
cmp r13, rdx
je 0x18002ce80
mov eax, edi
shr eax, 0xc
movzx eax, al
lea rax, [rax + rax*2]
mov rax, qword [r13 + rax*8 + 0x30]
mov rbx, rax
and rbx, 0xfffffffffffff000
test al, 2
jne 0x1800285f7
mov rax, qword [rbx]
mov rbx, qword [rax + 0x10]
mov rsi, r13
cmp rbx, 0xfc000
ja 0x18002ced4
mov rax, qword [rsi]
mov qword [rsp + 0x30], rax
mov rax, qword [r15]
test rax, rax
je 0x180028622
cmp qword [rsp + 0x30], rax
jne 0x18002dbca
cmp r14, 0xfc000
ja 0x18002a836
cmp r14, 9
jb 0x1800298ba
cmp r14, 0x1f0
ja 0x180028996
lea r15, [r14 + 0xf]
and r15, 0xfffffffffffffff0
xor eax, eax
cmp r15, rbx
sete cl
cmp rbx, 0xfc001
jae 0x18002ca8b
test cl, cl
jne 0x180028c58
lea rcx, [rbx - 0xf01]
cmp rcx, 0xfb100
setae cl
xor al, 1
or al, cl
je 0x180028bdd
mov r12, qword [rsp + 0x30]
cmp byte [r12 + 0x79], 0
jne 0x180028a14
cmp r14, 0x1f1
jae 0x180028a0d
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x18002dbe3
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r12, qword [rax + 0x10]
test r12, r12
je 0x18002dbed
cmp r14, 9
jb 0x180029218
cmp r14, 0x1f1
jae 0x180028b35
lea rax, [r14 + 0xf]
mov rcx, rax
and rcx, 0xfffffffffffffff0
mov qword [rsp + 0x68], rcx
shr rax, 4
dec rax
lea rsi, [rax + rax*2]
shl rsi, 4
cmp byte [r12 + 0x78], 0
je 0x180028734
cmp qword [r12 + 0x80], 0
je 0x18002d7a6
lea r15, [r12 + rsi]
add r15, 0xa8
lea rax, [r12 + 0x18]
mov qword [rsp + 0x50], rax
cmp dword [r12 + 0x40], 0
jne 0x18002875c
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbp, qword [r15]
test rbp, rbp
je 0x180028b56
cmp dword [rbp + 0xc], 0
je 0x180028b56
mov eax, dword [rbp + 8]
mov edx, dword [rbp + rax*4 + 0x10]
test edx, edx
je 0x180028c8a
mov r8, qword [r12 + 0x80]
test r8, r8
jne 0x1800289b2
tzcnt r8d, edx
mov r15d, eax
shl r15d, 5
or r15d, r8d
mov ecx, dword [r12 + rsi + 0xc8]
imul r15, qword [r12 + rsi + 0xb8]
add rcx, rbp
add r15, rcx
btc edx, r8d
mov dword [rbp + rax*4 + 0x10], edx
dec dword [rbp + 0xc]
test r15, r15
je 0x18002b417
mov rax, qword [rsp + 0x68]
add qword [r12 + 0x58], rax
xor esi, esi
cmp dword [r12 + 0x40], 0
jne 0x1800287eb
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test sil, sil
jne 0x18002db39
test r15, r15
je 0x18002db39
cmp r14, rbx
cmovb rbx, r14
mov rcx, r15
mov rdx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r12, rdi
and r12, 0xfffff
je 0x18002cf0c
mov rax, qword [rsp + 0x30]
cmp qword [r13], rax
jne 0x18002db66
mov esi, r12d
shr esi, 0xc
lea rbp, [rsi + rsi*2]
mov rcx, qword [r13 + rbp*8 + 0x30]
mov rax, rcx
and rax, 0xfffffffffffff000
test cl, 2
jne 0x180028855
mov rax, qword [rax]
mov rax, qword [rax + 0x10]
lea rbx, [rbp*8 + 0x30]
add rbx, r13
cmp rax, 0x100
mov r8d, 0x100
cmovb r8, rax
mov rcx, rdi
mov dl, 0xe5
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x30]
lea rcx, [rax + 0x18]
mov qword [rsp + 0x50], rcx
cmp dword [rax + 0x40], 0
jne 0x180028899
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rbx]
test al, 0x20
jne 0x18002db7f
test al, 1
je 0x18002db98
mov r14, rax
and r14, 0xfffffffffffff000
test al, 2
jne 0x180028dc7
mov r12, qword [r14]
mov rsi, qword [r12 + 0x10]
mov ecx, dword [r12 + 0x20]
add ecx, r14d
sub edi, ecx
movzx edx, word [r12 + 0x28]
imul edx, edi
mov ecx, edx
shr ecx, 0x11
shr edx, 0x16
cmp edx, dword [r14 + 8]
jb 0x180028cf7
mov edx, edx
mov r8d, dword [r14 + rdx*4 + 0x10]
mov r9d, 1
shl r9d, cl
bt r8d, ecx
jb 0x18002dbb1
or r8d, r9d
mov dword [r14 + rdx*4 + 0x10], r8d
mov ecx, dword [r14 + 0xc]
lea edx, [rcx + 1]
mov dword [r14 + 0xc], edx
cmp edx, dword [r12 + 0x18]
je 0x180029258
test ecx, ecx
je 0x180028a37
xor edi, edi
mov rbx, qword [rsp + 0x30]
sub qword [rbx + 0x58], rsi
cmp dword [rbx + 0x40], 0
jne 0x180028947
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rdi, rdi
jne 0x18002c8dd
mov rdi, r15
mov r15, rdi
test rdi, rdi
je 0x18002db39
mov rcx, qword [rsp + 0x118]
xor rcx, rsp
call fcn.180062020
mov rax, r15
movaps xmm6, xmmword [rsp + 0x120]
movaps xmm7, xmmword [rsp + 0x130]
add rsp, 0x148
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp r14, 0xf00
ja 0x1800289f8
lea r15, [r14 + 0xff]
and r15, 0xffffffffffffff00
jmp 0x18002864e
mov r9, qword [r8]
mov rcx, qword [r8 + 8]
mov qword [r8], rcx
mov r10, r9
shl r10, 0x17
xor r10, r9
mov r9, rcx
shr r9, 0x1a
xor r9, rcx
xor r9, r10
shr r10, 0x11
xor r10, r9
add ecx, r10d
mov r9d, edx
ror r9d, cl
mov qword [r8 + 8], r10
tzcnt r8d, r9d
add r8d, ecx
and r8d, 0x1f
jmp 0x180028797
lea r15d, [r14 + 0xfff]
and r15d, 0x1ff000
mov al, 1
jmp 0x180028650
mov r12, qword [0x1800cb568]
cmp r14, 0xf00
jbe 0x1800286e7
mov rcx, r12
mov rdx, r14
xor r8d, r8d
call fcn.18002f480
mov r15, rax
jmp 0x1800287f4
mov rcx, qword [r12]
cmp rcx, r14
je 0x18002892b
test rcx, rcx
je 0x180029adc
cmp r14, rcx
jae 0x180028d00
cmp dword [rcx + 0xc], 0
je 0x180029adc
mov rax, rcx
and rax, 0xfffffffffff00000
shr ecx, 0xc
movzx ecx, cl
shl rcx, 3
lea rcx, [rcx + rcx*2]
add rax, rcx
add rax, 0x20
mov r9, qword [r12 + 8]
mov qword [rsp + 0xe0], r9
mov qword [rsp + 0xe8], 0
test r9, r9
je 0x18002989e
lea rcx, [rsp + 0xe0]
xor edx, edx
nop word [rax + rax]
mov r8, rdx
mov rdx, rcx
mov rcx, qword [r9]
test rcx, rcx
je 0x180028ad7
mov r10, qword [rcx + 8]
test r10b, 1
je 0x180028ad7
mov r11, qword [rcx]
test r11, r11
je 0x180028ad7
test byte [r11 + 8], 1
jne 0x180028afa
mov rcx, r9
cmp rcx, rax
seta r10b
jbe 0x180028af0
mov r9, qword [rcx]
test r9, r9
jne 0x180028ab0
jmp 0x180029aa6
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
jmp 0x180028ae6
and r10, 0xfffffffffffffffe
mov qword [r9], r10
mov r11, r9
and r11, 0xfffffffffffffffe
mov r10, qword [rcx]
mov rdi, qword [rcx + 8]
and edi, 1
or rdi, r11
mov qword [rcx + 8], rdi
test r10, r10
je 0x18002dc63
and byte [r10 + 8], 0xfe
cmp qword [rdx], r9
jne 0x180029a24
mov qword [rdx], rcx
jmp 0x180028ada
lea rax, [r14 + 0xff]
mov ecx, eax
and ecx, 0x1f00
mov qword [rsp + 0x68], rcx
shr rax, 8
add rax, 0x1d
jmp 0x180028715
mov rdx, qword [r12 + rsi + 0xb0]
test rdx, rdx
mov qword [rsp + 0x38], r15
je 0x18002a785
lea rbp, [r12 + rsi]
add rbp, 0xb0
mov rax, rdx
nop word [rax + rax]
mov r15, rax
mov rax, qword [rax]
test rax, rax
jne 0x180028b80
mov qword [rsp + 0xe0], rdx
mov qword [rsp + 0xe8], 0
xor ecx, ecx
cmp rdx, r15
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x180029229
mov r9, qword [rdx]
test r9, r9
je 0x18002ddc7
mov rax, qword [r9 + 8]
test al, 1
je 0x180028f82
xor eax, eax
mov r8d, 0xffffffff
jmp 0x18002eec5
mov rax, r15
sub rax, rbx
mov qword [rsp + 0x50], rax
jb 0x18002979e
mov eax, edi
shr eax, 0xc
movzx ebp, al
mov rsi, rbx
shr rsi, 0xc
mov rax, qword [rsp + 0x30]
lea r12, [rax + 0x18]
cmp dword [rax + 0x40], 0
jne 0x180028c15
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add rsi, rbp
cmp rsi, 0xfe
mov r11, qword [rsp + 0x50]
ja 0x180028c37
lea rcx, [rsi + rsi*2]
mov rax, qword [r13 + rcx*8 + 0x30]
test al, 1
je 0x180028ff1
xor esi, esi
cmp dword [r12 + 0x28], 0
jne 0x180028c4a
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test sil, sil
je 0x180028686
jmp 0x180028953
sub rbx, r14
jbe 0x180028953
add r14, rdi
mov r8d, 0x100
cmp rbx, r8
cmovb r8, rbx
cmp r8, 8
je 0x180029b65
mov rcx, r14
mov dl, 0xe5
call sub.VCRUNTIME140.dll_memset
jmp 0x180028953
mov ecx, dword [r12 + rsi + 0xc4]
inc eax
lea rdx, [rax - 1]
cmp eax, ecx
jae 0x18002b414
mov r8d, dword [rbp + rdx*4 + 0x14]
inc rdx
inc eax
test r8d, r8d
je 0x180028c98
mov rax, qword [r12 + 0x80]
test rax, rax
jne 0x1800291d4
tzcnt eax, r8d
mov r15d, edx
shl r15d, 5
or r15d, eax
mov ecx, dword [r12 + rsi + 0xc8]
add rcx, rbp
imul r15, qword [r12 + rsi + 0xb8]
add r15, rcx
btc r8d, eax
mov dword [rbp + rdx*4 + 0x10], r8d
mov dword [rbp + 8], edx
jmp 0x1800287c0
mov dword [r14 + 8], edx
jmp 0x1800288eb
sub rax, r13
shr rax, 0xc
lea rax, [rax + rax*2]
lea rax, [rax*8 + 0x20]
add rax, r13
mov r9, qword [r12 + 8]
mov qword [rsp + 0xe0], r9
mov qword [rsp + 0xe8], 0
test r9, r9
je 0x180029a08
lea rcx, [rsp + 0xe0]
xor edx, edx
mov r8, rdx
mov rdx, rcx
mov rcx, qword [r9]
test rcx, rcx
je 0x180028d69
mov r10, qword [rcx + 8]
test r10b, 1
je 0x180028d69
mov r11, qword [rcx]
test r11, r11
je 0x180028d69
test byte [r11 + 8], 1
jne 0x180028d8c
mov rcx, r9
cmp rcx, rax
seta r10b
jbe 0x180028d82
mov r9, qword [rcx]
test r9, r9
jne 0x180028d42
jmp 0x180029d38
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
jmp 0x180028d78
and r10, 0xfffffffffffffffe
mov qword [r9], r10
mov r11, r9
and r11, 0xfffffffffffffffe
mov r10, qword [rcx]
mov rdi, qword [rcx + 8]
and edi, 1
or rdi, r11
mov qword [rcx + 8], rdi
test r10, r10
je 0x18002dc9e
and byte [r10 + 8], 0xfe
cmp qword [rdx], r9
jne 0x180029cb6
mov qword [rdx], rcx
jmp 0x180028d6c
mov rax, qword [rsp + 0x30]
sub qword [rax + 0x60], r14
cmp r12d, 0xff000
jae 0x18002de00
mov rcx, qword [rbx]
test cl, 2
je 0x18002983f
mov rax, rcx
and rax, 0xfffffffffffff000
shr rcx, 0xc
test rcx, rcx
je 0x180028ead
lea rdx, [rcx - 1]
movq xmm0, rdx
pshufd xmm0, xmm0, 0x44
lea rdx, [rcx*8 + 8]
and rdx, 0xfffffffffffffff0
lea rdx, [rdx + rdx*2]
lea r8, [rbp*8 + 0x48]
add r8, r13
movdqa xmm1, xmmword [0x1800b71d0]
xor r9d, r9d
movdqa xmm2, xmmword [0x1800b71e0]
pxor xmm0, xmm2
pcmpeqd xmm3, xmm3
movdqa xmm4, xmmword [0x1800b71f0]
movdqa xmm5, xmm1
pxor xmm5, xmm2
movdqa xmm6, xmm5
pcmpgtd xmm6, xmm0
pcmpeqd xmm5, xmm0
pshufd xmm7, xmm5, 0xf5
pand xmm7, xmm6
pshufd xmm5, xmm6, 0xf5
por xmm5, xmm7
movd r10d, xmm5
not r10d
test r10b, 1
je 0x180028e88
mov qword [r8 + r9 - 0x18], 8
pxor xmm5, xmm3
pextrw r10d, xmm5, 4
test r10b, 1
je 0x180028ea0
mov qword [r8 + r9], 8
paddq xmm1, xmm4
add r9, 0x30
cmp rdx, r9
jne 0x180028e4b
mov rdx, qword [r13 + 0x18]
test rdx, rdx
je 0x1800298c5
add rdx, rcx
mov qword [r13 + 0x18], rdx
mov rdx, qword [rsp + 0x30]
add qword [rdx + 0x88], rcx
mov r8d, 0xfff
mov rdx, qword [rbx]
and rdx, r8
or rdx, rax
mov qword [rbx], rdx
add rcx, rsi
lea rdx, [rcx + rcx*2]
and r8, qword [r13 + rdx*8 + 0x18]
or r8, rax
mov qword [r13 + rdx*8 + 0x18], r8
cmp rcx, 0xfe
ja 0x180028f0b
mov r10, qword [r13 + rdx*8 + 0x30]
test r10b, 1
je 0x18002948d
cmp r12d, 0x4000
jb 0x180028f22
mov rcx, qword [r13 + rbp*8 + 0x18]
test cl, 1
je 0x180029982
lea rdx, [rsi + rsi*2]
lea rax, [rdx*8 + 0x20]
add rax, r13
mov rcx, qword [rsp + 0x30]
mov rsi, qword [rcx + 0xa0]
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], 0
test rsi, rsi
je 0x1800299ec
lea rcx, [rsp + 0xe0]
lea rdx, [rdx*8 + 0x30]
add rdx, r13
xor r10d, r10d
mov r8, 0xfffffffffffff000
mov r9d, 0xffffffff
jmp 0x18002ea7c
mov rcx, qword [r9]
test rcx, rcx
je 0x180028f94
test byte [rcx + 8], 1
jne 0x180028bd0
or rax, 1
mov qword [r9 + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002d8cf
mov r9, qword [rax]
test r9, r9
je 0x180028fc3
mov r8, qword [r9 + 8]
test r8b, 1
jne 0x18002b155
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov r9, rax
and byte [r9 + 8], 0xfe
lea rdx, [rsp + 0xe0]
mov qword [rdx], r9
jmp 0x180028bd0
and rax, 0xfffffffffffff000
cmp rax, r11
jb 0x180028c37
mov qword [rsp + 0x70], rbp
mov qword [rsp + 0x40], r12
mov r9, rsi
shl r9, 0xc
add r9, r13
and r9, 0xfffffffffff00000
mov rax, qword [r9 + 0x18]
mov qword [rsp + 0xa0], rax
movzx edx, sil
lea rax, [rdx*8]
lea r10, [rax + rax*2]
mov rax, qword [r9 + r10 + 0x30]
mov qword [rsp + 0x78], rax
mov r8, r11
shr r8, 0xc
cmp r11, 0x1000
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x60], r8
jb 0x180029e4d
cmp r8, 1
mov rax, r8
adc rax, 0
mov qword [rsp + 0x68], rax
lea rax, [rdx + rdx*2]
lea rbp, [r9 + rax*8]
add rbp, 0x30
xor ecx, ecx
xor esi, esi
lea r12, [rsi + rdx]
lea rax, [r12 + r12*2]
test byte [r9 + rax*8 + 0x30], 0x60
jne 0x1800290b2
inc rsi
cmp rsi, r8
setae cl
add rbp, 0x18
cmp rsi, qword [rsp + 0x68]
jne 0x180029089
jmp 0x180029e4f
cmp rsi, r8
jae 0x18002b1e9
mov qword [rsp + 0x58], rcx
mov rax, rbp
xor edx, edx
mov rcx, qword [rax]
test cl, 0x60
je 0x1800290e7
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
lea rcx, [rsi + rdx]
inc rcx
inc rdx
add rax, 0x18
cmp rcx, r8
jb 0x1800290c5
mov rcx, rdx
shl rcx, 0xc
jne 0x18002ab17
jmp 0x18002ad22
mov qword [rsp + 0x98], rdx
mov qword [rsp + 0x90], rcx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0xb8], eax
mov rcx, r12
mov rdx, qword [rsp + 0x98]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x18002d876
mov rax, qword [rsp + 0x98]
add r12, rax
mov rcx, qword [rsp + 0x90]
sub rcx, rax
mov eax, 0x100000
cmp rcx, rax
mov edx, 0x100000
cmovb rdx, rcx
test rcx, rcx
je 0x18002ab4a
jmp 0x1800290f9
test rdx, rdx
je 0x18002d79e
mov r8, rdx
test al, al
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
mov r12, r8
lea rdx, [r8*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [rbp + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x18002919c
test al, al
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x60]
je 0x18002a51d
mov rax, qword [rsp + 0x30]
add qword [rax + 0x50], r12
jmp 0x180029099
mov r9, qword [rax]
mov rcx, qword [rax + 8]
mov qword [rax], rcx
mov r10, r9
shl r10, 0x17
xor r10, r9
mov r9, rcx
shr r9, 0x1a
xor r9, rcx
xor r9, r10
shr r10, 0x11
xor r10, r9
add ecx, r10d
mov r9d, r8d
ror r9d, cl
mov qword [rax + 8], r10
tzcnt eax, r9d
add eax, ecx
and eax, 0x1f
jmp 0x180028cc5
mov eax, 0x10
mov qword [rsp + 0x68], rax
xor eax, eax
jmp 0x180028715
test eax, eax
jne 0x180029b2d
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x18002c614
mov rax, qword [rdx]
test rax, rax
jne 0x18002cafb
mov qword [rsp + 0xe0], rax
jmp 0x18002ee25
cmp qword [r12], r14
je 0x180029c3a
test ecx, ecx
je 0x180029881
sub rax, r13
shr rax, 0xc
lea rax, [rax + rax*2]
lea rbx, [rax*8 + 0x20]
add rbx, r13
mov rdx, qword [r12 + 8]
mov qword [rsp + 0xe0], rdx
mov qword [rsp + 0xe8], 0
xor ecx, ecx
cmp rdx, rbx
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x18002a6e3
test rdx, rdx
je 0x18002df8b
mov r9, qword [rdx]
test r9, r9
je 0x18002df8b
mov rax, qword [r9 + 8]
test al, 1
je 0x180029c47
xor r13d, r13d
mov r8d, 0xffffffff
xor eax, eax
mov rcx, rdx
mov rdx, r9
xor r9d, r9d
cmp rdx, rbx
setb r9b
cmova r9d, r8d
cmp r9d, 0xffffffff
jne 0x180029383
test rdx, rdx
je 0x18002c507
mov r9, qword [rdx]
test r9, r9
je 0x18002c504
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x1800292de
mov r11, qword [r9]
test r11, r11
je 0x18002932a
test byte [r11 + 8], 1
jne 0x1800292de
or r10, 1
mov qword [r9 + 8], r10
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18002d918
mov r9, qword [r10]
test r9, r9
je 0x180029359
mov rdi, qword [r9 + 8]
test dil, 1
jne 0x18002b42a
or r11, 1
mov qword [rdx + 8], r11
mov r9, qword [r10]
or r9, 1
mov qword [rdx + 8], r9
mov qword [r10], rdx
mov r9, r10
cmp qword [rcx], rdx
jne 0x18002e0d8
mov qword [rcx], r9
jmp 0x1800292e1
test r9d, r9d
jne 0x1800293a4
test rdx, rdx
je 0x18002dfc4
mov r10, qword [rdx + 8]
mov r13, rcx
cmp r10, 1
jbe 0x180029852
jmp 0x1800293b1
test rdx, rdx
je 0x18002e004
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x1800293cd
mov r11, qword [r9]
test r11, r11
je 0x1800293cd
test byte [r11 + 8], 1
jne 0x1800292de
mov r11, qword [rdx]
test r11, r11
je 0x18002e004
mov r9, qword [r11 + 8]
test r9b, 1
je 0x18002bf86
and r9, 0xfffffffffffffffe
je 0x18002e017
mov rdi, qword [r9]
test rdi, rdi
je 0x180029403
test byte [rdi + 8], 1
jne 0x18002c582
and r10d, 1
or r10, r9
mov qword [r11 + 8], r10
or byte [r9 + 8], 1
mov r9, qword [rdx]
test r9, r9
je 0x18002e032
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18002dfde
mov rdi, qword [r10]
and rdi, 0xfffffffffffffffe
and r11d, 1
or r11, rdi
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
or byte [rdx + 8], 1
cmp qword [rcx], rdx
jne 0x18002c0a8
mov qword [rcx], r9
mov rdx, rcx
jmp 0x1800292de
lea r8, [rdx*8 + 0x30]
add r8, r13
lea rcx, [r13 + rdx*8 + 0x20]
mov qword [rsp + 0x38], rcx
mov rdi, 0xfffffffffffff000
mov rcx, qword [rsp + 0x30]
mov r9, qword [rcx + 0xa0]
mov qword [rsp + 0xe0], r9
mov qword [rsp + 0xe8], 0
mov qword [rsp + 0x68], r8
mov rdx, qword [r8]
mov rcx, rdx
and rcx, rdi
mov r8, qword [r9 + 0x10]
and r8, rdi
xor r11d, r11d
cmp rcx, r8
seta r11b
mov r8d, 0xffffffff
cmovae r8d, r11d
test r8d, r8d
je 0x18002a763
cmp r8d, 0xffffffff
jne 0x180029b9b
mov r14, qword [r9]
test r14, r14
je 0x18002e0b2
mov rcx, qword [r14 + 8]
test cl, 1
je 0x180029dbb
xor ecx, ecx
mov qword [rsp + 0x28], rcx
mov r8, 0xfffffffffffff000
mov rdi, r9
mov r9, r14
mov rcx, qword [rsp + 0x68]
mov r11, qword [rcx]
mov rcx, r11
and rcx, r8
mov r14, qword [r14 + 0x10]
and r14, r8
xor edx, edx
cmp rcx, r14
seta dl
mov ecx, 0xffffffff
cmovb edx, ecx
test edx, edx
jne 0x180029576
test r11b, 0x10
mov ecx, 0
cmove rcx, qword [rsp + 0x38]
xor edx, edx
cmp rcx, r9
seta cl
jb 0x18002957b
mov dl, cl
cmp edx, 0xffffffff
jne 0x1800295f6
mov r14, qword [r9]
test r14, r14
je 0x18002b311
mov rcx, qword [r14 + 8]
test cl, 1
jne 0x18002952c
mov rdx, qword [r14]
test rdx, rdx
je 0x18002959e
test byte [rdx + 8], 1
jne 0x18002952c
or rcx, 1
mov qword [r14 + 8], rcx
mov r11, qword [r9 + 8]
mov rdx, r11
and rdx, 0xfffffffffffffffe
je 0x18002d85b
mov r14, qword [rdx]
test r14, r14
je 0x1800295cc
mov rcx, qword [r14 + 8]
test cl, 1
jne 0x18002b3b2
or r11, 1
mov qword [r9 + 8], r11
mov rcx, qword [rdx]
or rcx, 1
mov qword [r9 + 8], rcx
mov qword [rdx], r9
mov r14, rdx
cmp qword [rdi], r9
jne 0x18002e133
mov qword [rdi], r14
jmp 0x18002952f
test edx, edx
je 0x1800296db
mov rdx, qword [r9 + 8]
mov r14, rdx
and r14, 0xfffffffffffffffe
je 0x18002961d
mov rcx, qword [r14]
test rcx, rcx
je 0x18002961d
test byte [rcx + 8], 1
jne 0x18002952c
mov r11, qword [r9]
test r11, r11
je 0x18002df38
mov r14, qword [r11 + 8]
test r14b, 1
je 0x18002abb7
and r14, 0xfffffffffffffffe
je 0x18002d8b8
mov rcx, qword [r14]
test rcx, rcx
je 0x180029653
test byte [rcx + 8], 1
jne 0x18002b586
and edx, 1
or rdx, r14
mov qword [r11 + 8], rdx
or byte [r14 + 8], 1
mov r14, qword [r9]
test r14, r14
je 0x18002def8
mov rcx, qword [r14 + 8]
and rcx, 0xfffffffffffffffe
mov qword [r9], rcx
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r14 + 8]
and edx, 1
or rdx, rcx
mov qword [r14 + 8], rdx
mov r11, qword [r9 + 8]
mov rdx, r11
and rdx, 0xfffffffffffffffe
je 0x18002df12
mov rcx, qword [rdx]
and rcx, 0xfffffffffffffffe
and r11d, 1
or r11, rcx
mov qword [r9 + 8], r11
mov qword [rdx], r9
mov rcx, qword [r14 + 8]
and ecx, 1
or rcx, rdx
mov qword [r14 + 8], rcx
or byte [r9 + 8], 1
cmp qword [rdi], r9
jne 0x18002ac40
mov qword [rdi], r14
mov r9, rdi
jmp 0x18002952c
mov rdx, qword [r9 + 8]
mov rcx, rdi
mov qword [rsp + 0x28], rdi
cmp rdx, 1
ja 0x180029602
mov rdx, qword [r9]
test rdx, rdx
je 0x180029733
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
mov qword [r9], rcx
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov r8, qword [rdx + 8]
and r8d, 1
or r8, rcx
mov qword [rdx + 8], r8
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rcx
mov qword [rdx + 8], r8
or byte [r9 + 8], 1
and qword [rdx + 8], 1
cmp qword [rdi], r9
jne 0x18002a80c
mov qword [rdi], rdx
mov rdi, 0xfffffffffffff000
and r10, rdi
mov rcx, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0x30]
mov qword [rdx + 0xa0], rcx
pxor xmm0, xmm0
mov rcx, qword [rsp + 0x38]
movdqu xmmword [rcx], xmm0
add rax, r10
mov rcx, rax
shr rcx, 0xc
mov edx, 0xfff
mov r8, qword [rbx]
and r8, rdx
or r8, rax
mov qword [rbx], r8
add rcx, rsi
lea rcx, [rcx + rcx*2]
and rdx, qword [r13 + rcx*8 + 0x18]
or rdx, rax
mov qword [r13 + rcx*8 + 0x18], rdx
jmp 0x180028f0b
mov r8, rbx
sub r8, r14
add r14, rdi
mov eax, 0x100
cmp r8, rax
cmovae r8, rax
mov rcx, r14
mov dl, 0xe5
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x30]
lea r14, [rax + 0x18]
cmp dword [rax + 0x40], 0
jne 0x1800297d5
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, edi
shr eax, 0xc
movzx eax, al
mov rcx, r15
shr rcx, 0xc
mov rdx, r15
or rdx, 3
lea r8, [rax + rax*2]
mov qword [r13 + r8*8 + 0x30], rdx
sub rbx, r15
or rbx, 3
add rcx, rax
lea rax, [rcx + rcx*2]
mov qword [r13 + rax*8 + 0x30], rbx
add r15, rdi
mov rsi, qword [rsp + 0x30]
mov rcx, rsi
mov rdx, r15
mov r8b, 1
call fcn.1800375d0
mov rax, qword [rsp + 0x50]
add qword [rsi + 0x60], rax
cmp dword [r14 + 0x28], 0
jne 0x180028953
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x180028953
mov rax, qword [rdi]
movzx ecx, byte [rax + 0x2a]
mov rax, rcx
shl rax, 0xc
jmp 0x180028df6
mov rax, qword [rdx]
test rax, rax
jne 0x18002b374
xor eax, eax
cmp qword [rcx], rdx
jne 0x18002bfcf
mov qword [rcx], rax
mov rax, qword [rsp + 0xe0]
mov qword [r12 + 8], rax
pxor xmm0, xmm0
movdqu xmmword [rbx], xmm0
mov rcx, qword [rsp + 0x30]
mov rdx, r14
mov r8b, 1
call fcn.1800375d0
mov rdi, rax
dec dword [r12 + 0x24]
jmp 0x18002892d
mov qword [rax], 0
mov qword [rax + 8], 1
lea rcx, [rsp + 0xe0]
jmp 0x180029abf
mov r15d, 0x10
jmp 0x18002864e
mov rdx, qword [rsp + 0x30]
mov r10, qword [rdx + 0x68]
mov qword [rsp + 0xe8], r10
mov qword [rsp + 0xf0], 0
test r10, r10
je 0x18002ab6b
lea rdx, [rsp + 0xe0]
xor r8d, r8d
mov r9, r8
mov r8, rdx
mov rdx, qword [r10 + 8]
test rdx, rdx
je 0x18002991e
mov r11, qword [rdx + 0x10]
test r11b, 1
je 0x18002991e
mov rdi, qword [rdx + 8]
test rdi, rdi
je 0x18002991e
test byte [rdi + 0x10], 1
jne 0x180029942
mov rdx, r10
cmp rdx, r13
seta r11b
jbe 0x180029938
mov r10, qword [rdx + 8]
test r10, r10
jne 0x1800298f6
jmp 0x18002af85
mov r10, qword [rdx + 0x10]
and r10, 0xfffffffffffffffe
jmp 0x18002992e
and r11, 0xfffffffffffffffe
mov qword [r10 + 8], r11
mov rdi, r10
and rdi, 0xfffffffffffffffe
mov r11, qword [rdx + 8]
mov r14, qword [rdx + 0x10]
and r14d, 1
or r14, rdi
mov qword [rdx + 0x10], r14
test r11, r11
je 0x18002de52
and byte [r11 + 0x10], 0xfe
cmp qword [r8 + 8], r10
jne 0x18002aefe
mov qword [r8 + 8], rdx
jmp 0x180029921
mov rbx, rcx
and rbx, 0xfffffffffffff000
add rbx, rax
shr rcx, 0xc
sub rsi, rcx
mov rax, qword [rsp + 0x30]
lea rcx, [rax + 0xa0]
lea rax, [rsi + rsi*2]
lea rdi, [rax*8 + 0x20]
add rdi, r13
mov rdx, rdi
call fcn.180036a00
mov rax, rbx
shr rax, 0xc
mov ecx, 0xfff
mov rdx, qword [rdi + 0x10]
and rdx, rcx
or rdx, rbx
mov qword [rdi + 0x10], rdx
add rax, rsi
lea rax, [rax + rax*2]
and rcx, qword [r13 + rax*8 + 0x18]
or rcx, rbx
mov qword [r13 + rax*8 + 0x18], rcx
jmp 0x180028f22
mov qword [rax], 0
mov qword [rax + 8], 1
lea rcx, [rsp + 0xe0]
jmp 0x18002ec20
mov qword [rax], 0
mov qword [rax + 8], 1
lea rcx, [rsp + 0xe0]
jmp 0x180029d51
and rcx, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
lea r10, [r9 + rcx]
mov qword [rdx + 8], r10
test rcx, rcx
je 0x18002dc50
mov r10, qword [rcx]
and r10, 0xfffffffffffffffe
or r10, r9
mov qword [rdx + 8], r10
mov qword [rcx], rdx
mov r9, qword [rdx + 8]
and r9d, 1
mov r10, qword [rcx + 8]
and r10, 0xfffffffffffffffe
or r10, r9
mov qword [rcx + 8], r10
or byte [rdx + 8], 1
test r8, r8
je 0x18002d905
cmp qword [r8], rdx
jne 0x18002a823
mov qword [r8], rcx
cmp rax, rcx
setb r10b
jb 0x18002ac25
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
mov rdx, rcx
test r9, r9
jne 0x180028ab6
mov rdx, r8
mov qword [rax], 0
mov qword [rax + 8], 1
test r10b, r10b
jne 0x180029abf
cmp rcx, rax
jb 0x180029ae5
mov qword [rcx], rax
mov rax, qword [rsp + 0xe0]
test rax, rax
je 0x18002ddda
and byte [rax + 8], 0xfe
mov qword [r12 + 8], rax
mov qword [r12], r14
jmp 0x18002892b
mov r8, qword [rcx + 8]
and r8d, 1
mov r9, r8
or r9, rax
mov qword [rcx + 8], r9
mov r9, qword [rax]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rcx + 8], r9
mov qword [rax], rcx
mov r8, qword [rcx + 8]
and r8d, 1
mov r9, qword [rax + 8]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rax + 8], r9
or byte [rcx + 8], 1
cmp qword [rdx], rcx
jne 0x180029b77
mov qword [rdx], rax
jmp 0x180029ac2
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x28], rcx
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x18002ac8c
mov rcx, qword [r9]
test rcx, rcx
je 0x18002ac8c
test byte [rcx + 8], 1
je 0x18002ac8c
mov rax, qword [rsp + 0x28]
jmp 0x180028bd2
movabs rax, 0xe5e5e5e5e5e5e5e5
mov qword [r14], rax
jmp 0x180028953
mov r8, qword [rdx + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
cmp rcx, r9
jne 0x180029ac2
and r8d, 1
or r8, rax
mov qword [rdx + 8], r8
jmp 0x180029ac2
test r8d, r8d
je 0x18002ac5d
mov r8, qword [r9 + 8]
xor ecx, ecx
mov qword [rsp + 0x28], rcx
mov r14, r8
and r14, 0xfffffffffffffffe
je 0x180029bca
mov rcx, qword [r14]
test rcx, rcx
je 0x180029bca
test byte [rcx + 8], 1
jne 0x180029525
mov r11, qword [r9]
test r11, r11
je 0x18002da30
mov rdx, qword [r11 + 8]
test dl, 1
jne 0x18002b719
or r8, 1
mov qword [r9 + 8], r8
mov rcx, qword [r11]
test rcx, rcx
je 0x180029c00
mov rdx, qword [rcx + 8]
test dl, 1
jne 0x18002c40b
or byte [r11 + 8], 1
mov rcx, qword [r9 + 8]
mov r14, rcx
and r14, 0xfffffffffffffffe
je 0x18002e2eb
mov rdx, qword [r14]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [r9 + 8], rcx
mov qword [r14], r9
lea r9, [rsp + 0xe0]
mov qword [r9], r14
jmp 0x180029525
mov qword [r12], 0
jmp 0x180029881
mov rcx, qword [r9]
test rcx, rcx
je 0x180029c59
test byte [rcx + 8], 1
jne 0x1800292d3
or rax, 1
mov qword [r9 + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002da4b
mov r9, qword [rax]
test r9, r9
je 0x180029c88
mov r8, qword [r9 + 8]
test r8b, 1
jne 0x18002cca5
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov r9, rax
and byte [r9 + 8], 0xfe
lea rdx, [rsp + 0xe0]
mov qword [rdx], r9
jmp 0x1800292d3
and rcx, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
lea r10, [r9 + rcx]
mov qword [rdx + 8], r10
test rcx, rcx
je 0x18002dc8b
mov r10, qword [rcx]
and r10, 0xfffffffffffffffe
or r10, r9
mov qword [rdx + 8], r10
mov qword [rcx], rdx
mov r9, qword [rdx + 8]
and r9d, 1
mov r10, qword [rcx + 8]
and r10, 0xfffffffffffffffe
or r10, r9
mov qword [rcx + 8], r10
or byte [rdx + 8], 1
test r8, r8
je 0x18002d94e
cmp qword [r8], rdx
jne 0x18002ac2d
mov qword [r8], rcx
cmp rax, rcx
setb r10b
jb 0x18002ac84
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
mov rdx, rcx
test r9, r9
jne 0x180028d48
mov rdx, r8
mov qword [rax], 0
mov qword [rax + 8], 1
test r10b, r10b
jne 0x180029d51
cmp rcx, rax
jb 0x180029d73
mov qword [rcx], rax
mov rax, qword [rsp + 0xe0]
test rax, rax
je 0x18002dded
and byte [rax + 8], 0xfe
mov qword [r12 + 8], rax
jmp 0x18002892b
mov r8, qword [rcx + 8]
and r8d, 1
mov r9, r8
or r9, rax
mov qword [rcx + 8], r9
mov r9, qword [rax]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rcx + 8], r9
mov qword [rax], rcx
mov r8, qword [rcx + 8]
and r8d, 1
mov r9, qword [rax + 8]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rax + 8], r9
or byte [rcx + 8], 1
cmp qword [rdx], rcx
jne 0x180029e29
mov qword [rdx], rax
jmp 0x180029d54
mov rdx, qword [r14]
test rdx, rdx
je 0x180029dcd
test byte [rdx + 8], 1
jne 0x18002951e
or rcx, 1
mov qword [r14 + 8], rcx
mov r8, qword [r9 + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x18002d933
mov r14, qword [rdx]
test r14, r14
je 0x180029dfb
mov rcx, qword [r14 + 8]
test cl, 1
jne 0x18002c47f
or r8, 1
mov qword [r9 + 8], r8
mov rcx, qword [rdx]
or rcx, 1
mov qword [r9 + 8], rcx
mov qword [rdx], r9
mov r14, rdx
and byte [r14 + 8], 0xfe
lea r9, [rsp + 0xe0]
mov qword [r9], r14
jmp 0x18002951e
mov r8, qword [rdx + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
cmp rcx, r9
jne 0x180029d54
and r8d, 1
or r8, rax
mov qword [rdx + 8], r8
jmp 0x180029d54
mov cl, 1
mov qword [rsp + 0x58], rcx
lea rdx, [r9 + r10]
add rdx, 0x20
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax + 0xa0]
mov rax, rdx
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], 0
mov rdx, qword [rdx + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
mov qword [rsp + 0x68], rax
je 0x18002a6ab
cmp r8d, 0xffffffff
jne 0x18002a560
mov r9, qword [rcx]
test r9, r9
je 0x18002dfcb
mov rdx, qword [r9 + 8]
test dl, 1
je 0x18002a5fe
xor edx, edx
mov r10, 0xfffffffffffff000
mov r11d, 0xffffffff
mov r8, rcx
mov rcx, r9
mov rsi, qword [rax + 0x10]
mov r12, rsi
and r12, r10
mov rbp, qword [r9 + 0x10]
and rbp, r10
xor r9d, r9d
cmp r12, rbp
seta r9b
cmovb r9d, r11d
test r9d, r9d
jne 0x180029f2e
test sil, 0x10
mov esi, 0
cmove rsi, rax
xor r9d, r9d
cmp rsi, rcx
seta sil
jb 0x180029f34
mov r9b, sil
cmp r9d, 0xffffffff
jne 0x180029fb3
mov r9, qword [rcx]
test r9, r9
je 0x18002b096
mov rsi, qword [r9 + 8]
test sil, 1
jne 0x180029ee8
mov r12, qword [r9]
test r12, r12
je 0x180029f5a
test byte [r12 + 8], 1
jne 0x180029ee8
or rsi, 1
mov qword [r9 + 8], rsi
mov r12, qword [rcx + 8]
mov rsi, r12
and rsi, 0xfffffffffffffffe
je 0x18002d840
mov r9, qword [rsi]
test r9, r9
je 0x180029f89
mov rbp, qword [r9 + 8]
test bpl, 1
jne 0x18002b0f1
or r12, 1
mov qword [rcx + 8], r12
mov r9, qword [rsi]
or r9, 1
mov qword [rcx + 8], r9
mov qword [rsi], rcx
mov r9, rsi
cmp qword [r8], rcx
jne 0x18002e0f3
mov qword [r8], r9
jmp 0x180029eeb
test r9d, r9d
je 0x18002a0ac
mov rsi, qword [rcx + 8]
mov r9, rsi
and r9, 0xfffffffffffffffe
je 0x180029fdd
mov r12, qword [r9]
test r12, r12
je 0x180029fdd
test byte [r12 + 8], 1
jne 0x180029ee8
mov r12, qword [rcx]
test r12, r12
je 0x18002dea5
mov r9, qword [r12 + 8]
test r9b, 1
mov qword [rsp + 0x98], rdx
je 0x18002a719
and r9, 0xfffffffffffffffe
je 0x18002d897
mov rbp, qword [r9]
test rbp, rbp
je 0x18002a01c
test byte [rbp + 8], 1
jne 0x18002b21b
and esi, 1
or rsi, r9
mov qword [r12 + 8], rsi
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18002de65
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov rsi, qword [r9 + 8]
and esi, 1
or rsi, rdx
mov qword [r9 + 8], rsi
mov r12, qword [rcx + 8]
mov rsi, r12
and rsi, 0xfffffffffffffffe
je 0x18002de7f
mov rdx, qword [rsi]
and rdx, 0xfffffffffffffffe
and r12d, 1
or r12, rdx
mov qword [rcx + 8], r12
mov qword [rsi], rcx
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rsi
mov qword [r9 + 8], rdx
or byte [rcx + 8], 1
cmp qword [r8], rcx
mov rdx, qword [rsp + 0x98]
jne 0x18002aaf4
mov qword [r8], r9
mov rcx, r8
jmp 0x180029ee8
mov rsi, qword [rcx + 8]
mov rdx, r8
cmp rsi, 1
ja 0x180029fc0
mov rdx, qword [rcx]
test rdx, rdx
je 0x18002a0fe
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x50]
jne 0x18002a6cc
mov qword [r8], rdx
mov r9, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x78]
shr r8, 0xc
mov rcx, qword [rsp + 0xe0]
mov rax, qword [rsp + 0x30]
mov qword [rax + 0xa0], rcx
pxor xmm0, xmm0
mov rax, qword [rsp + 0x68]
movdqu xmmword [rax], xmm0
mov rax, qword [rsp + 0x60]
cmp r8, rax
jne 0x18002a2a0
cmp r11, 0x1000
jb 0x18002a1a1
cmp rax, 1
adc rax, 0
shl rax, 3
lea rcx, [rax + rax*2]
lea rax, [rdx + rdx*2]
lea rdx, [r9 + rax*8]
add rdx, 0x30
xor r8d, r8d
mov rax, qword [rsp + 0x30]
test byte [rdx + r8], 8
je 0x18002a190
dec qword [r9 + 0x18]
dec qword [rax + 0x88]
mov qword [rdx + r8], 3
add r8, 0x18
cmp rcx, r8
jne 0x18002a17e
mov rax, qword [rsp + 0x68]
or qword [rax + 0x10], r11
cmp qword [r9 + 0x18], 0
jne 0x18002a513
cmp qword [rsp + 0xa0], 0
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
je 0x18002a51d
mov rax, qword [rsp + 0x30]
mov rbp, qword [rax + 0x68]
mov qword [rsp + 0xe8], rbp
mov qword [rsp + 0xf0], 0
xor ecx, ecx
cmp rbp, r9
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x18002ad59
test eax, eax
je 0x18002c024
test rbp, rbp
je 0x18002da88
mov rcx, qword [rbp + 0x10]
xor r8d, r8d
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002a238
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18002a238
test byte [rdx + 0x10], 1
jne 0x18002ad7c
mov rax, qword [rbp + 8]
test rax, rax
je 0x18002e35f
mov rsi, r8
test byte [rax + 0x10], 1
jne 0x18002c621
or rcx, 1
mov qword [rbp + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002a270
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x18002d17a
or byte [rax + 0x10], 1
mov rcx, qword [rbp + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002e4e2
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [rbp + 0x10], rcx
mov qword [rax + 8], rbp
jmp 0x18002c638
mov r11, r8
add r8, rdx
sub r11, rax
shl r11, 0xc
lea rcx, [rdx + rax]
lea rdx, [rcx + rcx*2]
lea rcx, [r9 + rdx*8]
add rcx, 0x20
mov r9d, 0xfff
mov r10, qword [rcx + 0x10]
and r10, r9
or r10, r11
mov qword [rcx + 0x10], r10
lea r8, [r8 + r8*2]
mov rax, qword [rsp + 0x38]
and r9, qword [rax + r8*8 + 0x18]
or r9, r11
mov rax, qword [rsp + 0x38]
mov qword [rax + r8*8 + 0x18], r9
mov r9, qword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov r12, qword [rax + 0xa0]
mov qword [rsp + 0xe0], r12
mov qword [rsp + 0xe8], 0
test r12, r12
je 0x18002ad3d
lea r8, [r9 + rdx*8]
add r8, 0x30
lea rdx, [rsp + 0xe0]
xor r11d, r11d
mov r9, 0xfffffffffffff000
mov rsi, r11
mov r11, rdx
mov rdx, qword [r12]
test rdx, rdx
je 0x18002a35c
mov rbp, qword [rdx + 8]
test bpl, 1
je 0x18002a35c
mov r10, qword [rdx]
test r10, r10
je 0x18002a35c
test byte [r10 + 8], 1
jne 0x18002a3c7
mov rdx, r12
mov rsi, qword [r8]
mov rax, rsi
and rax, r9
mov r10, qword [rdx + 0x10]
and r10, r9
xor ebp, ebp
cmp rax, r10
seta bpl
mov eax, 0xffffffff
cmovb ebp, eax
test ebp, ebp
je 0x18002a39b
cmp ebp, 0xffffffff
jne 0x18002a3b8
mov r12, qword [rdx]
mov ebp, 0xffffffff
test r12, r12
jne 0x18002a334
jmp 0x18002a4a9
test sil, 0x10
mov eax, 0
cmove rax, rcx
xor ebp, ebp
cmp rax, rdx
seta r10b
jb 0x18002a389
mov bpl, r10b
jmp 0x18002a3bd
mov ebp, 1
mov r12, qword [rdx + 8]
and r12, 0xfffffffffffffffe
jmp 0x18002a391
and rbp, 0xfffffffffffffffe
mov qword [r12], rbp
mov r10, r12
and r10, 0xfffffffffffffffe
mov rbp, qword [rdx]
mov rax, qword [rdx + 8]
and eax, 1
or rax, r10
mov qword [rdx + 8], rax
test rbp, rbp
je 0x18002de19
and byte [rbp + 8], 0xfe
cmp qword [r11], r12
jne 0x18002a401
mov qword [r11], rdx
jmp 0x18002a35f
and rdx, 0xfffffffffffffffe
mov r12, qword [r11 + 8]
and r12d, 1
lea rax, [r12 + rdx]
mov qword [r11 + 8], rax
test rdx, rdx
je 0x18002de2c
mov rax, qword [rdx]
and rax, 0xfffffffffffffffe
or rax, r12
mov qword [r11 + 8], rax
mov qword [rdx], r11
mov rax, qword [r11 + 8]
and eax, 1
mov r10, qword [rdx + 8]
and r10, 0xfffffffffffffffe
or r10, rax
mov qword [rdx + 8], r10
or byte [r11 + 8], 1
test rsi, rsi
je 0x18002d97c
cmp qword [rsi], r11
je 0x18002b021
jmp 0x18002b208
mov r11, qword [r8]
mov rax, r11
and rax, r9
mov r10, qword [rdx + 0x10]
and r10, r9
xor r12d, r12d
cmp rax, r10
seta r12b
mov eax, 0xffffffff
cmovb r12d, eax
test r12d, r12d
jne 0x18002ad29
jmp 0x18002b562
mov r12, qword [rdx + 8]
and r12, 0xfffffffffffffffe
mov r11, rdx
test r12, r12
jne 0x18002a33a
mov r11, rsi
mov qword [rcx], 0
mov qword [rcx + 8], 1
cmp ebp, 1
jne 0x18002a66e
mov rax, qword [rdx + 8]
and eax, 1
mov r8, rax
or r8, rcx
mov qword [rdx + 8], r8
mov r8, qword [rcx]
and r8, 0xfffffffffffffffe
or r8, rax
mov qword [rdx + 8], r8
mov qword [rcx], rdx
mov rax, qword [rdx + 8]
and eax, 1
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
or r8, rax
mov qword [rcx + 8], r8
or byte [rdx + 8], 1
cmp qword [r11], rdx
mov r9, qword [rsp + 0x38]
jne 0x18002acf9
mov qword [r11], rcx
jmp 0x18002a676
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
test cl, 1
mov r12, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x70]
je 0x180028c37
lea rax, [rax*8 + 0x30]
add rax, r13
or r15, 3
lea rcx, [rdx + rdx*2]
mov qword [r13 + rcx*8 + 0x30], r15
mov qword [rax], 3
mov rax, qword [rsp + 0x30]
add qword [rax + 0x60], r11
mov sil, 1
jmp 0x180028c39
test r8d, r8d
je 0x18002abfe
mov r8, qword [rcx + 8]
xor edx, edx
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18002a58b
mov r10, qword [r9]
test r10, r10
je 0x18002a58b
test byte [r10 + 8], 1
jne 0x180029edb
mov r10, qword [rcx]
test r10, r10
je 0x18002d9fa
mov r9, qword [r10 + 8]
test r9b, 1
jne 0x18002b612
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [r10]
test r8, r8
je 0x18002a5c3
mov r9, qword [r8 + 8]
test r9b, 1
jne 0x18002c23f
or byte [r10 + 8], 1
mov r8, qword [rcx + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18002e295
mov r10, qword [r9]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [r9], rcx
lea rcx, [rsp + 0xe0]
mov qword [rcx], r9
jmp 0x180029edb
mov r8, qword [r9]
test r8, r8
je 0x18002a611
test byte [r8 + 8], 1
jne 0x180029ed9
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x18002d8ea
mov r9, qword [rdx]
test r9, r9
je 0x18002a640
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18002c2ad
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xe0]
mov qword [rcx], r9
jmp 0x180029ed9
mov r9, qword [rsp + 0x38]
mov qword [rdx], rcx
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x18002e0c5
and byte [rcx + 8], 0xfe
mov rax, qword [rsp + 0x30]
mov qword [rax + 0xa0], rcx
mov r11, qword [rsp + 0x50]
mov rax, qword [rsp + 0x60]
jmp 0x18002a151
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x180029ec0
mov r8b, dl
jmp 0x180029eb6
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x18002a10f
test eax, eax
jne 0x18002b4c1
test rdx, rdx
je 0x18002a70a
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x18002d531
mov rax, qword [rdx]
test rax, rax
jne 0x18002d60d
xor eax, eax
mov qword [rsp + 0xe0], rax
jmp 0x18002986c
or r9, 1
mov qword [r12 + 8], r9
mov r9, qword [r12]
test r9, r9
je 0x18002a739
mov rsi, qword [r9 + 8]
test sil, 1
jne 0x18002b029
mov rsi, qword [rcx + 8]
mov r9, rsi
and r9, 0xfffffffffffffffe
je 0x18002deb8
mov rdx, qword [r9]
and rdx, 0xfffffffffffffffe
and esi, 1
or rsi, rdx
mov qword [rcx + 8], rsi
mov qword [r9], rcx
jmp 0x18002a090
xor ecx, ecx
test dl, 0x10
cmove rcx, qword [rsp + 0x38]
xor r8d, r8d
cmp rcx, r9
seta cl
jb 0x180029505
mov r8b, cl
jmp 0x1800294fb
movzx eax, byte [r12 + rsi + 0xd2]
mov qword [rsp + 0x60], rax
lea rax, [r12 + 0xa0]
mov qword [rsp + 0x58], rax
mov rcx, qword [r12 + 0xa0]
test rcx, rcx
je 0x18002c14e
mov rdx, qword [rsp + 0x60]
shl rdx, 0xc
xor eax, eax
mov r8, 0xfffffffffffff000
mov r9d, 0xffffffff
mov r11, qword [rcx + 0x10]
and r11, r8
xor r10d, r10d
cmp rdx, r11
seta r10b
cmovb r10d, r9d
lea r11d, [r10 + 1]
cmp r11d, 2
jae 0x18002a7f8
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x18002a7c9
jmp 0x18002a8a9
cmp r10d, 1
jne 0x18002e1e0
mov rcx, qword [rcx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18002a7ee
and rdx, 0xfffffffffffffffe
mov rcx, qword [rdi + 8]
and ecx, 1
or rcx, rdx
mov qword [rdi + 8], rcx
jmp 0x18002973f
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
jmp 0x180029a82
cmp rbx, 0xfc001
jae 0x18002cf78
mov rcx, qword [rsp + 0x30]
cmp byte [rcx + 0x79], 0
jne 0x18002a855
mov rcx, qword [0x1800cb568]
mov r8d, 0x100000
mov rdx, r14
xor r9d, r9d
call fcn.180001df0
test rax, rax
je 0x18002db39
mov r15, rax
cmp r14, rbx
cmovb rbx, r14
mov rcx, rax
mov rdx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov rdx, rdi
and rdx, 0xfffff
je 0x18002cf0c
mov rcx, rdi
mov r8, qword [rsp + 0x30]
call fcn.180031ba0
jmp 0x18002895f
test rax, rax
je 0x18002c14e
mov rcx, rax
and rcx, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov rbp, rdx
and rbp, 0xfffffffffffffff0
shl rbp, 8
add rbp, rcx
mov r8, rbp
and r8, 0xfffffffffff00000
mov rax, qword [r8 + 0x18]
mov qword [rsp + 0x98], rax
mov eax, ebp
shr eax, 0xc
movzx r11d, al
lea rax, [r11*8]
lea rax, [rax + rax*2]
mov qword [rsp + 0x78], rax
mov rax, qword [r8 + rax + 0x30]
mov qword [rsp + 0xa0], rax
mov rdx, qword [rsp + 0x60]
test rdx, rdx
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x70], r11
je 0x18002b7ae
lea rax, [r11 + r11*2]
lea r8, [r8 + rax*8]
add r8, 0x30
xor r10d, r10d
xor r15d, r15d
mov r9, r11
add r11, r15
lea rax, [r11 + r11*2]
mov rcx, qword [rsp + 0x28]
test byte [rcx + rax*8 + 0x30], 0x60
jne 0x18002a975
inc r15
add r8, 0x18
cmp r15, rdx
setae r10b
mov r11, r9
jne 0x18002a947
jmp 0x18002b7b1
mov qword [rsp + 0x90], r11
mov rax, r8
xor ecx, ecx
mov qword [rsp + 0x48], rcx
mov rcx, qword [rax]
test cl, 0x60
je 0x18002a9b3
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
mov r11, qword [rsp + 0x48]
lea rcx, [r15 + r11]
inc rcx
inc r11
mov qword [rsp + 0x48], r11
add rax, 0x18
cmp rcx, rdx
jb 0x18002a987
mov rdx, qword [rsp + 0x48]
shl rdx, 0xc
mov qword [rsp + 0x88], r8
je 0x18002c477
mov qword [rsp + 0x40], r10
mov rcx, qword [rsp + 0x90]
shl rcx, 0xc
mov eax, ecx
and eax, 0xff000
mov r8d, 0x100000
sub r8, rax
cmp r8, rdx
cmovae r8, rdx
add rcx, qword [rsp + 0x28]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x80], r8
mov qword [rsp + 0xb8], rdx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0xb0], eax
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x80]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x18002d9a2
mov rcx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x80]
add rcx, rax
mov rdx, qword [rsp + 0xb8]
sub rdx, rax
mov eax, 0x100000
cmp rdx, rax
mov r8d, 0x100000
cmovb r8, rdx
test rdx, rdx
jne 0x18002a9f7
mov r11b, 1
mov r10, qword [rsp + 0x40]
mov r9, qword [rsp + 0x70]
cmp qword [rsp + 0x48], 0
mov rax, qword [rsp + 0x88]
je 0x18002aacf
test r11b, r11b
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
mov rdx, qword [rsp + 0x48]
lea rdx, [rdx*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [rax + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x18002aac2
test r11b, r11b
je 0x18002bb02
mov rax, qword [rsp + 0x48]
add qword [r12 + 0x50], rax
mov rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x88]
jmp 0x18002a95d
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rsi, rdx
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
mov rdx, rsi
mov rcx, r8
jmp 0x180029ee8
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x80], r10
shl r12, 0xc
mov eax, r12d
and eax, 0xff000
mov edx, 0x100000
sub rdx, rax
cmp rdx, rcx
cmovae rdx, rcx
add r12, r9
jmp 0x1800290f9
mov al, 1
mov r11, qword [rsp + 0x50]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
jmp 0x18002916e
test r13, r13
je 0x18002e08c
mov qword [r13 + 8], 0
mov qword [r13 + 0x10], 1
lea rdx, [rsp + 0xe0]
mov qword [rdx + 8], r13
mov rdx, qword [rsp + 0xe8]
test rdx, rdx
je 0x18002e09f
and byte [rdx + 0x10], 0xfe
mov r8, qword [rsp + 0x30]
mov qword [r8 + 0x68], rdx
mov rdx, qword [r13 + 0x18]
jmp 0x180028eba
or r14, 1
mov qword [r11 + 8], r14
mov rcx, qword [r11]
test rcx, rcx
je 0x18002abd4
mov rdx, qword [rcx + 8]
test dl, 1
jne 0x18002b29f
mov rcx, qword [r9 + 8]
mov r14, rcx
and r14, 0xfffffffffffffffe
je 0x18002df4b
mov rdx, qword [r14]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [r9 + 8], rcx
mov qword [r14], r9
jmp 0x1800296c7
mov r8, qword [rcx + 8]
cmp r8, 1
ja 0x18002c3fe
mov rdx, qword [rcx]
test rdx, rdx
jne 0x18002bfe6
mov qword [rsp + 0xe0], rdx
jmp 0x18002a10f
mov r9, qword [rcx]
jmp 0x180029a97
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
jmp 0x180029d14
mov rcx, r14
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 8]
and edx, 1
or rdx, rcx
mov qword [rdi + 8], rdx
mov r9, rdi
jmp 0x18002952c
mov r8, qword [r9 + 8]
cmp r8, 1
ja 0x18002c607
mov rdx, qword [r9]
test rdx, rdx
jne 0x18002c1a1
mov qword [rsp + 0xe0], rdx
jmp 0x180029746
mov r9, qword [rcx]
jmp 0x180029d29
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002e215
test byte [rcx + 8], 1
jne 0x18002b6aa
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18002acc0
mov r8, qword [rax + 8]
test r8b, 1
jne 0x18002c392
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x18002e2c5
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [r9], rdx
lea rdx, [rsp + 0xe0]
mov qword [rdx], r9
jmp 0x180029b5b
mov r8, qword [r11 + 8]
mov rax, r8
and rax, 0xfffffffffffffffe
cmp rdx, rax
mov rdx, qword [rsp + 0x28]
jne 0x18002a67b
and r8d, 1
or r8, rcx
mov qword [r11 + 8], r8
jmp 0x18002a67b
mov al, 1
jmp 0x18002916e
mov ebp, 1
cmp r12d, 0xffffffff
jne 0x18002a492
jmp 0x18002c09b
mov qword [rcx], 0
mov qword [rcx + 8], 1
lea rdx, [rsp + 0xe0]
jmp 0x18002a673
test rbp, rbp
je 0x18002b6da
mov rax, qword [rbp + 8]
test rax, rax
je 0x18002b6da
test byte [rax + 0x10], 1
je 0x18002b6c7
xor r8d, r8d
mov esi, 0xffffffff
xor r12d, r12d
lea rcx, [rsp + 0xd0]
mov r10, rbp
mov rbp, rax
xor eax, eax
cmp rbp, r9
setb al
cmova eax, esi
cmp eax, 0xffffffff
jne 0x18002add6
test rbp, rbp
je 0x18002d1ed
mov rax, qword [rbp + 8]
test rax, rax
je 0x18002d1ea
test byte [rax + 0x10], 1
jne 0x18002ad8c
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18002c32b
test byte [rdx + 0x10], 1
jne 0x18002ad8c
jmp 0x18002c32b
test eax, eax
jne 0x18002adf2
test rbp, rbp
je 0x18002e1e8
mov rax, qword [rbp + 0x10]
mov r8, r10
cmp rax, 1
jbe 0x18002ae63
jmp 0x18002adff
test rbp, rbp
je 0x18002da81
mov rax, qword [rbp + 0x10]
and rax, 0xfffffffffffffffe
je 0x18002ae18
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18002ae18
test byte [rdx + 0x10], 1
jne 0x18002ad8c
mov qword [rsp + 0x68], r8
lea rcx, [rsp + 0xc8]
mov rdx, rbp
mov rsi, r10
call fcn.180039460
mov rax, qword [rsp + 0xc8]
cmp qword [rsi + 8], rbp
jne 0x18002c311
jmp 0x18002c99b
mov rbp, rsi
mov r11, qword [rsp + 0x50]
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x68]
mov esi, 0xffffffff
jmp 0x18002ad84
mov r12, qword [rbp + 8]
test r12, r12
je 0x18002b422
mov rax, qword [r12 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rbp + 8], rax
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r12 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r12 + 0x10], rcx
mov rcx, qword [rbp + 0x10]
and ecx, 1
or rcx, rax
mov qword [r12 + 0x10], rcx
or byte [rbp + 0x10], 1
and qword [r12 + 0x10], 1
cmp qword [r10 + 8], rbp
jne 0x18002b1f1
mov qword [r10 + 8], r12
mov r12, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x70]
mov rax, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x30]
mov qword [rcx + 0x68], rax
test r9, r9
je 0x18002e1ef
pxor xmm0, xmm0
movdqu xmmword [r9 + 8], xmm0
cmp byte [rsp + 0x58], 0
mov rax, qword [rsp + 0x48]
jne 0x18002a530
jmp 0x180028c37
and rdx, 0xfffffffffffffffe
mov r10, qword [r8 + 0x10]
and r10d, 1
lea r11, [r10 + rdx]
mov qword [r8 + 0x10], r11
test rdx, rdx
je 0x18002de3f
mov r11, qword [rdx + 8]
and r11, 0xfffffffffffffffe
or r11, r10
mov qword [r8 + 0x10], r11
mov qword [rdx + 8], r8
mov r10, qword [r8 + 0x10]
and r10d, 1
mov r11, qword [rdx + 0x10]
and r11, 0xfffffffffffffffe
or r11, r10
mov qword [rdx + 0x10], r11
or byte [r8 + 0x10], 1
test r9, r9
je 0x18002d98f
cmp qword [r9 + 8], r8
jne 0x18002bf5b
mov qword [r9 + 8], rdx
cmp rdx, r13
seta r11b
ja 0x18002c1e0
mov r10, qword [rdx + 0x10]
and r10, 0xfffffffffffffffe
mov r8, rdx
test r10, r10
jne 0x1800298fc
mov r8, r9
test r13, r13
je 0x18002e08c
cmp rdx, r13
setae r9b
mov qword [r13 + 8], 0
mov qword [r13 + 0x10], 1
or r11b, r9b
jne 0x18002ab8c
mov r9, qword [rdx + 0x10]
and r9d, 1
mov r10, r9
or r10, r13
mov qword [rdx + 0x10], r10
mov r10, qword [r13 + 8]
and r10, 0xfffffffffffffffe
or r10, r9
mov qword [rdx + 0x10], r10
mov qword [r13 + 8], rdx
mov r9, qword [rdx + 0x10]
and r9d, 1
mov r10, qword [r13 + 0x10]
and r10, 0xfffffffffffffffe
or r10, r9
mov qword [r13 + 0x10], r10
or byte [rdx + 0x10], 1
cmp qword [r8 + 8], rdx
jne 0x18002affd
mov qword [r8 + 8], r13
jmp 0x18002ab90
mov r9, qword [r8 + 0x10]
mov r10, r9
and r10, 0xfffffffffffffffe
cmp rdx, r10
jne 0x18002ab90
and r9d, 1
or r9, r13
mov qword [r8 + 0x10], r9
jmp 0x18002ab90
mov qword [rsi], rdx
jmp 0x18002a461
and rsi, 0xfffffffffffffffe
mov qword [r9 + 8], rsi
mov r9, qword [rcx]
test r9, r9
je 0x18002decb
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov rsi, qword [r9 + 8]
and esi, 1
or rsi, rdx
mov qword [r9 + 8], rsi
mov r12, qword [rcx + 8]
mov rsi, r12
and rsi, 0xfffffffffffffffe
je 0x18002dee5
mov rdx, qword [rsi]
and rdx, 0xfffffffffffffffe
and r12d, 1
or r12, rdx
mov qword [rcx + 8], r12
mov qword [rsi], rcx
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rsi
mov qword [r9 + 8], rdx
jmp 0x18002a090
test rdx, rdx
je 0x18002e24b
cmp qword [rdx], rax
mov r11, qword [rsp + 0x50]
jne 0x18002c377
mov qword [rdx], rcx
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x18002e25e
mov qword [r8], 0
jmp 0x18002a10f
and rbp, 0xfffffffffffffffe
mov qword [rsi], rbp
mov r12, qword [r9 + 8]
and r12d, 1
or r12, rsi
mov qword [r9 + 8], r12
and r9, 0xfffffffffffffffe
mov rsi, qword [rcx + 8]
and esi, 1
lea r12, [rsi + r9]
mov qword [rcx + 8], r12
test r9, r9
je 0x18002dd68
mov r12, qword [r9]
and r12, 0xfffffffffffffffe
or r12, rsi
mov qword [rcx + 8], r12
mov qword [r9], rcx
mov rsi, qword [rcx + 8]
and rsi, 0xfffffffffffffffe
je 0x18002b14c
mov r12, qword [rsi + 8]
test r12b, 1
jne 0x18002c8f5
mov qword [rcx + 8], rsi
jmp 0x180029fa2
and r8, 0xfffffffffffffffe
mov qword [rax], r8
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
and r9, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + r9]
mov qword [rdx + 8], rcx
test r9, r9
je 0x18002e282
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [r9], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18002b559
mov rcx, qword [rax + 8]
test cl, 1
je 0x18002b559
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x18002e414
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [r9], rax
jmp 0x180028fdc
xor r12d, r12d
jmp 0x1800291c6
and r12, 0xfffffffffffffffe
mov rax, qword [r10 + 0x10]
and eax, 1
or rax, r12
mov qword [r10 + 0x10], rax
jmp 0x18002aebb
mov rax, qword [rsi + 8]
and eax, 1
or rax, rdx
mov qword [rsi + 8], rax
jmp 0x18002a461
and esi, 1
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
or rdx, rsi
mov qword [r9 + 8], rdx
and byte [rbp + 8], 0xfe
mov rsi, qword [r12 + 8]
mov r9, rsi
and r9, 0xfffffffffffffffe
je 0x18002de92
mov rdx, qword [r9]
and rdx, 0xfffffffffffffffe
and esi, 1
or rsi, rdx
mov qword [r12 + 8], rsi
mov qword [r9], r12
mov qword [rcx], r9
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov rsi, qword [r9 + 8]
and esi, 1
or rsi, rdx
mov qword [r9 + 8], rsi
mov r12, qword [rcx + 8]
mov rsi, r12
and rsi, 0xfffffffffffffffe
jne 0x18002a069
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
and rdx, 0xfffffffffffffffe
mov qword [rcx + 8], rdx
mov r14, qword [r9]
test r14, r14
je 0x18002df5e
mov rcx, qword [r14 + 8]
and rcx, 0xfffffffffffffffe
mov qword [r9], rcx
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r14 + 8]
and edx, 1
or rdx, rcx
mov qword [r14 + 8], rdx
mov rcx, qword [r9 + 8]
mov rdx, rcx
and rdx, 0xfffffffffffffffe
je 0x18002df78
mov r11, r10
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
and ecx, 1
or rcx, r10
mov qword [r9 + 8], rcx
mov qword [rdx], r9
mov rcx, qword [r14 + 8]
and ecx, 1
or rcx, rdx
mov qword [r14 + 8], rcx
mov r10, r11
jmp 0x1800296c7
mov r8, qword [rsp + 0x28]
test r8, r8
je 0x18002e2a8
mov rcx, qword [rsp + 0x38]
cmp qword [r8], rcx
jne 0x18002c568
mov qword [r8], r9
mov r8, qword [rsp + 0x38]
mov rcx, qword [r8]
mov qword [r9], rcx
mov rcx, qword [r8 + 8]
and rcx, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rcx
mov qword [r9 + 8], rdx
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r9 + 8], rdx
cmp qword [rdi], r9
jne 0x18002e2bb
mov qword [rdi], 0
jmp 0x18002973f
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
mov qword [rdx], r8
mov r8, rdx
and r8, 0xfffffffffffffffe
mov r9, qword [rax + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x180029860
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, qword [r14 + 8]
and ecx, 1
or rcx, rdx
mov qword [r14 + 8], rcx
and r14, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
lea rdx, [rcx + r14]
mov qword [r9 + 8], rdx
test r14, r14
je 0x18002ddb4
mov rdx, qword [r14]
and rdx, 0xfffffffffffffffe
or rdx, rcx
mov qword [r9 + 8], rdx
mov qword [r14], r9
mov rcx, qword [r9 + 8]
and rcx, 0xfffffffffffffffe
je 0x18002b40b
mov rdx, qword [rcx + 8]
test dl, 1
jne 0x18002cb39
mov qword [r9 + 8], rcx
jmp 0x1800295e5
dec dword [rbp + 0xc]
mov sil, 1
xor r15d, r15d
jmp 0x1800287d8
xor r12d, r12d
jmp 0x18002aead
and rdi, 0xfffffffffffffffe
mov qword [r10], rdi
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
lea r11, [r10 + r9]
mov qword [rdx + 8], r11
test r9, r9
je 0x18002dd8e
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
or r11, r10
mov qword [rdx + 8], r11
mov qword [r9], rdx
mov r10, qword [rdx + 8]
and r10, 0xfffffffffffffffe
je 0x18002b710
mov r11, qword [r10 + 8]
test r11b, 1
je 0x18002b710
and r11, 0xfffffffffffffffe
mov qword [r10 + 8], r11
mov r10, qword [rdx + 8]
mov r11, r10
or r11, 1
mov qword [rdx + 8], r11
and r10, 0xfffffffffffffffe
je 0x18002dd7b
mov r11, qword [r10]
or r11, 1
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov qword [r9], r10
jmp 0x180029372
test rdx, rdx
je 0x18002e2d8
mov rax, qword [rdx + 8]
xor r13d, r13d
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x18002b4ec
mov rcx, qword [r9]
test rcx, rcx
je 0x18002b4ec
test byte [rcx + 8], 1
jne 0x1800292d6
mov rcx, qword [rdx]
test rcx, rcx
je 0x18002e497
test byte [rcx + 8], 1
jne 0x18002cf60
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18002b520
mov r8, qword [rax + 8]
test r8b, 1
jne 0x18002d453
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x18002e541
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [r9], rdx
lea rdx, [rsp + 0xe0]
mov qword [rdx], r9
jmp 0x1800292d6
mov qword [rdx + 8], rax
jmp 0x180028fdc
test r11b, 0x10
mov eax, 0
cmove rax, rcx
xor ebp, ebp
cmp rax, rdx
seta r10b
jb 0x18002c09b
mov bpl, r10b
jmp 0x18002a492
mov qword [rsp + 0x60], r10
and edx, 1
mov r10, qword [r14 + 8]
and r10, 0xfffffffffffffffe
or r10, rdx
mov qword [r14 + 8], r10
and byte [rcx + 8], 0xfe
mov rcx, qword [r11 + 8]
mov r14, rcx
and r14, 0xfffffffffffffffe
je 0x18002df25
mov rdx, qword [r14]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [r11 + 8], rcx
mov qword [r14], r11
mov qword [r9], r14
mov rcx, qword [r14 + 8]
and rcx, 0xfffffffffffffffe
mov qword [r9], rcx
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r14 + 8]
and edx, 1
or rdx, rcx
mov qword [r14 + 8], rdx
mov r11, qword [r9 + 8]
mov rdx, r11
and rdx, 0xfffffffffffffffe
mov r10, qword [rsp + 0x60]
jne 0x18002969f
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
and r9, 0xfffffffffffffffe
je 0x18002d9c4
mov r11, qword [r9]
test r11, r11
je 0x18002b62f
test byte [r11 + 8], 1
jne 0x18002cb70
and r8d, 1
or r8, r9
mov qword [r10 + 8], r8
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18002e305
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x18002e31f
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
or byte [rcx + 8], 1
jmp 0x18002a5ee
lea rcx, [rsp + 0xd8]
call fcn.180008400
lea rax, [rsp + 0xd8]
mov r9, qword [rax]
jmp 0x18002ace9
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002b6da
test byte [rcx + 0x10], 1
jne 0x18002ad79
lea r12, [rsp + 0xd8]
mov rcx, r12
mov rdx, rbp
call fcn.180039300
mov rax, qword [r12]
test rax, rax
je 0x18002e4b2
and byte [rax + 0x10], 0xfe
xor r8d, r8d
mov r11, qword [rsp + 0x50]
mov r9, qword [rsp + 0x38]
jmp 0x18002c645
mov qword [rdx + 8], r10
jmp 0x180029372
and rdx, 0xfffffffffffffffe
je 0x18002da15
mov rdi, qword [rdx]
test rdi, rdi
je 0x18002b735
test byte [rdi + 8], 1
jne 0x18002cd41
and r8d, 1
or r8, rdx
mov qword [r11 + 8], r8
or byte [rdx + 8], 1
mov r14, qword [r9]
test r14, r14
je 0x18002e332
mov rcx, qword [r14 + 8]
and rcx, 0xfffffffffffffffe
mov qword [r9], rcx
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r14 + 8]
and edx, 1
or rdx, rcx
mov qword [r14 + 8], rdx
mov r8, qword [r9 + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x18002e34c
mov rcx, qword [rdx]
and rcx, 0xfffffffffffffffe
and r8d, 1
or r8, rcx
mov qword [r9 + 8], r8
mov qword [rdx], r9
mov rcx, qword [r14 + 8]
and ecx, 1
or rcx, rdx
mov qword [r14 + 8], rcx
or byte [r9 + 8], 1
jmp 0x180029c2a
mov r10b, 1
mov qword [rsp + 0x40], r10
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x78]
add rax, rcx
add rax, 0x20
mov r11, qword [rsp + 0x58]
mov rcx, qword [r11]
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], 0
mov rdx, qword [rax + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
mov qword [rsp + 0x48], rax
je 0x18002bf3a
cmp r8d, 0xffffffff
jne 0x18002be20
mov r9, qword [rcx]
test r9, r9
je 0x18002e202
mov rdx, qword [r9 + 8]
test dl, 1
je 0x18002bebe
xor edx, edx
mov qword [rsp + 0x78], rdx
mov r10, 0xfffffffffffff000
mov r8, rcx
mov rcx, r9
mov r9, qword [rax + 0x10]
mov r11, r9
and r11, r10
mov r15, qword [rcx + 0x10]
and r15, r10
xor edx, edx
cmp r11, r15
seta dl
mov r11d, 0xffffffff
cmovb edx, r11d
test edx, edx
jne 0x18002b894
test r9b, 0x10
mov r9d, 0
cmove r9, rax
xor edx, edx
cmp r9, rcx
seta r9b
jb 0x18002b899
mov dl, r9b
cmp edx, 0xffffffff
jne 0x18002b916
mov r9, qword [rcx]
test r9, r9
je 0x18002ca19
mov rdx, qword [r9 + 8]
test dl, 1
jne 0x18002b84b
mov r11, qword [r9]
test r11, r11
je 0x18002b8bd
test byte [r11 + 8], 1
jne 0x18002b84b
or rdx, 1
mov qword [r9 + 8], rdx
mov r15, qword [rcx + 8]
mov rdx, r15
and rdx, 0xfffffffffffffffe
je 0x18002d961
mov r9, qword [rdx]
test r9, r9
je 0x18002b8ec
mov r11, qword [r9 + 8]
test r11b, 1
jne 0x18002ca92
or r15, 1
mov qword [rcx + 8], r15
mov r9, qword [rdx]
or r9, 1
mov qword [rcx + 8], r9
mov qword [rdx], rcx
mov r9, rdx
cmp qword [r8], rcx
jne 0x18002e268
mov qword [r8], r9
jmp 0x18002b84e
test edx, edx
je 0x18002ba01
mov r15, qword [rcx + 8]
mov r9, r15
and r9, 0xfffffffffffffffe
je 0x18002b93d
mov rdx, qword [r9]
test rdx, rdx
je 0x18002b93d
test byte [rdx + 8], 1
jne 0x18002b84b
mov rdx, qword [rcx]
test rdx, rdx
je 0x18002e18d
mov r9, qword [rdx + 8]
test r9b, 1
je 0x18002c053
and r9, 0xfffffffffffffffe
je 0x18002d9df
mov r11, qword [r9]
test r11, r11
je 0x18002b974
test byte [r11 + 8], 1
jne 0x18002cc20
and r15d, 1
or r15, r9
mov qword [rdx + 8], r15
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18002e14d
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov r15, qword [rcx + 8]
mov rdx, r15
and rdx, 0xfffffffffffffffe
je 0x18002e167
mov rax, qword [rdx]
and rax, 0xfffffffffffffffe
and r15d, 1
or r15, rax
mov qword [rcx + 8], r15
mov qword [rdx], rcx
mov rax, qword [r9 + 8]
and eax, 1
or rax, rdx
mov qword [r9 + 8], rax
or byte [rcx + 8], 1
cmp qword [r8], rcx
mov rax, qword [rsp + 0x48]
jne 0x18002c1e9
mov qword [r8], r9
mov rcx, r8
jmp 0x18002b84b
mov r15, qword [rcx + 8]
mov rdx, r8
mov qword [rsp + 0x78], r8
cmp r15, 1
ja 0x18002b922
mov rdx, qword [rcx]
test rdx, rdx
je 0x18002ba58
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x58]
mov r15, qword [rsp + 0xa0]
jne 0x18002bf6f
mov qword [r8], rdx
mov r10, qword [rsp + 0x28]
shr r15, 0xc
mov rax, qword [rsp + 0xe0]
mov qword [r11], rax
pxor xmm0, xmm0
mov rax, qword [rsp + 0x48]
movdqu xmmword [rax], xmm0
mov rcx, qword [rsp + 0x60]
cmp r15, rcx
jne 0x18002bba6
test cl, cl
je 0x18002bae7
mov rax, rbp
or rax, 1
shl rcx, 3
lea rcx, [rcx + rcx*2]
mov rdx, qword [rsp + 0x70]
lea rdx, [rdx + rdx*2]
lea rdx, [r10 + rdx*8]
add rdx, 0x30
xor r8d, r8d
test byte [rdx + r8], 8
je 0x18002bada
dec qword [r10 + 0x18]
dec qword [r12 + 0x88]
mov qword [rdx + r8], rax
add r8, 0x18
cmp rcx, r8
jne 0x18002bac7
cmp qword [r10 + 0x18], 0
jne 0x18002bafd
cmp qword [rsp + 0x98], 0
jne 0x18002c0c6
mov r10, qword [rsp + 0x40]
test rbp, rbp
mov r15, qword [rsp + 0x38]
je 0x18002c8ce
test r10b, 1
je 0x18002c8ce
cmp qword [r15], rbp
je 0x18002ee45
mov qword [rbp], r15
xor eax, eax
cmp dword [r12 + rsi + 0xc4], 1
jne 0x18002bb38
xor edx, edx
jmp 0x18002bb5d
lea rdx, [r12 + rsi]
add rdx, 0xc4
xor ecx, ecx
mov dword [rbp + rcx*4 + 0x10], 0xffffffff
inc rcx
mov r8d, dword [rdx]
dec r8d
cmp rcx, r8
jb 0x18002bb45
mov edx, ecx
mov r8d, dword [r12 + rsi + 0xc0]
and r8d, 0x1f
mov ecx, r8d
neg cl
mov r9d, 0xffffffff
shr r9d, cl
cmp r8d, 1
sbb eax, eax
or eax, r9d
mov dword [rbp + rdx*4 + 0x10], eax
mov dword [rbp + 8], 0
mov eax, dword [r12 + rsi + 0xc0]
mov dword [rbp + 0xc], eax
inc dword [r12 + rsi + 0xcc]
mov qword [r15], rbp
jmp 0x180028772
mov rax, qword [rsp + 0x70]
lea rdx, [rax + r15]
sub r15, rcx
shl r15, 0xc
add rax, rcx
lea rcx, [rax + rax*2]
lea rax, [r10 + rcx*8]
add rax, 0x20
mov r8d, 0xfff
mov r9, qword [rax + 0x10]
and r9, r8
or r9, r15
mov qword [rax + 0x10], r9
lea rdx, [rdx + rdx*2]
and r8, qword [r10 + rdx*8 + 0x18]
or r8, r15
mov qword [r10 + rdx*8 + 0x18], r8
mov r15, qword [r11]
mov qword [rsp + 0xe0], r15
mov qword [rsp + 0xe8], 0
test r15, r15
je 0x18002c6cb
lea rcx, [r10 + rcx*8]
add rcx, 0x30
mov qword [rsp + 0x48], rcx
lea rcx, [rsp + 0xe0]
xor r10d, r10d
mov r11, r10
mov r10, rcx
mov rcx, qword [r15]
test rcx, rcx
je 0x18002bc49
mov r9, qword [rcx + 8]
test r9b, 1
je 0x18002bc49
mov r8, qword [rcx]
test r8, r8
je 0x18002bc49
test byte [r8 + 8], 1
jne 0x18002bcc7
mov rcx, r15
mov rdx, qword [rsp + 0x48]
mov r9, qword [rdx]
mov rdx, r9
mov r11, 0xfffffffffffff000
and rdx, r11
mov r8, qword [rcx + 0x10]
and r8, r11
xor r11d, r11d
cmp rdx, r8
seta r11b
mov edx, 0xffffffff
cmovb r11d, edx
test r11d, r11d
je 0x18002bc99
cmp r11d, 0xffffffff
jne 0x18002bcb7
mov r15, qword [rcx]
mov r9d, 0xffffffff
test r15, r15
jne 0x18002bc22
jmp 0x18002bdb5
test r9b, 0x10
mov edx, 0
cmove rdx, rax
xor r9d, r9d
cmp rdx, rcx
seta r8b
jb 0x18002bc86
mov r9b, r8b
jmp 0x18002bcbd
mov r9d, 1
mov r15, qword [rcx + 8]
and r15, 0xfffffffffffffffe
jmp 0x18002bc8f
and r9, 0xfffffffffffffffe
mov qword [r15], r9
mov r8, r15
and r8, 0xfffffffffffffffe
mov r9, qword [rcx]
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, r8
mov qword [rcx + 8], rdx
test r9, r9
je 0x18002e10d
and byte [r9 + 8], 0xfe
cmp qword [r10], r15
jne 0x18002bd01
mov qword [r10], rcx
jmp 0x18002bc4c
and rcx, 0xfffffffffffffffe
mov r9, qword [r10 + 8]
and r9d, 1
lea rdx, [r9 + rcx]
mov qword [r10 + 8], rdx
test rcx, rcx
je 0x18002e120
mov rdx, qword [rcx]
and rdx, 0xfffffffffffffffe
or rdx, r9
mov qword [r10 + 8], rdx
mov qword [rcx], r10
mov rdx, qword [r10 + 8]
and edx, 1
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
or byte [r10 + 8], 1
test r11, r11
je 0x18002da9b
cmp qword [r11], r10
je 0x18002c9a4
jmp 0x18002cc0d
mov rdx, qword [rsp + 0x48]
mov r9, qword [rdx]
mov rdx, r9
mov r10, 0xfffffffffffff000
and rdx, r10
mov r8, qword [rcx + 0x10]
and r8, r10
xor r10d, r10d
cmp rdx, r8
seta r10b
mov edx, 0xffffffff
cmovb r10d, edx
test r10d, r10d
jne 0x18002c656
jmp 0x18002cdc4
mov r15, qword [rcx + 8]
and r15, 0xfffffffffffffffe
mov r10, rcx
test r15, r15
jne 0x18002bc28
mov r10, r11
mov qword [rax], 0
mov qword [rax + 8], 1
cmp r9d, 1
jne 0x18002c6e2
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, rdx
or r8, rax
mov qword [rcx + 8], r8
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r10], rcx
mov r9, qword [rsp + 0x58]
jne 0x18002c4e1
mov qword [r10], rax
jmp 0x18002c6ea
test r8d, r8d
je 0x18002c20b
mov r8, qword [rcx + 8]
xor r10d, r10d
mov r9, r8
and r9, 0xfffffffffffffffe
mov qword [rsp + 0x78], r10
je 0x18002be50
mov rdx, qword [r9]
test rdx, rdx
je 0x18002be50
test byte [rdx + 8], 1
jne 0x18002b844
mov r10, qword [rcx]
test r10, r10
je 0x18002dac9
mov rdx, qword [r10 + 8]
test dl, 1
jne 0x18002cde9
or r8, 1
mov qword [rcx + 8], r8
mov rdx, qword [r10]
test rdx, rdx
je 0x18002be87
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18002d2b5
or byte [r10 + 8], 1
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18002e508
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [rcx + 8], rdx
mov qword [r9], rcx
lea rcx, [rsp + 0xe0]
mov qword [rcx], r9
jmp 0x18002bf30
mov r8, qword [r9]
test r8, r8
je 0x18002bed1
test byte [r8 + 8], 1
jne 0x18002b83d
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x18002da66
mov r9, qword [rdx]
test r9, r9
je 0x18002bf00
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18002d323
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xe0]
mov qword [rcx], r9
xor eax, eax
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x48]
jmp 0x18002b844
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x18002b824
mov r8b, dl
jmp 0x18002b81a
mov r8, qword [r9 + 0x10]
and r8d, 1
or r8, rdx
mov qword [r9 + 0x10], r8
jmp 0x18002af61
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x18002ba71
or r9, 1
mov qword [r11 + 8], r9
mov r9, qword [r11]
test r9, r9
je 0x18002bfa4
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18002c92c
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x18002e04c
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rdx + 8], r10
mov qword [r9], rdx
jmp 0x180029479
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, rax
mov qword [rcx + 8], rdx
jmp 0x18002986c
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x18002ac18
test rbp, rbp
je 0x18002c044
mov rcx, qword [rbp + 0x10]
cmp rcx, 1
ja 0x18002d524
mov rax, qword [rbp + 8]
test rax, rax
jne 0x18002c66b
xor eax, eax
mov qword [rsp + 0xe8], rax
jmp 0x18002aebb
or r9, 1
mov qword [rdx + 8], r9
mov rdx, qword [rdx]
test rdx, rdx
je 0x18002c071
mov r9, qword [rdx + 8]
test r9b, 1
jne 0x18002c9ac
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18002e1a0
mov rax, qword [r9]
and rax, 0xfffffffffffffffe
and edx, 1
or rdx, rax
mov qword [rcx + 8], rdx
mov qword [r9], rcx
jmp 0x18002b9e8
mov r12, qword [rdx]
mov ebp, 0xffffffff
jmp 0x18002a49a
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
mov rdx, rcx
jmp 0x1800292de
mov r9, qword [r12 + 0x68]
mov qword [rsp + 0xe8], r9
mov qword [rsp + 0xf0], 0
xor ecx, ecx
cmp r9, r10
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x18002c711
test eax, eax
je 0x18002d0ca
test r9, r9
je 0x18002daf1
mov rdx, r9
mov rcx, qword [r9 + 0x10]
xor eax, eax
mov qword [rsp + 0x60], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002d114
mov r8, qword [rax + 8]
test r8, r8
je 0x18002d114
test byte [r8 + 0x10], 1
je 0x18002d114
mov r10, qword [rsp + 0x28]
mov r8, qword [rsp + 0x40]
mov r9, rdx
jmp 0x18002c742
mov rdx, qword [r12 + 0x70]
test rdx, rdx
jne 0x18002c6a8
lea r9, [rsp + 0xe0]
mov ecx, 0x100000
mov edx, 0x100000
xor r8d, r8d
call fcn.180062350
test rax, rax
je 0x18002c8ce
mov rbp, rax
mov r8b, byte [rsp + 0xe0]
mov rcx, r12
mov rdx, rax
call fcn.180062ab0
add rbp, 0x3000
jmp 0x18002a8e0
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
mov qword [r9], rcx
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov r8, qword [rdx + 8]
and r8d, 1
or r8, rcx
mov qword [rdx + 8], r8
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rcx
mov qword [rdx + 8], r8
or byte [r9 + 8], 1
and qword [rdx + 8], 1
jmp 0x18002ac77
mov r10, qword [rdx + 8]
jmp 0x18002af76
mov rax, r9
and rax, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rax
mov rax, qword [rsp + 0x48]
mov qword [r8 + 8], rcx
mov rcx, r8
jmp 0x18002b84b
mov r8, qword [rcx + 8]
cmp r8, 1
ja 0x18002d446
mov rdx, qword [rcx]
test rdx, rdx
jne 0x18002d08c
mov qword [rsp + 0xe0], rdx
mov r10, qword [rsp + 0x28]
mov r15, qword [rsp + 0xa0]
jmp 0x18002ba76
and r9, 0xfffffffffffffffe
mov qword [r8 + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x18002e38d
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x18002e3a7
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, r8
mov qword [r9 + 8], rcx
jmp 0x18002a5ee
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x18002e3ba
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18002c308
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18002d27e
mov qword [rcx + 8], rdx
jmp 0x18002a659
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rsi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rsi + 0x10], rdx
jmp 0x18002ae47
mov qword [rsp + 0x68], r8
mov rdx, rbp
mov qword [rsp + 0x28], r10
call fcn.180039300
mov r10, qword [rsp + 0x28]
mov rax, qword [rsp + 0xd0]
cmp qword [r10 + 8], rbp
jne 0x18002e3cd
mov qword [r10 + 8], rax
mov rbp, rax
mov r11, qword [rsp + 0x50]
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x68]
lea rcx, [rsp + 0xd0]
jmp 0x18002ad92
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
jmp 0x18002b0b0
and r8, 0xfffffffffffffffe
mov qword [rax + 8], r8
mov r9, qword [rdx]
test r9, r9
je 0x18002e3e7
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002e401
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
jmp 0x18002ace9
lea rdx, [rsp + 0xe0]
jmp 0x18002a56f
and rdx, 0xfffffffffffffffe
mov qword [rcx + 8], rdx
mov r14, qword [r9]
test r14, r14
je 0x18002e427
mov rcx, qword [r14 + 8]
and rcx, 0xfffffffffffffffe
mov qword [r9], rcx
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r14 + 8]
and edx, 1
or rdx, rcx
mov qword [r14 + 8], rdx
mov rcx, qword [r9 + 8]
mov rdx, rcx
and rdx, 0xfffffffffffffffe
je 0x18002e441
mov r8, qword [rdx]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [r9 + 8], rcx
mov qword [rdx], r9
mov rcx, qword [r14 + 8]
and ecx, 1
or rcx, rdx
mov qword [r14 + 8], rcx
jmp 0x180029c2a
mov r11b, 1
jmp 0x18002aa8d
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, qword [r14 + 8]
and ecx, 1
or rcx, rdx
mov qword [r14 + 8], rcx
and r14, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
lea rdx, [rcx + r14]
mov qword [r9 + 8], rdx
test r14, r14
je 0x18002e454
mov rdx, qword [r14]
and rdx, 0xfffffffffffffffe
or rdx, rcx
mov qword [r9 + 8], rdx
mov qword [r14], r9
mov rcx, qword [r9 + 8]
and rcx, 0xfffffffffffffffe
je 0x18002c4d8
mov rdx, qword [rcx + 8]
test dl, 1
jne 0x18002d40f
mov qword [r9 + 8], rcx
jmp 0x180029e14
mov rdx, qword [r10 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
jne 0x18002c6ea
and edx, 1
or rdx, rax
mov qword [r10 + 8], rdx
jmp 0x18002c6ea
mov rax, rdx
test r13, r13
je 0x18002e467
cmp qword [r13], rbx
jne 0x18002d071
mov qword [r13], rax
test rdx, rdx
je 0x18002e47a
mov rdx, qword [rbx]
mov qword [rax], rdx
mov rdx, qword [rbx + 8]
and rdx, 0xfffffffffffffffe
mov r8, qword [rax + 8]
and r8d, 1
or r8, rdx
mov qword [rax + 8], r8
mov r8, qword [rbx + 8]
and r8d, 1
or r8, rdx
mov qword [rax + 8], r8
cmp qword [rcx], rax
jne 0x18002e48d
mov qword [rcx], 0
jmp 0x18002986c
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
jmp 0x18002b330
and r10d, 1
mov rbp, qword [r9 + 8]
and rbp, 0xfffffffffffffffe
or rbp, r10
mov qword [r9 + 8], rbp
and byte [rdi + 8], 0xfe
mov r10, qword [r11 + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x18002dff1
mov rdi, qword [r9]
and rdi, 0xfffffffffffffffe
and r10d, 1
or r10, rdi
mov qword [r11 + 8], r10
mov qword [r9], r11
mov qword [rdx], r9
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
jne 0x180029451
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rcx, [rsp + 0xe0]
jmp 0x180029baa
lea rcx, [rsp + 0xe0]
jmp 0x180029b33
lea r12, [rsp + 0xd8]
mov rcx, r12
mov rdx, rbp
call fcn.180039460
mov rax, qword [r12]
mov r11, qword [rsp + 0x50]
mov r9, qword [rsp + 0x38]
mov r8, rsi
lea rbp, [rsp + 0xe0]
mov qword [rbp + 8], rax
jmp 0x18002ad7c
mov r9d, 1
cmp r10d, 0xffffffff
jne 0x18002bd9e
jmp 0x18002d106
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rbp + 8], rcx
mov rcx, rbp
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [rbp + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x18002c046
mov qword [r12 + 0x70], 0
lea rbp, [rdx + 0x3000]
add rdx, 0x68
mov rcx, qword [rsp + 0x58]
call fcn.180062bd0
jmp 0x18002a8e0
mov qword [rax], 0
mov qword [rax + 8], 1
lea rcx, [rsp + 0xe0]
mov r9, qword [rsp + 0x58]
mov qword [rcx], rax
mov rax, qword [rsp + 0xe0]
test rax, rax
je 0x18002e230
and byte [rax + 8], 0xfe
mov qword [r9], rax
mov r10, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x60]
jmp 0x18002baa0
test r9, r9
je 0x18002cf31
mov rax, qword [r9 + 8]
test rax, rax
je 0x18002cf31
test byte [rax + 0x10], 1
je 0x18002cf1e
xor ecx, ecx
mov qword [rsp + 0x60], rcx
mov r10, qword [rsp + 0x28]
mov r8, qword [rsp + 0x40]
mov ecx, 0xffffffff
xor r15d, r15d
mov rdx, rax
xor eax, eax
cmp rdx, r10
setb al
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x18002c782
test rdx, rdx
je 0x18002e243
mov rax, qword [rdx + 8]
test rax, rax
je 0x18002d6db
test byte [rax + 0x10], 1
je 0x18002c81a
mov r9, rdx
jmp 0x18002c74a
test eax, eax
jne 0x18002c7a7
test rdx, rdx
je 0x18002e2fe
mov rax, qword [rdx + 0x10]
mov rcx, r9
mov qword [rsp + 0x60], r9
cmp rax, 1
jbe 0x18002c84d
jmp 0x18002c7b4
test rdx, rdx
je 0x18002dae4
mov rax, qword [rdx + 0x10]
mov qword [rsp + 0x58], r9
mov r9, rdx
and rax, 0xfffffffffffffffe
je 0x18002c7e4
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002c7e4
test byte [rcx + 0x10], 1
mov r10, qword [rsp + 0x28]
mov r8, qword [rsp + 0x40]
mov ecx, 0xffffffff
jne 0x18002c74a
mov qword [rsp + 0x48], r9
lea rcx, [rsp + 0xc8]
mov rdx, r9
call fcn.180039460
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x48]
cmp qword [rcx + 8], rdx
jne 0x18002d387
jmp 0x18002d57a
mov qword [rsp + 0x58], r9
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002d3a6
test byte [rcx + 0x10], 1
je 0x18002d3a6
mov r9, rdx
mov r10, qword [rsp + 0x28]
mov r8, qword [rsp + 0x40]
mov ecx, 0xffffffff
jmp 0x18002c74a
mov r15, qword [rdx + 8]
test r15, r15
je 0x18002cd39
mov rax, qword [r15 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rdx + 8], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r15 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r15 + 0x10], rcx
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [r15 + 0x10], rcx
or byte [rdx + 0x10], 1
and qword [r15 + 0x10], 1
cmp qword [r9 + 8], rdx
jne 0x18002cbf6
mov qword [r9 + 8], r15
mov rax, qword [rsp + 0xe8]
mov qword [r12 + 0x68], rax
test r10, r10
mov r15, qword [rsp + 0x38]
je 0x18002e37a
pxor xmm0, xmm0
movdqu xmmword [r10 + 8], xmm0
test r8b, r8b
jne 0x18002bb1a
mov qword [r15], 0
mov sil, 1
jmp 0x1800287d8
mov edx, 0x100000
mov rcx, rdi
mov r8d, 2
call fcn.180039740
jmp 0x180028950
and r12, 0xfffffffffffffffe
mov qword [rsi + 8], r12
mov rsi, qword [rcx + 8]
mov r12, rsi
or r12, 1
mov qword [rcx + 8], r12
and rsi, 0xfffffffffffffffe
je 0x18002dd55
mov r12, qword [rsi]
or r12, 1
mov qword [rcx + 8], r12
mov qword [rsi], rcx
mov qword [r9], rsi
jmp 0x180029fa2
and r10, 0xfffffffffffffffe
mov qword [r9 + 8], r10
mov r9, qword [rdx]
test r9, r9
je 0x18002e05f
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18002e079
mov rdi, qword [r10]
and rdi, 0xfffffffffffffffe
and r11d, 1
or r11, rdi
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
jmp 0x180029479
mov qword [rsi + 8], rax
jmp 0x18002ae47
mov qword [r11], rcx
jmp 0x18002bd61
and r9, 0xfffffffffffffffe
mov qword [rdx + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x18002e1b3
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov r11, qword [rcx + 8]
mov rdx, r11
and rdx, 0xfffffffffffffffe
je 0x18002e1cd
mov rax, qword [rdx]
and rax, 0xfffffffffffffffe
and r11d, 1
or r11, rax
mov qword [rcx + 8], r11
mov qword [rdx], rcx
mov rax, qword [r9 + 8]
and eax, 1
or rax, rdx
mov qword [r9 + 8], rax
jmp 0x18002b9e8
mov r10, qword [rsp + 0x78]
test r10, r10
je 0x18002e4c5
cmp qword [r10], rax
jne 0x18002d3f4
mov qword [r10], rcx
mov rax, qword [rsp + 0x48]
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x18002e4d8
mov qword [r8], 0
mov r10, qword [rsp + 0x28]
mov r11, qword [rsp + 0x58]
mov r15, qword [rsp + 0xa0]
jmp 0x18002ba76
xor ecx, ecx
jmp 0x180028663
and r11, 0xfffffffffffffffe
mov qword [rdx], r11
mov r11, qword [r9 + 8]
and r11d, 1
or r11, rdx
mov qword [r9 + 8], r11
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r11, [rdx + r9]
mov qword [rcx + 8], r11
test r9, r9
je 0x18002dfb1
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
or r11, rdx
mov qword [rcx + 8], r11
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18002caed
mov r11, qword [rdx + 8]
test r11b, 1
jne 0x18002d53e
mov qword [rcx + 8], rdx
mov rax, qword [rsp + 0x48]
jmp 0x18002b905
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov r8, qword [rax + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
mov r8, qword [rdx + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18002924b
and rdx, 0xfffffffffffffffe
mov qword [rcx + 8], rdx
mov rcx, qword [r9 + 8]
mov rdx, rcx
or rdx, 1
mov qword [r9 + 8], rdx
and rcx, 0xfffffffffffffffe
je 0x18002dda1
mov rdx, qword [rcx]
or rdx, 1
mov qword [r9 + 8], rdx
mov qword [rcx], r9
mov qword [r14], rcx
jmp 0x1800295e5
and r8d, 1
mov rsi, qword [r9 + 8]
and rsi, 0xfffffffffffffffe
or rsi, r8
mov qword [r9 + 8], rsi
and byte [r11 + 8], 0xfe
mov r8, qword [r10 + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18002e4f5
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r8d, 1
or r8, r11
mov qword [r10 + 8], r8
mov qword [r9], r10
mov qword [rcx], r9
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
jne 0x18002b67d
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
and r15, 0xfffffffffffffffe
mov rax, qword [r9 + 0x10]
and eax, 1
or rax, r15
mov qword [r9 + 0x10], rax
jmp 0x18002c8a0
mov rdx, qword [r11 + 8]
and edx, 1
or rdx, rcx
mov qword [r11 + 8], rdx
jmp 0x18002bd61
and r15d, 1
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
or rax, r15
mov qword [r9 + 8], rax
and byte [r11 + 8], 0xfe
mov r11, qword [rdx + 8]
mov r9, r11
and r9, 0xfffffffffffffffe
je 0x18002e17a
mov rax, qword [r9]
and rax, 0xfffffffffffffffe
and r11d, 1
or r11, rax
mov qword [rdx + 8], r11
mov qword [r9], rdx
mov qword [rcx], r9
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov r15, qword [rcx + 8]
mov rdx, r15
and rdx, 0xfffffffffffffffe
jne 0x18002b9c1
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
and r8, 0xfffffffffffffffe
mov qword [rax], r8
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
and r9, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + r9]
mov qword [rdx + 8], rcx
test r9, r9
je 0x18002e51b
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [r9], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18002cf03
mov rcx, qword [rax + 8]
test cl, 1
je 0x18002cf03
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x18002e6d4
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [r9], rax
jmp 0x180029ca1
xor r15d, r15d
jmp 0x18002c892
and r8d, 1
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
or rcx, r8
mov qword [rdx + 8], rcx
and byte [rdi + 8], 0xfe
mov rcx, qword [r11 + 8]
mov r14, rcx
and r14, 0xfffffffffffffffe
je 0x18002e52e
mov rdx, qword [r14]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [r11 + 8], rcx
mov qword [r14], r11
mov qword [r9], r14
mov rcx, qword [r14 + 8]
and rcx, 0xfffffffffffffffe
mov qword [r9], rcx
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r14 + 8]
and edx, 1
or rdx, rcx
mov qword [r14 + 8], rdx
mov r8, qword [r9 + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
jne 0x18002b781
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
test r9b, 0x10
mov edx, 0
cmove rdx, rax
xor r9d, r9d
cmp rdx, rcx
seta r8b
jb 0x18002d106
mov r9b, r8b
jmp 0x18002bd9e
and rdx, 0xfffffffffffffffe
je 0x18002daae
mov r9, qword [rdx]
test r9, r9
je 0x18002ce06
test byte [r9 + 8], 1
jne 0x18002d588
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
or byte [rdx + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18002e554
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x18002e56e
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
or byte [rcx + 8], 1
jmp 0x18002beb1
lea rcx, [0x1800cb5b8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rsi, qword [0x1800cb5e0]
mov eax, 0xffffffff
xor ecx, ecx
cmp qword [rsi + 0x20], rdi
setb cl
cmova ecx, eax
test ecx, ecx
je 0x18002cebe
cmp ecx, 0xffffffff
je 0x18002ceb8
mov rsi, qword [rsi + 0x18]
and rsi, 0xfffffffffffffffe
jmp 0x18002ce99
mov rsi, qword [rsi + 0x10]
jmp 0x18002ce99
mov rbx, qword [rsi + 0x28]
lea rcx, [0x1800cb5b8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1800285fa
mov rax, qword [rsi]
mov rcx, qword [rsi + 0x30]
mov qword [rsp + 0x30], rcx
cmp rax, qword [rcx + 0x10]
je 0x18002860f
lea rax, str.MOZ_RELEASE_ASSERT_mNode__mArenaId__mNode__mArena__mId_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov qword [rdx + 8], rax
jmp 0x180029ca1
mov rcx, rdi
mov rdx, qword [rsp + 0x30]
call fcn.180002d30
jmp 0x18002895f
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002cf31
test byte [rcx + 0x10], 1
jne 0x18002c731
lea r15, [rsp + 0xd8]
mov rcx, r15
mov rdx, r9
call fcn.180039300
mov rax, qword [r15]
test rax, rax
je 0x18002e6e7
and byte [rax + 0x10], 0xfe
xor ecx, ecx
mov qword [rsp + 0x60], rcx
jmp 0x18002d4d2
lea rdi, [rsp + 0xd8]
mov rcx, rdi
call fcn.180008400
mov r9, qword [rdi]
jmp 0x18002b549
mov eax, 0x100fff
lea rcx, [r14 + rax]
add rax, rbx
xor rax, rcx
cmp rax, 0xfffff
ja 0x18002a843
lea rsi, [r14 + 0xfff]
and rsi, 0xfffffffffffff000
mov rax, rbx
sub rax, r14
jbe 0x18002cfc3
add r14, rdi
mov r8d, 0x100
cmp rax, r8
cmovb r8, rax
mov rcx, r14
mov dl, 0xe5
call sub.VCRUNTIME140.dll_memset
cmp rsi, rbx
jb 0x18002e7b7
jbe 0x180028953
mov r15, rsi
sub r15, rbx
je 0x18002d02f
add rbx, rdi
mov eax, ebx
and eax, 0xfffff
mov r12d, 0x100000
mov r14d, 0x100000
sub r14, rax
cmp r14, r15
cmovae r14, r15
mov r13, r15
mov rcx, rbx
mov rdx, r14
mov r8d, 0x1000
call fcn.180062260
test rax, rax
je 0x18002db39
add rbx, r14
sub r13, r14
cmp r13, r12
mov r14d, 0x100000
cmovb r14, r13
test r13, r13
jne 0x18002cffd
lea rcx, [0x1800cb5b8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb5e0]
mov ecx, 0xffffffff
xor edx, edx
cmp qword [rax + 0x20], rdi
setb dl
cmova edx, ecx
cmp edx, 0xffffffff
je 0x18002d06b
test edx, edx
je 0x18002e881
mov rax, qword [rax + 0x18]
and rax, 0xfffffffffffffffe
jmp 0x18002d048
mov rax, qword [rax + 0x10]
jmp 0x18002d048
mov r8, rax
and r8, 0xfffffffffffffffe
mov r9, qword [r13 + 8]
and r9d, 1
or r9, r8
mov qword [r13 + 8], r9
jmp 0x18002c51e
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x18002c225
test r9, r9
je 0x18002d0ed
mov rdx, r9
mov rcx, qword [r9 + 0x10]
cmp rcx, 1
ja 0x18002d814
mov rax, qword [rdx + 8]
test rax, rax
jne 0x18002d4e3
xor eax, eax
mov qword [rsp + 0xe8], rax
mov r10, qword [rsp + 0x28]
mov r8, qword [rsp + 0x40]
jmp 0x18002c8a0
mov r15, qword [rcx]
mov r9d, 0xffffffff
jmp 0x18002bda6
mov rax, qword [rdx + 8]
test rax, rax
je 0x18002e581
test byte [rax + 0x10], 1
jne 0x18002d4bf
or rcx, 1
mov qword [rdx + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18002d14a
mov r8, qword [rcx + 0x10]
test r8b, 1
jne 0x18002d665
or byte [rax + 0x10], 1
mov rcx, qword [rdx + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002e6fa
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 0x10], rcx
mov qword [rax + 8], rdx
jmp 0x18002d4d2
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [rbp + 8]
test rax, rax
je 0x18002e59c
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rbp + 8], rcx
mov rcx, rbp
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbp + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x18002e5b7
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [rbp + 0x10], rdx
mov qword [rcx + 8], rbp
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x18002c638
mov r12, rbp
test r8, r8
je 0x18002e5ca
mov rax, qword [rsp + 0x38]
cmp qword [r8 + 8], rax
jne 0x18002d64b
mov qword [r8 + 8], r12
cmp qword [rsp + 0x38], 0
je 0x18002e5ea
test rbp, rbp
je 0x18002e605
mov rdx, qword [rsp + 0x38]
mov rax, qword [rdx + 8]
mov qword [r12 + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [r12 + 0x10]
and eax, 1
or rax, rcx
mov qword [r12 + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov qword [r12 + 0x10], rax
cmp qword [r10 + 8], r12
jne 0x18002e618
mov qword [r10 + 8], 0
mov r11, qword [rsp + 0x50]
mov r12, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x70]
mov r9, qword [rsp + 0x38]
jmp 0x18002aec5
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x18002e622
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
jmp 0x18002a659
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov r9, qword [rcx]
test r9, r9
je 0x18002e635
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x18002e64f
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rdx
mov qword [r9 + 8], rcx
jmp 0x18002beb1
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x18002e662
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18002d37e
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18002d767
mov qword [rcx + 8], rdx
jmp 0x18002bf19
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov r9, qword [rsp + 0x58]
mov rdx, qword [r9 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r9 + 0x10], rdx
jmp 0x18002c839
lea rcx, [rsp + 0xd0]
mov qword [rsp + 0x48], rdx
call fcn.180039300
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x48]
cmp qword [rcx + 8], rdx
jne 0x18002e675
mov r9, qword [rsp + 0x58]
mov qword [r9 + 8], rax
mov rdx, rax
mov r10, qword [rsp + 0x28]
mov r8, qword [rsp + 0x40]
mov ecx, 0xffffffff
jmp 0x18002c74d
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r9, qword [r10 + 8]
and r9d, 1
or r9, rdx
mov qword [r10 + 8], r9
jmp 0x18002ca33
and rdx, 0xfffffffffffffffe
mov qword [rcx + 8], rdx
mov rcx, qword [r9 + 8]
mov rdx, rcx
or rdx, 1
mov qword [r9 + 8], rdx
and rcx, 0xfffffffffffffffe
je 0x18002e694
mov rdx, qword [rcx]
or rdx, 1
mov qword [r9 + 8], rdx
mov qword [rcx], r9
mov qword [r14], rcx
jmp 0x180029e14
lea r10, [rsp + 0xe0]
jmp 0x18002be30
and r8, 0xfffffffffffffffe
mov qword [rax + 8], r8
mov r9, qword [rdx]
test r9, r9
je 0x18002e6a7
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18002e6c1
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
jmp 0x18002b549
lea r15, [rsp + 0xd8]
mov rcx, r15
call fcn.180039460
mov rax, qword [r15]
lea r9, [rsp + 0xe0]
mov qword [r9 + 8], rax
jmp 0x18002c738
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov r8, rdx
mov qword [rdx + 8], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r8 + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [r8 + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x18002d0ef
lea r8, [rsp + 0xe0]
jmp 0x18002a21c
lea r13, [rsp + 0xe0]
jmp 0x18002b4d1
and r11, 0xfffffffffffffffe
mov qword [rdx + 8], r11
mov rdx, qword [rcx + 8]
mov r11, rdx
or r11, 1
mov qword [rcx + 8], r11
and rdx, 0xfffffffffffffffe
je 0x18002df9e
mov r11, qword [rdx]
or r11, 1
mov qword [rcx + 8], r11
mov qword [rdx], rcx
mov qword [r9], rdx
mov rax, qword [rsp + 0x48]
jmp 0x18002b905
mov r9, qword [rsp + 0x58]
mov qword [r9 + 8], rax
jmp 0x18002c839
and r8d, 1
mov r11, qword [rdx + 8]
and r11, 0xfffffffffffffffe
or r11, r8
mov qword [rdx + 8], r11
and byte [r9 + 8], 0xfe
mov rdx, qword [r10 + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18002e70d
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r10 + 8], rdx
mov qword [r9], r10
mov qword [rcx], r9
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
jne 0x18002ce53
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov r8, qword [rax + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
mov r8, qword [rdx + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18002a70c
mov rax, r12
and rax, 0xfffffffffffffffe
mov rcx, qword [r8 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r8 + 0x10], rcx
jmp 0x18002d209
and r8, 0xfffffffffffffffe
mov qword [rcx + 0x10], r8
mov rax, qword [rdx + 8]
test rax, rax
je 0x18002e720
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov r8, rdx
mov qword [rdx + 8], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r8 + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x18002e73b
mov r9, r8
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r9 + 0x10], rdx
mov qword [rcx + 8], r9
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x18002d4d2
mov r8, rdx
mov r15, rdx
cmp qword [rsp + 0x60], 0
je 0x18002e74e
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x60]
cmp qword [rcx + 8], rax
jne 0x18002d821
mov rax, qword [rsp + 0x60]
mov qword [rax + 8], r15
cmp qword [rsp + 0x28], 0
je 0x18002e76e
test r8, r8
je 0x18002e787
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx + 8]
mov qword [r15 + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [r15 + 0x10]
and eax, 1
or rax, rcx
mov qword [r15 + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov qword [r15 + 0x10], rax
cmp qword [r9 + 8], r15
jne 0x18002e79a
mov qword [r9 + 8], 0
jmp 0x18002d0f7
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x18002e7a4
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
jmp 0x18002bf19
xor r12d, r12d
jmp 0x1800291aa
mov byte [r12 + 0x78], 0
lea rcx, [rsp + 0xe0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
xor r15d, r15d
mov ebp, 0
test al, al
je 0x18002d7d2
mov rbp, qword [rsp + 0xe0]
lea rcx, [rsp + 0xe0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
test al, al
je 0x18002d7f0
mov r15, qword [rsp + 0xe0]
mov ecx, 0x10
call fcn.1800022d0
mov qword [rax], rbp
mov qword [rax + 8], r15
mov qword [r12 + 0x80], rax
mov byte [r12 + 0x78], 1
jmp 0x180028734
lea rax, [rsp + 0xe0]
jmp 0x18002c112
mov rax, r15
and rax, 0xfffffffffffffffe
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
jmp 0x18002d70a
or r12, 1
mov qword [rcx + 8], r12
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
or r11, 1
mov qword [r9 + 8], r11
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18002e899
cmp eax, 8
je 0x18002e899
xor eax, eax
jmp 0x18002ab4c
and esi, 1
mov qword [r12 + 8], rsi
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
and edx, 1
mov qword [r11 + 8], rdx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
or rcx, 1
mov qword [rdx + 8], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
or r11, 1
mov qword [rdx + 8], r11
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
or r8, 1
mov qword [r9 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
or r15, 1
mov qword [rcx + 8], r15
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18002e953
cmp eax, 8
je 0x18002e953
xor r11d, r11d
jmp 0x18002aa83
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
and r15d, 1
mov qword [rdx + 8], r15
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
and r8d, 1
mov qword [r11 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
or r8, 1
mov qword [r9 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
or rcx, 1
mov qword [rdx + 8], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
xor ebp, ebp
jmp 0x18002ae18
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
mov qword [rsp + 0x58], r9
xor r9d, r9d
jmp 0x18002c7e4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
call fcn.180063bd0
test al, al
je 0x18002db39
mov rsi, qword [r15]
test rsi, rsi
je 0x18002dc76
cmp r14, 0xf00
ja 0x18002dc34
mov rcx, rsi
mov rdx, r14
call fcn.18003a670
mov rdi, rax
jmp 0x180028953
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0xc
xor r15d, r15d
jmp 0x18002895f
lea rax, str.MOZ_RELEASE_ASSERT_malloc_initialized_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT__aArena__arena__aArena_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x20U____0___Freeing_in_decommitted_page._
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT__mapelm__bits____size_t_0x01U_____0___Double_free__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT__run__mRegionsMask_elm____1U____bit____0___Double_free__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT__mArena__arena__mArena_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
call fcn.180060de8
jmp 0x1800286c4
mov r12, qword [0x1800cb568]
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x18002dc15
call fcn.180060de8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x10], r12
jmp 0x1800286e7
cmp r14, 0xfc000
ja 0x18002dcb1
mov rcx, rsi
mov rdx, r14
xor r8d, r8d
call fcn.18002f480
jmp 0x18002db31
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
cmp r14, 0x1f1
jb 0x18002dcca
mov rsi, qword [0x1800cb568]
jmp 0x18002db19
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
mov r8d, 0x100000
mov rcx, rsi
mov rdx, r14
xor r9d, r9d
call fcn.180001df0
jmp 0x18002db31
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x18002dceb
call fcn.180060de8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x10]
test rsi, rsi
jne 0x18002db26
mov rsi, qword [0x1800cb568]
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x18002dd36
call fcn.180060de8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x10], rsi
jmp 0x18002db26
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_run_ind___gChunkNumPages___1_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [r9], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [r9], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
xor edx, edx
jmp 0x180029860
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
and r10d, 1
mov qword [r11 + 8], r10
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
jmp 0x1800292e1
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rsi, qword [r8 + 8]
and esi, 1
or rsi, rcx
mov qword [r8 + 8], rsi
jmp 0x180029eeb
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov rcx, r14
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 8]
and edx, 1
or rdx, rcx
mov qword [rdi + 8], rdx
jmp 0x18002952f
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov rax, rcx
jmp 0x18002a8b2
xor ebp, ebp
jmp 0x18002aead
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
or rax, 1
mov qword [rdx + 8], rax
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
mov r8, rdx
jmp 0x18002d6e1
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
and qword [r8 + 8], 1
jmp 0x18002a10f
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
jmp 0x18002b84e
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
and qword [rdi + 8], 1
jmp 0x18002973f
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
xor edx, edx
jmp 0x18002c892
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [r9], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
or rcx, 1
mov qword [rbp + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [r10 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r10 + 0x10], rdx
jmp 0x18002c358
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [r9], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
and qword [rcx + 8], 1
jmp 0x18002986c
or rax, 1
mov qword [rdx + 8], rax
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
and qword [r8 + 8], 1
jmp 0x18002ca74
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
or rcx, 1
mov qword [rdx + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
mov qword [rbp + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test rbp, rbp
je 0x18002e605
mov qword [r12 + 8], 0
and qword [r12 + 0x10], 1
xor eax, eax
jmp 0x18002d24e
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
and qword [r10 + 0x10], 1
jmp 0x18002d265
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov r9, qword [rsp + 0x58]
mov rdx, qword [r9 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r9 + 0x10], rdx
jmp 0x18002d3dd
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [rdx + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test r8, r8
je 0x18002e787
mov qword [r15 + 8], 0
and qword [r15 + 0x10], 1
xor eax, eax
jmp 0x18002d74c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
and qword [r9 + 0x10], 1
jmp 0x18002d0f7
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
sub rbx, rsi
je 0x18002e817
lea r14, [rsi + rdi]
mov eax, r14d
and eax, 0xfffff
mov r12d, 0x100000
mov r15d, 0x100000
sub r15, rax
cmp r15, rbx
cmovae r15, rbx
mov r13, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rbp, rbx
mov rcx, r14
mov rdx, r15
mov r8d, 0x4000
call r13
test eax, eax
je 0x18002ea35
add r14, r15
sub rbp, r15
cmp rbp, r12
mov r15d, 0x100000
cmovb r15, rbp
test rbp, rbp
jne 0x18002e7e8
lea rcx, [0x1800cb5b8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb5e0]
mov ecx, 0xffffffff
xor edx, edx
cmp qword [rax + 0x20], rdi
setb dl
cmova edx, ecx
cmp edx, 0xffffffff
je 0x18002e84f
test edx, edx
je 0x18002e855
mov rax, qword [rax + 0x18]
and rax, 0xfffffffffffffffe
jmp 0x18002e830
mov rax, qword [rax + 0x10]
jmp 0x18002e830
mov rcx, qword [rsp + 0x30]
cmp qword [rax + 0x30], rcx
jne 0x18002ea03
sub qword [0x1800cb5e8], rbx
mov qword [rax + 0x28], rsi
lea rcx, [0x1800cb5b8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x180028953
mov rcx, qword [rsp + 0x30]
cmp qword [rax + 0x30], rcx
jne 0x18002ea1c
add qword [0x1800cb5e8], r15
jmp 0x18002e86b
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0xa8], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r12
mov rdx, qword [rsp + 0x98]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0xb0], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0xb0], 0
jne 0x18002e931
cmp eax, 0x5af
je 0x18002e906
cmp eax, 8
jne 0x18002d890
xor eax, eax
dec qword [rsp + 0xa8]
mov r11, qword [rsp + 0x50]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
jne 0x18002e8b5
jmp 0x18002916e
cmp eax, 0x5af
mov ecx, dword [rsp + 0xb8]
je 0x18002e948
cmp eax, 8
jne 0x18002913c
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18002913c
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0xc0], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x80]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0xa8], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0xa8], 0
jne 0x18002e9e1
cmp eax, 0x5af
je 0x18002e9c5
cmp eax, 8
jne 0x18002d9bc
xor r11d, r11d
dec qword [rsp + 0xc0]
mov r10, qword [rsp + 0x40]
mov r9, qword [rsp + 0x70]
jne 0x18002e96f
jmp 0x18002aa8d
cmp eax, 0x5af
mov ecx, dword [rsp + 0xb0]
je 0x18002e9f8
cmp eax, 8
jne 0x18002aa47
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18002aa47
lea rax, str.MOZ_RELEASE_ASSERT_node__mArena__this_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT_node__mArena__this_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test r11b, 0x10
mov r11d, 0
cmove r11, rax
xor edi, edi
cmp r11, rcx
seta r11b
jae 0x18002eb1d
mov rsi, qword [rcx]
mov edi, 0xffffffff
test rsi, rsi
je 0x18002ebc2
mov r11, r10
mov r10, rcx
mov rcx, qword [rsi]
test rcx, rcx
je 0x18002eaa2
mov rdi, qword [rcx + 8]
test dil, 1
je 0x18002eaa2
mov rbx, qword [rcx]
test rbx, rbx
je 0x18002eaa2
test byte [rbx + 8], 1
jne 0x18002eae6
mov rcx, rsi
mov r11, qword [rdx]
mov rdi, r11
and rdi, 0xfffffffffffff000
mov rbx, qword [rcx + 0x10]
and rbx, r8
xor esi, esi
cmp rdi, rbx
seta sil
cmovb esi, r9d
test esi, esi
je 0x18002ea4e
cmp esi, 0xffffffff
je 0x18002ea6b
mov edi, 1
mov rsi, qword [rcx + 8]
and rsi, 0xfffffffffffffffe
test rsi, rsi
jne 0x18002ea7c
jmp 0x18002ebc2
and rdi, 0xfffffffffffffffe
mov qword [rsi], rdi
mov rbx, rsi
and rbx, 0xfffffffffffffffe
mov rdi, qword [rcx]
mov r14, qword [rcx + 8]
and r14d, 1
or r14, rbx
mov qword [rcx + 8], r14
test rdi, rdi
je 0x18002edff
and byte [rdi + 8], 0xfe
cmp qword [r10], rsi
jne 0x18002eb22
mov qword [r10], rcx
jmp 0x18002eaa5
mov dil, r11b
jmp 0x18002ead4
and rcx, 0xfffffffffffffffe
mov rsi, qword [r10 + 8]
and esi, 1
lea rdi, [rsi + rcx]
mov qword [r10 + 8], rdi
test rcx, rcx
je 0x18002edef
mov rdi, qword [rcx]
and rdi, 0xfffffffffffffffe
or rdi, rsi
mov qword [r10 + 8], rdi
mov qword [rcx], r10
mov rsi, qword [r10 + 8]
and esi, 1
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
or rdi, rsi
mov qword [rcx + 8], rdi
or byte [r10 + 8], 1
test r11, r11
je 0x18002edd6
cmp qword [r11], r10
je 0x18002eceb
jmp 0x18002ecf3
mov r10, qword [rdx]
mov rdi, r10
and rdi, r8
mov rbx, qword [rcx + 0x10]
and rbx, r8
xor esi, esi
cmp rdi, rbx
seta sil
cmovb esi, r9d
test esi, esi
jne 0x18002ecdb
jmp 0x18002ed07
mov rsi, qword [rcx + 8]
and rsi, 0xfffffffffffffffe
mov r10, rcx
test rsi, rsi
jne 0x18002ea82
mov r10, r11
mov qword [rax], 0
mov qword [rax + 8], 1
cmp edi, 1
jne 0x18002ec20
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, rdx
or r8, rax
mov qword [rcx + 8], r8
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r10], rcx
jne 0x18002ecb8
mov qword [r10], rax
jmp 0x18002ec23
mov qword [rcx], rax
mov rax, qword [rsp + 0xe0]
test rax, rax
je 0x18002ee12
and byte [rax + 8], 0xfe
mov rcx, qword [rsp + 0x30]
lea rdi, [rcx + 0xa0]
mov qword [rdi], rax
mov rax, 0xfffffffffffff001
and rax, qword [r13 + 0x78]
xor r14d, r14d
cmp rax, 0xfc000
je 0x18002ed5d
xor edi, edi
mov ecx, dword [0x1800cb590]
test ecx, ecx
je 0x18002ec8f
setle al
movzx eax, al
mov rdx, qword [rsp + 0x30]
mov eax, dword [rdx + rax*4 + 0x98]
test eax, eax
cmovne ecx, eax
test ecx, ecx
js 0x18002ed47
mov r14d, ecx
mov rax, qword [rsp + 0x30]
mov rdx, qword [rax + 0x90]
mov ecx, r14d
shl rdx, cl
cmp qword [rax + 0x88], rdx
ja 0x18002ed35
mov rbx, qword [rsp + 0x30]
jmp 0x180028936
mov rdx, qword [r10 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
jne 0x18002ec23
and edx, 1
or rdx, rax
mov qword [r10 + 8], rdx
jmp 0x18002ec23
mov edi, 1
cmp esi, 0xffffffff
jne 0x18002ebab
jmp 0x18002ed28
mov qword [r11], rcx
jmp 0x18002eb81
mov r10, qword [r11 + 8]
and r10d, 1
or r10, rcx
mov qword [r11 + 8], r10
jmp 0x18002eb81
test r10b, 0x10
mov r10d, 0
cmove r10, rax
xor edi, edi
cmp r10, rcx
seta r10b
jb 0x18002ed28
mov dil, r10b
jmp 0x18002ebab
mov rsi, qword [rcx]
mov edi, 0xffffffff
jmp 0x18002ebb3
mov rbx, qword [rsp + 0x30]
mov rcx, rbx
call fcn.180038b00
jmp 0x180028936
mov rax, qword [rsp + 0x30]
mov rdx, qword [rax + 0x90]
neg cl
shr rdx, cl
jmp 0x18002eca1
mov rsi, qword [rsp + 0x30]
mov rdx, qword [rsi + 0x70]
test rdx, rdx
jne 0x18002ed84
lea rdx, [r13 + 0x68]
mov rcx, rdi
call fcn.180036a00
mov rdi, qword [rsi + 0x70]
mov qword [rsi + 0x70], r13
jmp 0x18002ec63
cmp qword [rdx + 0x18], 0
je 0x18002edcb
mov rcx, qword [r13]
add rcx, 0x68
call fcn.180038cf0
mov r8, qword [rsp + 0x30]
mov rax, qword [r8 + 0x50]
mov rcx, qword [r8 + 0x70]
mov rdx, qword [rcx + 0x18]
sub qword [r8 + 0x88], rdx
sub rax, qword [rcx + 0x18]
mov rsi, qword [rsp + 0x30]
add qword [rsi + 0x48], 0xfffffffffff00000
add rax, 0xfffffffffffffffd
mov qword [rsi + 0x50], rax
jmp 0x18002ed6b
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x50]
jmp 0x18002edb4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
mov rax, qword [rsp + 0xe0]
mov qword [rbp], rax
pxor xmm0, xmm0
movdqu xmmword [r15], xmm0
mov rbp, 0xfffffffffffff000
and rbp, qword [r15 + 0x10]
mov rax, qword [rsp + 0x38]
mov qword [rax], rbp
test rbp, rbp
jne 0x180028772
jmp 0x18002c8d5
int3
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
nop dword [rax]
mov rdx, r9
xor r9d, r9d
cmp rdx, r15
setb r9b
cmova r9d, r8d
cmp r9d, 0xffffffff
jne 0x18002eeca
test rdx, rdx
je 0x18002f36a
mov r9, qword [rdx]
test r9, r9
je 0x18002f1c6
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18002eec5
mov r11, qword [r9]
test r11, r11
je 0x18002eeef
test byte [r11 + 8], 1
je 0x18002eeef
mov rcx, rdx
jmp 0x18002ee80
test r9d, r9d
jne 0x18002ef5a
test rdx, rdx
je 0x18002f398
mov r10, qword [rdx + 8]
mov rax, rcx
cmp r10, 1
jbe 0x18002f057
jmp 0x18002ef67
or r10, 1
mov qword [r9 + 8], r10
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18002f34f
mov r8, rax
mov rax, rbp
mov r9, qword [r10]
test r9, r9
je 0x18002ef24
mov rbp, qword [r9 + 8]
test bpl, 1
jne 0x18002f0ad
or r11, 1
mov qword [rdx + 8], r11
mov r9, qword [r10]
or r9, 1
mov qword [rdx + 8], r9
mov qword [r10], rdx
mov r9, r10
mov rbp, rax
mov rax, r8
cmp qword [rcx], rdx
mov r8d, 0xffffffff
jne 0x18002ee66
mov qword [rcx], r9
jmp 0x18002ee80
test rdx, rdx
je 0x18002f3df
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x18002ef83
mov r11, qword [r9]
test r11, r11
je 0x18002ef83
test byte [r11 + 8], 1
jne 0x18002eec5
mov r11, qword [rdx]
test r11, r11
je 0x18002f3df
mov r9, qword [r11 + 8]
test r9b, 1
je 0x18002f148
mov qword [rsp + 0x60], rbp
and r9, 0xfffffffffffffffe
je 0x18002f3f2
mov rbp, qword [r9]
mov qword [rsp + 0x28], rbp
test rbp, rbp
je 0x18002efc8
mov rbp, qword [rsp + 0x28]
test byte [rbp + 8], 1
jne 0x18002f228
and r10d, 1
or r10, r9
mov qword [r11 + 8], r10
or byte [r9 + 8], 1
mov r9, qword [rdx]
test r9, r9
je 0x18002f39f
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18002f3b9
mov rbp, qword [r10]
and rbp, 0xfffffffffffffffe
and r11d, 1
or r11, rbp
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
or byte [rdx + 8], 1
mov rbp, qword [rsp + 0x60]
cmp qword [rcx], rdx
jne 0x18002f1a8
mov qword [rcx], r9
mov rdx, rcx
jmp 0x18002eec5
mov rax, qword [rdx]
test rax, rax
jne 0x18002f072
xor eax, eax
cmp qword [rcx], rdx
jne 0x18002f191
mov qword [rcx], rax
jmp 0x18002ee25
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
mov qword [rdx], r8
mov r8, rdx
and r8, 0xfffffffffffffffe
mov r9, qword [rax + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18002f061
and rbp, 0xfffffffffffffffe
mov qword [r10], rbp
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
lea r11, [r10 + r9]
mov qword [rdx + 8], r11
test r9, r9
je 0x18002f385
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
or r11, r10
mov qword [rdx + 8], r11
mov qword [r9], rdx
mov r10, qword [rdx + 8]
and r10, 0xfffffffffffffffe
je 0x18002f13f
mov r11, qword [r10 + 8]
test r11b, 1
je 0x18002f13f
and r11, 0xfffffffffffffffe
mov qword [r10 + 8], r11
mov r10, qword [rdx + 8]
mov r11, r10
or r11, 1
mov qword [rdx + 8], r11
and r10, 0xfffffffffffffffe
je 0x18002f372
mov rbp, rax
mov r11, qword [r10]
or r11, 1
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov qword [r9], r10
jmp 0x18002ef40
mov qword [rdx + 8], r10
jmp 0x18002ef3d
or r9, 1
mov qword [r11 + 8], r9
mov r9, qword [r11]
test r9, r9
je 0x18002f166
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18002f2b3
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x18002f40d
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rdx + 8], r10
mov qword [r9], rdx
jmp 0x18002f043
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, rax
mov qword [rcx + 8], rdx
jmp 0x18002ee25
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
mov rdx, rcx
jmp 0x18002eec5
mov r10, rdx
test rax, rax
je 0x18002f44d
cmp qword [rax], r15
jne 0x18002f334
mov qword [rax], r10
test rdx, rdx
je 0x18002f460
mov rdx, qword [r15]
mov qword [r10], rdx
mov rdx, qword [r15 + 8]
and rdx, 0xfffffffffffffffe
mov r8, qword [r10 + 8]
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
mov r8, qword [r15 + 8]
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
cmp qword [rcx], r10
jne 0x18002f473
mov qword [rcx], 0
jmp 0x18002ee25
and r10d, 1
mov rbp, qword [r9 + 8]
and rbp, 0xfffffffffffffffe
or rbp, r10
mov qword [r9 + 8], rbp
mov r9, qword [rsp + 0x28]
and byte [r9 + 8], 0xfe
mov r10, qword [r11 + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x18002f3cc
mov rbp, qword [r9]
and rbp, 0xfffffffffffffffe
and r10d, 1
or r10, rbp
mov qword [r11 + 8], r10
mov qword [r9], r11
mov qword [rdx], r9
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
jne 0x18002f016
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
and r10, 0xfffffffffffffffe
mov qword [r9 + 8], r10
mov r9, qword [rdx]
test r9, r9
je 0x18002f420
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18002f43a
mov r8, rax
mov rax, rbp
mov rbp, qword [r10]
and rbp, 0xfffffffffffffffe
and r11d, 1
or r11, rbp
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov rbp, rax
mov rax, r8
mov r8d, 0xffffffff
jmp 0x18002f043
mov r8, r10
and r8, 0xfffffffffffffffe
mov r9, qword [rax + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
jmp 0x18002f1de
or r11, 1
mov qword [rdx + 8], r11
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
xor r10d, r10d
jmp 0x18002f1c9
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
xor edx, edx
jmp 0x18002f05f
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
and r10d, 1
mov qword [r11 + 8], r10
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002d8ad
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ede4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18002ee5b
and qword [rcx + 8], 1
jmp 0x18002ee25