Function at 0x180067460
Capabilities:
Generate random numbers via rtlgenrandom
Get system information on windows
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
movaps xmmword [rsp + 0xf0], xmm6
mov rbx, rdx
mov rsi, rcx
mov rax, qword [0x1800cb028]
xor rax, rsp
mov qword [rsp + 0xe8], rax
cmp dword [0x1800cb718], 0
je 0x18006b16b
cmp rbx, 1
adc rbx, 0
mov rsi, qword [rsi]
test rsi, rsi
jne 0x18006791a
cmp rbx, 0x1f1
jae 0x180067913
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x18006b64d
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 0x10]
test rsi, rsi
je 0x18006ac86
cmp rbx, 9
jb 0x18006800e
cmp rbx, 0x1f1
jae 0x180067670
add rbx, 0xf
mov r13, rbx
and r13, 0xfffffffffffffff0
shr rbx, 4
dec rbx
lea rbp, [rbx + rbx*2]
shl rbp, 4
cmp byte [rsi + 0x78], 0
je 0x180067549
cmp qword [rsi + 0x80], 0
je 0x18006b0e5
lea r14, [rsi + rbp]
add r14, 0xa8
lea rdi, [rsi + 0x18]
cmp dword [rsi + 0x40], 0
jne 0x180067567
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbx, qword [r14]
test rbx, rbx
je 0x18006768e
cmp dword [rbx + 0xc], 0
je 0x18006768e
mov eax, dword [rbx + 8]
mov edx, dword [rbx + rax*4 + 0x10]
test edx, edx
je 0x1800679c7
mov r8, qword [rsi + 0x80]
test r8, r8
jne 0x18006762a
tzcnt r8d, edx
mov r14d, eax
shl r14d, 5
or r14d, r8d
mov ecx, dword [rsi + rbp + 0xc8]
imul r14, qword [rsi + rbp + 0xb8]
add rcx, rbx
add r14, rcx
btc edx, r8d
mov dword [rbx + rax*4 + 0x10], edx
dec dword [rbx + 0xc]
test r14, r14
je 0x180069717
add qword [rsi + 0x58], r13
xor ebx, ebx
cmp dword [rsi + 0x40], 0
jne 0x1800675ea
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test bl, bl
jne 0x18006b50d
test r14, r14
je 0x18006b50d
mov rcx, qword [rsp + 0xe8]
xor rcx, rsp
call fcn.180062020
mov rax, r14
movaps xmm6, xmmword [rsp + 0xf0]
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r9, qword [r8]
mov rcx, qword [r8 + 8]
mov qword [r8], rcx
mov r10, r9
shl r10, 0x17
xor r10, r9
mov r9, rcx
shr r9, 0x1a
xor r9, rcx
xor r9, r10
shr r10, 0x11
xor r10, r9
add ecx, r10d
mov r9d, edx
ror r9d, cl
mov qword [r8 + 8], r10
tzcnt r8d, r9d
add r8d, ecx
and r8d, 0x1f
jmp 0x1800675a1
add rbx, 0xff
mov r13d, ebx
and r13d, 0x1f00
shr rbx, 8
add rbx, 0x1d
jmp 0x18006752d
mov rdx, qword [rsi + rbp + 0xb0]
test rdx, rdx
je 0x18006884b
lea r12, [rsi + rbp]
add r12, 0xb0
mov rax, rdx
mov r15, rax
mov rax, qword [rax]
test rax, rax
jne 0x1800676ad
mov qword [rsp + 0xb0], rdx
mov qword [rsp + 0xb8], 0
xor ecx, ecx
cmp rdx, r15
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x18006801b
mov r9, qword [rdx]
test r9, r9
je 0x18006b77e
mov rax, qword [r9 + 8]
test al, 1
je 0x180067a2a
xor ebx, ebx
mov r8d, 0xffffffff
mov rcx, rdx
mov rdx, r9
xor r9d, r9d
cmp rdx, r15
setb r9b
cmova r9d, r8d
cmp r9d, 0xffffffff
jne 0x1800677b6
test rdx, rdx
je 0x18006b477
mov r9, qword [rdx]
test r9, r9
je 0x180068e16
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x180067705
mov r11, qword [r9]
test r11, r11
je 0x180067751
test byte [r11 + 8], 1
jne 0x180067705
or r10, 1
mov qword [r9 + 8], r10
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18006b3c9
mov rax, rbx
mov rbx, r12
mov r9, qword [r10]
test r9, r9
je 0x180067786
mov r12, qword [r9 + 8]
test r12b, 1
jne 0x180068463
or r11, 1
mov qword [rdx + 8], r11
mov r9, qword [r10]
or r9, 1
mov qword [rdx + 8], r9
mov qword [r10], rdx
mov r9, r10
mov r12, rbx
mov rbx, rax
cmp qword [rcx], rdx
jne 0x18006b791
mov qword [rcx], r9
jmp 0x180067708
test r9d, r9d
jne 0x1800677d7
test rdx, rdx
je 0x18006b6a3
mov r10, qword [rdx + 8]
mov rbx, rcx
cmp r10, 1
jbe 0x1800678ca
jmp 0x1800677e4
test rdx, rdx
je 0x18006b732
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x180067800
mov r11, qword [r9]
test r11, r11
je 0x180067800
test byte [r11 + 8], 1
jne 0x180067705
mov r11, qword [rdx]
test r11, r11
je 0x18006b732
mov r9, qword [r11 + 8]
test r9b, 1
je 0x18006879f
and r9, 0xfffffffffffffffe
je 0x18006b6d0
mov rax, qword [r9]
test rax, rax
mov qword [rsp + 0x28], r12
je 0x18006783b
test byte [rax + 8], 1
jne 0x180068f39
and r10d, 1
or r10, r9
mov qword [r11 + 8], r10
or byte [r9 + 8], 1
mov r9, qword [rdx]
test r9, r9
je 0x18006b6eb
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18006b6aa
mov r12, qword [r10]
and r12, 0xfffffffffffffffe
and r11d, 1
or r11, r12
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
or byte [rdx + 8], 1
mov r12, qword [rsp + 0x28]
cmp qword [rcx], rdx
jne 0x18006882d
mov qword [rcx], r9
mov rdx, rcx
jmp 0x180067705
mov rax, qword [rdx]
test rax, rax
jne 0x1800683ed
xor eax, eax
cmp qword [rcx], rdx
jne 0x1800687e8
mov qword [rcx], rax
mov rax, qword [rsp + 0xb0]
mov qword [r12], rax
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov rbx, 0xfffffffffffff000
and rbx, qword [r15 + 0x10]
mov qword [r14], rbx
test rbx, rbx
jne 0x18006757d
jmp 0x18006a4cc
mov rsi, qword [0x1800cb568]
cmp rbx, 0xf00
jbe 0x180067504
cmp rbx, 0xfc000
ja 0x18006a367
add rbx, 0xfff
lea r14, [rsi + 0x18]
cmp dword [rsi + 0x40], 0
jne 0x18006794e
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbp, rbx
and rbp, 0xfffffffffffff000
mov rcx, qword [rsi + 0xa0]
test rcx, rcx
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x30], r14
je 0x18006869d
xor eax, eax
mov rdx, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r9, rcx
mov r11, qword [r9 + 0x10]
and r11, rdx
xor r10d, r10d
cmp rbp, r11
seta r10b
cmovb r10d, r8d
lea r11d, [r10 + 1]
cmp r11d, 2
jae 0x1800679b3
mov rax, r9
mov r9, qword [r9]
test r9, r9
jne 0x180067984
jmp 0x180067a99
cmp r10d, 1
jne 0x18006b83f
mov r9, qword [r9 + 8]
and r9, 0xfffffffffffffffe
jmp 0x1800679a9
mov ecx, dword [rsi + rbp + 0xc4]
inc eax
cmp eax, ecx
jae 0x180069714
mov edx, eax
mov r8d, dword [rbx + rdx*4 + 0x10]
test r8d, r8d
je 0x1800679ce
mov r9, qword [rsi + 0x80]
test r9, r9
jne 0x180067fc8
tzcnt r9d, r8d
mov r14d, eax
shl r14d, 5
or r14d, r9d
mov ecx, dword [rsi + rbp + 0xc8]
add rcx, rbx
imul r14, qword [rsi + rbp + 0xb8]
add r14, rcx
btc r8d, r9d
mov dword [rbx + rdx*4 + 0x10], r8d
mov dword [rbx + 8], eax
jmp 0x1800675c9
mov rcx, qword [r9]
test rcx, rcx
je 0x180067a3c
test byte [rcx + 8], 1
jne 0x1800676fd
or rax, 1
mov qword [r9 + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18006b499
mov r9, qword [rax]
test r9, r9
je 0x180067a6b
mov r8, qword [r9 + 8]
test r8b, 1
jne 0x180069642
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov r9, rax
and byte [r9 + 8], 0xfe
lea rdx, [rsp + 0xb0]
mov qword [rdx], r9
jmp 0x1800676fd
test rax, rax
je 0x18006b847
mov r8, rax
and r8, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r14, rdx
and r14, 0xfffffffffffffff0
shl r14, 8
add r14, r8
mov r11, r14
and r11, 0xfffffffffff00000
mov rax, qword [r11 + 0x18]
mov qword [rsp + 0x38], rax
mov eax, r14d
shr eax, 0xc
movzx edi, al
lea rax, [rdi*8]
lea r9, [rax + rax*2]
mov r13, qword [r11 + r9 + 0x30]
shr rbx, 0xc
test rbp, rbp
mov qword [rsp + 0x20], r11
mov qword [rsp + 0x40], rdi
je 0x180067c73
mov qword [rsp + 0x50], r13
cmp rbx, 1
mov r10, rbx
adc r10, 0
lea rax, [rdi + rdi*2]
lea r13, [r11 + rax*8]
add r13, 0x30
xor ebp, ebp
mov rdx, qword [sym.imp.KERNEL32.dll_GetLastError]
xor r12d, r12d
lea r15, [r12 + rdi]
lea rax, [r15 + r15*2]
test byte [r11 + rax*8 + 0x30], 0x60
jne 0x180067b64
inc r12
cmp r12, rbx
setae bpl
add r13, 0x18
cmp r12, r10
jne 0x180067b3c
jmp 0x180067c62
cmp r12, rbx
jae 0x180068e78
mov rax, r13
xor edi, edi
mov rcx, qword [rax]
test cl, 0x60
je 0x180067b94
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
lea rcx, [r12 + rdi]
inc rcx
inc rdi
add rax, 0x18
cmp rcx, rbx
jb 0x180067b72
mov rcx, rdi
shl rcx, 0xc
jne 0x180068734
jmp 0x1800688c7
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x80], rcx
call rdx
mov dword [rsp + 0x78], eax
mov rcx, r15
mov rdx, qword [rsp + 0x60]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x18006b402
mov rax, qword [rsp + 0x60]
add r15, rax
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov eax, 0x100000
cmp rcx, rax
mov r8d, 0x100000
cmovb r8, rcx
test rcx, rcx
mov rdx, qword [sym.imp.KERNEL32.dll_GetLastError]
je 0x180068762
jmp 0x180067ba6
test rdi, rdi
je 0x180067c45
test al, al
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
lea rdx, [rdi*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [r13 + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x180067c37
test al, al
mov rdx, qword [sym.imp.KERNEL32.dll_GetLastError]
je 0x180067f92
add qword [rsi + 0x50], rdi
mov rdi, qword [rsp + 0x40]
jmp 0x180067b4c
mov rcx, qword [rsi + 0xa0]
mov rbp, qword [rsp + 0x28]
mov r13, qword [rsp + 0x50]
lea rax, [r11 + r9]
add rax, 0x20
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0xb8], 0
mov rdx, qword [rax + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
je 0x18006842b
cmp r8d, 0xffffffff
jne 0x1800682ac
mov r9, qword [rcx]
test r9, r9
je 0x18006ba64
mov rdx, qword [r9 + 8]
test dl, 1
je 0x18006834a
xor edx, edx
mov r10, 0xfffffffffffff000
mov r11d, 0xffffffff
mov r8, rcx
mov rcx, r9
mov rdi, qword [rax + 0x10]
mov r15, rdi
and r15, r10
mov r12, qword [r9 + 0x10]
and r12, r10
xor r9d, r9d
cmp r15, r12
seta r9b
cmovb r9d, r11d
test r9d, r9d
jne 0x180067d39
test dil, 0x10
mov edi, 0
cmove rdi, rax
xor r9d, r9d
cmp rdi, rcx
seta dil
jb 0x180067d3f
mov r9b, dil
cmp r9d, 0xffffffff
jne 0x180067dbd
mov r9, qword [rcx]
test r9, r9
je 0x180068d52
mov rdi, qword [r9 + 8]
test dil, 1
jne 0x180067cf3
mov r15, qword [r9]
test r15, r15
je 0x180067d64
test byte [r15 + 8], 1
jne 0x180067cf3
or rdi, 1
mov qword [r9 + 8], rdi
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
je 0x18006b3ea
mov r9, qword [rdi]
test r9, r9
je 0x180067d93
mov r12, qword [r9 + 8]
test r12b, 1
jne 0x180068db2
or r15, 1
mov qword [rcx + 8], r15
mov r9, qword [rdi]
or r9, 1
mov qword [rcx + 8], r9
mov qword [rdi], rcx
mov r9, rdi
cmp qword [r8], rcx
jne 0x18006bad6
mov qword [r8], r9
jmp 0x180067cf6
test r9d, r9d
je 0x180067ea7
mov rdi, qword [rcx + 8]
mov r9, rdi
and r9, 0xfffffffffffffffe
je 0x180067de6
mov r15, qword [r9]
test r15, r15
je 0x180067de6
test byte [r15 + 8], 1
jne 0x180067cf3
mov r15, qword [rcx]
test r15, r15
je 0x18006b82c
mov r9, qword [r15 + 8]
test r9b, 1
je 0x18006858b
and r9, 0xfffffffffffffffe
je 0x18006b457
mov r12, qword [r9]
test r12, r12
je 0x180067e1e
test byte [r12 + 8], 1
jne 0x180068eaa
and edi, 1
or rdi, r9
mov qword [r15 + 8], rdi
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18006b7d2
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
mov qword [rcx], rdi
mov rdi, rcx
and rdi, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
je 0x18006b7ac
mov r12, qword [rdi]
and r12, 0xfffffffffffffffe
and r15d, 1
or r15, r12
mov qword [rcx + 8], r15
mov qword [rdi], rcx
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
or byte [rcx + 8], 1
cmp qword [r8], rcx
jne 0x180068717
mov qword [r8], r9
mov rcx, r8
jmp 0x180067cf3
mov rdi, qword [rcx + 8]
mov rdx, r8
cmp rdi, 1
ja 0x180067dca
mov rdx, qword [rcx]
test rdx, rdx
je 0x180067ef9
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x40]
jne 0x18006844c
mov qword [r8], rdx
shr r13, 0xc
mov rcx, qword [rsp + 0xb0]
mov qword [rsi + 0xa0], rcx
xorps xmm0, xmm0
movups xmmword [rax], xmm0
cmp r13, rbx
jne 0x18006804a
test rbp, rbp
je 0x180067f78
cmp rbx, 1
adc rbx, 0
shl rbx, 3
lea rcx, [rbx + rbx*2]
lea rdx, [rdi + rdi*2]
lea rdx, [r11 + rdx*8]
add rdx, 0x30
xor r8d, r8d
test byte [rdx + r8], 8
je 0x180067f67
dec qword [r11 + 0x18]
dec qword [rsi + 0x88]
mov qword [rdx + r8], 3
add r8, 0x18
cmp rcx, r8
jne 0x180067f55
or qword [rax + 0x10], rbp
cmp qword [r11 + 0x18], 0
mov bpl, 1
jne 0x180067f92
cmp qword [rsp + 0x38], 0
jne 0x1800685d3
test r14, r14
je 0x18006b502
test bpl, 1
je 0x18006b502
mov rax, qword [rsp + 0x28]
add qword [rsi + 0x60], rax
mov rcx, qword [rsp + 0x30]
cmp dword [rcx + 0x28], 0
jne 0x1800675f2
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1800675f2
mov r10, qword [r9]
mov rcx, qword [r9 + 8]
mov qword [r9], rcx
mov r11, r10
shl r11, 0x17
xor r11, r10
mov r10, rcx
shr r10, 0x1a
xor r10, rcx
xor r10, r11
shr r11, 0x11
xor r11, r10
add ecx, r11d
mov r10d, r8d
ror r10d, cl
mov qword [r9 + 8], r11
tzcnt r9d, r10d
add r9d, ecx
and r9d, 0x1f
jmp 0x1800679f9
mov r13d, 0x10
xor ebx, ebx
jmp 0x18006752d
test eax, eax
jne 0x1800684fd
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x18006a631
mov rax, qword [rdx]
test rax, rax
jne 0x18006a855
mov qword [rsp + 0xb0], rax
jmp 0x1800678e4
lea r8, [rdi + r13]
sub r13, rbx
shl r13, 0xc
lea rcx, [rdi + rbx]
lea rdx, [rcx + rcx*2]
lea rcx, [r11 + rdx*8]
add rcx, 0x20
mov r9d, 0xfff
mov r10, qword [rcx + 0x10]
and r10, r9
or r10, r13
mov qword [rcx + 0x10], r10
lea r8, [r8 + r8*2]
and r9, qword [r11 + r8*8 + 0x18]
or r9, r13
mov qword [r11 + r8*8 + 0x18], r9
mov r15, qword [rsi + 0xa0]
mov qword [rsp + 0xb0], r15
mov qword [rsp + 0xb8], 0
test r15, r15
je 0x180068b47
lea r8, [r11 + rdx*8]
add r8, 0x30
lea rdx, [rsp + 0xb0]
xor r11d, r11d
mov r9, 0xfffffffffffff000
mov r10d, 0xffffffff
mov rdi, r11
mov r11, rdx
mov rdx, qword [r15]
test rdx, rdx
je 0x1800680f5
mov r12, qword [rdx + 8]
test r12b, 1
je 0x1800680f5
mov r13, qword [rdx]
test r13, r13
je 0x1800680f5
test byte [r13 + 8], 1
jne 0x18006815c
mov rdx, r15
mov rdi, qword [r8]
mov r15, rdi
and r15, r9
mov r12, qword [rdx + 0x10]
and r12, r9
xor ebp, ebp
cmp r15, r12
seta bpl
cmovb ebp, r10d
test ebp, ebp
je 0x180068130
cmp ebp, 0xffffffff
jne 0x18006814d
mov r15, qword [rdx]
mov ebp, 0xffffffff
test r15, r15
jne 0x1800680ce
jmp 0x18006823b
test dil, 0x10
mov edi, 0
cmove rdi, rcx
xor ebp, ebp
cmp rdi, rdx
seta dil
jb 0x18006811e
mov bpl, dil
jmp 0x180068152
mov ebp, 1
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
jmp 0x180068126
and r12, 0xfffffffffffffffe
mov qword [r15], r12
mov r13, r15
and r13, 0xfffffffffffffffe
mov r12, qword [rdx]
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, r13
mov qword [rdx + 8], rbp
test r12, r12
je 0x18006b76b
and byte [r12 + 8], 0xfe
cmp qword [r11], r15
jne 0x180068197
mov qword [r11], rdx
jmp 0x1800680f8
and rdx, 0xfffffffffffffffe
mov r15, qword [r11 + 8]
and r15d, 1
lea r12, [r15 + rdx]
mov qword [r11 + 8], r12
test rdx, rdx
je 0x18006b758
mov r12, qword [rdx]
and r12, 0xfffffffffffffffe
or r12, r15
mov qword [r11 + 8], r12
mov qword [rdx], r11
mov r15, qword [r11 + 8]
and r15d, 1
mov r12, qword [rdx + 8]
and r12, 0xfffffffffffffffe
or r12, r15
mov qword [rdx + 8], r12
or byte [r11 + 8], 1
test rdi, rdi
je 0x18006b4b4
cmp qword [rdi], r11
je 0x180068cdb
jmp 0x180068e96
mov r11, qword [r8]
mov r12, r11
and r12, r9
mov r13, qword [rdx + 0x10]
and r13, r9
xor r15d, r15d
cmp r12, r13
seta r15b
cmovb r15d, r10d
test r15d, r15d
jne 0x1800688ce
jmp 0x180069467
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
mov r11, rdx
test r15, r15
jne 0x1800680d4
mov r11, rdi
mov qword [rcx], 0
mov qword [rcx + 8], 1
cmp ebp, 1
jne 0x1800683ba
mov r8, qword [rdx + 8]
and r8d, 1
mov r9, r8
or r9, rcx
mov qword [rdx + 8], r9
mov r9, qword [rcx]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rdx + 8], r9
mov qword [rcx], rdx
mov r8, qword [rdx + 8]
and r8d, 1
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rcx + 8], r9
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x1800687ff
mov qword [r11], rcx
mov rbp, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x40]
jmp 0x1800683c7
test r8d, r8d
je 0x180068778
mov r8, qword [rcx + 8]
xor edx, edx
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x1800682d7
mov r10, qword [r9]
test r10, r10
je 0x1800682d7
test byte [r10 + 8], 1
jne 0x180067ce6
mov r10, qword [rcx]
test r10, r10
je 0x18006b544
mov r9, qword [r10 + 8]
test r9b, 1
jne 0x18006948c
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [r10]
test r8, r8
je 0x18006830f
mov r9, qword [r8 + 8]
test r9b, 1
jne 0x1800697c3
or byte [r10 + 8], 1
mov r8, qword [rcx + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18006bce8
mov r10, qword [r9]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [r9], rcx
lea rcx, [rsp + 0xb0]
mov qword [rcx], r9
jmp 0x180067ce6
mov r8, qword [r9]
test r8, r8
je 0x18006835d
test byte [r8 + 8], 1
jne 0x180067ce4
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x18006b47e
mov r9, qword [rdx]
test r9, r9
je 0x18006838c
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18006984c
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xb0]
mov qword [rcx], r9
jmp 0x180067ce4
mov rbp, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x40]
mov qword [rdx], rcx
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x18006ba9d
and byte [rcx + 8], 0xfe
mov qword [rsi + 0xa0], rcx
mov r11, qword [rsp + 0x20]
jmp 0x180067f31
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
mov qword [rdx], r8
mov r8, rdx
and r8, 0xfffffffffffffffe
mov r9, qword [rax + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x1800678d8
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x180067ccb
mov r8b, dl
jmp 0x180067cc1
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x180067f0f
and r12, 0xfffffffffffffffe
mov qword [r10], r12
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
lea r11, [r10 + r9]
mov qword [rdx + 8], r11
test r9, r9
je 0x18006b66a
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
or r11, r10
mov qword [rdx + 8], r11
mov qword [r9], rdx
mov r10, qword [rdx + 8]
and r10, 0xfffffffffffffffe
je 0x18006870e
mov r11, qword [r10 + 8]
test r11b, 1
je 0x18006870e
and r11, 0xfffffffffffffffe
mov qword [r10 + 8], r11
mov r10, qword [rdx + 8]
mov r11, r10
or r11, 1
mov qword [rdx + 8], r11
and r10, 0xfffffffffffffffe
je 0x18006b657
mov r12, rbx
mov r11, qword [r10]
or r11, 1
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov qword [r9], r10
jmp 0x1800677a2
mov rax, qword [rdx + 8]
xor ebx, ebx
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x18006851e
mov rcx, qword [r9]
test rcx, rcx
je 0x18006851e
test byte [rcx + 8], 1
jne 0x1800676ff
mov rcx, qword [rdx]
test rcx, rcx
je 0x18006bcfb
test byte [rcx + 8], 1
jne 0x1800697a6
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x180068552
mov r8, qword [rax + 8]
test r8b, 1
jne 0x18006a4f0
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x18006be27
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [r9], rdx
lea rdx, [rsp + 0xb0]
mov qword [rdx], r9
jmp 0x1800676ff
or r9, 1
mov qword [r15 + 8], r9
mov r9, qword [r15]
test r9, r9
je 0x1800685a9
mov rdi, qword [r9 + 8]
test dil, 1
jne 0x180068ce3
mov rdi, qword [rcx + 8]
mov r9, rdi
and r9, 0xfffffffffffffffe
je 0x18006b7ec
mov r15, qword [r9]
and r15, 0xfffffffffffffffe
and edi, 1
or rdi, r15
mov qword [rcx + 8], rdi
mov qword [r9], rcx
jmp 0x180067e93
mov rbx, qword [rsi + 0x68]
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0xc0], 0
xor ecx, ecx
cmp rbx, r11
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x180068b63
test eax, eax
je 0x180069721
test rbx, rbx
je 0x18006b5a3
mov rcx, qword [rbx + 0x10]
xor r12d, r12d
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180068638
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x180068638
test byte [rdx + 0x10], 1
jne 0x180068b86
mov rax, qword [rbx + 8]
test rax, rax
je 0x18006be47
test byte [rax + 0x10], 1
jne 0x18006a347
or rcx, 1
mov qword [rbx + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18006866d
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x18006a97f
or byte [rax + 0x10], 1
mov rcx, qword [rbx + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18006beff
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [rbx + 0x10], rcx
mov qword [rax + 8], rbx
jmp 0x180069631
mov rcx, qword [rsi + 0x70]
test rcx, rcx
jne 0x1800688e2
lea r15, [0x1800cb680]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb6a8]
test rax, rax
je 0x180069524
xor r12d, r12d
mov ecx, 0xffffffff
mov rdi, qword [rax + 0x28]
xor edx, edx
cmp rdi, 0x100000
setb dl
cmova edx, ecx
cmp edx, 0xffffffff
jne 0x1800686fa
mov r12, rax
mov rax, qword [rax]
test rax, rax
jne 0x1800686d2
jmp 0x180068fbe
test edx, edx
jne 0x18006bda0
cmp qword [rax + 0x20], 0
jne 0x1800686ea
jmp 0x18006bdb2
mov qword [rdx + 8], r10
jmp 0x18006779f
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdi, qword [r8 + 8]
and edi, 1
or rdi, rcx
mov qword [r8 + 8], rdi
mov rcx, r8
jmp 0x180067cf3
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x48], r9
shl r15, 0xc
mov eax, r15d
and eax, 0xff000
mov r8d, 0x100000
sub r8, rax
cmp r8, rcx
cmovae r8, rcx
add r15, r11
jmp 0x180067ba6
mov al, 1
mov r11, qword [rsp + 0x20]
mov r9, qword [rsp + 0x48]
mov r10, qword [rsp + 0x58]
jmp 0x180067c13
mov r8, qword [rcx + 8]
cmp r8, 1
ja 0x18006a095
mov rdx, qword [rcx]
test rdx, rdx
jne 0x1800696d6
mov qword [rsp + 0xb0], rdx
jmp 0x180067f0f
or r9, 1
mov qword [r11 + 8], r9
mov r9, qword [r11]
test r9, r9
je 0x1800687bd
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x1800693ec
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x18006b745
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rdx + 8], r10
mov qword [r9], rdx
jmp 0x1800678b6
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, rax
mov qword [rcx + 8], rdx
jmp 0x1800678e4
mov r8, qword [r11 + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
cmp rdx, r9
mov rbp, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x40]
jne 0x1800683c7
and r8d, 1
or r8, rcx
mov qword [r11 + 8], r8
jmp 0x1800683c7
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
mov rdx, rcx
jmp 0x180067705
movzx eax, byte [rsi + rbp + 0xd2]
mov qword [rsp + 0x28], rax
lea r15, [rsi + 0xa0]
mov rcx, qword [rsi + 0xa0]
test rcx, rcx
je 0x18006a2ad
mov rdx, qword [rsp + 0x28]
shl rdx, 0xc
xor eax, eax
mov r8, 0xfffffffffffff000
mov r9d, 0xffffffff
mov r11, qword [rcx + 0x10]
and r11, r8
xor r10d, r10d
cmp rdx, r11
seta r10b
cmovb r10d, r9d
lea r11d, [r10 + 1]
cmp r11d, 2
jae 0x1800688b3
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x180068887
jmp 0x180068932
cmp r10d, 1
jne 0x18006bc08
mov rcx, qword [rcx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x1800688ac
mov al, 1
jmp 0x180067c13
mov ebp, 1
cmp r15d, 0xffffffff
jne 0x180068224
jmp 0x180069750
xor r8d, r8d
mov qword [rsi + 0x70], r8
lea r14, [rcx + 0x3000]
lea rax, [rcx + 0x68]
xorps xmm0, xmm0
lea rdx, [rsp + 0xb0]
movaps xmmword [rdx], xmm0
mov qword [rcx + 0x68], r8
mov qword [rcx + 0x70], 1
mov qword [rdx], rax
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x18006bc5a
and byte [rcx + 8], 0xfe
mov qword [rsi + 0xa0], rcx
jmp 0x180067ad0
test rax, rax
je 0x18006a2ad
mov rcx, rax
and rcx, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov rbx, rdx
and rbx, 0xfffffffffffffff0
shl rbx, 8
add rbx, rcx
mov qword [rsp + 0x40], r15
mov r9, rbx
and r9, 0xfffffffffff00000
mov rax, qword [r9 + 0x18]
mov qword [rsp + 0x80], rax
mov eax, ebx
shr eax, 0xc
movzx r11d, al
lea rax, [r11*8]
lea rcx, [rax + rax*2]
mov rax, qword [r9 + rcx + 0x30]
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x28]
test rdx, rdx
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x50], r11
je 0x18006991e
lea rax, [r11 + r11*2]
lea r12, [r9 + rax*8]
add r12, 0x30
xor r10d, r10d
xor r15d, r15d
lea r8, [r15 + r11]
lea rax, [r8 + r8*2]
test byte [r9 + rax*8 + 0x30], 0x60
jne 0x1800689f2
inc r15
add r12, 0x18
cmp r15, rdx
setae r10b
jne 0x1800689cd
jmp 0x180069921
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x70], rcx
mov rax, r12
xor ecx, ecx
mov qword [rsp + 0x20], rcx
mov rcx, qword [rax]
test cl, 0x60
je 0x180068a32
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
mov r8, qword [rsp + 0x20]
lea rcx, [r15 + r8]
inc rcx
inc r8
mov qword [rsp + 0x20], r8
add rax, 0x18
cmp rcx, rdx
jb 0x180068a06
mov rcx, qword [rsp + 0x20]
shl rcx, 0xc
je 0x18006a5e2
mov qword [rsp + 0x38], r10
mov r10, qword [rsp + 0x48]
shl r10, 0xc
mov eax, r10d
and eax, 0xff000
mov edx, 0x100000
sub rdx, rax
cmp rdx, rcx
cmovae rdx, rcx
add r10, r9
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x78], rcx
call r8
mov dword [rsp + 0x68], eax
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x58]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x18006b55f
mov r10, qword [rsp + 0x48]
mov rax, qword [rsp + 0x58]
add r10, rax
mov rcx, qword [rsp + 0x78]
sub rcx, rax
mov eax, 0x100000
cmp rcx, rax
mov edx, 0x100000
cmovb rdx, rcx
test rcx, rcx
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x180068a70
mov al, 1
mov r9, qword [rsp + 0x30]
mov r10, qword [rsp + 0x38]
mov r11, qword [rsp + 0x50]
cmp qword [rsp + 0x20], 0
je 0x180068b27
test al, al
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
mov rdx, qword [rsp + 0x20]
lea rdx, [rdx*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [r12 + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x180068b1a
test al, al
je 0x180069c59
mov rax, qword [rsp + 0x20]
add qword [rsi + 0x50], rax
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x70]
jmp 0x1800689dd
mov qword [rcx], 0
mov qword [rcx + 8], 1
lea rdx, [rsp + 0xb0]
jmp 0x1800683c4
test rbx, rbx
je 0x180069606
mov rax, qword [rbx + 8]
test rax, rax
je 0x180069606
test byte [rax + 0x10], 1
je 0x1800695f3
xor r12d, r12d
mov edi, 0xffffffff
xor ebp, ebp
lea rcx, [rsp + 0xa0]
lea r8, [rsp + 0x98]
mov r13, rbx
mov rbx, rax
xor eax, eax
cmp rbx, r11
setb al
cmova eax, edi
cmp eax, 0xffffffff
jne 0x180068be7
test rbx, rbx
je 0x18006a9f2
mov rax, qword [rbx + 8]
test rax, rax
je 0x18006a9ef
test byte [rax + 0x10], 1
jne 0x180068b9d
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x1800698ca
test byte [rdx + 0x10], 1
jne 0x180068b9d
jmp 0x1800698ca
test eax, eax
jne 0x180068c03
test rbx, rbx
je 0x18006bafa
mov rax, qword [rbx + 0x10]
mov r12, r13
cmp rax, 1
jbe 0x180068c66
jmp 0x180068c10
test rbx, rbx
je 0x18006b59c
mov rax, qword [rbx + 0x10]
and rax, 0xfffffffffffffffe
je 0x180068c29
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x180068c29
test byte [rdx + 0x10], 1
jne 0x180068b9d
mov r15, r8
mov rcx, r8
mov rdx, rbx
call fcn.180039460
mov rax, qword [rsp + 0x98]
cmp qword [r13 + 8], rbx
jne 0x1800698b0
jmp 0x18006a4d3
mov rbx, r13
mov r11, qword [rsp + 0x20]
lea rcx, [rsp + 0xa0]
mov r8, r15
jmp 0x180068b9d
mov rbp, qword [rbx + 8]
test rbp, rbp
je 0x1800693e5
mov rax, qword [rbp + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rbx + 8], rax
mov rax, rbx
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 0x10]
and ecx, 1
or rcx, rax
mov qword [rbp + 0x10], rcx
mov rcx, qword [rbx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rbp + 0x10], rcx
or byte [rbx + 0x10], 1
and qword [rbp + 0x10], 1
cmp qword [r13 + 8], rbx
jne 0x180068e7f
mov qword [r13 + 8], rbp
mov rax, qword [rsp + 0xb8]
mov qword [rsi + 0x68], rax
test r11, r11
je 0x18006bb62
xorps xmm0, xmm0
movups xmmword [r11 + 8], xmm0
jmp 0x180067fa5
mov qword [rdi], rdx
jmp 0x1800681f8
and rdi, 0xfffffffffffffffe
mov qword [r9 + 8], rdi
mov r9, qword [rcx]
test r9, r9
je 0x18006b7ff
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
mov qword [rcx], rdi
mov rdi, rcx
and rdi, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
je 0x18006b819
mov r12, qword [rdi]
and r12, 0xfffffffffffffffe
and r15d, 1
or r15, r12
mov qword [rcx + 8], r15
mov qword [rdi], rcx
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
jmp 0x180067e93
test rdx, rdx
je 0x18006bc75
cmp qword [rdx], rax
mov r11, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x40]
jne 0x180069903
mov qword [rdx], rcx
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x18006bc88
mov qword [r8], 0
jmp 0x180067f0f
and r12, 0xfffffffffffffffe
mov qword [rdi], r12
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
and r9, 0xfffffffffffffffe
mov rdi, qword [rcx + 8]
and edi, 1
lea r15, [rdi + r9]
mov qword [rcx + 8], r15
test r9, r9
je 0x18006b690
mov r15, qword [r9]
and r15, 0xfffffffffffffffe
or r15, rdi
mov qword [rcx + 8], r15
mov qword [r9], rcx
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
je 0x180068e0d
mov r15, qword [rdi + 8]
test r15b, 1
jne 0x18006a3e5
mov qword [rcx + 8], rdi
jmp 0x180067dac
mov rax, rdx
test rbx, rbx
je 0x18006bca5
cmp qword [rbx], r15
jne 0x180069831
mov qword [rbx], rax
test rdx, rdx
je 0x18006bcb8
mov rdx, qword [r15]
mov qword [rax], rdx
mov rdx, qword [r15 + 8]
and rdx, 0xfffffffffffffffe
mov r8, qword [rax + 8]
and r8d, 1
or r8, rdx
mov qword [rax + 8], r8
mov r8, qword [r15 + 8]
and r8d, 1
or r8, rdx
mov qword [rax + 8], r8
cmp qword [rcx], rax
jne 0x18006bccb
mov qword [rcx], 0
jmp 0x1800678e4
xor edi, edi
jmp 0x180067c54
and rbp, 0xfffffffffffffffe
mov rax, qword [r13 + 0x10]
and eax, 1
or rax, rbp
mov qword [r13 + 0x10], rax
jmp 0x180068cb9
mov r11, qword [rdi + 8]
and r11d, 1
or r11, rdx
mov qword [rdi + 8], r11
jmp 0x1800681f8
mov qword [rsp + 0x50], r13
and edi, 1
mov r13, qword [r9 + 8]
and r13, 0xfffffffffffffffe
or r13, rdi
mov qword [r9 + 8], r13
and byte [r12 + 8], 0xfe
mov rdi, qword [r15 + 8]
mov r9, rdi
and r9, 0xfffffffffffffffe
je 0x18006b7bf
mov r12, qword [r9]
and r12, 0xfffffffffffffffe
and edi, 1
or rdi, r12
mov qword [r15 + 8], rdi
mov qword [r9], r15
mov qword [rcx], r9
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
mov qword [rcx], rdi
mov rdi, rcx
and rdi, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
mov r13, qword [rsp + 0x50]
jne 0x180067e6b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
and r10d, 1
mov r12, qword [r9 + 8]
and r12, 0xfffffffffffffffe
or r12, r10
mov qword [r9 + 8], r12
and byte [rax + 8], 0xfe
mov r10, qword [r11 + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x18006b6bd
mov r12, qword [r9]
and r12, 0xfffffffffffffffe
and r10d, 1
or r10, r12
mov qword [r11 + 8], r10
mov qword [r9], r11
mov qword [rdx], r9
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
jne 0x180067889
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
test r12, r12
je 0x180069524
mov rdi, qword [r12 + 0x28]
mov r13, qword [r12 + 0x20]
lea r14, [r13 + 0xfffff]
mov rax, 0xfffffffffff00000
and r14, rax
mov rcx, r14
sub rcx, r13
sub rdi, rcx
add rdi, rax
mov ebp, dword [r12 + 0x30]
mov rcx, r12
call fcn.180001860
lea rcx, [0x1800cb6b0]
mov rdx, r12
call section..text
mov rax, r14
sub rax, r13
jne 0x18006bd16
test rdi, rdi
je 0x180069766
lea rax, [r14 + 0x100000]
mov qword [r12 + 0x20], rax
mov qword [r12 + 0x28], rdi
mov dword [r12 + 0x30], ebp
mov rcx, r12
call fcn.180001530
lea rcx, [0x1800cb6b0]
mov rdx, r12
call fcn.180001ff0
lock add qword [0x1800cb6b8], 0xfffffffffff00000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 0x100000
mov rcx, r14
mov r8d, 0x1000
call fcn.180062260
test rax, rax
je 0x180069531
test r14, r14
je 0x180069531
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [0x1800cb678]
mov r12, r14
shr r12, 0x3e
mov r15, qword [rdi + r12*8]
test r15, r15
je 0x18006af8d
mov r12d, 2
xorps xmm6, xmm6
mov rdi, r14
mov ecx, r12d
shl rdi, cl
shr rdi, 0x3d
mov rax, qword [r15 + rdi*8]
test rax, rax
je 0x18006a6ec
add r12, 3
mov r15, rax
cmp r12d, 0x29
jne 0x1800690b7
mov ecx, r14d
shr ecx, 0x14
and ecx, 7
mov qword [rax + rcx*8], r14
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r14, r14
je 0x18006b502
add qword [rsi + 0x48], 0x100000
mov qword [r14], rsi
xor eax, eax
mov qword [r14 + 0x18], rax
mov qword [r14 + 0x30], rax
mov qword [r14 + 0x48], rax
mov qword [r14 + 0x60], 0x20
mov qword [r14 + 0x78], 0xfc024
mov eax, 0x90
mov qword [r14 + rax], 0x24
add rax, 0x18
cmp rax, 0x1800
jne 0x18006912f
mov qword [r14 + 0x1800], 0xfc024
mov qword [r14 + 0x1818], 0x20
lea r15, [r14 + 0x2000]
mov eax, r15d
and eax, 0xfffff
mov edi, 0x100000
mov r12d, 0x100000
sub r12, rax
mov r13d, 0xfe000
cmp r12, r13
cmovae r12, r13
mov rbp, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, r15
mov rdx, r12
mov r8d, 0x4000
call rbp
test eax, eax
je 0x18006bb49
add r15, r12
sub r13, r12
cmp r13, rdi
mov r12d, 0x100000
cmovb r12, r13
test r13, r13
jne 0x18006918a
add qword [rsi + 0x50], 3
lea rax, [r14 + 0x68]
mov r11, qword [rsi + 0xa0]
mov qword [rsp + 0xb0], r11
mov qword [rsp + 0xb8], 0
test r11, r11
je 0x18006a2ff
lea rcx, [rsp + 0xb0]
xor r9d, r9d
mov rdx, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r10, r9
mov r9, rcx
mov rcx, qword [r11]
test rcx, rcx
je 0x180069224
mov rdi, qword [rcx + 8]
test dil, 1
je 0x180069224
mov r15, qword [rcx]
test r15, r15
je 0x180069224
test byte [r15 + 8], 1
jne 0x180069290
mov rcx, r11
mov r10, qword [r14 + 0x78]
mov rdi, r10
and rdi, rdx
mov r15, qword [rcx + 0x10]
and r15, rdx
xor r11d, r11d
cmp rdi, r15
seta r11b
cmovb r11d, r8d
test r11d, r11d
je 0x180069263
cmp r11d, 0xffffffff
jne 0x180069281
mov r11, qword [rcx]
mov edi, 0xffffffff
test r11, r11
jne 0x1800691fd
jmp 0x18006936f
test r10b, 0x10
mov r10d, 0
cmove r10, rax
xor edi, edi
cmp r10, rcx
seta r10b
jb 0x180069251
mov dil, r10b
jmp 0x180069286
mov edi, 1
mov r11, qword [rcx + 8]
and r11, 0xfffffffffffffffe
jmp 0x180069259
and rdi, 0xfffffffffffffffe
mov qword [r11], rdi
mov r15, r11
and r15, 0xfffffffffffffffe
mov rdi, qword [rcx]
mov r12, qword [rcx + 8]
and r12d, 1
or r12, r15
mov qword [rcx + 8], r12
test rdi, rdi
je 0x18006bab0
and byte [rdi + 8], 0xfe
cmp qword [r9], r11
jne 0x1800692ca
mov qword [r9], rcx
jmp 0x180069227
and rcx, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
lea rdi, [r11 + rcx]
mov qword [r9 + 8], rdi
test rcx, rcx
je 0x18006bac3
mov rdi, qword [rcx]
and rdi, 0xfffffffffffffffe
or rdi, r11
mov qword [r9 + 8], rdi
mov qword [rcx], r9
mov r11, qword [r9 + 8]
and r11d, 1
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
or rdi, r11
mov qword [rcx + 8], rdi
or byte [r9 + 8], 1
test r10, r10
je 0x18006b5d1
cmp qword [r10], r9
je 0x18006a3c0
jmp 0x18006a4dc
mov r9, qword [r14 + 0x78]
mov rdi, r9
and rdi, rdx
mov r15, qword [rcx + 0x10]
and r15, rdx
xor r11d, r11d
cmp rdi, r15
seta r11b
cmovb r11d, r8d
test r11d, r11d
jne 0x18006a12c
jmp 0x18006a60c
mov r11, qword [rcx + 8]
and r11, 0xfffffffffffffffe
mov r9, rcx
test r11, r11
jne 0x180069203
mov r9, r10
mov qword [r14 + 0x68], 0
mov qword [r14 + 0x70], 1
cmp edi, 1
mov rbp, qword [rsp + 0x28]
jne 0x18006a31c
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + rax]
mov qword [rcx + 8], r8
test rax, rax
je 0x18006bdba
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r9], rcx
jne 0x18006a0b9
mov qword [r9], rax
jmp 0x18006a31f
xor ebp, ebp
jmp 0x180068cab
and r10, 0xfffffffffffffffe
mov qword [r9 + 8], r10
mov r9, qword [rdx]
test r9, r9
je 0x18006b705
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18006b71f
mov rax, rbx
mov rbx, r12
mov r12, qword [r10]
and r12, 0xfffffffffffffffe
and r11d, 1
or r11, r12
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r12, rbx
mov rbx, rax
jmp 0x1800678b6
test r11b, 0x10
mov r11d, 0
cmove r11, rcx
xor ebp, ebp
cmp r11, rdx
seta r11b
jb 0x180069750
mov bpl, r11b
jmp 0x180068224
and r9, 0xfffffffffffffffe
je 0x18006b529
mov r11, qword [r9]
test r11, r11
je 0x1800694a9
test byte [r11 + 8], 1
jne 0x18006a55c
and r8d, 1
or r8, r9
mov qword [r10 + 8], r8
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18006bde7
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x18006be01
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
or byte [rcx + 8], 1
jmp 0x18006833a
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov edx, 0x100000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
test rax, rax
je 0x18006b4e8
mov rax, r14
shl rax, 0x2c
je 0x180069086
mov rcx, r14
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x18006c088
mov rdi, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, 0x1ff000
xor ecx, ecx
mov r8d, 0x3000
call fcn.180062260
test rax, rax
je 0x18006b502
mov r14, rax
mov rcx, rax
xor edx, edx
mov r8d, 0x8000
call rdi
test eax, eax
je 0x18006c070
add r14, 0xfffff
and r14, 0xfffffffffff00000
mov edx, 0x100000
mov rcx, r14
mov r8d, 0x3000
call fcn.180062260
cmp rax, r14
jne 0x18006b15a
test r14, r14
jne 0x180069086
jmp 0x18006958b
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180069606
test byte [rcx + 0x10], 1
jne 0x180068b83
lea r15, [rsp + 0xa8]
mov rcx, r15
mov rdx, rbx
call fcn.180039300
mov rax, qword [r15]
test rax, rax
je 0x18006beec
and byte [rax + 0x10], 0xfe
xor r12d, r12d
mov r11, qword [rsp + 0x20]
lea rbx, [rsp + 0xb0]
mov qword [rbx + 8], rax
jmp 0x180068b86
and r8, 0xfffffffffffffffe
mov qword [rax], r8
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
and r9, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + r9]
mov qword [rdx + 8], rcx
test r9, r9
je 0x18006be14
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [r9], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18006975d
mov rcx, qword [rax + 8]
test cl, 1
je 0x18006975d
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x18006bf3f
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [r9], rax
jmp 0x180067a84
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x180068792
dec dword [rbx + 0xc]
mov bl, 1
xor r14d, r14d
jmp 0x1800675db
test rbx, rbx
je 0x180069741
mov rcx, qword [rbx + 0x10]
cmp rcx, 1
ja 0x18006ac79
mov rax, qword [rbx + 8]
test rax, rax
jne 0x18006a383
xor eax, eax
mov qword [rsp + 0xb8], rax
jmp 0x180068cb9
mov r15, qword [rdx]
mov ebp, 0xffffffff
jmp 0x18006822c
mov qword [rdx + 8], rax
jmp 0x180067a84
lock add qword [0x1800cb6b8], 0xfffffffffff00000
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea r15, [0x1800cb6c0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb5a0]
mov qword [r12], rax
mov qword [0x1800cb5a0], r12
jmp 0x180069058
lea rcx, [rsp + 0xa8]
call fcn.180008400
lea rax, [rsp + 0xa8]
mov r9, qword [rax]
jmp 0x18006857b
and r9, 0xfffffffffffffffe
mov qword [r8 + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x18006be62
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x18006be7c
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, r8
mov qword [r9 + 8], rcx
jmp 0x18006833a
mov r8, rax
and r8, 0xfffffffffffffffe
mov r9, qword [rbx + 8]
and r9d, 1
or r9, r8
mov qword [rbx + 8], r9
jmp 0x180068e2e
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x18006be97
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x1800698a7
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18006ab0f
mov qword [rcx + 8], rdx
jmp 0x1800683a5
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [r13 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r13 + 0x10], rdx
jmp 0x180068c4e
mov r15, rcx
mov rdx, rbx
call fcn.180039300
mov rax, qword [rsp + 0xa0]
cmp qword [r13 + 8], rbx
jne 0x18006beaa
mov qword [r13 + 8], rax
mov rbx, rax
mov r11, qword [rsp + 0x20]
mov rcx, r15
lea r8, [rsp + 0x98]
jmp 0x180068ba3
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
jmp 0x180068d71
mov r10b, 1
mov qword [rsp + 0x38], r10
lea rax, [r9 + rcx]
add rax, 0x20
mov r11, qword [rsp + 0x40]
mov rcx, qword [r11]
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0xb8], 0
mov rdx, qword [rax + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
je 0x18006a074
cmp r8d, 0xffffffff
jne 0x180069f67
mov r9, qword [rcx]
test r9, r9
je 0x18006bcd5
mov rdx, qword [r9 + 8]
test dl, 1
je 0x18006a004
xor r11d, r11d
mov r10, 0xfffffffffffff000
mov r8, rcx
mov rcx, r9
mov r15, qword [rax + 0x10]
mov rdx, r15
and rdx, r10
mov r12, qword [r9 + 0x10]
and r12, r10
xor r9d, r9d
cmp rdx, r12
seta r9b
mov edx, 0xffffffff
cmovb r9d, edx
test r9d, r9d
jne 0x1800699f3
test r15b, 0x10
mov edx, 0
cmove rdx, rax
xor r9d, r9d
cmp rdx, rcx
seta dl
jb 0x1800699f9
mov r9b, dl
cmp r9d, 0xffffffff
jne 0x180069a75
mov r9, qword [rcx]
test r9, r9
je 0x18006a792
mov rdx, qword [r9 + 8]
test dl, 1
jne 0x1800699a9
mov r15, qword [r9]
test r15, r15
je 0x180069a1d
test byte [r15 + 8], 1
jne 0x1800699a9
or rdx, 1
mov qword [r9 + 8], rdx
mov r12, qword [rcx + 8]
mov r15, r12
and r15, 0xfffffffffffffffe
je 0x18006b4cd
mov r9, qword [r15]
test r9, r9
je 0x180069a4b
mov rdx, qword [r9 + 8]
test dl, 1
jne 0x18006a7f2
or r12, 1
mov qword [rcx + 8], r12
mov rdx, qword [r15]
or rdx, 1
mov qword [rcx + 8], rdx
mov qword [r15], rcx
mov r9, r15
cmp qword [r8], rcx
jne 0x18006bdcd
mov qword [r8], r9
jmp 0x1800699ac
test r9d, r9d
je 0x180069b68
mov r15, qword [rcx + 8]
mov r9, r15
and r9, 0xfffffffffffffffe
je 0x180069a9d
mov rdx, qword [r9]
test rdx, rdx
je 0x180069a9d
test byte [rdx + 8], 1
jne 0x1800699a9
mov r12, qword [rcx]
test r12, r12
je 0x18006bbf5
mov r9, qword [r12 + 8]
test r9b, 1
je 0x18006a0dc
and r9, 0xfffffffffffffffe
je 0x18006b580
mov rdx, qword [r9]
test rdx, rdx
mov qword [rsp + 0x20], r11
je 0x180069ad9
test byte [rdx + 8], 1
jne 0x18006a8be
and r15d, 1
or r15, r9
mov qword [r12 + 8], r15
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18006bb75
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, rdx
mov qword [r9 + 8], r11
mov r12, qword [rcx + 8]
mov r15, r12
and r15, 0xfffffffffffffffe
je 0x18006bb8f
mov rdx, qword [r15]
and rdx, 0xfffffffffffffffe
and r12d, 1
or r12, rdx
mov qword [rcx + 8], r12
mov qword [r15], rcx
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, r15
mov qword [r9 + 8], rdx
or byte [rcx + 8], 1
mov r11, qword [rsp + 0x20]
cmp qword [r8], rcx
jne 0x18006a3c8
mov qword [r8], r9
mov rcx, r8
jmp 0x1800699a9
mov r15, qword [rcx + 8]
mov r11, r8
cmp r15, 1
ja 0x180069a82
mov rdx, qword [rcx]
test rdx, rdx
je 0x180069bba
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x40]
jne 0x18006a0a2
mov qword [r8], rdx
mov r10, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x60]
shr rdx, 0xc
mov rcx, qword [rsp + 0xb0]
mov qword [r11], rcx
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov rcx, qword [rsp + 0x28]
cmp rdx, rcx
jne 0x180069cf4
test cl, cl
je 0x180069c3e
mov rax, rbx
or rax, 1
shl rcx, 3
lea rcx, [rcx + rcx*2]
mov rdx, qword [rsp + 0x50]
lea rdx, [rdx + rdx*2]
lea rdx, [r10 + rdx*8]
add rdx, 0x30
xor r8d, r8d
test byte [rdx + r8], 8
je 0x180069c31
dec qword [r10 + 0x18]
dec qword [rsi + 0x88]
mov qword [rdx + r8], rax
add r8, 0x18
cmp rcx, r8
jne 0x180069c1f
cmp qword [r10 + 0x18], 0
jne 0x180069c54
cmp qword [rsp + 0x80], 0
jne 0x18006a140
mov r10, qword [rsp + 0x38]
test rbx, rbx
je 0x18006a4c5
test r10b, 1
je 0x18006a4c5
cmp qword [r14], rbx
je 0x180067902
mov qword [rbx], r14
xor eax, eax
cmp dword [rsi + rbp + 0xc4], 1
jne 0x180069c88
xor edx, edx
jmp 0x180069cad
lea rdx, [rsi + rbp]
add rdx, 0xc4
xor ecx, ecx
mov dword [rbx + rcx*4 + 0x10], 0xffffffff
inc rcx
mov r8d, dword [rdx]
dec r8d
cmp rcx, r8
jb 0x180069c95
mov edx, ecx
mov r8d, dword [rsi + rbp + 0xc0]
and r8d, 0x1f
mov ecx, r8d
neg cl
mov r9d, 0xffffffff
shr r9d, cl
cmp r8d, 1
sbb eax, eax
or eax, r9d
mov dword [rbx + rdx*4 + 0x10], eax
mov dword [rbx + 8], 0
mov eax, dword [rsi + rbp + 0xc0]
mov dword [rbx + 0xc], eax
inc dword [rsi + rbp + 0xcc]
mov qword [r14], rbx
jmp 0x18006757d
mov rax, qword [rsp + 0x50]
mov r15, rdx
add rdx, rax
sub r15, rcx
shl r15, 0xc
add rax, rcx
lea rcx, [rax + rax*2]
lea rax, [r10 + rcx*8]
add rax, 0x20
mov r8d, 0xfff
mov r9, qword [rax + 0x10]
and r9, r8
or r9, r15
mov qword [rax + 0x10], r9
lea rdx, [rdx + rdx*2]
and r8, qword [r10 + rdx*8 + 0x18]
or r8, r15
mov qword [r10 + rdx*8 + 0x18], r8
mov r15, qword [r11]
mov qword [rsp + 0xb0], r15
mov qword [rsp + 0xb8], 0
test r15, r15
je 0x18006a673
lea rdx, [r10 + rcx*8]
add rdx, 0x30
lea rcx, [rsp + 0xb0]
xor r10d, r10d
mov r11, r10
mov r10, rcx
mov rcx, qword [r15]
test rcx, rcx
je 0x180069d94
mov r12, qword [rcx + 8]
test r12b, 1
je 0x180069d94
mov r9, qword [rcx]
test r9, r9
je 0x180069d94
test byte [r9 + 8], 1
jne 0x180069e0f
mov rcx, r15
mov r11, qword [rdx]
mov r8, r11
mov r15, 0xfffffffffffff000
and r8, r15
mov r9, qword [rcx + 0x10]
and r9, r15
xor r15d, r15d
cmp r8, r9
seta r15b
mov r8d, 0xffffffff
cmovb r15d, r8d
test r15d, r15d
je 0x180069de0
cmp r15d, 0xffffffff
jne 0x180069dff
mov r15, qword [rcx]
mov r12d, 0xffffffff
test r15, r15
jne 0x180069d6d
jmp 0x180069efc
test r11b, 0x10
mov r8d, 0
cmove r8, rax
xor r12d, r12d
cmp r8, rcx
seta r9b
jb 0x180069dcd
mov r12b, r9b
jmp 0x180069e05
mov r12d, 1
mov r15, qword [rcx + 8]
and r15, 0xfffffffffffffffe
jmp 0x180069dd6
and r12, 0xfffffffffffffffe
mov qword [r15], r12
mov r9, r15
and r9, 0xfffffffffffffffe
mov r12, qword [rcx]
mov r8, qword [rcx + 8]
and r8d, 1
or r8, r9
mov qword [rcx + 8], r8
test r12, r12
je 0x18006bb01
and byte [r12 + 8], 0xfe
cmp qword [r10], r15
jne 0x180069e4b
mov qword [r10], rcx
jmp 0x180069d97
and rcx, 0xfffffffffffffffe
mov r15, qword [r10 + 8]
and r15d, 1
lea r8, [r15 + rcx]
mov qword [r10 + 8], r8
test rcx, rcx
je 0x18006bb14
mov r8, qword [rcx]
and r8, 0xfffffffffffffffe
or r8, r15
mov qword [r10 + 8], r8
mov qword [rcx], r10
mov r8, qword [r10 + 8]
and r8d, 1
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rcx + 8], r9
or byte [r10 + 8], 1
test r11, r11
je 0x18006b5e4
cmp qword [r11], r10
je 0x18006a717
jmp 0x18006a8aa
mov r10, qword [rdx]
mov r8, r10
mov r15, 0xfffffffffffff000
and r8, r15
mov r9, qword [rcx + 0x10]
and r9, r15
xor r15d, r15d
cmp r8, r9
seta r15b
mov r8d, 0xffffffff
cmovb r15d, r8d
test r15d, r15d
jne 0x18006a63e
jmp 0x18006a959
mov r15, qword [rcx + 8]
and r15, 0xfffffffffffffffe
mov r10, rcx
test r15, r15
jne 0x180069d73
mov r10, r11
mov qword [rax], 0
mov qword [rax + 8], 1
cmp r12d, 1
jne 0x18006a68a
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, rdx
or r8, rax
mov qword [rcx + 8], r8
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r10], rcx
mov r9, qword [rsp + 0x40]
jne 0x18006a5e9
mov qword [r10], rax
jmp 0x18006a692
test r8d, r8d
je 0x18006a41c
mov r8, qword [rcx + 8]
xor r11d, r11d
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x180069f92
mov rdx, qword [r9]
test rdx, rdx
je 0x180069f92
test byte [rdx + 8], 1
jne 0x1800699a2
mov r10, qword [rcx]
test r10, r10
je 0x18006b612
mov r9, qword [r10 + 8]
test r9b, 1
jne 0x18006aa72
or r8, 1
mov qword [rcx + 8], r8
mov rdx, qword [r10]
test rdx, rdx
je 0x180069fca
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18006accc
or byte [r10 + 8], 1
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18006bf82
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [rcx + 8], rdx
mov qword [r9], rcx
lea rcx, [rsp + 0xb0]
mov qword [rcx], r9
jmp 0x1800699a2
mov r8, qword [r9]
test r8, r8
je 0x18006a017
test byte [r8 + 8], 1
jne 0x18006999f
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x18006b5b6
mov r9, qword [rdx]
test r9, r9
je 0x18006a046
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18006ad39
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xb0]
mov qword [rcx], r9
jmp 0x18006999f
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x180069986
mov r8b, dl
jmp 0x18006997c
lea rdx, [rsp + 0xb0]
jmp 0x1800682bb
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x180069bcb
mov rdx, qword [r9 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
jne 0x18006a31f
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
jmp 0x18006a31f
or r9, 1
mov qword [r12 + 8], r9
mov rdx, qword [r12]
test rdx, rdx
je 0x18006a0fc
mov r9, qword [rdx + 8]
test r9b, 1
jne 0x18006a71f
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18006bbb5
mov r15, r11
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and edx, 1
or rdx, r11
mov qword [rcx + 8], rdx
mov qword [r9], rcx
mov r11, r15
jmp 0x180069b54
mov edi, 1
cmp r11d, 0xffffffff
jne 0x180069358
jmp 0x18006a944
mov r12, qword [rsi + 0x68]
mov qword [rsp + 0xb8], r12
mov qword [rsp + 0xc0], 0
xor ecx, ecx
cmp r12, r10
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x18006a6b9
test eax, eax
je 0x18006abc7
test r12, r12
je 0x18006b63a
mov rcx, qword [r12 + 0x10]
xor r15d, r15d
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18006ac10
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18006ac10
test byte [rdx + 0x10], 1
je 0x18006ac10
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, r15
mov r11d, 0xffffffff
xor r15d, r15d
mov r10, r12
mov r12, rax
xor eax, eax
cmp r12, rdx
setb al
cmova eax, r11d
cmp eax, 0xffffffff
jne 0x18006a215
test r12, r12
je 0x18006b035
mov rax, qword [r12 + 8]
test rax, rax
je 0x18006b032
test byte [rax + 0x10], 1
jne 0x18006a1c4
mov qword [rsp + 0x28], r10
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18006adbe
test byte [rcx + 0x10], 1
jne 0x18006a1c4
jmp 0x18006adbe
test eax, eax
jne 0x18006a236
test r12, r12
je 0x18006be8f
mov rax, qword [r12 + 0x10]
mov r9, r10
cmp rax, 1
jbe 0x18006a448
jmp 0x18006a244
test r12, r12
je 0x18006b62d
mov rax, qword [r12 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rsp + 0x28], r10
je 0x18006a262
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18006a262
test byte [rcx + 0x10], 1
jne 0x18006a1c4
mov qword [rsp + 0x20], r9
lea rcx, [rsp + 0x98]
mov rdx, r12
call fcn.180039460
mov rax, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x28]
cmp qword [rcx + 8], r12
jne 0x18006ad9d
jmp 0x18006aedd
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x20]
mov r11d, 0xffffffff
jmp 0x18006a1c4
mov rdx, qword [rsi + 0x70]
test rdx, rdx
jne 0x18006a653
lea r9, [rsp + 0xb0]
mov ecx, 0x100000
mov edx, 0x100000
xor r8d, r8d
call fcn.180062350
test rax, rax
je 0x18006a4c5
mov rbx, rax
mov r8b, byte [rsp + 0xb0]
mov rcx, rsi
mov rdx, rax
call fcn.180062ab0
add rbx, 0x3000
jmp 0x180068969
mov qword [r14 + 0x68], 0
mov qword [r14 + 0x70], 1
lea rcx, [rsp + 0xb0]
mov rbp, qword [rsp + 0x28]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x18006bc47
and byte [rcx + 8], 0xfe
mov qword [rsi + 0xa0], rcx
add r14, 0x3000
jmp 0x180067ad0
lea r15, [rsp + 0xa8]
mov rcx, r15
mov rdx, rbx
call fcn.180039460
mov r11, qword [rsp + 0x20]
mov rax, qword [r15]
jmp 0x180069631
mov r8d, 0x100000
mov rcx, rsi
mov rdx, rbx
xor r9d, r9d
call fcn.180001df0
mov r14, rax
jmp 0x1800675f2
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rbx + 8], rcx
mov rcx, rbx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbx + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [rbx + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x180069743
mov qword [r10], rcx
jmp 0x18006932b
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
mov rcx, r8
jmp 0x1800699a9
and r15, 0xfffffffffffffffe
mov qword [rdi + 8], r15
mov rdi, qword [rcx + 8]
mov r15, rdi
or r15, 1
mov qword [rcx + 8], r15
and rdi, 0xfffffffffffffffe
je 0x18006b67d
mov r15, qword [rdi]
or r15, 1
mov qword [rcx + 8], r15
mov qword [rdi], rcx
mov qword [r9], rdi
jmp 0x180067dac
mov r8, qword [rcx + 8]
cmp r8, 1
mov r10, qword [rsp + 0x30]
ja 0x18006ae2b
mov rdx, qword [rcx]
test rdx, rdx
jne 0x18006ab89
mov qword [rsp + 0xb0], rdx
jmp 0x180069bd0
mov r15, qword [r12 + 8]
test r15, r15
je 0x18006a951
mov rax, qword [r15 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [r12 + 8], rax
mov rax, r12
and rax, 0xfffffffffffffffe
mov rcx, qword [r15 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r15 + 0x10], rcx
mov rcx, qword [r12 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r15 + 0x10], rcx
or byte [r12 + 0x10], 1
and qword [r15 + 0x10], 1
cmp qword [r10 + 8], r12
jne 0x18006a893
mov qword [r10 + 8], r15
mov rax, qword [rsp + 0xb8]
mov qword [rsi + 0x68], rax
test rdx, rdx
je 0x18006bec4
xorps xmm0, xmm0
movups xmmword [rdx + 8], xmm0
test r8b, r8b
jne 0x180069c6c
mov qword [r14], 0
mov bl, 1
jmp 0x1800675db
mov qword [r13 + 8], rax
jmp 0x180068c4e
mov r9, qword [r10 + 8]
and r9d, 1
or r9, rcx
mov qword [r10 + 8], r9
jmp 0x18006932b
and r8, 0xfffffffffffffffe
mov qword [rax + 8], r8
mov r9, qword [rdx]
test r9, r9
je 0x18006bf12
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18006bf2c
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
jmp 0x18006857b
and r8d, 1
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
or rdi, r8
mov qword [r9 + 8], rdi
and byte [r11 + 8], 0xfe
mov r8, qword [r10 + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18006bf52
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r8d, 1
or r8, r11
mov qword [r10 + 8], r8
mov qword [r9], r10
mov qword [rcx], r9
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
jne 0x1800694f7
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov al, 1
jmp 0x180068aee
mov rdx, qword [r10 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
jne 0x18006a692
and edx, 1
or rdx, rax
mov qword [r10 + 8], rdx
jmp 0x18006a692
test r9b, 0x10
mov r9d, 0
cmove r9, rax
xor edi, edi
cmp r9, rcx
seta r9b
jb 0x18006a944
mov dil, r9b
jmp 0x180069358
lea rbx, [rsp + 0xb0]
jmp 0x180068503
mov r12d, 1
cmp r15d, 0xffffffff
jne 0x180069ee5
jmp 0x18006ac02
mov qword [rsi + 0x70], 0
lea rbx, [rdx + 0x3000]
add rdx, 0x68
mov rcx, r15
call fcn.180062bd0
jmp 0x180068969
mov qword [rax], 0
mov qword [rax + 8], 1
lea rcx, [rsp + 0xb0]
mov r9, qword [rsp + 0x40]
mov qword [rcx], rax
mov rax, qword [rsp + 0xb0]
test rax, rax
je 0x18006bd8d
and byte [rax + 8], 0xfe
mov qword [r9], rax
mov r10, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
jmp 0x180069bf8
test r12, r12
je 0x18006ab5e
mov rax, qword [r12 + 8]
test rax, rax
je 0x18006ab5e
test byte [rax + 0x10], 1
je 0x18006ab4b
xor r9d, r9d
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
jmp 0x18006a1bb
mov ecx, 0x40
call fcn.1800022d0
test rax, rax
je 0x18006bb27
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov qword [r15 + rdi*8], rax
jmp 0x1800690d1
mov qword [r11], rcx
jmp 0x180069eac
and r9, 0xfffffffffffffffe
mov qword [rdx + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x18006bbc8
mov r12, r11
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, rdx
mov qword [r9 + 8], r11
mov rdx, qword [rcx + 8]
mov r15, rdx
and r15, 0xfffffffffffffffe
je 0x18006bbe2
mov r11, qword [r15]
and r11, 0xfffffffffffffffe
and edx, 1
or rdx, r11
mov qword [rcx + 8], rdx
mov qword [r15], rcx
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, r15
mov qword [r9 + 8], rdx
mov r11, r12
jmp 0x180069b54
test r11, r11
je 0x18006bf65
cmp qword [r11], rax
jne 0x18006ae10
mov qword [r11], rcx
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x18006bf78
mov qword [r8], 0
mov r10, qword [rsp + 0x30]
mov r11, qword [rsp + 0x40]
jmp 0x180069bd0
and rdx, 0xfffffffffffffffe
mov qword [r15], rdx
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, r15
mov qword [r9 + 8], rdx
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r15, [rdx + r9]
mov qword [rcx + 8], r15
test r9, r9
je 0x18006ba8a
mov r15, qword [r9]
and r15, 0xfffffffffffffffe
or r15, rdx
mov qword [rcx + 8], r15
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18006a84c
mov r15, qword [rdx + 8]
test r15b, 1
jne 0x18006aea6
mov qword [rcx + 8], rdx
jmp 0x180069a64
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov r8, qword [rax + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
mov r8, qword [rdx + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18006803d
and r15, 0xfffffffffffffffe
mov rax, qword [r10 + 0x10]
and eax, 1
or rax, r15
mov qword [r10 + 0x10], rax
jmp 0x18006a4a0
mov r8, qword [r11 + 8]
and r8d, 1
or r8, rcx
mov qword [r11 + 8], r8
jmp 0x180069eac
and r15d, 1
mov r11, qword [r9 + 8]
and r11, 0xfffffffffffffffe
or r11, r15
mov qword [r9 + 8], r11
and byte [rdx + 8], 0xfe
mov rdx, qword [r12 + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18006bba2
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and edx, 1
or rdx, r11
mov qword [r12 + 8], rdx
mov qword [r9], r12
mov qword [rcx], r9
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, rdx
mov qword [r9 + 8], r11
mov r12, qword [rcx + 8]
mov r15, r12
and r15, 0xfffffffffffffffe
jne 0x180069b28
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov r11, qword [rcx]
mov edi, 0xffffffff
jmp 0x180069360
xor r15d, r15d
jmp 0x18006a492
test r10b, 0x10
mov r8d, 0
cmove r8, rax
xor r12d, r12d
cmp r8, rcx
seta r9b
jb 0x18006ac02
mov r12b, r9b
jmp 0x180069ee5
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [rbx + 8]
test rax, rax
je 0x18006bf95
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [rbx + 8], rcx
mov rcx, rbx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [rbx + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x18006bfb0
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [rbx + 0x10], rdx
mov qword [rcx + 8], rbx
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x18006962c
mov rbp, rbx
test r12, r12
je 0x18006bfc3
mov rax, qword [rsp + 0x20]
cmp qword [r12 + 8], rax
jne 0x18006af71
mov qword [r12 + 8], rbp
cmp qword [rsp + 0x20], 0
je 0x18006bfe3
test rbx, rbx
je 0x18006bff7
mov rdx, qword [rsp + 0x20]
mov rax, qword [rdx + 8]
mov qword [rbp + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [rbp + 0x10]
and eax, 1
or rax, rcx
mov qword [rbp + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov qword [rbp + 0x10], rax
cmp qword [r13 + 8], rbp
jne 0x18006c00a
mov qword [r13 + 8], 0
mov r11, qword [rsp + 0x20]
jmp 0x180068cb9
and r9, 0xfffffffffffffffe
je 0x18006b5f7
mov r15, r11
mov r11, qword [r9]
test r11, r11
je 0x18006aa92
test byte [r11 + 8], 1
jne 0x18006aeec
and r8d, 1
or r8, r9
mov qword [r10 + 8], r8
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18006c027
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x18006c041
mov rdx, qword [r8]
and rdx, 0xfffffffffffffffe
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, r8
mov qword [r9 + 8], rdx
or byte [rcx + 8], 1
mov r11, r15
jmp 0x180069ff4
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x18006c014
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
mov rbp, qword [rsp + 0x28]
jmp 0x1800683a5
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18006ab5e
test byte [rcx + 0x10], 1
jne 0x18006a6da
lea r15, [rsp + 0xa8]
mov rcx, r15
mov rdx, r12
call fcn.180039300
mov rax, qword [r15]
test rax, rax
je 0x18006c109
and byte [rax + 0x10], 0xfe
xor r15d, r15d
jmp 0x18006ae53
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x18006a43b
test r12, r12
je 0x18006abe9
mov rcx, qword [r12 + 0x10]
cmp rcx, 1
ja 0x18006b14d
mov rax, qword [r12 + 8]
test rax, rax
jne 0x18006ae65
xor eax, eax
mov qword [rsp + 0xb8], rax
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
jmp 0x18006a4a0
mov r15, qword [rcx]
mov r12d, 0xffffffff
jmp 0x180069eed
mov rax, qword [r12 + 8]
test rax, rax
je 0x18006c054
test byte [rax + 0x10], 1
jne 0x18006ae38
or rcx, 1
mov qword [r12 + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18006ac47
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x18006afbe
or byte [rax + 0x10], 1
mov rcx, qword [r12 + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18006c11c
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [r12 + 0x10], rcx
mov qword [rax + 8], r12
jmp 0x18006ae53
lea r12, [rsp + 0xb0]
jmp 0x18006861c
mov rsi, qword [0x1800cb568]
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x18006c0a0
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x10], rsi
jmp 0x180067504
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov r9, qword [rcx]
test r9, r9
je 0x18006c0aa
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
je 0x18006c0c4
mov r10, qword [r8]
and r10, 0xfffffffffffffffe
and edx, 1
or rdx, r10
mov qword [rcx + 8], rdx
mov qword [r8], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, r8
mov qword [r9 + 8], rcx
jmp 0x180069ff4
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x18006c0d7
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18006ad94
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18006b0ae
mov qword [rcx + 8], rdx
jmp 0x18006a05f
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov r12, qword [rsp + 0x28]
mov rdx, qword [r12 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r12 + 0x10], rdx
jmp 0x18006a293
mov qword [rsp + 0x20], r9
lea rcx, [rsp + 0xa0]
mov rdx, r12
call fcn.180039300
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x28]
cmp qword [rcx + 8], r12
jne 0x18006c0ea
mov r10, qword [rsp + 0x28]
mov qword [r10 + 8], rax
mov r12, rax
mov rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x20]
mov r11d, 0xffffffff
jmp 0x18006a1ca
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r9, qword [r11 + 8]
and r9d, 1
or r9, rdx
mov qword [r11 + 8], r9
jmp 0x18006a7a7
lea r11, [rsp + 0xb0]
jmp 0x180069f77
lea rcx, [rsp + 0xa8]
mov rdx, r12
call fcn.180039460
lea rax, [rsp + 0xa8]
mov rax, qword [rax]
lea r12, [rsp + 0xb0]
mov qword [r12 + 8], rax
jmp 0x18006a1ae
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r12 + 8], rcx
mov rcx, r12
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r12 + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [r12 + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x18006abeb
and r15, 0xfffffffffffffffe
mov qword [rdx + 8], r15
mov rdx, qword [rcx + 8]
mov r15, rdx
or r15, 1
mov qword [rcx + 8], r15
and rdx, 0xfffffffffffffffe
je 0x18006ba77
mov r15, qword [rdx]
or r15, 1
mov qword [rcx + 8], r15
mov qword [rdx], rcx
mov qword [r9], rdx
jmp 0x180069a64
mov r12, qword [rsp + 0x28]
mov qword [r12 + 8], rax
jmp 0x18006a293
and r8d, 1
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
or rdx, r8
mov qword [r9 + 8], rdx
and byte [r11 + 8], 0xfe
mov rdx, qword [r10 + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x18006c12f
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r10 + 8], rdx
mov qword [r9], r10
mov qword [rcx], r9
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
jne 0x18006aae0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov rax, rbp
and rax, 0xfffffffffffffffe
mov rcx, qword [r12 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r12 + 0x10], rcx
jmp 0x18006aa10
mov ecx, 0x40
call fcn.1800022d0
test rax, rax
je 0x18006bb27
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [rdi + r12*8], rax
jmp 0x1800690ae
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [r12 + 8]
test rax, rax
je 0x18006c142
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r12 + 8], rcx
mov rcx, r12
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r12 + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x18006c15e
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r12 + 0x10], rdx
mov qword [rcx + 8], r12
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x18006ae53
mov r15, r12
test r9, r9
je 0x18006c171
mov rax, qword [rsp + 0x30]
cmp qword [r9 + 8], rax
jne 0x18006b3af
mov qword [r9 + 8], r15
cmp qword [rsp + 0x30], 0
je 0x18006c191
test r12, r12
je 0x18006c1aa
mov rdx, qword [rsp + 0x30]
mov rax, qword [rdx + 8]
mov qword [r15 + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [r15 + 0x10]
and eax, 1
or rax, rcx
mov qword [r15 + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov qword [r15 + 0x10], rax
cmp qword [r10 + 8], r15
jne 0x18006c1bd
mov qword [r10 + 8], 0
jmp 0x18006abf3
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x18006c1c7
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
jmp 0x18006a05f
mov byte [rsi + 0x78], 0
lea rcx, [rsp + 0xb0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
xor edi, edi
mov ebx, 0
test al, al
je 0x18006b10e
mov rbx, qword [rsp + 0xb0]
lea rcx, [rsp + 0xb0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
test al, al
je 0x18006b12c
mov rdi, qword [rsp + 0xb0]
mov ecx, 0x10
call fcn.1800022d0
mov qword [rax], rbx
mov qword [rax + 8], rdi
mov qword [rsi + 0x80], rax
mov byte [rsi + 0x78], 1
jmp 0x180067549
lea r15, [rsp + 0xb0]
jmp 0x18006a18a
test rax, rax
jne 0x18006c1da
xor r14d, r14d
jmp 0x1800695e8
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
cmp dword [0x1800cb718], 0
jne 0x18006b39d
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x18006c238
mov eax, dword [0x1800cb600]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x18006b202
lea rcx, [0x1800cb600]
call fcn.180060ac0
cmp dword [0x1800cb600], 0xffffffff
jne 0x18006b202
lea rdi, [rsp + 0xb0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rdi + 4]
mov qword [0x1800cb5f8], rax
lea rcx, [0x1800cb600]
call fcn.180060b40
mov eax, 0x1000
xor edx, edx
div qword [0x1800cb5f8]
test rdx, rdx
jne 0x18006c242
lea rcx, str.MALLOC_OPTIONS
lea rdi, [0x1800cb730]
mov rdx, rdi
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor r14d, r14d
test eax, eax
cmovne r14, rdi
je 0x18006b24f
mov al, byte [0x1800cb730]
test al, al
jne 0x18006b423
xor r14d, r14d
mov qword [0x1800cb6b8], r14
lea rcx, [0x1800cb680]
mov rdi, qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov edx, 0x1388
call rdi
mov qword [0x1800cb6a8], r14
mov qword [0x1800cb6b0], r14
lea rcx, [0x1800cb5b8]
mov edx, 0x1388
call rdi
mov qword [0x1800cb5e0], r14
mov qword [0x1800cb5e8], r14
mov qword [0x1800cb5f0], r14
lea rcx, [0x1800cb6c0]
mov edx, 0x1388
call rdi
mov qword [0x1800cb710], r14
mov qword [0x1800cb700], r14
xorps xmm0, xmm0
movups xmmword [0x1800cb578], xmm0
mov qword [0x1800cb588], r14
lea rcx, [0x1800cb540]
mov qword [rsp + 0xb8], r14
mov dword [rsp + 0xc0], 0
mov rax, qword [0x1800cb038]
mov qword [rsp + 0xb0], rax
mov edx, 0x1388
call rdi
test eax, eax
je 0x18006c20e
lea rdx, [rsp + 0xb0]
xor ecx, ecx
call fcn.180053590
mov qword [0x1800cb568], rax
test rax, rax
je 0x18006c226
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp byte [rcx + 8], 0
je 0x18006c26e
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x10], rax
lea rcx, [0x1800cb650]
mov edx, 0x1388
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x20
call fcn.1800022d0
test rax, rax
je 0x18006c21b
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [0x1800cb678], rax
mov dword [0x1800cb718], 1
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x1800674a0
mov rax, r15
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r9 + 0x10], rcx
jmp 0x18006b051
or r11, 1
mov qword [rdx + 8], r11
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
or r15, 1
mov qword [rcx + 8], r15
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18006c27f
cmp eax, 8
je 0x18006c27f
xor eax, eax
jmp 0x180068764
xor r15d, r15d
movsx edx, al
lea ecx, [rdx - 0x30]
cmp cl, 9
jbe 0x18006c301
xor ecx, ecx
cmp edx, 0x72
jne 0x18006c326
mov byte [0x1800cb5b0], 1
inc r15d
mov al, byte [r14 + r15]
test al, al
jne 0x18006b426
jmp 0x18006b24f
and edi, 1
mov qword [r15 + 8], rdi
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
xor eax, eax
jmp 0x180068e19
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
or rcx, 1
mov qword [rdx + 8], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
or r12, 1
mov qword [rcx + 8], r12
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18006c3b5
cmp eax, 8
je 0x18006c3b5
mov rcx, qword [rsp + 0x30]
cmp dword [rcx + 0x28], 0
je 0x18006b521
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0xc
xor r14d, r14d
jmp 0x1800675fb
xor r14d, r14d
jmp 0x180067fbd
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18006c48b
cmp eax, 8
je 0x18006c48b
xor eax, eax
jmp 0x180068adf
and r15d, 1
mov qword [r12 + 8], r15
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
xor ebx, ebx
jmp 0x180068c29
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
mov qword [rsp + 0x28], r10
xor r12d, r12d
jmp 0x18006a262
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
call fcn.180060de8
jmp 0x1800674e1
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
xor edx, edx
jmp 0x1800678d6
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
and r10d, 1
mov qword [r11 + 8], r10
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
jmp 0x180067708
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
mov rax, r9
jmp 0x180067aa2
mov r8, qword [rsi + 0x70]
test r8, r8
je 0x1800686aa
xor r11d, r11d
mov qword [rsi + 0x70], r11
lea r14, [r8 + 0x3000]
lea rax, [r8 + 0x68]
lea rdx, [rsp + 0xb0]
mov qword [rdx], rcx
mov qword [rdx + 8], r11
mov r9, 0xfffffffffffff000
mov r10d, 0xffffffff
mov rdi, r11
mov r11, rdx
mov rdx, qword [rcx]
test rdx, rdx
je 0x18006b8aa
mov r15, qword [rdx + 8]
test r15b, 1
je 0x18006b8aa
mov r12, qword [rdx]
test r12, r12
je 0x18006b8aa
test byte [r12 + 8], 1
jne 0x18006b910
mov rdx, rcx
mov rcx, qword [r8 + 0x78]
mov r15, rcx
and r15, r9
mov r12, qword [rdx + 0x10]
and r12, r9
xor edi, edi
cmp r15, r12
seta dil
cmovb edi, r10d
test edi, edi
je 0x18006b8e6
cmp edi, 0xffffffff
jne 0x18006b901
mov rcx, qword [rdx]
mov ebp, 0xffffffff
test rcx, rcx
jne 0x18006b882
jmp 0x18006b9ee
test cl, 0x10
mov ecx, 0
cmove rcx, rax
xor ebp, ebp
cmp rcx, rdx
seta cl
jb 0x18006b8d4
mov bpl, cl
jmp 0x18006b906
mov ebp, 1
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18006b8dc
and r15, 0xfffffffffffffffe
mov qword [rcx], r15
mov r12, rcx
and r12, 0xfffffffffffffffe
mov r15, qword [rdx]
mov r13, qword [rdx + 8]
and r13d, 1
or r13, r12
mov qword [rdx + 8], r13
test r15, r15
je 0x18006c566
and byte [r15 + 8], 0xfe
cmp qword [r11], rcx
jne 0x18006b94b
mov qword [r11], rdx
jmp 0x18006b8ad
and rdx, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
lea r15, [rcx + rdx]
mov qword [r11 + 8], r15
test rdx, rdx
je 0x18006c579
mov r15, qword [rdx]
and r15, 0xfffffffffffffffe
or r15, rcx
mov qword [r11 + 8], r15
mov qword [rdx], r11
mov rcx, qword [r11 + 8]
and ecx, 1
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
or r15, rcx
mov qword [rdx + 8], r15
or byte [r11 + 8], 1
test rdi, rdi
je 0x18006c425
cmp qword [rdi], r11
je 0x18006bc6d
jmp 0x18006bc92
mov rcx, qword [r8 + 0x78]
mov r15, rcx
and r15, r9
mov r12, qword [rdx + 0x10]
and r12, r9
xor r11d, r11d
cmp r15, r12
seta r11b
cmovb r11d, r10d
test r11d, r11d
jne 0x18006bc33
jmp 0x18006bd6b
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
mov r11, rdx
test rcx, rcx
jne 0x18006b888
mov r11, rdi
mov qword [r8 + 0x68], 0
mov qword [r8 + 0x70], 1
cmp ebp, 1
jne 0x18006baf0
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea r8, [rcx + rax]
mov qword [rdx + 8], r8
test rax, rax
je 0x18006c553
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rcx
mov qword [rdx + 8], r8
mov qword [rax], rdx
mov rcx, qword [rdx + 8]
and ecx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x18006bc10
mov qword [r11], rax
mov rbp, qword [rsp + 0x28]
jmp 0x180068911
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdi, qword [r8 + 8]
and edi, 1
or rdi, rcx
mov qword [r8 + 8], rdi
jmp 0x180067cf6
mov rbp, qword [rsp + 0x28]
jmp 0x18006890e
xor ebx, ebx
jmp 0x180068cab
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 0x100000
mov rcx, r14
xor r8d, r8d
call fcn.180039740
jmp 0x18006b502
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
mov rax, rcx
jmp 0x18006893b
mov rcx, qword [r11 + 8]
mov r8, rcx
and r8, 0xfffffffffffffffe
cmp rdx, r8
jne 0x18006ba5a
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
jmp 0x18006ba5a
mov ebp, 1
cmp r11d, 0xffffffff
jne 0x18006b9d7
jmp 0x18006be3a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
mov qword [rdi], rdx
jmp 0x18006b9aa
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
and qword [r8 + 8], 1
jmp 0x180067f0f
mov rcx, qword [rdi + 8]
and ecx, 1
or rcx, rdx
mov qword [rdi + 8], rcx
jmp 0x18006b9aa
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
and qword [rcx + 8], 1
jmp 0x1800678e4
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
or rax, 1
mov qword [rdx + 8], rax
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
mov qword [r12 + 0x28], rax
mov rcx, r12
call fcn.180001530
lea rcx, [0x1800cb6b0]
mov rdx, r12
call fcn.180001ff0
test rdi, rdi
je 0x18006904c
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.18001fbb0
test rax, rax
je 0x18006bed7
mov r12, rax
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x18006901f
test cl, 0x10
mov ecx, 0
cmove rcx, rax
xor ebp, ebp
cmp rcx, rdx
seta cl
jb 0x18006be3a
mov bpl, cl
jmp 0x18006b9d7
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
cmp edx, 1
jne 0x18006bdb2
mov rax, qword [rax + 8]
and rax, 0xfffffffffffffffe
jmp 0x1800686f0
mov r12, rax
jmp 0x180068fcc
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
jmp 0x1800699ac
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov rcx, qword [rdx]
mov ebp, 0xffffffff
jmp 0x18006b9df
or rcx, 1
mov qword [rbx + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
xor r12d, r12d
jmp 0x18006a492
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [r13 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r13 + 0x10], rdx
jmp 0x1800698eb
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov edx, 0x100000
mov rcx, r14
mov r8d, ebp
call fcn.180039740
jmp 0x180069531
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
and qword [r8 + 8], 1
jmp 0x18006a7e3
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov qword [rbx + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test rbx, rbx
je 0x18006bff7
mov qword [rbp + 8], 0
xor eax, eax
jmp 0x18006aa52
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
and qword [r13 + 0x10], 1
jmp 0x18006aa68
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
or rcx, 1
mov qword [r12 + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x1800695be
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x180069584
call fcn.180060de8
jmp 0x18006acad
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov r10, qword [rsp + 0x28]
mov rdx, qword [r10 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r10 + 0x10], rdx
jmp 0x18006adf3
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
mov qword [r12 + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test r12, r12
je 0x18006c1aa
mov qword [r15 + 8], 0
and qword [r15 + 0x10], 1
xor eax, eax
jmp 0x18006b093
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
and qword [r10 + 0x10], 1
jmp 0x18006abf3
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
xor r14d, r14d
mov rcx, rax
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x1800695e8
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x18006b163
mov qword [0x1800cb568], 0
jmp 0x18006c226
mov qword [0x1800cb678], 0
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x18006b50d
call fcn.180060de8
jmp 0x18006b1a5
lea rcx, str._jemalloc_
lea rdx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.180066f70
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
call fcn.180060de8
mov rax, qword [0x1800cb568]
jmp 0x18006b343
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0x68], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r15
mov rdx, qword [rsp + 0x60]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0x70], 0
jne 0x18006c37b
cmp eax, 0x5af
je 0x18006c2e4
cmp eax, 8
jne 0x18006b41c
xor eax, eax
dec qword [rsp + 0x68]
mov r11, qword [rsp + 0x20]
mov r9, qword [rsp + 0x48]
mov r10, qword [rsp + 0x58]
jne 0x18006c298
jmp 0x180067c13
xor ecx, ecx
lea eax, [rcx + rcx*4]
lea ecx, [rdx + rax*2]
add ecx, 0xffffffd0
inc r15d
mov al, byte [r14 + r15]
movsx edx, al
lea r8d, [rax - 0x30]
cmp r8b, 0xa
jae 0x18006b437
jmp 0x18006c303
cmp edx, 0x46
jne 0x18006c36a
cmp ecx, 1
adc ecx, 0
mov rax, qword [0x1800cb038]
xor edx, edx
test rax, rax
sete dl
cmp rax, 1
adc rax, 0
sub ecx, edx
shl rax, cl
test rax, rax
movabs rcx, 0x8000000000000000
cmovne rcx, rax
mov qword [0x1800cb038], rcx
jmp 0x18006b447
cmp edx, 0x52
jne 0x18006c39a
mov byte [0x1800cb5b0], 0
jmp 0x18006b447
cmp eax, 0x5af
mov ecx, dword [rsp + 0x78]
je 0x18006c38f
cmp eax, 8
jne 0x180067bdc
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x180067bdc
cmp edx, 0x66
jne 0x18006c438
cmp ecx, 1
adc ecx, 0
shr qword [0x1800cb038], cl
jmp 0x18006b447
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rdi, [rax + rax*4]
add rdi, 5
mov r15, qword [sym.imp.KERNEL32.dll_Sleep]
mov r12, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r13, qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x32
call r15
mov edx, 0x100000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call r12
mov r14, rax
call r13
test r14, r14
jne 0x18006c517
cmp eax, 0x5af
je 0x18006c41b
cmp eax, 8
jne 0x18006b502
dec rdi
jne 0x18006c3de
jmp 0x18006b502
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b4c2
lea rdi, [rsp + 0xb0]
mov byte [rdi], al
mov byte [rdi + 1], 0
lea rdx, str._jemalloc_
mov r12, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, 2
mov r8d, 0xa
call r12
lea rdx, str.:__malloc__Unsupported_character_in_malloc_options:_
mov ecx, 2
mov r8d, 0x35
call r12
lea rdx, [0x1800bf740]
mov rcx, rdi
call fcn.180066f70
jmp 0x18006b447
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0x88], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x58]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x90], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0x90], 0
jne 0x18006c534
cmp eax, 0x5af
je 0x18006c4f7
cmp eax, 8
jne 0x18006b579
xor eax, eax
dec qword [rsp + 0x88]
mov r9, qword [rsp + 0x30]
mov r10, qword [rsp + 0x38]
mov r11, qword [rsp + 0x50]
jne 0x18006c4a7
jmp 0x180068aee
cmp eax, 0x5af
je 0x18006c527
cmp eax, 8
jne 0x18006955e
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18006955e
cmp eax, 0x5af
mov ecx, dword [rsp + 0x68]
je 0x18006c548
cmp eax, 8
jne 0x180068aab
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x180068aab
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b46c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x18006b3df