Function at 0x1800442a0
Capabilities:
Encode data using base64
Generate random numbers via rtlgenrandom
Get system information on windows
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x178
movaps xmmword [rsp + 0x160], xmm6
mov rsi, rcx
mov rax, qword [0x1800cb028]
xor rax, rsp
mov qword [rsp + 0x158], rax
mov dword [rsp + 0xcb], 0
mov dword [rsp + 0xc8], 0
mov eax, dword [0x1800cb774]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x180046b7b
cmp rsi, 0x1000
ja 0x180044333
cmp byte [0x1800cb770], 0
je 0x180044333
mov rax, qword [0x1800cb648]
mov eax, dword [rax + 0x14810]
cmp eax, 1
je 0x1800474c3
cmp dword [0x1800cb718], 0
je 0x180046ffa
cmp rsi, 1
mov r15, rsi
adc r15, 0
cmp r15, 0x1f0
ja 0x180044501
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x1800476a6
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rdi, qword [rax + 0x10]
test rdi, rdi
je 0x180046719
cmp r15, 9
jb 0x18004468e
add r15, 0xf
mov rbp, r15
and rbp, 0xfffffffffffffff0
shr r15, 4
dec r15
lea r13, [r15 + r15*2]
shl r13, 4
cmp byte [rdi + 0x78], 0
je 0x1800443d3
cmp qword [rdi + 0x80], 0
je 0x180046f53
lea r14, [rdi + r13]
add r14, 0xa8
lea rbx, [rdi + 0x18]
cmp dword [rdi + 0x40], 0
jne 0x1800443f1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r15, qword [r14]
test r15, r15
je 0x180044532
cmp dword [r15 + 0xc], 0
je 0x180044532
mov eax, dword [r15 + 8]
mov edx, dword [r15 + rax*4 + 0x10]
test edx, edx
je 0x1800445b9
mov r8, qword [rdi + 0x80]
test r8, r8
jne 0x1800444bb
tzcnt r8d, edx
mov r14d, eax
shl r14d, 5
or r14d, r8d
mov ecx, dword [rdi + r13 + 0xc8]
imul r14, qword [rdi + r13 + 0xb8]
add rcx, r15
add r14, rcx
btc edx, r8d
mov dword [r15 + rax*4 + 0x10], edx
dec dword [r15 + 0xc]
test r14, r14
je 0x18004502e
add qword [rdi + 0x58], rbp
xor ebp, ebp
cmp dword [rdi + 0x40], 0
jne 0x18004447a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test bpl, bpl
jne 0x180049746
test r14, r14
je 0x180049746
mov rcx, qword [rsp + 0x158]
xor rcx, rsp
call fcn.180062020
mov rax, r14
movaps xmm6, xmmword [rsp + 0x160]
add rsp, 0x178
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r9, qword [r8]
mov rcx, qword [r8 + 8]
mov qword [r8], rcx
mov r10, r9
shl r10, 0x17
xor r10, r9
mov r9, rcx
shr r9, 0x1a
xor r9, rcx
xor r9, r10
shr r10, 0x11
xor r10, r9
add ecx, r10d
mov r9d, edx
ror r9d, cl
mov qword [r8 + 8], r10
tzcnt r8d, r9d
add r8d, ecx
and r8d, 0x1f
jmp 0x18004442e
mov rdi, qword [0x1800cb568]
cmp r15, 0xf01
jae 0x180044710
add r15, 0xff
mov ebp, r15d
and ebp, 0x1f00
shr r15, 8
add r15, 0x1d
jmp 0x1800443b7
mov rdx, qword [rdi + r13 + 0xb0]
test rdx, rdx
je 0x180044a70
lea r15, [rdi + r13]
add r15, 0xb0
mov rax, rdx
nop word cs:[rax + rax]
mov r12, rax
mov rax, qword [rax]
test rax, rax
jne 0x180044560
mov qword [rsp + 0xd0], rdx
mov qword [rsp + 0xd8], 0
xor ecx, ecx
cmp rdx, r12
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x1800446e1
mov r9, qword [rdx]
test r9, r9
je 0x1800476b0
mov rax, qword [r9 + 8]
test al, 1
je 0x18004461f
xor eax, eax
mov r8d, 0xffffffff
jmp 0x1800483e2
mov ecx, dword [rdi + r13 + 0xc4]
inc eax
cmp eax, ecx
jae 0x18004502a
mov edx, eax
mov r8d, dword [r15 + rdx*4 + 0x10]
test r8d, r8d
je 0x1800445c1
mov r9, qword [rdi + 0x80]
test r9, r9
jne 0x18004469b
tzcnt r9d, r8d
mov r14d, eax
shl r14d, 5
or r14d, r9d
mov ecx, dword [rdi + r13 + 0xc8]
add rcx, r15
imul r14, qword [rdi + r13 + 0xb8]
add r14, rcx
btc r8d, r9d
mov dword [r15 + rdx*4 + 0x10], r8d
mov dword [r15 + 8], eax
jmp 0x180044458
mov rcx, qword [r9]
test rcx, rcx
je 0x180044631
test byte [rcx + 8], 1
jne 0x1800445ac
or rax, 1
mov qword [r9 + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18004729b
mov r9, qword [rax]
test r9, r9
je 0x180044660
mov r8, qword [r9 + 8]
test r8b, 1
jne 0x180044f31
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov r9, rax
and byte [r9 + 8], 0xfe
lea rdx, [rsp + 0xd0]
mov qword [rdx], r9
jmp 0x1800445ac
mov ebp, 0x10
xor r15d, r15d
jmp 0x1800443b7
mov r10, qword [r9]
mov rcx, qword [r9 + 8]
mov qword [r9], rcx
mov r11, r10
shl r11, 0x17
xor r11, r10
mov r10, rcx
shr r10, 0x1a
xor r10, rcx
xor r10, r11
shr r11, 0x11
xor r11, r10
add ecx, r11d
mov r10d, r8d
ror r10d, cl
mov qword [r9 + 8], r11
tzcnt r9d, r10d
add r9d, ecx
and r9d, 0x1f
jmp 0x1800445ec
test eax, eax
jne 0x180044a38
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x18004612e
mov rax, qword [rdx]
test rax, rax
jne 0x180046374
mov qword [rsp + 0xd0], rax
jmp 0x180048358
cmp r15, 0xfc000
ja 0x18004675f
add r15, 0xfff
lea r14, [rdi + 0x18]
cmp dword [rdi + 0x40], 0
jne 0x180044737
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbp, r15
and rbp, 0xfffffffffffff000
mov rcx, qword [rdi + 0xa0]
test rcx, rcx
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x68], r14
je 0x180044ec0
xor eax, eax
mov rdx, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r9, rcx
mov r11, qword [r9 + 0x10]
and r11, rdx
xor r10d, r10d
cmp rbp, r11
seta r10b
cmovb r10d, r8d
lea r11d, [r10 + 1]
cmp r11d, 2
jae 0x180044799
mov rax, r9
mov r9, qword [r9]
test r9, r9
jne 0x18004476d
jmp 0x1800447ad
cmp r10d, 1
jne 0x1800476e9
mov r9, qword [r9 + 8]
and r9, 0xfffffffffffffffe
jmp 0x180044792
test rax, rax
je 0x1800477dd
mov r8, rax
and r8, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r14, rdx
and r14, 0xfffffffffffffff0
shl r14, 8
add r14, r8
mov r11, r14
and r11, 0xfffffffffff00000
mov rax, qword [r11 + 0x18]
mov qword [rsp + 0x60], rax
mov eax, r14d
shr eax, 0xc
movzx r9d, al
lea rax, [r9*8]
lea rdx, [rax + rax*2]
mov r10, qword [r11 + rdx + 0x30]
shr r15, 0xc
test rbp, rbp
mov qword [rsp + 0x30], r11
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x48], r10
je 0x1800449b3
cmp r15, 1
mov rcx, r15
adc rcx, 0
lea rax, [r9 + r9*2]
lea r13, [r11 + rax*8]
add r13, 0x30
xor ebp, ebp
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
xor ebx, ebx
lea r12, [rbx + r9]
lea rax, [r12 + r12*2]
test byte [r11 + rax*8 + 0x30], 0x60
jne 0x180044878
inc rbx
cmp rbx, r15
setae bpl
add r13, 0x18
cmp rbx, rcx
jne 0x180044850
jmp 0x1800449a7
cmp rbx, r15
jae 0x180045a90
mov qword [rsp + 0x78], rcx
mov rax, r13
xor ecx, ecx
mov qword [rsp + 0x58], rcx
mov rcx, qword [rax]
test cl, 0x60
je 0x1800448bc
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
mov r10, qword [rsp + 0x58]
lea rcx, [rbx + r10]
inc rcx
inc r10
mov qword [rsp + 0x58], r10
add rax, 0x18
cmp rcx, r15
jb 0x180044890
mov rcx, qword [rsp + 0x58]
shl rcx, 0xc
mov qword [rsp + 0x70], rdx
jne 0x180044fc5
jmp 0x18004505f
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x98], rcx
call r8
mov dword [rsp + 0x88], eax
mov rcx, r12
mov rdx, qword [rsp + 0x80]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x1800472b6
mov rax, qword [rsp + 0x80]
add r12, rax
mov rcx, qword [rsp + 0x98]
sub rcx, rax
mov eax, 0x100000
cmp rcx, rax
mov edx, 0x100000
cmovb rdx, rcx
test rcx, rcx
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
je 0x180044fe8
jmp 0x1800448d5
mov r12, qword [rsp + 0x58]
test r12, r12
je 0x180044985
test al, al
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
lea rdx, [r12*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [r13 + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x180044977
test al, al
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
je 0x180048c97
add qword [rdi + 0x50], r12
jmp 0x180044860
mov rcx, qword [rdi + 0xa0]
mov rbp, qword [rsp + 0x38]
lea rax, [r11 + rdx]
add rax, 0x20
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0xd8], 0
mov rdx, qword [rax + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
je 0x180044e9f
cmp r8d, 0xffffffff
jne 0x180044af0
mov r9, qword [rcx]
test r9, r9
je 0x180047ab4
mov rdx, qword [r9 + 8]
test dl, 1
je 0x180044dc2
xor edx, edx
mov r10, 0xfffffffffffff000
mov r11d, 0xffffffff
jmp 0x180048adb
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x180044e32
mov rcx, qword [r9]
test rcx, rcx
je 0x180044e32
test byte [rcx + 8], 1
je 0x180044e32
mov rax, qword [rsp + 0x38]
jmp 0x1800445ae
movzx eax, byte [rdi + r13 + 0xd2]
mov qword [rsp + 0x40], rax
lea r12, [rdi + 0xa0]
mov rcx, qword [rdi + 0xa0]
test rcx, rcx
je 0x180045a3e
mov rdx, qword [rsp + 0x40]
shl rdx, 0xc
xor eax, eax
mov r8, 0xfffffffffffff000
mov r9d, 0xffffffff
mov r11, qword [rcx + 0x10]
and r11, r8
xor r10d, r10d
cmp rdx, r11
seta r10b
cmovb r10d, r9d
lea r11d, [r10 + 1]
cmp r11d, 2
jae 0x180044adc
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x180044aad
jmp 0x180044b8e
cmp r10d, 1
jne 0x180047aac
mov rcx, qword [rcx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x180044ad2
test r8d, r8d
je 0x180044ff9
mov r8, qword [rcx + 8]
xor edx, edx
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x180044b1b
mov r10, qword [r9]
test r10, r10
je 0x180044b1b
test byte [r10 + 8], 1
jne 0x180044a26
mov r10, qword [rcx]
test r10, r10
je 0x18004742c
mov r9, qword [r10 + 8]
test r9b, 1
jne 0x180046023
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [r10]
test r8, r8
je 0x180044b53
mov r9, qword [r8 + 8]
test r9b, 1
jne 0x1800464a1
or byte [r10 + 8], 1
mov r8, qword [rcx + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x180047c78
mov r10, qword [r9]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [r9], rcx
lea rcx, [rsp + 0xd0]
mov qword [rcx], r9
jmp 0x180044a26
test rax, rax
je 0x180045a3e
mov rcx, rax
and rcx, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r15, rdx
and r15, 0xfffffffffffffff0
shl r15, 8
add r15, rcx
mov qword [rsp + 0x58], r12
mov r8, r15
and r8, 0xfffffffffff00000
mov rax, qword [r8 + 0x18]
mov qword [rsp + 0x98], rax
mov eax, r15d
shr eax, 0xc
movzx r11d, al
lea rax, [r11*8]
lea rax, [rax + rax*2]
mov qword [rsp + 0x60], rax
mov rax, qword [r8 + rax + 0x30]
mov qword [rsp + 0x80], rax
mov rdx, qword [rsp + 0x40]
test rdx, rdx
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x68], r11
je 0x180045066
lea rax, [r11 + r11*2]
lea r8, [r8 + rax*8]
add r8, 0x30
xor r10d, r10d
xor r12d, r12d
mov r9, r11
add r11, r12
lea rax, [r11 + r11*2]
mov rcx, qword [rsp + 0x38]
test byte [rcx + rax*8 + 0x30], 0x60
jne 0x180044c60
inc r12
add r8, 0x18
cmp r12, rdx
setae r10b
mov r11, r9
jne 0x180044c32
jmp 0x180045069
mov qword [rsp + 0x70], r11
mov rax, r8
xor ecx, ecx
mov qword [rsp + 0x30], rcx
mov rcx, qword [rax]
test cl, 0x60
je 0x180044c9b
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
mov r11, qword [rsp + 0x30]
lea rcx, [r12 + r11]
inc rcx
inc r11
mov qword [rsp + 0x30], r11
add rax, 0x18
cmp rcx, rdx
jb 0x180044c6f
mov qword [rsp + 0x88], r8
mov rdx, qword [rsp + 0x30]
shl rdx, 0xc
je 0x18004601b
mov qword [rsp + 0x48], r10
mov rcx, qword [rsp + 0x70]
shl rcx, 0xc
mov eax, ecx
and eax, 0xff000
mov r8d, 0x100000
sub r8, rax
cmp r8, rdx
cmovae r8, rdx
add rcx, qword [rsp + 0x38]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], r8
mov qword [rsp + 0x90], rdx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0xa4], eax
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x180047321
mov rcx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x78]
add rcx, rax
mov rdx, qword [rsp + 0x90]
sub rdx, rax
mov eax, 0x100000
cmp rdx, rax
mov r8d, 0x100000
cmovb r8, rdx
test rdx, rdx
jne 0x180044cdc
mov r11b, 1
mov r10, qword [rsp + 0x48]
mov r9, qword [rsp + 0x68]
cmp qword [rsp + 0x30], 0
mov rax, qword [rsp + 0x88]
je 0x180044d9e
test r11b, r11b
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
mov rdx, qword [rsp + 0x30]
lea rdx, [rdx*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [rax + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x180044d91
test r11b, r11b
je 0x1800453b7
mov rax, qword [rsp + 0x30]
add qword [rdi + 0x50], rax
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x88]
jmp 0x180044c48
mov r8, qword [r9]
test r8, r8
je 0x180044dd5
test byte [r8 + 8], 1
jne 0x180044a24
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x180047306
mov r9, qword [rdx]
test r9, r9
je 0x180044e04
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x180046514
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xd0]
mov qword [rcx], r9
jmp 0x180044a24
mov rcx, qword [rdx]
test rcx, rcx
je 0x180047b2a
test byte [rcx + 8], 1
jne 0x180045042
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x180044e66
mov r8, qword [rax + 8]
test r8b, 1
jne 0x180045faf
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x180047bd2
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [r9], rdx
lea rdx, [rsp + 0xd0]
mov qword [rdx], r9
jmp 0x180044a66
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x180044a0b
mov r8b, dl
jmp 0x180044a01
mov rcx, qword [rdi + 0x70]
test rcx, rcx
jne 0x18004580e
lea r12, [0x1800cb680]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb6a8]
test rax, rax
je 0x1800460c0
xor r13d, r13d
mov ecx, 0xffffffff
mov rbx, qword [rax + 0x28]
xor edx, edx
cmp rbx, 0x100000
setb dl
cmova edx, ecx
cmp edx, 0xffffffff
jne 0x180044f1d
mov r13, rax
mov rax, qword [rax]
test rax, rax
jne 0x180044ef5
jmp 0x180045b72
test edx, edx
jne 0x180047d41
cmp qword [rax + 0x20], 0
jne 0x180044f0d
jmp 0x180047d53
and r8, 0xfffffffffffffffe
mov qword [rax], r8
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
and r9, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + r9]
mov qword [rdx + 8], rcx
test r9, r9
je 0x180047bbf
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [r9], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x180045039
mov rcx, qword [rax + 8]
test cl, 1
je 0x180045039
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x180047d2e
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [r9], rax
jmp 0x180044679
shl r12, 0xc
mov eax, r12d
and eax, 0xff000
mov edx, 0x100000
sub rdx, rax
cmp rdx, rcx
cmovae rdx, rcx
add r12, r11
jmp 0x1800448d5
mov al, 1
mov r11, qword [rsp + 0x30]
mov r9, qword [rsp + 0x40]
jmp 0x18004494e
mov r8, qword [rcx + 8]
cmp r8, 1
ja 0x1800465aa
mov rdx, qword [rcx]
test rdx, rdx
mov r9, qword [rsp + 0x40]
mov r10, qword [rsp + 0x48]
jne 0x1800461e9
mov qword [rsp + 0xd0], rdx
jmp 0x180048c14
dec dword [r15 + 0xc]
mov bpl, 1
xor r14d, r14d
jmp 0x18004446b
mov qword [rdx + 8], rax
jmp 0x180044679
lea rcx, [rsp + 0xc0]
call fcn.180008400
lea rax, [rsp + 0xc0]
mov r9, qword [rax]
jmp 0x180044e8f
mov al, 1
jmp 0x18004494e
mov r10b, 1
mov qword [rsp + 0x48], r10
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x60]
add rax, rcx
add rax, 0x20
mov r11, qword [rsp + 0x58]
mov rcx, qword [r11]
mov qword [rsp + 0xd0], rcx
mov qword [rsp + 0xd8], 0
mov rdx, qword [rax + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
mov qword [rsp + 0x30], rax
je 0x1800457ed
cmp r8d, 0xffffffff
jne 0x1800456d7
mov r9, qword [rcx]
test r9, r9
je 0x180047b17
mov rdx, qword [r9 + 8]
test dl, 1
je 0x18004577d
xor edx, edx
mov qword [rsp + 0x60], rdx
mov r10, 0xfffffffffffff000
mov r8, rcx
mov rcx, r9
mov r9, qword [rax + 0x10]
mov r11, r9
and r11, r10
mov r12, qword [rcx + 0x10]
and r12, r10
xor edx, edx
cmp r11, r12
seta dl
mov r11d, 0xffffffff
cmovb edx, r11d
test edx, edx
jne 0x18004514c
test r9b, 0x10
mov r9d, 0
cmove r9, rax
xor edx, edx
cmp r9, rcx
seta r9b
jb 0x180045151
mov dl, r9b
cmp edx, 0xffffffff
jne 0x1800451ce
mov r9, qword [rcx]
test r9, r9
je 0x1800462a1
mov rdx, qword [r9 + 8]
test dl, 1
jne 0x180045103
mov r11, qword [r9]
test r11, r11
je 0x180045175
test byte [r11 + 8], 1
jne 0x180045103
or rdx, 1
mov qword [r9 + 8], rdx
mov r12, qword [rcx + 8]
mov rdx, r12
and rdx, 0xfffffffffffffffe
je 0x1800472eb
mov r9, qword [rdx]
test r9, r9
je 0x1800451a4
mov r11, qword [r9 + 8]
test r11b, 1
jne 0x18004630b
or r12, 1
mov qword [rcx + 8], r12
mov r9, qword [rdx]
or r9, 1
mov qword [rcx + 8], r9
mov qword [rdx], rcx
mov r9, rdx
cmp qword [r8], rcx
jne 0x180047b9d
mov qword [r8], r9
jmp 0x180045106
test edx, edx
je 0x1800452b9
mov r12, qword [rcx + 8]
mov r9, r12
and r9, 0xfffffffffffffffe
je 0x1800451f5
mov rdx, qword [r9]
test rdx, rdx
je 0x1800451f5
test byte [rdx + 8], 1
jne 0x180045103
mov rdx, qword [rcx]
test rdx, rdx
je 0x180047a59
mov r9, qword [rdx + 8]
test r9b, 1
je 0x180045875
and r9, 0xfffffffffffffffe
je 0x180047357
mov r11, qword [r9]
test r11, r11
je 0x18004522c
test byte [r11 + 8], 1
jne 0x18004641c
and r12d, 1
or r12, r9
mov qword [rdx + 8], r12
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x180047a19
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov r12, qword [rcx + 8]
mov rdx, r12
and rdx, 0xfffffffffffffffe
je 0x180047a33
mov rax, qword [rdx]
and rax, 0xfffffffffffffffe
and r12d, 1
or r12, rax
mov qword [rcx + 8], r12
mov qword [rdx], rcx
mov rax, qword [r9 + 8]
and eax, 1
or rax, rdx
mov qword [r9 + 8], rax
or byte [rcx + 8], 1
cmp qword [r8], rcx
mov rax, qword [rsp + 0x30]
jne 0x180045a98
mov qword [r8], r9
mov rcx, r8
jmp 0x180045103
mov r12, qword [rcx + 8]
mov rdx, r8
mov qword [rsp + 0x60], r8
cmp r12, 1
ja 0x1800451da
mov rdx, qword [rcx]
test rdx, rdx
je 0x180045310
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x58]
jne 0x18004585e
mov qword [r8], rdx
mov r10, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x80]
shr rdx, 0xc
mov rax, qword [rsp + 0xd0]
mov qword [r11], rax
xorps xmm0, xmm0
mov rax, qword [rsp + 0x30]
movups xmmword [rax], xmm0
mov rcx, qword [rsp + 0x40]
cmp rdx, rcx
jne 0x180045459
test cl, cl
je 0x18004539c
mov rax, r15
or rax, 1
shl rcx, 3
lea rcx, [rcx + rcx*2]
mov rdx, qword [rsp + 0x68]
lea rdx, [rdx + rdx*2]
lea rdx, [r10 + rdx*8]
add rdx, 0x30
xor r8d, r8d
test byte [rdx + r8], 8
je 0x18004538f
dec qword [r10 + 0x18]
dec qword [rdi + 0x88]
mov qword [rdx + r8], rax
add r8, 0x18
cmp rcx, r8
jne 0x18004537d
cmp qword [r10 + 0x18], 0
jne 0x1800453b2
cmp qword [rsp + 0x98], 0
jne 0x1800458bd
mov r10, qword [rsp + 0x48]
test r15, r15
je 0x180045b63
test r10b, 1
je 0x180045b63
cmp qword [r14], r15
je 0x180048377
mov qword [r15], r14
xor eax, eax
cmp dword [rdi + r13 + 0xc4], 1
jne 0x1800453e7
xor edx, edx
jmp 0x18004540d
lea rdx, [rdi + r13]
add rdx, 0xc4
xor ecx, ecx
mov dword [r15 + rcx*4 + 0x10], 0xffffffff
inc rcx
mov r8d, dword [rdx]
dec r8d
cmp rcx, r8
jb 0x1800453f4
mov edx, ecx
mov r8d, dword [rdi + r13 + 0xc0]
and r8d, 0x1f
mov ecx, r8d
neg cl
mov r9d, 0xffffffff
shr r9d, cl
cmp r8d, 1
sbb eax, eax
or eax, r9d
mov dword [r15 + rdx*4 + 0x10], eax
mov dword [r15 + 8], 0
mov eax, dword [rdi + r13 + 0xc0]
mov dword [r15 + 0xc], eax
inc dword [rdi + r13 + 0xcc]
mov qword [r14], r15
jmp 0x180044408
mov rax, qword [rsp + 0x68]
mov r12, rdx
add rdx, rax
sub r12, rcx
shl r12, 0xc
add rax, rcx
lea rcx, [rax + rax*2]
lea rax, [r10 + rcx*8]
add rax, 0x20
mov r8d, 0xfff
mov r9, qword [rax + 0x10]
and r9, r8
or r9, r12
mov qword [rax + 0x10], r9
lea rdx, [rdx + rdx*2]
and r8, qword [r10 + rdx*8 + 0x18]
or r8, r12
mov qword [r10 + rdx*8 + 0x18], r8
mov r12, qword [r11]
mov qword [rsp + 0xd0], r12
mov qword [rsp + 0xd8], 0
test r12, r12
je 0x180046170
lea rcx, [r10 + rcx*8]
add rcx, 0x30
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0xd0]
xor r10d, r10d
mov r11, r10
mov r10, rcx
mov rcx, qword [r12]
test rcx, rcx
je 0x1800454ff
mov r9, qword [rcx + 8]
test r9b, 1
je 0x1800454ff
mov r8, qword [rcx]
test r8, r8
je 0x1800454ff
test byte [r8 + 8], 1
jne 0x18004557d
mov rcx, r12
mov rdx, qword [rsp + 0x30]
mov r9, qword [rdx]
mov rdx, r9
mov r11, 0xfffffffffffff000
and rdx, r11
mov r8, qword [rcx + 0x10]
and r8, r11
xor r11d, r11d
cmp rdx, r8
seta r11b
mov edx, 0xffffffff
cmovb r11d, edx
test r11d, r11d
je 0x18004554f
cmp r11d, 0xffffffff
jne 0x18004556d
mov r12, qword [rcx]
mov r9d, 0xffffffff
test r12, r12
jne 0x1800454d7
jmp 0x18004566c
test r9b, 0x10
mov edx, 0
cmove rdx, rax
xor r9d, r9d
cmp rdx, rcx
seta r8b
jb 0x18004553c
mov r9b, r8b
jmp 0x180045573
mov r9d, 1
mov r12, qword [rcx + 8]
and r12, 0xfffffffffffffffe
jmp 0x180045545
and r9, 0xfffffffffffffffe
mov qword [r12], r9
mov r8, r12
and r8, 0xfffffffffffffffe
mov r9, qword [rcx]
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, r8
mov qword [rcx + 8], rdx
test r9, r9
je 0x1800477b7
and byte [r9 + 8], 0xfe
cmp qword [r10], r12
jne 0x1800455b8
mov qword [r10], rcx
jmp 0x180045502
and rcx, 0xfffffffffffffffe
mov r9, qword [r10 + 8]
and r9d, 1
lea rdx, [r9 + rcx]
mov qword [r10 + 8], rdx
test rcx, rcx
je 0x1800477ca
mov rdx, qword [rcx]
and rdx, 0xfffffffffffffffe
or rdx, r9
mov qword [r10 + 8], rdx
mov qword [rcx], r10
mov rdx, qword [r10 + 8]
and edx, 1
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
or byte [r10 + 8], 1
test r11, r11
je 0x180047447
cmp qword [r11], r10
je 0x18004622c
jmp 0x180046409
mov rdx, qword [rsp + 0x30]
mov r9, qword [rdx]
mov rdx, r9
mov r10, 0xfffffffffffff000
and rdx, r10
mov r8, qword [rcx + 0x10]
and r8, r10
xor r10d, r10d
cmp rdx, r8
seta r10b
mov edx, 0xffffffff
cmovb r10d, edx
test r10d, r10d
jne 0x18004613b
jmp 0x180046585
mov r12, qword [rcx + 8]
and r12, 0xfffffffffffffffe
mov r10, rcx
test r12, r12
jne 0x1800454dd
mov r10, r11
mov qword [rax], 0
mov qword [rax + 8], 1
cmp r9d, 1
jne 0x180046187
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, rdx
or r8, rax
mov qword [rcx + 8], r8
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r10], rcx
mov r9, qword [rsp + 0x58]
jne 0x180046112
mov qword [r10], rax
jmp 0x18004618f
test r8d, r8d
je 0x180045aba
mov r8, qword [rcx + 8]
xor r11d, r11d
mov r9, r8
and r9, 0xfffffffffffffffe
mov qword [rsp + 0x60], r11
je 0x180045707
mov rdx, qword [r9]
test rdx, rdx
je 0x180045707
test byte [rdx + 8], 1
jne 0x1800450fc
mov r10, qword [rcx]
test r10, r10
je 0x180047475
mov rdx, qword [r10 + 8]
test dl, 1
jne 0x1800465df
or r8, 1
mov qword [rcx + 8], r8
mov rdx, qword [r10]
test rdx, rdx
je 0x18004573e
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18004690d
or byte [r10 + 8], 1
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x180047dc5
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [rcx + 8], rdx
mov qword [r9], rcx
mov rax, qword [rsp + 0x30]
lea rcx, [rsp + 0xd0]
mov qword [rcx], r9
jmp 0x1800450fc
mov r8, qword [r9]
test r8, r8
je 0x180045790
test byte [r8 + 8], 1
jne 0x1800450f5
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x180047372
mov r9, qword [rdx]
test r9, r9
je 0x1800457bf
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18004697b
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xd0]
mov qword [rcx], r9
jmp 0x1800450f5
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x1800450dc
mov r8b, dl
jmp 0x1800450d2
xor r8d, r8d
mov qword [rdi + 0x70], r8
lea r14, [rcx + 0x3000]
lea rax, [rcx + 0x68]
xorps xmm0, xmm0
lea rdx, [rsp + 0xd0]
movaps xmmword [rdx], xmm0
mov qword [rcx + 0x68], r8
mov qword [rcx + 0x70], 1
mov qword [rdx], rax
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x180047c37
and byte [rcx + 8], 0xfe
mov qword [rdi + 0xa0], rcx
jmp 0x1800447e4
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x180045321
or r9, 1
mov qword [rdx + 8], r9
mov rdx, qword [rdx]
test rdx, rdx
je 0x180045893
mov r9, qword [rdx + 8]
test r9b, 1
jne 0x180046234
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x180047a6c
mov rax, qword [r9]
and rax, 0xfffffffffffffffe
and edx, 1
or rdx, rax
mov qword [rcx + 8], rdx
mov qword [r9], rcx
jmp 0x1800452a0
mov r12, qword [rdi + 0x68]
mov qword [rsp + 0xd8], r12
mov qword [rsp + 0xe0], 0
xor ecx, ecx
cmp r12, r10
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x1800461b6
test eax, eax
je 0x1800467c1
test r12, r12
je 0x1800474b0
mov rcx, qword [r12 + 0x10]
xor eax, eax
mov qword [rsp + 0x30], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18004681e
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18004681e
test byte [rdx + 0x10], 1
je 0x18004681e
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x30]
mov ecx, 0xffffffff
xor r10d, r10d
mov r11, r12
mov r12, rax
xor eax, eax
cmp r12, rdx
setb al
cmova eax, ecx
cmp eax, 0xffffffff
jne 0x18004599f
test r12, r12
je 0x180047bb7
mov rax, qword [r12 + 8]
test rax, rax
je 0x180046e98
test byte [rax + 0x10], 1
jne 0x180045946
mov qword [rsp + 0x40], r11
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180046a2a
test byte [rcx + 0x10], 1
je 0x180046a2a
mov r11, r12
mov ecx, 0xffffffff
jmp 0x180045949
test eax, eax
jne 0x1800459c0
test r12, r12
je 0x180047c2f
mov rax, qword [r12 + 0x10]
mov r9, r11
cmp rax, 1
jbe 0x180045ae6
jmp 0x1800459ce
test r12, r12
je 0x1800474a3
mov rax, qword [r12 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rsp + 0x40], r11
je 0x1800459f1
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x1800459f1
test byte [rcx + 0x10], 1
mov ecx, 0xffffffff
jne 0x180045946
mov qword [rsp + 0x30], r9
lea rcx, [rsp + 0xb0]
mov rdx, r12
call fcn.180039460
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x40]
cmp qword [rcx + 8], r12
jne 0x180046a09
jmp 0x180046cc6
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x30]
xor r10d, r10d
mov ecx, 0xffffffff
jmp 0x180045946
mov rdx, qword [rdi + 0x70]
test rdx, rdx
jne 0x180046150
lea r9, [rsp + 0xd0]
mov ecx, 0x100000
mov edx, 0x100000
xor r8d, r8d
call fcn.180062350
test rax, rax
je 0x180045b63
mov r15, rax
mov r8b, byte [rsp + 0xd0]
mov rcx, rdi
mov rdx, rax
call fcn.180062ab0
add r15, 0x3000
jmp 0x180044bc5
xor r12d, r12d
jmp 0x18004499e
mov rax, r9
and rax, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rax
mov rax, qword [rsp + 0x30]
mov qword [r8 + 8], rcx
mov rcx, r8
jmp 0x180045103
mov r8, qword [rcx + 8]
cmp r8, 1
mov r10, qword [rsp + 0x38]
ja 0x180046a99
mov rdx, qword [rcx]
test rdx, rdx
jne 0x180046783
mov qword [rsp + 0xd0], rdx
jmp 0x180045326
mov r10, qword [r12 + 8]
test r10, r10
je 0x18004657d
mov rax, qword [r10 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [r12 + 8], rax
mov rax, r12
and rax, 0xfffffffffffffffe
mov rcx, qword [r10 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r10 + 0x10], rcx
mov rcx, qword [r12 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r10 + 0x10], rcx
or byte [r12 + 0x10], 1
and qword [r10 + 0x10], 1
cmp qword [r11 + 8], r12
jne 0x1800463f2
mov qword [r11 + 8], r10
mov rax, qword [rsp + 0xd8]
mov qword [rdi + 0x68], rax
test rdx, rdx
je 0x180047c52
xorps xmm0, xmm0
movups xmmword [rdx + 8], xmm0
test r8b, r8b
jne 0x1800453ca
mov qword [r14], 0
mov bpl, 1
jmp 0x18004446b
test r13, r13
je 0x1800460c0
mov rbx, qword [r13 + 0x28]
mov rbp, qword [r13 + 0x20]
lea r14, [rbp + 0xfffff]
mov rax, 0xfffffffffff00000
and r14, rax
mov rcx, r14
sub rcx, rbp
sub rbx, rcx
add rbx, rax
mov eax, dword [r13 + 0x30]
mov dword [rsp + 0x40], eax
mov rcx, r13
call fcn.180001860
lea rcx, [0x1800cb6b0]
mov rdx, r13
call section..text
mov rax, r14
sub rax, rbp
jne 0x180047c8b
test rbx, rbx
je 0x1800463b2
lea rax, [r14 + 0x100000]
mov qword [r13 + 0x20], rax
mov qword [r13 + 0x28], rbx
mov eax, dword [rsp + 0x40]
mov dword [r13 + 0x30], eax
mov rcx, r13
call fcn.180001530
lea rcx, [0x1800cb6b0]
mov rdx, r13
call fcn.180001ff0
lock add qword [0x1800cb6b8], 0xfffffffffff00000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 0x100000
mov rcx, r14
mov r8d, 0x1000
call fcn.180062260
test rax, rax
je 0x1800460cd
test r14, r14
je 0x1800460cd
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbx, qword [0x1800cb678]
mov r13, r14
shr r13, 0x3e
mov r12, qword [rbx + r13*8]
test r12, r12
je 0x180046fc9
mov r13d, 2
xorps xmm6, xmm6
mov rbx, r14
mov ecx, r13d
shl rbx, cl
shr rbx, 0x3d
mov rax, qword [r12 + rbx*8]
test rax, rax
je 0x180046aa6
add r13, 3
mov r12, rax
cmp r13d, 0x29
jne 0x180045c6d
mov ecx, r14d
shr ecx, 0x14
and ecx, 7
mov qword [rax + rcx*8], r14
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r14, r14
je 0x18004973b
add qword [rdi + 0x48], 0x100000
mov qword [r14], rdi
xor eax, eax
mov qword [r14 + 0x18], rax
mov qword [r14 + 0x30], rax
mov qword [r14 + 0x48], rax
mov qword [r14 + 0x60], 0x20
mov qword [r14 + 0x78], 0xfc024
mov eax, 0xf0
mov ecx, 0x24
mov qword [r14 + rax - 0x60], rcx
mov qword [r14 + rax - 0x48], rcx
mov qword [r14 + rax - 0x30], rcx
mov qword [r14 + rax - 0x18], rcx
mov qword [r14 + rax], rcx
add rax, 0x78
cmp rax, 0x1860
jne 0x180045cea
mov qword [r14 + 0x1800], 0xfc024
mov qword [r14 + 0x1818], 0x20
lea r12, [r14 + 0x2000]
mov eax, r12d
and eax, 0xfffff
mov r13d, 0x100000
sub r13, rax
mov ebp, 0xfe000
cmp r13, rbp
cmovae r13, rbp
mov rbx, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, r12
mov rdx, r13
mov r8d, 0x4000
call rbx
test eax, eax
je 0x180047b84
add r12, r13
sub rbp, r13
mov eax, 0x100000
cmp rbp, rax
mov r13d, 0x100000
cmovb r13, rbp
test rbp, rbp
jne 0x180045d4f
add qword [rdi + 0x50], 3
lea rax, [r14 + 0x68]
mov r11, qword [rdi + 0xa0]
mov qword [rsp + 0xd0], r11
mov qword [rsp + 0xd8], 0
test r11, r11
je 0x1800466d1
lea rcx, [rsp + 0xd0]
xor r9d, r9d
mov rdx, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r10, r9
mov r9, rcx
mov rcx, qword [r11]
test rcx, rcx
je 0x180045dee
mov rbx, qword [rcx + 8]
test bl, 1
je 0x180045dee
mov r12, qword [rcx]
test r12, r12
je 0x180045dee
test byte [r12 + 8], 1
jne 0x180045e5a
mov rcx, r11
mov r10, qword [r14 + 0x78]
mov rbx, r10
and rbx, rdx
mov r12, qword [rcx + 0x10]
and r12, rdx
xor r11d, r11d
cmp rbx, r12
seta r11b
cmovb r11d, r8d
test r11d, r11d
je 0x180045e2d
cmp r11d, 0xffffffff
jne 0x180045e4b
mov r11, qword [rcx]
mov ebx, 0xffffffff
test r11, r11
jne 0x180045dc7
jmp 0x180045f39
test r10b, 0x10
mov r10d, 0
cmove r10, rax
xor ebx, ebx
cmp r10, rcx
seta r10b
jb 0x180045e1b
mov bl, r10b
jmp 0x180045e50
mov ebx, 1
mov r11, qword [rcx + 8]
and r11, 0xfffffffffffffffe
jmp 0x180045e23
and rbx, 0xfffffffffffffffe
mov qword [r11], rbx
mov r12, r11
and r12, 0xfffffffffffffffe
mov rbx, qword [rcx]
mov r13, qword [rcx + 8]
and r13d, 1
or r13, r12
mov qword [rcx + 8], r13
test rbx, rbx
je 0x180047ac7
and byte [rbx + 8], 0xfe
cmp qword [r9], r11
jne 0x180045e94
mov qword [r9], rcx
jmp 0x180045df1
and rcx, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
lea rbx, [r11 + rcx]
mov qword [r9 + 8], rbx
test rcx, rcx
je 0x180047ada
mov rbx, qword [rcx]
and rbx, 0xfffffffffffffffe
or rbx, r11
mov qword [r9 + 8], rbx
mov qword [rcx], r9
mov r11, qword [r9 + 8]
and r11d, 1
mov rbx, qword [rcx + 8]
and rbx, 0xfffffffffffffffe
or rbx, r11
mov qword [rcx + 8], rbx
or byte [r9 + 8], 1
test r10, r10
je 0x180047490
cmp qword [r10], r9
je 0x18004677b
jmp 0x1800467fc
mov r9, qword [r14 + 0x78]
mov rbx, r9
and rbx, rdx
mov r12, qword [rcx + 0x10]
and r12, rdx
xor r11d, r11d
cmp rbx, r12
seta r11b
cmovb r11d, r8d
test r11d, r11d
jne 0x1800466bd
jmp 0x1800469e4
mov r11, qword [rcx + 8]
and r11, 0xfffffffffffffffe
mov r9, rcx
test r11, r11
jne 0x180045dcd
mov r9, r10
mov qword [r14 + 0x68], 0
mov qword [r14 + 0x70], 1
cmp ebx, 1
jne 0x1800466e9
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + rax]
mov qword [rcx + 8], r8
test rax, rax
je 0x180047d5b
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r9], rcx
jne 0x1800465b7
mov qword [r9], rax
mov rbp, qword [rsp + 0x38]
jmp 0x1800466f1
and r8, 0xfffffffffffffffe
mov qword [rax + 8], r8
mov r9, qword [rdx]
test r9, r9
je 0x180047d01
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180047d1b
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
jmp 0x180044e8f
mov r11b, 1
jmp 0x180044d5c
and r9, 0xfffffffffffffffe
je 0x180047411
mov r11, qword [r9]
test r11, r11
je 0x180046040
test byte [r11 + 8], 1
jne 0x180046887
and r8d, 1
or r8, r9
mov qword [r10 + 8], r8
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x180047d6e
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x180047d88
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
or byte [rcx + 8], 1
mov rbp, qword [rsp + 0x38]
jmp 0x180044b7e
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r13, rsi
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov edx, 0x100000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
test rax, rax
je 0x18004738d
mov rax, r14
shl rax, 0x2c
jne 0x180046d96
mov rsi, r13
jmp 0x180045c3c
mov rdx, qword [r10 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
jne 0x18004618f
and edx, 1
or rdx, rax
mov qword [r10 + 8], rdx
jmp 0x18004618f
lea rcx, [rsp + 0xd0]
jmp 0x180044a3e
mov r9d, 1
cmp r10d, 0xffffffff
jne 0x180045655
jmp 0x180046810
mov qword [rdi + 0x70], 0
lea r15, [rdx + 0x3000]
add rdx, 0x68
mov rcx, r12
call fcn.180062bd0
jmp 0x180044bc5
mov qword [rax], 0
mov qword [rax + 8], 1
lea rcx, [rsp + 0xd0]
mov r9, qword [rsp + 0x58]
mov qword [rcx], rax
mov rax, qword [rsp + 0xd0]
test rax, rax
je 0x180047b4f
and byte [rax + 8], 0xfe
mov qword [r9], rax
mov r10, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
jmp 0x180045356
test r12, r12
je 0x180046689
mov rax, qword [r12 + 8]
test rax, rax
je 0x180046689
test byte [rax + 0x10], 1
je 0x180046676
xor r9d, r9d
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
jmp 0x18004593e
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rsp + 0x40]
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x18004501d
mov qword [r11], rcx
jmp 0x180045618
and r9, 0xfffffffffffffffe
mov qword [rdx + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x180047a7f
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov r11, qword [rcx + 8]
mov rdx, r11
and rdx, 0xfffffffffffffffe
je 0x180047a99
mov rax, qword [rdx]
and rax, 0xfffffffffffffffe
and r11d, 1
or r11, rax
mov qword [rcx + 8], r11
mov qword [rdx], rcx
mov rax, qword [r9 + 8]
and eax, 1
or rax, rdx
mov qword [r9 + 8], rax
jmp 0x1800452a0
mov r10, qword [rsp + 0x60]
test r10, r10
je 0x180047d9b
cmp qword [r10], rax
jne 0x180046a7e
mov qword [r10], rcx
mov rax, qword [rsp + 0x30]
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x180047dae
mov qword [r8], 0
mov r10, qword [rsp + 0x38]
mov r11, qword [rsp + 0x58]
jmp 0x180045326
and r11, 0xfffffffffffffffe
mov qword [rdx], r11
mov r11, qword [r9 + 8]
and r11d, 1
or r11, rdx
mov qword [r9 + 8], r11
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r11, [rdx + r9]
mov qword [rcx + 8], r11
test r9, r9
je 0x1800476d6
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
or r11, rdx
mov qword [rcx + 8], r11
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x180046366
mov r11, qword [rdx + 8]
test r11b, 1
jne 0x180046b3f
mov qword [rcx + 8], rdx
mov rax, qword [rsp + 0x30]
jmp 0x1800451bd
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov r8, qword [rax + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
mov r8, qword [rdx + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x180044703
lock add qword [0x1800cb6b8], 0xfffffffffff00000
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea r12, [0x1800cb6c0]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb5a0]
mov qword [r13], rax
mov qword [0x1800cb5a0], r13
jmp 0x180045c0e
and r10, 0xfffffffffffffffe
mov rax, qword [r11 + 0x10]
and eax, 1
or rax, r10
mov qword [r11 + 0x10], rax
jmp 0x180045b3e
mov rdx, qword [r11 + 8]
and edx, 1
or rdx, rcx
mov qword [r11 + 8], rdx
jmp 0x180045618
and r12d, 1
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
or rax, r12
mov qword [r9 + 8], rax
and byte [r11 + 8], 0xfe
mov r11, qword [rdx + 8]
mov r9, r11
and r9, 0xfffffffffffffffe
je 0x180047a46
mov rax, qword [r9]
and rax, 0xfffffffffffffffe
and r11d, 1
or r11, rax
mov qword [rdx + 8], r11
mov qword [r9], rdx
mov qword [rcx], r9
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov r12, qword [rcx + 8]
mov rdx, r12
and rdx, 0xfffffffffffffffe
jne 0x180045279
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
and r9, 0xfffffffffffffffe
mov qword [r8 + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x180047dd8
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x180047df2
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, r8
mov qword [r9 + 8], rcx
mov rbp, qword [rsp + 0x38]
jmp 0x180044b7e
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x180047e05
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18004656f
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x180046d5a
mov qword [rcx + 8], rdx
mov rbp, qword [rsp + 0x38]
jmp 0x180044e1d
xor r10d, r10d
jmp 0x180045b30
test r9b, 0x10
mov edx, 0
cmove rdx, rax
xor r9d, r9d
cmp rdx, rcx
seta r8b
jb 0x180046810
mov r9b, r8b
jmp 0x180045655
lea rdx, [rsp + 0xd0]
jmp 0x180044aff
mov rdx, qword [r9 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
mov rbp, qword [rsp + 0x38]
jne 0x1800466f1
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
jmp 0x1800466f1
and rdx, 0xfffffffffffffffe
je 0x18004745a
mov r9, qword [rdx]
test r9, r9
je 0x1800465fc
test byte [r9 + 8], 1
jne 0x180046cd5
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
or byte [rdx + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x180047e18
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x180047e32
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
or byte [rcx + 8], 1
jmp 0x180045768
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180046689
test byte [rcx + 0x10], 1
jne 0x1800461d7
lea rcx, [rsp + 0xc0]
mov rdx, r12
call fcn.180039300
lea rax, [rsp + 0xc0]
mov rax, qword [rax]
test rax, rax
je 0x180047ef4
and byte [rax + 0x10], 0xfe
xor ecx, ecx
mov qword [rsp + 0x30], rcx
jmp 0x180046aec
mov ebx, 1
cmp r11d, 0xffffffff
jne 0x180045f22
jmp 0x180046cb9
mov qword [r14 + 0x68], 0
mov qword [r14 + 0x70], 1
lea rcx, [rsp + 0xd0]
mov rbp, qword [rsp + 0x38]
mov qword [rcx], rax
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x180047c1c
and byte [rcx + 8], 0xfe
mov qword [rdi + 0xa0], rcx
add r14, 0x3000
jmp 0x1800447e4
mov rdi, qword [0x1800cb568]
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x180047e45
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x10], rdi
jmp 0x18004439b
mov r8d, 0x100000
mov rcx, rdi
mov rdx, r15
xor r9d, r9d
call fcn.180001df0
mov r14, rax
jmp 0x180044483
mov qword [r10], rcx
jmp 0x180045ef5
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x180045ad9
test r12, r12
je 0x1800467e3
mov rcx, qword [r12 + 0x10]
cmp rcx, 1
ja 0x180046fbc
mov rax, qword [r12 + 8]
test rax, rax
jne 0x180046afe
xor eax, eax
mov qword [rsp + 0xd8], rax
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
jmp 0x180045b3e
mov r9, qword [r10 + 8]
and r9d, 1
or r9, rcx
mov qword [r10 + 8], r9
jmp 0x180045ef5
mov r12, qword [rcx]
mov r9d, 0xffffffff
jmp 0x18004565d
mov rax, qword [r12 + 8]
test rax, rax
je 0x180047e66
test byte [rax + 0x10], 1
jne 0x180046ad1
or rcx, 1
mov qword [r12 + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180046855
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x180046e24
or byte [rax + 0x10], 1
mov rcx, qword [r12 + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180047f07
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [r12 + 0x10], rcx
mov qword [rax + 8], r12
jmp 0x180046aec
and r8d, 1
mov rbx, qword [r9 + 8]
and rbx, 0xfffffffffffffffe
or rbx, r8
mov qword [r9 + 8], rbx
and byte [r11 + 8], 0xfe
mov r8, qword [r10 + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x180047e82
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r8d, 1
or r8, r11
mov qword [r10 + 8], r8
mov qword [r9], r10
mov qword [rcx], r9
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
jne 0x18004608e
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov r9, qword [rcx]
test r9, r9
je 0x180047e95
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x180047eaf
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rdx
mov qword [r9 + 8], rcx
jmp 0x180045768
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x180047ec2
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x1800469d6
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x180046f17
mov qword [rcx + 8], rdx
mov rax, qword [rsp + 0x30]
jmp 0x1800457d8
test r9b, 0x10
mov r9d, 0
cmove r9, rax
xor ebx, ebx
cmp r9, rcx
seta r9b
jb 0x180046cb9
mov bl, r9b
jmp 0x180045f22
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov r12, qword [rsp + 0x40]
mov rdx, qword [r12 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r12 + 0x10], rdx
jmp 0x180045a22
mov qword [rsp + 0x30], r9
lea rcx, [rsp + 0xb8]
mov rdx, r12
call fcn.180039300
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x40]
cmp qword [rcx + 8], r12
jne 0x180047ed5
mov r11, qword [rsp + 0x40]
mov qword [r11 + 8], rax
mov r12, rax
mov rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x30]
xor r10d, r10d
mov ecx, 0xffffffff
jmp 0x18004594c
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r9, qword [r10 + 8]
and r9d, 1
or r9, rdx
mov qword [r10 + 8], r9
jmp 0x1800462bb
lea r11, [rsp + 0xd0]
jmp 0x1800456e7
mov ecx, 0x40
call fcn.1800022d0
test rax, rax
je 0x180047b62
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov qword [r12 + rbx*8], rax
jmp 0x180045c87
lea rcx, [rsp + 0xc0]
mov rdx, r12
call fcn.180039460
lea rax, [rsp + 0xc0]
mov rax, qword [rax]
lea r12, [rsp + 0xd0]
mov qword [r12 + 8], rax
jmp 0x18004592f
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r12 + 8], rcx
mov rcx, r12
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r12 + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [r12 + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x1800467e5
and r11, 0xfffffffffffffffe
mov qword [rdx + 8], r11
mov rdx, qword [rcx + 8]
mov r11, rdx
or r11, 1
mov qword [rcx + 8], r11
and rdx, 0xfffffffffffffffe
je 0x1800476c3
mov r11, qword [rdx]
or r11, 1
mov qword [rcx + 8], r11
mov qword [rdx], rcx
mov qword [r9], rdx
mov rax, qword [rsp + 0x30]
jmp 0x1800451bd
lea rcx, [0x1800cb774]
call fcn.180060ac0
cmp dword [0x1800cb774], 0xffffffff
jne 0x18004430b
mov eax, dword [0x1800cb600]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x180046bf1
lea rcx, [0x1800cb600]
call fcn.180060ac0
cmp dword [0x1800cb600], 0xffffffff
jne 0x180046bf1
lea rdi, [rsp + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rdi + 4]
mov qword [0x1800cb5f8], rax
lea rcx, [0x1800cb600]
call fcn.180060b40
mov rbx, qword [0x1800cb5f8]
cmp rbx, 0x1000
jne 0x180046c9a
call fcn.180002fa0
mov qword [0x1800cb640], rax
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x1800480e5
call fcn.180002e80
mov qword [0x1800cb648], rax
lea rdi, [0x1800cb618]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb648]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov qword [rax], rdx
mov r8, rcx
shl r8, 0x17
xor r8, rcx
mov rcx, rdx
shr rcx, 0x1a
xor rcx, rdx
xor rcx, r8
shr r8, 0x11
xor r8, rcx
mov qword [rax + 8], r8
add edx, r8d
and edx, 0x1ffff
inc edx
mov dword [0x1800cb610], edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp rbx, 0x1000
sete byte [0x1800cb770]
lea rcx, [0x1800cb774]
call fcn.180060b40
jmp 0x18004430b
mov r11, qword [rcx]
mov ebx, 0xffffffff
jmp 0x180045f2a
mov r12, qword [rsp + 0x40]
mov qword [r12 + 8], rax
jmp 0x180045a22
and r8d, 1
mov r11, qword [rdx + 8]
and r11, 0xfffffffffffffffe
or r11, r8
mov qword [rdx + 8], r11
and byte [r9 + 8], 0xfe
mov rdx, qword [r10 + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x180047f1a
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r10 + 8], rdx
mov qword [r9], r10
mov qword [rcx], r9
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
jne 0x180046649
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x180047f2d
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
mov rbp, qword [rsp + 0x38]
jmp 0x180044e1d
mov rcx, r14
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x180047f58
mov rbx, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rsi, r13
mov edx, 0x1ff000
xor ecx, ecx
mov r8d, 0x3000
call fcn.180062260
test rax, rax
je 0x18004973b
mov r14, rax
mov rcx, rax
xor edx, edx
mov r8d, 0x8000
call rbx
test eax, eax
je 0x180047f40
add r14, 0xfffff
and r14, 0xfffffffffff00000
mov edx, 0x100000
mov rcx, r14
mov r8d, 0x3000
call fcn.180062260
cmp rax, r14
jne 0x18004728a
test r14, r14
mov rsi, r13
jne 0x180045c3c
jmp 0x180046db9
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [r12 + 8]
test rax, rax
je 0x180047f70
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r12 + 8], rcx
mov rcx, r12
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r12 + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x180047f8c
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r12 + 0x10], rdx
mov qword [rcx + 8], r12
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x180046aec
mov r8, r12
test r9, r9
je 0x180047f9f
mov rax, qword [rsp + 0x38]
cmp qword [r9 + 8], rax
jne 0x18004723c
mov qword [r9 + 8], r8
cmp qword [rsp + 0x38], 0
je 0x180047fbf
test r12, r12
je 0x180047fdb
mov rdx, qword [rsp + 0x38]
mov rax, qword [rdx + 8]
mov r9, r8
mov qword [r8 + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [r8 + 0x10]
and eax, 1
or rax, rcx
mov qword [r8 + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov qword [r8 + 0x10], rax
cmp qword [r11 + 8], r8
jne 0x180047fee
mov qword [r11 + 8], 0
jmp 0x1800467ed
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x180047ff8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
mov rax, qword [rsp + 0x30]
jmp 0x1800457d8
mov byte [rdi + 0x78], 0
lea rcx, [rsp + 0xd0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
xor ebx, ebx
mov r14d, 0
test al, al
je 0x180046f7d
mov r14, qword [rsp + 0xd0]
lea rcx, [rsp + 0xd0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
test al, al
je 0x180046f9b
mov rbx, qword [rsp + 0xd0]
mov ecx, 0x10
call fcn.1800022d0
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rdi + 0x80], rax
mov byte [rdi + 0x78], 1
jmp 0x1800443d3
lea rax, [rsp + 0xd0]
jmp 0x180045906
mov ecx, 0x40
call fcn.1800022d0
test rax, rax
je 0x180047b62
mov r12, rax
xorps xmm0, xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [rbx + r13*8], rax
jmp 0x180045c64
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
cmp dword [0x1800cb718], 0
jne 0x18004722a
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x180048035
mov eax, dword [0x1800cb600]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x180047091
lea rcx, [0x1800cb600]
call fcn.180060ac0
cmp dword [0x1800cb600], 0xffffffff
jne 0x180047091
lea rdi, [rsp + 0xd0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rdi + 4]
mov qword [0x1800cb5f8], rax
lea rcx, [0x1800cb600]
call fcn.180060b40
mov eax, 0x1000
xor edx, edx
div qword [0x1800cb5f8]
test rdx, rdx
jne 0x18004803f
lea rcx, str.MALLOC_OPTIONS
lea rdi, [0x1800cb730]
mov rdx, rdi
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor ebx, ebx
test eax, eax
cmovne rbx, rdi
je 0x1800470dd
mov al, byte [0x1800cb730]
test al, al
jne 0x180047256
xor ebx, ebx
mov qword [0x1800cb6b8], rbx
lea rcx, [0x1800cb680]
mov rdi, qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov edx, 0x1388
call rdi
mov qword [0x1800cb6a8], rbx
mov qword [0x1800cb6b0], rbx
lea rcx, [0x1800cb5b8]
mov edx, 0x1388
call rdi
mov qword [0x1800cb5e0], rbx
mov qword [0x1800cb5e8], rbx
mov qword [0x1800cb5f0], rbx
lea rcx, [0x1800cb6c0]
mov edx, 0x1388
call rdi
mov qword [0x1800cb710], rbx
mov qword [0x1800cb700], rbx
xorps xmm0, xmm0
movups xmmword [0x1800cb578], xmm0
mov qword [0x1800cb588], rbx
lea rcx, [0x1800cb540]
mov qword [rsp + 0xd8], rbx
mov dword [rsp + 0xe0], 0
mov rax, qword [0x1800cb038]
mov qword [rsp + 0xd0], rax
mov edx, 0x1388
call rdi
test eax, eax
je 0x18004800b
lea rdx, [rsp + 0xd0]
xor ecx, ecx
call fcn.180053590
mov qword [0x1800cb568], rax
test rax, rax
je 0x180048023
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp byte [rcx + 8], 0
je 0x18004806b
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x10], rax
lea rcx, [0x1800cb650]
mov edx, 0x1388
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x20
call fcn.1800022d0
test rax, rax
je 0x180048018
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [0x1800cb678], rax
mov dword [0x1800cb718], 1
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x180044340
mov rax, r8
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r9 + 0x10], rcx
jmp 0x180046eb7
xor r14d, r14d
movsx edx, al
lea ecx, [rdx - 0x30]
cmp cl, 9
jbe 0x18004807c
xor ecx, ecx
cmp edx, 0x72
jne 0x1800480a1
mov byte [0x1800cb5b0], 1
inc r14d
mov al, byte [rbx + r14]
test al, al
jne 0x180047259
jmp 0x1800470dd
test rax, rax
jne 0x180048100
xor r14d, r14d
jmp 0x180046e16
or rcx, 1
mov qword [rdx + 8], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [rsp + 0x50], rsi
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x18004814f
cmp eax, 8
je 0x18004814f
xor eax, eax
mov r11, qword [rsp + 0x30]
mov r9, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x50]
jmp 0x18004494e
or r12, 1
mov qword [rcx + 8], r12
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [rsp + 0x50], rsi
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x180048228
cmp eax, 8
je 0x180048228
xor r11d, r11d
mov r10, qword [rsp + 0x48]
mov r9, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
jmp 0x180044d5c
and r12d, 1
mov qword [rdx + 8], r12
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x1800473a6
mov rsi, r13
cmp eax, 8
jne 0x18004973b
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rbx, [rax + rax*4]
add rbx, 5
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x100000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
call r12
test r14, r14
jne 0x18004830b
cmp eax, 0x5af
mov rsi, r13
je 0x180047407
cmp eax, 8
jne 0x18004973b
dec rbx
jne 0x1800473c1
jmp 0x18004973b
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
mov qword [rsp + 0x40], r11
xor r12d, r12d
jmp 0x1800459f1
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lock inc qword [0x1800cb608]
lock dec dword [0x1800cb610]
jne 0x180044333
mov qword [rsp + 0x50], rsi
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x1800474fe
call fcn.180060de8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 9], 0
mov rsi, qword [rsp + 0x50]
jne 0x180044333
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x180047544
call fcn.180060de8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov byte [rax + 9], 1
lea r9, [rsp + 0xd0]
mov qword [r9], 0
mov rdx, qword [rsp + 0x1b8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rcx, [0x180067240]
mov r8d, 0x10
call fcn.18009d790
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [0x1800cb608]
mov r15, qword [0x1800cb648]
mov rcx, qword [r15]
mov rdx, qword [r15 + 8]
mov rax, rcx
shl rax, 0x17
xor rax, rcx
mov rcx, rdx
shr rcx, 0x1a
xor rcx, rdx
xor rcx, rax
shr rax, 0x11
xor rax, rcx
lea esi, [rdx + rax]
and esi, 0x7fff
inc esi
mov qword [r15], rax
mov rcx, rdx
shl rcx, 0x17
xor rcx, rdx
mov r13, rcx
shr r13, 0x11
mov rdx, rax
shr rdx, 0x1a
xor r13, rcx
xor r13, rax
xor r13, rdx
mov qword [r15 + 8], r13
add r13, rax
mov ebp, 0x100
mov rbx, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
movzx r13d, r13b
imul r12, r13, 0x148
cmp dword [r15 + r12 + 0x10], 1
je 0x180047670
cmp qword [r15 + r12 + 0x150], rdi
ja 0x180047670
mov rax, qword [0x1800cb640]
mov rax, qword [rax]
mov rcx, r13
shl rcx, 0xd
lea r14, [rax + rcx]
add r14, 0x1000
mov edx, 0x1000
mov rcx, r14
mov r8d, 0x1000
mov r9d, 4
call rbx
mov r15, qword [0x1800cb648]
test rax, rax
jne 0x1800476f1
inc r13
dec rbp
jne 0x180047611
xor r14d, r14d
mov dword [0x1800cb610], esi
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.180067250
test r14, r14
mov rsi, qword [rsp + 0x50]
jne 0x18004448c
jmp 0x180044333
call fcn.180060de8
jmp 0x180044378
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov rax, r9
jmp 0x1800447b6
cmp qword [rsp + 0x50], 8
ja 0x1800479f8
mov rax, qword [rsp + 0x50]
mov ecx, 0x40
dec rax
je 0x180047714
bsr rcx, rax
xor rcx, 0x3f
neg cl
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov ecx, 0x10
cmovb rax, rcx
cmp qword [rsp + 0x50], 2
cmovb rax, rcx
sub r14, rax
add r14, 0x1000
lea rdi, [r15 + r12]
add rdi, 0x30
mov dword [rdi - 0x20], 1
mov qword [rdi - 0x18], 0
mov byte [rdi - 0x10], 0
mov eax, dword [rsp + 0xc8]
mov ecx, dword [rsp + 0xcb]
mov dword [rdi - 0xf], eax
mov dword [rdi - 0xc], ecx
mov qword [rdi - 8], r14
lea rdx, [rsp + 0xd0]
mov r8d, 0x88
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 0x88], 1
cmp byte [rdi + 0x118], 0
je 0x1800477a6
mov eax, 0x148
add rax, r12
add rax, r15
mov byte [rax], 0
mov qword [r15 + r12 + 0x150], 0xffffffffffffffff
jmp 0x18004767b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov r8, qword [rdi + 0x70]
test r8, r8
je 0x180044ecd
xor r11d, r11d
mov qword [rdi + 0x70], r11
lea r14, [r8 + 0x3000]
lea rax, [r8 + 0x68]
lea rdx, [rsp + 0xd0]
mov qword [rdx], rcx
mov qword [rdx + 8], r11
mov r9, 0xfffffffffffff000
mov r10d, 0xffffffff
mov rbx, r11
mov r11, rdx
mov rdx, qword [rcx]
test rdx, rdx
je 0x18004783f
mov r12, qword [rdx + 8]
test r12b, 1
je 0x18004783f
mov r13, qword [rdx]
test r13, r13
je 0x18004783f
test byte [r13 + 8], 1
jne 0x1800478a4
mov rdx, rcx
mov rcx, qword [r8 + 0x78]
mov r12, rcx
and r12, r9
mov r13, qword [rdx + 0x10]
and r13, r9
xor ebx, ebx
cmp r12, r13
seta bl
cmovb ebx, r10d
test ebx, ebx
je 0x18004787a
cmp ebx, 0xffffffff
jne 0x180047895
mov rcx, qword [rdx]
mov ebp, 0xffffffff
test rcx, rcx
jne 0x180047818
jmp 0x180047982
test cl, 0x10
mov ecx, 0
cmove rcx, rax
xor ebp, ebp
cmp rcx, rdx
seta cl
jb 0x180047868
mov bpl, cl
jmp 0x18004789a
mov ebp, 1
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x180047870
and r12, 0xfffffffffffffffe
mov qword [rcx], r12
mov r13, rcx
and r13, 0xfffffffffffffffe
mov r12, qword [rdx]
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, r13
mov qword [rdx + 8], rbp
test r12, r12
je 0x180048338
and byte [r12 + 8], 0xfe
cmp qword [r11], rcx
jne 0x1800478df
mov qword [r11], rdx
jmp 0x180047842
and rdx, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
lea r12, [rcx + rdx]
mov qword [r11 + 8], r12
test rdx, rdx
je 0x180048348
mov r12, qword [rdx]
and r12, 0xfffffffffffffffe
or r12, rcx
mov qword [r11 + 8], r12
mov qword [rdx], r11
mov rcx, qword [r11 + 8]
and ecx, 1
mov r12, qword [rdx + 8]
and r12, 0xfffffffffffffffe
or r12, rcx
mov qword [rdx + 8], r12
or byte [r11 + 8], 1
test rbx, rbx
je 0x1800482f8
cmp qword [rbx], r11
je 0x180047c4a
jmp 0x180047c65
mov rcx, qword [r8 + 0x78]
mov r12, rcx
and r12, r9
mov r13, qword [rdx + 0x10]
and r13, r9
xor r11d, r11d
cmp r12, r13
seta r11b
cmovb r11d, r10d
test r11d, r11d
jne 0x180047c08
jmp 0x180047cdf
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
mov r11, rdx
test rcx, rcx
jne 0x18004781e
mov r11, rbx
mov qword [r8 + 0x68], 0
mov qword [r8 + 0x70], 1
cmp ebp, 1
jne 0x180047b45
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea r8, [rcx + rax]
mov qword [rdx + 8], r8
test rax, rax
je 0x180048328
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rcx
mov qword [rdx + 8], r8
mov qword [rax], rdx
mov rcx, qword [rdx + 8]
and ecx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x180047be5
mov qword [r11], rax
mov rbp, qword [rsp + 0x38]
jmp 0x18004583d
cmp qword [rsp + 0x50], 0x1f0
ja 0x180047aed
mov rax, qword [rsp + 0x50]
add rax, 0xf
and rax, 0xfffffffffffffff0
jmp 0x180047735
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov rax, rcx
jmp 0x180044b97
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov eax, 0x1000
cmp qword [rsp + 0x50], 0xf00
ja 0x180047735
mov rax, qword [rsp + 0x50]
add rax, 0xff
and rax, 0xffffffffffffff00
jmp 0x180047735
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
or rax, 1
mov qword [rdx + 8], rax
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
mov rbp, qword [rsp + 0x38]
jmp 0x18004583a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 0x100000
mov rcx, r14
xor r8d, r8d
call fcn.180039740
jmp 0x18004973b
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
jmp 0x180045106
xor r8d, r8d
jmp 0x180046e9b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov rcx, qword [r11 + 8]
mov r8, rcx
and r8, 0xfffffffffffffffe
cmp rdx, r8
jne 0x1800479ee
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
jmp 0x1800479ee
mov ebp, 1
cmp r11d, 0xffffffff
jne 0x18004796b
jmp 0x180047db8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
xor r12d, r12d
jmp 0x180045b30
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
mov qword [rbx], rdx
jmp 0x18004793e
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov rcx, qword [rbx + 8]
and ecx, 1
or rcx, rdx
mov qword [rbx + 8], rcx
jmp 0x18004793e
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [r13 + 0x28], rax
mov rcx, r13
call fcn.180001530
lea rcx, [0x1800cb6b0]
mov rdx, r13
call fcn.180001ff0
test rbx, rbx
je 0x180045c02
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.18001fbb0
test rax, rax
je 0x180047e4f
mov r13, rax
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x180045bd4
test cl, 0x10
mov ecx, 0
cmove rcx, rax
xor ebp, ebp
cmp rcx, rdx
seta cl
jb 0x180047db8
mov bpl, cl
jmp 0x18004796b
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
cmp edx, 1
jne 0x180047d53
mov rax, qword [rax + 8]
and rax, 0xfffffffffffffffe
jmp 0x180044f13
mov r13, rax
jmp 0x180045b7f
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
and qword [r8 + 8], 1
jmp 0x1800462fc
mov rcx, qword [rdx]
mov ebp, 0xffffffff
jmp 0x180047973
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
call fcn.180060de8
jmp 0x180046740
mov edx, 0x100000
mov rcx, r14
mov r8d, dword [rsp + 0x40]
call fcn.180039740
jmp 0x1800460cd
or rcx, 1
mov qword [r12 + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov r11, qword [rsp + 0x40]
mov rdx, qword [r11 + 0x10]
and edx, 1
or rdx, rcx
mov qword [r11 + 0x10], rdx
jmp 0x180046a5f
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x180046dec
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x180046daf
mov qword [r12 + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test r12, r12
je 0x180047fdb
mov rax, r8
mov qword [r8 + 8], 0
and qword [r8 + 0x10], 1
xor eax, eax
jmp 0x180046efc
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
and qword [r11 + 0x10], 1
jmp 0x1800467ed
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [0x1800cb568], 0
jmp 0x180048023
mov qword [0x1800cb678], 0
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x180049746
call fcn.180060de8
jmp 0x180047034
lea rcx, str._jemalloc_
lea rdx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.180066f70
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
call fcn.180060de8
mov rax, qword [0x1800cb568]
jmp 0x1800471d0
xor ecx, ecx
lea eax, [rcx + rcx*4]
lea ecx, [rdx + rax*2]
add ecx, 0xffffffd0
inc r14d
mov al, byte [rbx + r14]
movsx edx, al
lea r8d, [rax - 0x30]
cmp r8b, 0xa
jae 0x18004726a
jmp 0x18004807e
cmp edx, 0x46
jne 0x1800480ef
cmp ecx, 1
adc ecx, 0
mov rax, qword [0x1800cb038]
xor edx, edx
test rax, rax
sete dl
cmp rax, 1
adc rax, 0
sub ecx, edx
shl rax, cl
test rax, rax
movabs rcx, 0x8000000000000000
cmovne rcx, rax
mov qword [0x1800cb038], rcx
jmp 0x18004727a
call fcn.180060de8
jmp 0x180046c31
cmp edx, 0x52
jne 0x180048134
mov byte [0x1800cb5b0], 0
jmp 0x18004727a
xor r14d, r14d
mov rcx, rax
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x180046e16
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x180047293
cmp edx, 0x66
jne 0x1800481d5
cmp ecx, 1
adc ecx, 0
shr qword [0x1800cb038], cl
jmp 0x18004727a
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0x90], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r12
mov rdx, qword [rsp + 0x80]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test rsi, rsi
jne 0x1800482aa
cmp eax, 0x5af
je 0x1800481b5
cmp eax, 8
jne 0x1800472d5
xor eax, eax
dec qword [rsp + 0x90]
mov r11, qword [rsp + 0x30]
mov r9, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x50]
jne 0x18004816b
jmp 0x18004494e
lea rdi, [rsp + 0xd0]
mov byte [rdi], al
mov byte [rdi + 1], 0
lea rdx, str._jemalloc_
mov r15, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, 2
mov r8d, 0xa
call r15
lea rdx, str.:__malloc__Unsupported_character_in_malloc_options:_
mov ecx, 2
mov r8d, 0x35
call r15
lea rdx, [0x1800bf740]
mov rcx, rdi
call fcn.180066f70
jmp 0x18004727a
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0xa8], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test rsi, rsi
jne 0x1800482d1
cmp eax, 0x5af
je 0x180048289
cmp eax, 8
jne 0x180047340
xor r11d, r11d
dec qword [rsp + 0xa8]
mov r10, qword [rsp + 0x48]
mov r9, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
jne 0x180048244
jmp 0x180044d5c
cmp eax, 0x5af
mov rsi, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x88]
je 0x1800482c6
cmp eax, 8
jne 0x180044915
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x180044915
cmp eax, 0x5af
mov rsi, qword [rsp + 0x50]
mov ecx, dword [rsp + 0xa4]
je 0x1800482ed
cmp eax, 8
jne 0x180044d20
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x180044d20
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
cmp eax, 0x5af
je 0x18004831b
cmp eax, 8
jne 0x1800460fd
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1800460fd
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov rax, qword [rsp + 0xd0]
mov qword [r15], rax
xorps xmm0, xmm0
movups xmmword [r12], xmm0
mov r15, 0xfffffffffffff000
and r15, qword [r12 + 0x10]
mov qword [r14], r15
test r15, r15
jne 0x180044408
jmp 0x180045b6a
int3
int3
xor r9d, r9d
cmp rdx, r12
setb r9b
cmova r9d, r8d
cmp r9d, 0xffffffff
jne 0x1800483ea
test rdx, rdx
je 0x1800488a0
mov r9, qword [rdx]
test r9, r9
je 0x1800486f3
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x1800483e2
mov r11, qword [r9]
test r11, r11
je 0x180048412
test byte [r11 + 8], 1
je 0x180048412
mov rcx, rdx
mov rdx, r9
jmp 0x1800483a0
test r9d, r9d
jne 0x180048486
test rdx, rdx
je 0x1800488ce
mov r10, qword [rdx + 8]
mov rax, rcx
cmp r10, 1
jbe 0x180048584
jmp 0x180048493
or r10, 1
mov qword [r9 + 8], r10
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x180048885
mov r8, rax
mov rax, rsi
mov rsi, r15
mov r9, qword [r10]
test r9, r9
je 0x18004844a
mov r15, qword [r9 + 8]
test r15b, 1
jne 0x1800485da
or r11, 1
mov qword [rdx + 8], r11
mov r9, qword [r10]
or r9, 1
mov qword [rdx + 8], r9
mov qword [r10], rdx
mov r9, r10
mov r15, rsi
mov rsi, rax
cmp qword [rcx], rdx
mov rax, r8
jne 0x180048980
mov qword [rcx], r9
mov rdx, r9
mov r8d, 0xffffffff
jmp 0x1800483a0
test rdx, rdx
je 0x18004896d
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x1800484af
mov r11, qword [r9]
test r11, r11
je 0x1800484af
test byte [r11 + 8], 1
jne 0x1800483e2
mov r11, qword [rdx]
test r11, r11
je 0x18004896d
mov r9, qword [r11 + 8]
test r9b, 1
je 0x180048675
mov qword [rsp + 0x40], r15
and r9, 0xfffffffffffffffe
je 0x1800488fb
mov r15, qword [r9]
mov qword [rsp + 0x38], r15
test r15, r15
je 0x1800484f5
mov r15, qword [rsp + 0x38]
test byte [r15 + 8], 1
jne 0x180048758
and r10d, 1
or r10, r9
mov qword [r11 + 8], r10
or byte [r9 + 8], 1
mov r9, qword [rdx]
test r9, r9
je 0x180048916
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x1800488d5
mov r15, qword [r10]
and r15, 0xfffffffffffffffe
and r11d, 1
or r11, r15
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
or byte [rdx + 8], 1
mov r15, qword [rsp + 0x40]
cmp qword [rcx], rdx
jne 0x1800486d5
mov qword [rcx], r9
mov rdx, rcx
jmp 0x1800483e2
mov rax, qword [rdx]
test rax, rax
jne 0x18004859f
xor eax, eax
cmp qword [rcx], rdx
jne 0x1800486be
mov qword [rcx], rax
jmp 0x180048358
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
mov qword [rdx], r8
mov r8, rdx
and r8, 0xfffffffffffffffe
mov r9, qword [rax + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18004858e
and r15, 0xfffffffffffffffe
mov qword [r10], r15
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
lea r11, [r10 + r9]
mov qword [rdx + 8], r11
test r9, r9
je 0x1800488bb
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
or r11, r10
mov qword [rdx + 8], r11
mov qword [r9], rdx
mov r10, qword [rdx + 8]
and r10, 0xfffffffffffffffe
je 0x18004866c
mov r11, qword [r10 + 8]
test r11b, 1
je 0x18004866c
and r11, 0xfffffffffffffffe
mov qword [r10 + 8], r11
mov r10, qword [rdx + 8]
mov r11, r10
or r11, 1
mov qword [rdx + 8], r11
and r10, 0xfffffffffffffffe
je 0x1800488a8
mov r15, rsi
mov r11, qword [r10]
or r11, 1
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov qword [r9], r10
jmp 0x180048466
mov qword [rdx + 8], r10
jmp 0x180048463
or r9, 1
mov qword [r11 + 8], r9
mov r9, qword [r11]
test r9, r9
je 0x180048693
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x1800487e3
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x180048930
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rdx + 8], r10
mov qword [r9], rdx
jmp 0x180048570
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, rax
mov qword [rcx + 8], rdx
jmp 0x180048358
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
mov rdx, rcx
jmp 0x1800483e2
mov r10, rdx
test rax, rax
je 0x18004899b
cmp qword [rax], r12
jne 0x18004886a
mov qword [rax], r10
test rdx, rdx
je 0x1800489ab
mov rdx, qword [r12]
mov qword [r10], rdx
mov rdx, qword [r12 + 8]
and rdx, 0xfffffffffffffffe
mov r8, qword [r10 + 8]
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
mov r8, qword [r12 + 8]
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
cmp qword [rcx], r10
jne 0x1800489be
mov qword [rcx], 0
jmp 0x180048358
and r10d, 1
mov r15, qword [r9 + 8]
and r15, 0xfffffffffffffffe
or r15, r10
mov qword [r9 + 8], r15
mov r9, qword [rsp + 0x38]
and byte [r9 + 8], 0xfe
mov r10, qword [r11 + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x1800488e8
mov r15, qword [r9]
and r15, 0xfffffffffffffffe
and r10d, 1
or r10, r15
mov qword [r11 + 8], r10
mov qword [r9], r11
mov qword [rdx], r9
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
jne 0x180048543
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
and r10, 0xfffffffffffffffe
mov qword [r9 + 8], r10
mov r9, qword [rdx]
test r9, r9
je 0x180048943
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x18004895a
mov r8, rax
mov rax, rsi
mov rsi, r15
mov r15, qword [r10]
and r15, 0xfffffffffffffffe
and r11d, 1
or r11, r15
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r15, rsi
mov rsi, rax
mov rax, r8
mov r8d, 0xffffffff
jmp 0x180048570
mov r8, r10
and r8, 0xfffffffffffffffe
mov r9, qword [rax + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
jmp 0x18004870b
or r11, 1
mov qword [rdx + 8], r11
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
xor r10d, r10d
jmp 0x1800486f6
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
xor edx, edx
jmp 0x18004858c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
and r10d, 1
mov qword [r11 + 8], r10
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
jmp 0x180048478
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
and qword [rcx + 8], 1
jmp 0x180048358
int3
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rbx, qword [r8 + 8]
and ebx, 1
or rbx, rcx
mov qword [r8 + 8], rbx
mov rcx, r9
mov rbx, qword [rax + 0x10]
mov r12, rbx
and r12, 0xfffffffffffff000
mov r13, qword [r9 + 0x10]
and r13, r10
xor r9d, r9d
cmp r12, r13
seta r9b
cmovb r9d, r11d
test r9d, r9d
jne 0x180048a2d
test bl, 0x10
mov ebx, 0
cmove rbx, rax
xor r9d, r9d
cmp rbx, rcx
seta bl
jb 0x180048a37
mov r9b, bl
cmp r9d, 0xffffffff
jne 0x180048ab9
mov r9, qword [rcx]
test r9, r9
je 0x1800492f1
mov rbx, qword [r9 + 8]
test bl, 1
jne 0x180048adb
mov r12, qword [r9]
test r12, r12
je 0x180048a60
test byte [r12 + 8], 1
jne 0x180048adb
or rbx, 1
mov qword [r9 + 8], rbx
mov r12, qword [rcx + 8]
mov rbx, r12
and rbx, 0xfffffffffffffffe
je 0x180049785
mov r9, qword [rbx]
test r9, r9
je 0x180048a8f
mov r13, qword [r9 + 8]
test r13b, 1
jne 0x180049356
or r12, 1
mov qword [rcx + 8], r12
mov r9, qword [rbx]
or r9, 1
mov qword [rcx + 8], r9
mov qword [rbx], rcx
mov r9, rbx
cmp qword [r8], rcx
jne 0x1800489d3
mov qword [r8], r9
jmp 0x1800489e8
test r9d, r9d
je 0x180048ae3
mov rbx, qword [rcx + 8]
mov r9, rbx
and r9, 0xfffffffffffffffe
je 0x180048af6
mov r12, qword [r9]
test r12, r12
je 0x180048af6
test byte [r12 + 8], 1
je 0x180048af6
mov r8, rcx
jmp 0x1800489e8
mov rbx, qword [rcx + 8]
mov rdx, r8
cmp rbx, 1
jbe 0x180048bb8
jmp 0x180048ac2
mov r12, qword [rcx]
test r12, r12
je 0x180049875
mov r9, qword [r12 + 8]
test r9b, 1
je 0x180048f7b
and r9, 0xfffffffffffffffe
je 0x1800497a0
mov r13, qword [r9]
test r13, r13
je 0x180048b2e
test byte [r13 + 8], 1
jne 0x1800493e5
and ebx, 1
or rbx, r9
mov qword [r12 + 8], rbx
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x18004985b
mov rbx, qword [r9 + 8]
and rbx, 0xfffffffffffffffe
mov qword [rcx], rbx
mov rbx, rcx
and rbx, 0xfffffffffffffffe
mov r12, qword [r9 + 8]
and r12d, 1
or r12, rbx
mov qword [r9 + 8], r12
mov r12, qword [rcx + 8]
mov rbx, r12
and rbx, 0xfffffffffffffffe
je 0x180049835
mov r13, qword [rbx]
and r13, 0xfffffffffffffffe
and r12d, 1
or r12, r13
mov qword [rcx + 8], r12
mov qword [rbx], rcx
mov r12, qword [r9 + 8]
and r12d, 1
or r12, rbx
mov qword [r9 + 8], r12
or byte [rcx + 8], 1
cmp qword [r8], rcx
jne 0x18004908e
mov qword [r8], r9
mov rcx, r8
jmp 0x180048adb
mov rdx, qword [rcx]
test rdx, rdx
je 0x180048bf9
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x30]
jne 0x180048f64
mov qword [r8], rdx
mov r9, qword [rsp + 0x40]
mov r10, qword [rsp + 0x48]
shr r10, 0xc
mov rcx, qword [rsp + 0xd0]
mov qword [rdi + 0xa0], rcx
xorps xmm0, xmm0
movups xmmword [rax], xmm0
cmp r10, r15
jne 0x180048ccd
test rbp, rbp
je 0x180048c7d
cmp r15, 1
adc r15, 0
shl r15, 3
lea rcx, [r15 + r15*2]
lea rdx, [r9 + r9*2]
lea rdx, [r11 + rdx*8]
add rdx, 0x30
xor r8d, r8d
test byte [rdx + r8], 8
je 0x180048c6c
dec qword [r11 + 0x18]
dec qword [rdi + 0x88]
mov qword [rdx + r8], 3
add r8, 0x18
cmp rcx, r8
jne 0x180048c5a
or qword [rax + 0x10], rbp
cmp qword [r11 + 0x18], 0
mov bpl, 1
jne 0x180048c97
cmp qword [rsp + 0x60], 0
jne 0x180048fc4
test r14, r14
je 0x18004973b
test bpl, 1
je 0x18004973b
mov rax, qword [rsp + 0x38]
add qword [rdi + 0x60], rax
mov rcx, qword [rsp + 0x68]
cmp dword [rcx + 0x28], 0
jne 0x180044483
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x180044483
lea r8, [r9 + r10]
sub r10, r15
shl r10, 0xc
lea rcx, [r9 + r15]
lea rdx, [rcx + rcx*2]
lea rcx, [r11 + rdx*8]
add rcx, 0x20
mov r9d, 0xfff
mov rbx, r10
mov r10, qword [rcx + 0x10]
and r10, r9
or r10, rbx
mov qword [rcx + 0x10], r10
lea r8, [r8 + r8*2]
and r9, qword [r11 + r8*8 + 0x18]
or r9, rbx
mov qword [r11 + r8*8 + 0x18], r9
mov r12, qword [rdi + 0xa0]
mov qword [rsp + 0xd0], r12
mov qword [rsp + 0xd8], 0
test r12, r12
je 0x1800490ed
lea r8, [r11 + rdx*8]
add r8, 0x30
lea rdx, [rsp + 0xd0]
xor r11d, r11d
mov r9, 0xfffffffffffff000
mov rbx, r11
mov r11, rdx
mov rdx, qword [r12]
test rdx, rdx
je 0x180048d75
mov r13, qword [rdx + 8]
test r13b, 1
je 0x180048d75
mov rbp, qword [rdx]
test rbp, rbp
je 0x180048d75
test byte [rbp + 8], 1
jne 0x180048de1
mov rdx, r12
mov rbx, qword [r8]
mov r10, rbx
and r10, r9
mov r12, qword [rdx + 0x10]
and r12, r9
xor ebp, ebp
cmp r10, r12
seta bpl
mov r10d, 0xffffffff
cmovb ebp, r10d
test ebp, ebp
je 0x180048db6
cmp ebp, 0xffffffff
jne 0x180048dd2
mov r12, qword [rdx]
mov ebp, 0xffffffff
test r12, r12
jne 0x180048d4e
jmp 0x180048ec7
test bl, 0x10
mov r10d, 0
cmove r10, rcx
xor ebp, ebp
cmp r10, rdx
seta bl
jb 0x180048da4
mov bpl, bl
jmp 0x180048dd7
mov ebp, 1
mov r12, qword [rdx + 8]
and r12, 0xfffffffffffffffe
jmp 0x180048dac
and r13, 0xfffffffffffffffe
mov qword [r12], r13
mov rbp, r12
and rbp, 0xfffffffffffffffe
mov r13, qword [rdx]
mov r10, qword [rdx + 8]
and r10d, 1
or r10, rbp
mov qword [rdx + 8], r10
test r13, r13
je 0x18004980f
and byte [r13 + 8], 0xfe
cmp qword [r11], r12
jne 0x180048e1d
mov qword [r11], rdx
jmp 0x180048d78
and rdx, 0xfffffffffffffffe
mov r12, qword [r11 + 8]
and r12d, 1
lea r10, [r12 + rdx]
mov qword [r11 + 8], r10
test rdx, rdx
je 0x180049822
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
or r10, r12
mov qword [r11 + 8], r10
mov qword [rdx], r11
mov r10, qword [r11 + 8]
and r10d, 1
mov r12, qword [rdx + 8]
and r12, 0xfffffffffffffffe
or r12, r10
mov qword [rdx + 8], r12
or byte [r11 + 8], 1
test rbx, rbx
je 0x1800497bb
cmp qword [rbx], r11
je 0x18004927a
jmp 0x1800493d1
mov r11, qword [r8]
mov r10, r11
and r10, r9
mov r13, qword [rdx + 0x10]
and r13, r9
xor r12d, r12d
cmp r10, r13
seta r12b
mov r10d, 0xffffffff
cmovb r12d, r10d
test r12d, r12d
jne 0x1800490d9
jmp 0x180049478
mov r12, qword [rdx + 8]
and r12, 0xfffffffffffffffe
mov r11, rdx
test r12, r12
jne 0x180048d54
mov r11, rbx
mov qword [rcx], 0
mov qword [rcx + 8], 1
cmp ebp, 1
jne 0x180048f31
mov r8, qword [rdx + 8]
and r8d, 1
mov r9, r8
or r9, rcx
mov qword [rdx + 8], r9
mov r9, qword [rcx]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rdx + 8], r9
mov qword [rcx], rdx
mov r8, qword [rdx + 8]
and r8d, 1
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rcx + 8], r9
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x1800490ab
mov qword [r11], rcx
mov rbp, qword [rsp + 0x38]
mov r9, qword [rsp + 0x40]
jmp 0x180048f3e
mov rbp, qword [rsp + 0x38]
mov r9, qword [rsp + 0x40]
mov qword [rdx], rcx
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x1800498c8
and byte [rcx + 8], 0xfe
mov qword [rdi + 0xa0], rcx
mov r11, qword [rsp + 0x30]
jmp 0x180048c36
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x180048c0a
or r9, 1
mov qword [r12 + 8], r9
mov r9, qword [r12]
test r9, r9
je 0x180048f9a
mov rbx, qword [r9 + 8]
test bl, 1
jne 0x180049282
mov rbx, qword [rcx + 8]
mov r9, rbx
and r9, 0xfffffffffffffffe
je 0x180049888
mov r12, qword [r9]
and r12, 0xfffffffffffffffe
and ebx, 1
or rbx, r12
mov qword [rcx + 8], rbx
mov qword [r9], rcx
jmp 0x180048ba4
mov r15, qword [rdi + 0x68]
mov qword [rsp + 0xd8], r15
mov qword [rsp + 0xe0], 0
xor ecx, ecx
cmp r15, r11
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x180049109
test eax, eax
je 0x1800494d8
test r15, r15
je 0x1800497d6
mov rcx, qword [r15 + 0x10]
xor r13d, r13d
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180049029
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x180049029
test byte [rdx + 0x10], 1
jne 0x18004912c
mov rax, qword [r15 + 8]
test rax, rax
je 0x180049913
test byte [rax + 0x10], 1
jne 0x180049589
or rcx, 1
mov qword [r15 + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18004905e
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x180049639
or byte [rax + 0x10], 1
mov rcx, qword [r15 + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18004995b
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [r15 + 0x10], rcx
mov qword [rax + 8], r15
jmp 0x1800495a0
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rbx, qword [r8 + 8]
and ebx, 1
or rbx, rcx
mov qword [r8 + 8], rbx
mov rcx, r8
jmp 0x180048adb
mov r8, qword [r11 + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
cmp rdx, r9
mov rbp, qword [rsp + 0x38]
mov r9, qword [rsp + 0x40]
jne 0x180048f3e
and r8d, 1
or r8, rcx
mov qword [r11 + 8], r8
jmp 0x180048f3e
mov ebp, 1
cmp r12d, 0xffffffff
jne 0x180048eb0
jmp 0x18004950c
mov qword [rcx], 0
mov qword [rcx + 8], 1
lea rdx, [rsp + 0xd0]
jmp 0x180048f36
test r15, r15
je 0x1800494ac
mov rax, qword [r15 + 8]
test rax, rax
je 0x1800494ac
test byte [rax + 0x10], 1
je 0x180049499
xor r13d, r13d
mov ebp, 0xffffffff
xor r12d, r12d
lea rcx, [rsp + 0xb8]
lea r8, [rsp + 0xb0]
mov rbx, r15
mov r15, rax
xor eax, eax
cmp r15, r11
setb al
cmova eax, ebp
cmp eax, 0xffffffff
jne 0x18004918e
test r15, r15
je 0x1800496ac
mov rax, qword [r15 + 8]
test rax, rax
je 0x1800496a9
test byte [rax + 0x10], 1
jne 0x180049144
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x180049533
test byte [rdx + 0x10], 1
jne 0x180049144
jmp 0x180049533
test eax, eax
jne 0x1800491aa
test r15, r15
je 0x1800498db
mov rax, qword [r15 + 0x10]
mov r13, rbx
cmp rax, 1
jbe 0x1800491ff
jmp 0x1800491b7
test r15, r15
je 0x1800497ce
mov rax, qword [r15 + 0x10]
and rax, 0xfffffffffffffffe
je 0x1800491d0
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x1800491d0
test byte [rdx + 0x10], 1
jne 0x180049144
mov rcx, r8
mov rdx, r15
call fcn.180039460
mov rax, qword [rsp + 0xb0]
cmp qword [rbx + 8], r15
jne 0x180049519
jmp 0x180049630
mov r15, rbx
mov r11, qword [rsp + 0x30]
jmp 0x180049134
mov r12, qword [r15 + 8]
test r12, r12
je 0x180049470
mov rax, qword [r12 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [r15 + 8], rax
mov rax, r15
and rax, 0xfffffffffffffffe
mov rcx, qword [r12 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r12 + 0x10], rcx
mov rcx, qword [r15 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r12 + 0x10], rcx
or byte [r15 + 0x10], 1
and qword [r12 + 0x10], 1
cmp qword [rbx + 8], r15
jne 0x1800493ba
mov qword [rbx + 8], r12
mov rax, qword [rsp + 0xd8]
mov qword [rdi + 0x68], rax
test r11, r11
je 0x1800498e3
xorps xmm0, xmm0
movups xmmword [r11 + 8], xmm0
jmp 0x180048caa
mov qword [rbx], rdx
jmp 0x180048e7e
and rbx, 0xfffffffffffffffe
mov qword [r9 + 8], rbx
mov r9, qword [rcx]
test r9, r9
je 0x18004989b
mov rbx, qword [r9 + 8]
and rbx, 0xfffffffffffffffe
mov qword [rcx], rbx
mov rbx, rcx
and rbx, 0xfffffffffffffffe
mov r12, qword [r9 + 8]
and r12d, 1
or r12, rbx
mov qword [r9 + 8], r12
mov r12, qword [rcx + 8]
mov rbx, r12
and rbx, 0xfffffffffffffffe
je 0x1800498b5
mov r13, qword [rbx]
and r13, 0xfffffffffffffffe
and r12d, 1
or r12, r13
mov qword [rcx + 8], r12
mov qword [rbx], rcx
mov r12, qword [r9 + 8]
and r12d, 1
or r12, rbx
mov qword [r9 + 8], r12
jmp 0x180048ba4
test rdx, rdx
je 0x1800498f6
cmp qword [rdx], rax
mov r11, qword [rsp + 0x30]
jne 0x18004956e
mov qword [rdx], rcx
mov r10, qword [rsp + 0x48]
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x180049909
mov qword [r8], 0
mov r9, qword [rsp + 0x40]
jmp 0x180048c14
and r13, 0xfffffffffffffffe
mov qword [rbx], r13
mov r12, qword [r9 + 8]
and r12d, 1
or r12, rbx
mov qword [r9 + 8], r12
and r9, 0xfffffffffffffffe
mov rbx, qword [rcx + 8]
and ebx, 1
lea r12, [rbx + r9]
mov qword [rcx + 8], r12
test r9, r9
je 0x1800497fc
mov r12, qword [r9]
and r12, 0xfffffffffffffffe
or r12, rbx
mov qword [rcx + 8], r12
mov qword [r9], rcx
mov rbx, qword [rcx + 8]
and rbx, 0xfffffffffffffffe
je 0x1800493b1
mov r12, qword [rbx + 8]
test r12b, 1
jne 0x1800495f4
mov qword [rcx + 8], rbx
jmp 0x180048aa8
and r12, 0xfffffffffffffffe
mov rax, qword [rbx + 0x10]
and eax, 1
or rax, r12
mov qword [rbx + 0x10], rax
jmp 0x180049258
mov r10, qword [rbx + 8]
and r10d, 1
or r10, rdx
mov qword [rbx + 8], r10
jmp 0x180048e7e
and ebx, 1
mov rbp, qword [r9 + 8]
and rbp, 0xfffffffffffffffe
or rbp, rbx
mov qword [r9 + 8], rbp
and byte [r13 + 8], 0xfe
mov rbx, qword [r12 + 8]
mov r9, rbx
and r9, 0xfffffffffffffffe
je 0x180049848
mov r13, qword [r9]
and r13, 0xfffffffffffffffe
and ebx, 1
or rbx, r13
mov qword [r12 + 8], rbx
mov qword [r9], r12
mov qword [rcx], r9
mov rbx, qword [r9 + 8]
and rbx, 0xfffffffffffffffe
mov qword [rcx], rbx
mov rbx, rcx
and rbx, 0xfffffffffffffffe
mov r12, qword [r9 + 8]
and r12d, 1
or r12, rbx
mov qword [r9 + 8], r12
mov r12, qword [rcx + 8]
mov rbx, r12
and rbx, 0xfffffffffffffffe
mov rbp, qword [rsp + 0x38]
jne 0x180048b7c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
xor r12d, r12d
jmp 0x18004924a
test r11b, 0x10
mov r10d, 0
cmove r10, rcx
xor ebp, ebp
cmp r10, rdx
seta r11b
jb 0x18004950c
mov bpl, r11b
jmp 0x180048eb0
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x1800494ac
test byte [rcx + 0x10], 1
jne 0x180049129
lea r12, [rsp + 0xc0]
mov rcx, r12
mov rdx, r15
call fcn.180039300
mov rax, qword [r12]
test rax, rax
je 0x180049948
and byte [rax + 0x10], 0xfe
xor r13d, r13d
jmp 0x1800495a0
test r15, r15
je 0x1800494f8
mov rcx, qword [r15 + 0x10]
cmp rcx, 1
ja 0x180049729
mov rax, qword [r15 + 8]
test rax, rax
jne 0x1800495b6
xor eax, eax
mov qword [rsp + 0xd8], rax
mov r11, qword [rsp + 0x30]
jmp 0x180049258
mov r12, qword [rdx]
mov ebp, 0xffffffff
jmp 0x180048eb8
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rbx + 0x10]
and edx, 1
or rdx, rcx
mov qword [rbx + 0x10], rdx
jmp 0x1800491f2
mov rdx, r15
call fcn.180039300
mov rax, qword [rsp + 0xb8]
cmp qword [rbx + 8], r15
jne 0x18004992e
mov qword [rbx + 8], rax
mov r15, rax
mov r11, qword [rsp + 0x30]
lea rcx, [rsp + 0xb8]
lea r8, [rsp + 0xb0]
jmp 0x18004914a
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
jmp 0x18004930b
lea r12, [rsp + 0xc0]
mov rcx, r12
mov rdx, r15
call fcn.180039460
mov rax, qword [r12]
lea r15, [rsp + 0xd0]
mov qword [r15 + 8], rax
mov r11, qword [rsp + 0x30]
jmp 0x18004912c
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r15 + 8], rcx
mov rcx, r15
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r15 + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [r15 + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x1800494fa
and r12, 0xfffffffffffffffe
mov qword [rbx + 8], r12
mov rbx, qword [rcx + 8]
mov r12, rbx
or r12, 1
mov qword [rcx + 8], r12
and rbx, 0xfffffffffffffffe
je 0x1800497e9
mov r12, qword [rbx]
or r12, 1
mov qword [rcx + 8], r12
mov qword [rbx], rcx
mov qword [r9], rbx
mov rbp, qword [rsp + 0x38]
jmp 0x180048aa8
mov qword [rbx + 8], rax
jmp 0x1800491f2
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [r15 + 8]
test rax, rax
je 0x18004996e
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r15 + 8], rcx
mov rcx, r15
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r15 + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x180049989
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r15 + 0x10], rdx
mov qword [rcx + 8], r15
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x1800495a0
mov r12, r15
test r13, r13
je 0x18004999c
mov rax, qword [rsp + 0x30]
cmp qword [r13 + 8], rax
jne 0x18004976b
mov qword [r13 + 8], r12
cmp qword [rsp + 0x30], 0
je 0x1800499bc
test r15, r15
je 0x1800499d1
mov rdx, qword [rsp + 0x30]
mov rax, qword [rdx + 8]
mov qword [r12 + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [r12 + 0x10]
and eax, 1
or rax, rcx
mov qword [r12 + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov qword [r12 + 0x10], rax
cmp qword [rbx + 8], r12
jne 0x1800499e4
mov qword [rbx + 8], 0
jmp 0x180049502
lea r13, [rsp + 0xd0]
mov r11, qword [rsp + 0x30]
jmp 0x18004900d
mov rcx, qword [rsp + 0x68]
cmp dword [rcx + 0x28], 0
je 0x180049763
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0xc
test rsi, rsi
jne 0x1800499ee
xor r14d, r14d
jmp 0x18004448c
xor r14d, r14d
jmp 0x180048cc2
mov rax, r12
and rax, 0xfffffffffffffffe
mov rcx, qword [r13 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r13 + 0x10], rcx
jmp 0x1800496c8
or r12, 1
mov qword [rcx + 8], r12
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
and ebx, 1
mov qword [r12 + 8], rbx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
xor r15d, r15d
jmp 0x1800491d0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
xor r15d, r15d
jmp 0x18004924a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
and qword [r8 + 8], 1
jmp 0x18004934c
or rcx, 1
mov qword [r15 + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rbx + 0x10]
and edx, 1
or rdx, rcx
mov qword [rbx + 0x10], rdx
jmp 0x180049551
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048388
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
mov qword [r15 + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x1800489c8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test r15, r15
je 0x1800499d1
mov qword [r12 + 8], 0
xor eax, eax
jmp 0x18004970d
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180048393
and qword [rbx + 0x10], 1
jmp 0x180049502
mov r9, rsi
movaps xmm0, xmmword [0x1800b7540]
movaps xmmword [rsp + 0xf0], xmm0
movaps xmm0, xmmword [0x1800b7530]
movaps xmmword [rsp + 0xe0], xmm0
movaps xmm0, xmmword [str.out_of_memory:_0x0000000000000000_bytes_requested]
movaps xmmword [rsp + 0xd0], xmm0
mov word [rsp + 0x100], 0x64
mov qword [sym.mozglue.dll_unsigned_long_long_unsigned___int64__gOOMAllocationSize], rsi
mov ecx, 0x1f
lea rax, str.0123456789ABCDEF
mov r8, r9
mov edx, r8d
and edx, 0xf
mov dl, byte [rdx + rax]
mov byte [rsp + rcx + 0xd1], dl
cmp r9, 0x10
jb 0x180049a65
shr r9, 4
lea rdx, [rcx - 1]
cmp rcx, 0x10
mov rcx, rdx
ja 0x180049a3b
lea rcx, [rsp + 0xd0]
call sym.mozglue.dll_mozalloc_abort
int3