Function at 0x18006c6c0
Capabilities:
Encode data using base64
Generate random numbers via rtlgenrandom
Get system information on windows
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x198
movaps xmmword [rsp + 0x180], xmm6
mov rsi, rdx
mov rax, qword [0x1800cb028]
xor rax, rsp
mov qword [rsp + 0x178], rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0xc0], xmm0
mov eax, dword [0x1800cb774]
mov r8d, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rdx, qword [rdx + r8*8]
mov edx, dword [rdx + 4]
mov qword [rsp + 0x68], rcx
test rcx, rcx
jne 0x18006c8f2
cmp eax, edx
jg 0x1800701d3
cmp rsi, 0x1000
ja 0x18006c759
cmp byte [0x1800cb770], 0
je 0x18006c759
mov rax, qword [0x1800cb648]
mov eax, dword [rax + 0x14810]
cmp eax, 1
je 0x180070d3e
cmp byte [rsp + 0xc8], 0
jne 0x180070d1d
cmp dword [0x1800cb718], 0
je 0x18007082c
cmp rsi, 1
mov r12, rsi
adc r12, 0
cmp r12, 0x1f0
ja 0x18006c99b
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x180070f1a
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rbx, qword [rax + 0x10]
test rbx, rbx
je 0x18006fd10
cmp r12, 9
jb 0x18006cd38
add r12, 0xf
mov rbp, r12
and rbp, 0xfffffffffffffff0
shr r12, 4
dec r12
lea r13, [r12 + r12*2]
shl r13, 4
cmp byte [rbx + 0x78], 0
je 0x18006c807
cmp qword [rbx + 0x80], 0
je 0x18007076b
lea r14, [rbx + r13]
add r14, 0xa8
lea r15, [rbx + 0x18]
cmp dword [rbx + 0x40], 0
jne 0x18006c825
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r12, qword [r14]
test r12, r12
je 0x18006c9cc
cmp dword [r12 + 0xc], 0
je 0x18006c9cc
mov eax, dword [r12 + 8]
mov edx, dword [r12 + rax*4 + 0x10]
test edx, edx
je 0x18006cc62
mov r8, qword [rbx + 0x80]
test r8, r8
jne 0x18006c955
tzcnt r8d, edx
mov r14d, eax
shl r14d, 5
or r14d, r8d
mov ecx, dword [rbx + r13 + 0xc8]
imul r14, qword [rbx + r13 + 0xb8]
add rcx, r12
add r14, rcx
btc edx, r8d
mov dword [r12 + rax*4 + 0x10], edx
dec dword [r12 + 0xc]
test r14, r14
je 0x18006e152
add qword [rbx + 0x58], rbp
xor edi, edi
cmp dword [rbx + 0x40], 0
jne 0x18006c8b1
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test dil, dil
jne 0x180070c3c
test r14, r14
je 0x180070c3c
mov rcx, qword [rsp + 0x178]
xor rcx, rsp
call fcn.180062020
mov rax, r14
movaps xmm6, xmmword [rsp + 0x180]
add rsp, 0x198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp eax, edx
jg 0x1800704d3
cmp byte [0x1800cb770], 0
je 0x18006c923
mov rax, qword [0x1800cb640]
mov rcx, qword [rsp + 0x68]
cmp qword [rax + 8], rcx
jbe 0x18006c923
mov rax, qword [rax]
cmp rax, qword [rsp + 0x68]
jbe 0x180070f64
cmp byte [rsp + 0xc8], 0
jne 0x180070f24
lea rcx, [rsp + 0xf0]
mov qword [rcx], 0
mov rdx, qword [rsp + 0x68]
mov r8, rsi
call fcn.180028560
mov r14, rax
jmp 0x18006c8c3
mov r9, qword [r8]
mov rcx, qword [r8 + 8]
mov qword [r8], rcx
mov r10, r9
shl r10, 0x17
xor r10, r9
mov r9, rcx
shr r9, 0x1a
xor r9, rcx
xor r9, r10
shr r10, 0x11
xor r10, r9
add ecx, r10d
mov r9d, edx
ror r9d, cl
mov qword [r8 + 8], r10
tzcnt r8d, r9d
add r8d, ecx
and r8d, 0x1f
jmp 0x18006c864
mov rbx, qword [0x1800cb568]
cmp r12, 0xf01
jae 0x18006cdba
add r12, 0xff
mov ebp, r12d
and ebp, 0x1f00
shr r12, 8
add r12, 0x1d
jmp 0x18006c7eb
mov rdx, qword [rbx + r13 + 0xb0]
test rdx, rdx
je 0x18006d7b6
lea r12, [rbx + r13]
add r12, 0xb0
mov rax, rdx
mov rdi, rax
mov rax, qword [rax]
test rax, rax
jne 0x18006c9eb
mov qword [rsp + 0xf0], rdx
mov qword [rsp + 0xf8], 0
xor ecx, ecx
cmp rdx, rdi
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
jne 0x18006cd8b
mov r9, qword [rdx]
test r9, r9
je 0x180071176
mov rax, qword [r9 + 8]
test al, 1
je 0x18006ccc9
xor eax, eax
mov r8d, 0xffffffff
mov rcx, rdx
mov rdx, r9
xor r9d, r9d
cmp rdx, rdi
setb r9b
cmova r9d, r8d
cmp r9d, 0xffffffff
jne 0x18006cafa
test rdx, rdx
je 0x180070af5
mov r9, qword [rdx]
test r9, r9
je 0x18006db71
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18006ca43
mov r11, qword [r9]
test r11, r11
je 0x18006ca8f
test byte [r11 + 8], 1
jne 0x18006ca43
or r10, 1
mov qword [r9 + 8], r10
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x180070a8f
mov r8, rax
mov rax, r12
mov r9, qword [r10]
test r9, r9
je 0x18006cac4
mov r12, qword [r9 + 8]
test r12b, 1
jne 0x18006d3ff
or r11, 1
mov qword [rdx + 8], r11
mov r9, qword [r10]
or r9, 1
mov qword [rdx + 8], r9
mov qword [r10], rdx
mov r9, r10
mov r12, rax
mov rax, r8
cmp qword [rcx], rdx
mov r8d, 0xffffffff
jne 0x1800711a5
mov qword [rcx], r9
jmp 0x18006ca46
test r9d, r9d
jne 0x18006cb1b
test rdx, rdx
je 0x1800710c1
mov r10, qword [rdx + 8]
mov rax, rcx
cmp r10, 1
jbe 0x18006cc1a
jmp 0x18006cb28
test rdx, rdx
je 0x180071136
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x18006cb44
mov r11, qword [r9]
test r11, r11
je 0x18006cb44
test byte [r11 + 8], 1
jne 0x18006ca43
mov r11, qword [rdx]
test r11, r11
je 0x180071136
mov r9, qword [r11 + 8]
test r9b, 1
je 0x18006d4d2
mov qword [rsp + 0x40], r12
and r9, 0xfffffffffffffffe
je 0x1800710c8
mov r12, qword [r9]
mov qword [rsp + 0x38], r12
test r12, r12
je 0x18006cb8b
mov r12, qword [rsp + 0x38]
test byte [r12 + 8], 1
jne 0x18006dc40
and r10d, 1
or r10, r9
mov qword [r11 + 8], r10
or byte [r9 + 8], 1
mov r9, qword [rdx]
test r9, r9
je 0x1800710e3
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x1800710fd
mov r12, qword [r10]
and r12, 0xfffffffffffffffe
and r11d, 1
or r11, r12
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
or byte [rdx + 8], 1
mov r12, qword [rsp + 0x40]
cmp qword [rcx], rdx
jne 0x18006d798
mov qword [rcx], r9
mov rdx, rcx
jmp 0x18006ca43
mov rax, qword [rdx]
test rax, rax
jne 0x18006ce5a
xor eax, eax
cmp qword [rcx], rdx
jne 0x18006d51b
mov qword [rcx], rax
mov rax, qword [rsp + 0xf0]
mov qword [r12], rax
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov r12, 0xfffffffffffff000
and r12, qword [rdi + 0x10]
mov qword [r14], r12
test r12, r12
jne 0x18006c83d
jmp 0x18006f692
mov ecx, dword [rbx + r13 + 0xc4]
inc eax
cmp eax, ecx
jae 0x18006e14d
mov edx, eax
mov r8d, dword [r12 + rdx*4 + 0x10]
test r8d, r8d
je 0x18006cc6a
mov r9, qword [rbx + 0x80]
test r9, r9
jne 0x18006cd45
tzcnt r9d, r8d
mov r14d, eax
shl r14d, 5
or r14d, r9d
mov ecx, dword [rbx + r13 + 0xc8]
add rcx, r12
imul r14, qword [rbx + r13 + 0xb8]
add r14, rcx
btc r8d, r9d
mov dword [r12 + rdx*4 + 0x10], r8d
mov dword [r12 + 8], eax
jmp 0x18006c88e
mov rcx, qword [r9]
test rcx, rcx
je 0x18006ccdb
test byte [rcx + 8], 1
jne 0x18006ca3b
or rax, 1
mov qword [r9 + 8], rax
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180070b15
mov r9, qword [rax]
test r9, r9
je 0x18006cd0a
mov r8, qword [r9 + 8]
test r8b, 1
jne 0x18006dfbd
or rcx, 1
mov qword [rdx + 8], rcx
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov r9, rax
and byte [r9 + 8], 0xfe
lea rdx, [rsp + 0xf0]
mov qword [rdx], r9
jmp 0x18006ca3b
mov ebp, 0x10
xor r12d, r12d
jmp 0x18006c7eb
mov r10, qword [r9]
mov rcx, qword [r9 + 8]
mov qword [r9], rcx
mov r11, r10
shl r11, 0x17
xor r11, r10
mov r10, rcx
shr r10, 0x1a
xor r10, rcx
xor r10, r11
shr r11, 0x11
xor r11, r10
add ecx, r11d
mov r10d, r8d
ror r10d, cl
mov qword [r9 + 8], r11
tzcnt r9d, r10d
add r9d, ecx
and r9d, 0x1f
jmp 0x18006cc95
test eax, eax
jne 0x18006d491
mov rax, qword [rdx + 8]
cmp rax, 1
ja 0x18006f43e
mov rax, qword [rdx]
test rax, rax
jne 0x18006f85e
mov qword [rsp + 0xf0], rax
jmp 0x18006cc34
cmp r12, 0xfc000
ja 0x18006fd56
add r12, 0xfff
lea r14, [rbx + 0x18]
cmp dword [rbx + 0x40], 0
jne 0x18006cde1
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbp, r12
and rbp, 0xfffffffffffff000
mov rcx, qword [rbx + 0xa0]
test rcx, rcx
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x80], r14
je 0x18006df4d
xor eax, eax
mov rdx, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r9, rcx
mov r11, qword [r9 + 0x10]
and r11, rdx
xor r10d, r10d
cmp rbp, r11
seta r10b
cmovb r10d, r8d
lea r11d, [r10 + 1]
cmp r11d, 2
jae 0x18006ce46
mov rax, r9
mov r9, qword [r9]
test r9, r9
jne 0x18006ce1a
jmp 0x18006ce98
cmp r10d, 1
jne 0x18007142a
mov r9, qword [r9 + 8]
and r9, 0xfffffffffffffffe
jmp 0x18006ce3f
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
mov qword [rdx], r8
mov r8, rdx
and r8, 0xfffffffffffffffe
mov r9, qword [rax + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18006cc28
test rax, rax
je 0x18007151e
mov r8, rax
and r8, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r14, rdx
and r14, 0xfffffffffffffff0
shl r14, 8
add r14, r8
mov r11, r14
and r11, 0xfffffffffff00000
mov rax, qword [r11 + 0x18]
mov qword [rsp + 0x60], rax
mov eax, r14d
shr eax, 0xc
movzx r9d, al
lea rax, [r9*8]
lea rdx, [rax + rax*2]
mov r10, qword [r11 + rdx + 0x30]
shr r12, 0xc
test rbp, rbp
mov qword [rsp + 0x40], r11
mov qword [rsp + 0x48], r9
mov qword [rsp + 0x58], r10
je 0x18006d0a3
cmp r12, 1
mov rcx, r12
adc rcx, 0
lea rax, [r9 + r9*2]
lea rbp, [r11 + rax*8]
add rbp, 0x30
xor r15d, r15d
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
xor edi, edi
lea r13, [rdi + r9]
lea rax, [r13*2]
add rax, r13
test byte [r11 + rax*8 + 0x30], 0x60
jne 0x18006cf6b
inc rdi
cmp rdi, r12
setae r15b
add rbp, 0x18
cmp rdi, rcx
jne 0x18006cf3c
jmp 0x18006d097
cmp rdi, r12
jae 0x18006ec98
mov qword [rsp + 0x88], rcx
mov rax, rbp
xor ecx, ecx
mov qword [rsp + 0x50], rcx
mov rcx, qword [rax]
test cl, 0x60
je 0x18006cfb2
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
mov r10, qword [rsp + 0x50]
lea rcx, [rdi + r10]
inc rcx
inc r10
mov qword [rsp + 0x50], r10
add rax, 0x18
cmp rcx, r12
jb 0x18006cf86
mov rcx, qword [rsp + 0x50]
shl rcx, 0xc
mov qword [rsp + 0x78], rdx
jne 0x18006e06e
jmp 0x18006e1cc
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0xa8], rcx
call r8
mov dword [rsp + 0x90], eax
mov rcx, r13
mov rdx, qword [rsp + 0x70]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x180070b30
mov rax, qword [rsp + 0x70]
add r13, rax
mov rcx, qword [rsp + 0xa8]
sub rcx, rax
mov eax, 0x100000
cmp rcx, rax
mov edx, 0x100000
cmovb rdx, rcx
test rcx, rcx
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
je 0x18006e091
jmp 0x18006cfcb
mov r13, qword [rsp + 0x50]
test r13, r13
je 0x18006d072
test al, al
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
lea rdx, [r13*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [rbp + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x18006d064
test al, al
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x88]
mov r8, qword [sym.imp.KERNEL32.dll_GetLastError]
je 0x18006d3c6
add qword [rbx + 0x50], r13
jmp 0x18006cf53
mov rcx, qword [rbx + 0xa0]
mov rbp, qword [rsp + 0x38]
lea rax, [r11 + rdx]
add rax, 0x20
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], 0
mov rdx, qword [rax + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
je 0x18006dd7f
cmp r8d, 0xffffffff
jne 0x18006d83b
mov r9, qword [rcx]
test r9, r9
je 0x1800717ee
mov rdx, qword [r9 + 8]
test dl, 1
je 0x18006db01
xor edx, edx
mov r10, 0xfffffffffffff000
mov r11d, 0xffffffff
mov r8, rcx
mov rcx, r9
mov rdi, qword [rax + 0x10]
mov r15, rdi
and r15, r10
mov r13, qword [r9 + 0x10]
and r13, r10
xor r9d, r9d
cmp r15, r13
seta r9b
cmovb r9d, r11d
test r9d, r9d
jne 0x18006d169
test dil, 0x10
mov edi, 0
cmove rdi, rax
xor r9d, r9d
cmp rdi, rcx
seta dil
jb 0x18006d16f
mov r9b, dil
cmp r9d, 0xffffffff
jne 0x18006d1ed
mov r9, qword [rcx]
test r9, r9
je 0x18006eb00
mov rdi, qword [r9 + 8]
test dil, 1
jne 0x18006d123
mov r15, qword [r9]
test r15, r15
je 0x18006d194
test byte [r15 + 8], 1
jne 0x18006d123
or rdi, 1
mov qword [r9 + 8], rdi
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
je 0x180070afd
mov r9, qword [rdi]
test r9, r9
je 0x18006d1c3
mov r13, qword [r9 + 8]
test r13b, 1
jne 0x18006eb60
or r15, 1
mov qword [rcx + 8], r15
mov r9, qword [rdi]
or r9, 1
mov qword [rcx + 8], r9
mov qword [rdi], rcx
mov r9, rdi
cmp qword [r8], rcx
jne 0x180071882
mov qword [r8], r9
jmp 0x18006d126
test r9d, r9d
je 0x18006d2d6
mov rdi, qword [rcx + 8]
mov r9, rdi
and r9, 0xfffffffffffffffe
je 0x18006d216
mov r15, qword [r9]
test r15, r15
je 0x18006d216
test byte [r15 + 8], 1
jne 0x18006d123
mov r15, qword [rcx]
test r15, r15
je 0x1800713d7
mov r9, qword [r15 + 8]
test r9b, 1
je 0x18006ddb7
and r9, 0xfffffffffffffffe
je 0x180070b51
mov r13, qword [r9]
test r13, r13
je 0x18006d24d
test byte [r13 + 8], 1
jne 0x18006ece5
and edi, 1
or rdi, r9
mov qword [r15 + 8], rdi
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x180071397
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
mov qword [rcx], rdi
mov rdi, rcx
and rdi, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
je 0x1800713b1
mov r13, qword [rdi]
and r13, 0xfffffffffffffffe
and r15d, 1
or r15, r13
mov qword [rcx + 8], r15
mov qword [rdi], rcx
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
or byte [rcx + 8], 1
cmp qword [r8], rcx
jne 0x18006e051
mov qword [r8], r9
mov rcx, r8
jmp 0x18006d123
mov rdi, qword [rcx + 8]
mov rdx, r8
cmp rdi, 1
ja 0x18006d1fa
mov rdx, qword [rcx]
test rdx, rdx
je 0x18006d328
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x40]
jne 0x18006dda0
mov qword [r8], rdx
mov r9, qword [rsp + 0x48]
mov r10, qword [rsp + 0x58]
shr r10, 0xc
mov rcx, qword [rsp + 0xf0]
mov qword [rbx + 0xa0], rcx
xorps xmm0, xmm0
movups xmmword [rax], xmm0
cmp r10, r12
jne 0x18006d532
test rbp, rbp
je 0x18006d3ac
cmp r12, 1
adc r12, 0
shl r12, 3
lea rcx, [r12 + r12*2]
lea rdx, [r9 + r9*2]
lea rdx, [r11 + rdx*8]
add rdx, 0x30
xor r8d, r8d
test byte [rdx + r8], 8
je 0x18006d39b
dec qword [r11 + 0x18]
dec qword [rbx + 0x88]
mov qword [rdx + r8], 3
add r8, 0x18
cmp rcx, r8
jne 0x18006d389
or qword [rax + 0x10], rbp
cmp qword [r11 + 0x18], 0
mov r15b, 1
jne 0x18006d3c6
cmp qword [rsp + 0x60], 0
jne 0x18006ddff
test r14, r14
je 0x180070c2e
test r15b, 1
je 0x180070c2e
mov rax, qword [rsp + 0x38]
add qword [rbx + 0x60], rax
mov rcx, qword [rsp + 0x80]
cmp dword [rcx + 0x28], 0
jne 0x18006c8ba
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x18006c8ba
and r12, 0xfffffffffffffffe
mov qword [r10], r12
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
lea r11, [r10 + r9]
mov qword [rdx + 8], r11
test r9, r9
je 0x180070f51
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
or r11, r10
mov qword [rdx + 8], r11
mov qword [r9], rdx
mov r10, qword [rdx + 8]
and r10, 0xfffffffffffffffe
je 0x18006d4c9
mov r11, qword [r10 + 8]
test r11b, 1
je 0x18006d4c9
and r11, 0xfffffffffffffffe
mov qword [r10 + 8], r11
mov r10, qword [rdx + 8]
mov r11, r10
or r11, 1
mov qword [rdx + 8], r11
and r10, 0xfffffffffffffffe
je 0x180070f3e
mov r12, rax
mov r11, qword [r10]
or r11, 1
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov qword [r9], r10
jmp 0x18006cae0
mov rax, qword [rdx + 8]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x18006dbd3
mov rcx, qword [r9]
test rcx, rcx
je 0x18006dbd3
test byte [rcx + 8], 1
je 0x18006dbd3
mov rax, qword [rsp + 0x38]
jmp 0x18006ca3d
mov qword [rdx + 8], r10
jmp 0x18006cadd
or r9, 1
mov qword [r11 + 8], r9
mov r9, qword [r11]
test r9, r9
je 0x18006d4f0
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18006dcfe
mov r10, qword [rdx + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x180071149
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rdx + 8], r10
mov qword [r9], rdx
jmp 0x18006cc06
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, rax
mov qword [rcx + 8], rdx
jmp 0x18006cc34
lea r8, [r9 + r10]
sub r10, r12
shl r10, 0xc
lea rcx, [r9 + r12]
lea rdx, [rcx + rcx*2]
lea rcx, [r11 + rdx*8]
add rcx, 0x20
mov r9d, 0xfff
mov rdi, r10
mov r10, qword [rcx + 0x10]
and r10, r9
or r10, rdi
mov qword [rcx + 0x10], r10
lea r8, [r8 + r8*2]
and r9, qword [r11 + r8*8 + 0x18]
or r9, rdi
mov qword [r11 + r8*8 + 0x18], r9
mov r15, qword [rbx + 0xa0]
mov qword [rsp + 0xf0], r15
mov qword [rsp + 0xf8], 0
test r15, r15
je 0x18006e9f8
lea r8, [r11 + rdx*8]
add r8, 0x30
lea rdx, [rsp + 0xf0]
xor r11d, r11d
mov r9, 0xfffffffffffff000
mov rdi, r11
mov r11, rdx
mov rdx, qword [r15]
test rdx, rdx
je 0x18006d5d9
mov r13, qword [rdx + 8]
test r13b, 1
je 0x18006d5d9
mov rbp, qword [rdx]
test rbp, rbp
je 0x18006d5d9
test byte [rbp + 8], 1
jne 0x18006d647
mov rdx, r15
mov rdi, qword [r8]
mov r10, rdi
and r10, r9
mov r15, qword [rdx + 0x10]
and r15, r9
xor ebp, ebp
cmp r10, r15
seta bpl
mov r10d, 0xffffffff
cmovb ebp, r10d
test ebp, ebp
je 0x18006d61a
cmp ebp, 0xffffffff
jne 0x18006d638
mov r15, qword [rdx]
mov ebp, 0xffffffff
test r15, r15
jne 0x18006d5b3
jmp 0x18006d72c
test dil, 0x10
mov r10d, 0
cmove r10, rcx
xor ebp, ebp
cmp r10, rdx
seta dil
jb 0x18006d608
mov bpl, dil
jmp 0x18006d63d
mov ebp, 1
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
jmp 0x18006d610
and r13, 0xfffffffffffffffe
mov qword [r15], r13
mov rbp, r15
and rbp, 0xfffffffffffffffe
mov r13, qword [rdx]
mov r10, qword [rdx + 8]
and r10d, 1
or r10, rbp
mov qword [rdx + 8], r10
test r13, r13
je 0x180071285
and byte [r13 + 8], 0xfe
cmp qword [r11], r15
jne 0x18006d682
mov qword [r11], rdx
jmp 0x18006d5dc
and rdx, 0xfffffffffffffffe
mov r15, qword [r11 + 8]
and r15d, 1
lea r10, [r15 + rdx]
mov qword [r11 + 8], r10
test rdx, rdx
je 0x180071298
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
or r10, r15
mov qword [r11 + 8], r10
mov qword [rdx], r11
mov r10, qword [r11 + 8]
and r10d, 1
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
or r15, r10
mov qword [rdx + 8], r15
or byte [r11 + 8], 1
test rdi, rdi
je 0x180070be0
cmp qword [rdi], r11
je 0x18006ea3c
jmp 0x18006ecb7
mov r11, qword [r8]
mov r10, r11
and r10, r9
mov r13, qword [rdx + 0x10]
and r13, r9
xor r15d, r15d
cmp r10, r13
seta r15b
mov r10d, 0xffffffff
cmovb r15d, r10d
test r15d, r15d
jne 0x18006e1d3
jmp 0x18006f239
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
mov r11, rdx
test r15, r15
jne 0x18006d5b9
mov r11, rdi
mov qword [rcx], 0
mov qword [rcx + 8], 1
cmp ebp, 1
jne 0x18006dccb
mov r8, qword [rdx + 8]
and r8d, 1
mov r9, r8
or r9, rcx
mov qword [rdx + 8], r9
mov r9, qword [rcx]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rdx + 8], r9
mov qword [rcx], rdx
mov r8, qword [rdx + 8]
and r8d, 1
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
or r9, r8
mov qword [rcx + 8], r9
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x18006e183
mov qword [r11], rcx
mov rbp, qword [rsp + 0x38]
jmp 0x18006dcd3
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
mov rdx, rcx
jmp 0x18006ca43
movzx eax, byte [rbx + r13 + 0xd2]
mov qword [rsp + 0x38], rax
lea rdi, [rbx + 0xa0]
mov rcx, qword [rbx + 0xa0]
test rcx, rcx
mov qword [rsp + 0x40], rdi
je 0x18006ec46
mov rdx, qword [rsp + 0x38]
shl rdx, 0xc
xor eax, eax
mov r8, 0xfffffffffffff000
mov r9d, 0xffffffff
mov r11, qword [rcx + 0x10]
and r11, r8
xor r10d, r10d
cmp rdx, r11
seta r10b
cmovb r10d, r9d
lea r11d, [r10 + 1]
cmp r11d, 2
jae 0x18006d827
mov rax, rcx
mov rcx, qword [rcx]
test rcx, rcx
jne 0x18006d7f8
jmp 0x18006d8ce
cmp r10d, 1
jne 0x1800717e6
mov rcx, qword [rcx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x18006d81d
test r8d, r8d
je 0x18006e0a2
mov r8, qword [rcx + 8]
xor edx, edx
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18006d866
mov r10, qword [r9]
test r10, r10
je 0x18006d866
test byte [r10 + 8], 1
jne 0x18006d116
mov r10, qword [rcx]
test r10, r10
je 0x180070c70
mov r9, qword [r10 + 8]
test r9b, 1
jne 0x18006f266
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [r10]
test r8, r8
je 0x18006d89e
mov r9, qword [r8 + 8]
test r9b, 1
jne 0x18006fa05
or byte [r10 + 8], 1
mov r8, qword [rcx + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x180071a6a
mov r10, qword [r9]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [r9], rcx
jmp 0x18006f2fe
test rax, rax
je 0x18006ec46
mov rcx, rax
and rcx, 0xfffffffffff00000
and eax, 0xfffff
add rax, 0xffffffffffffffe0
movabs rdx, 0xaaaaaaaaaaaaaaab
mul rdx
mov r12, rdx
and r12, 0xfffffffffffffff0
shl r12, 8
add r12, rcx
mov r9, r12
and r9, 0xfffffffffff00000
mov rax, qword [r9 + 0x18]
mov qword [rsp + 0xa8], rax
mov eax, r12d
shr eax, 0xc
movzx ecx, al
lea rax, [rcx*8]
lea rax, [rax + rax*2]
mov qword [rsp + 0x60], rax
mov rax, qword [r9 + rax + 0x30]
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x38]
test rdx, rdx
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x80], rcx
je 0x18006e1e7
lea rax, [rcx + rcx*2]
lea r8, [r9 + rax*8]
add r8, 0x30
xor r10d, r10d
xor edi, edi
lea r11, [rdi + rcx]
lea rax, [r11 + r11*2]
test byte [r9 + rax*8 + 0x30], 0x60
jne 0x18006d990
inc rdi
add r8, 0x18
cmp rdi, rdx
setae r10b
jne 0x18006d96b
jmp 0x18006e1ea
mov qword [rsp + 0x78], r11
mov rax, r8
xor ecx, ecx
mov qword [rsp + 0x48], rcx
mov rcx, qword [rax]
test cl, 0x60
je 0x18006d9cb
and rcx, 0xffffffffffffff9f
mov qword [rax], rcx
mov r11, qword [rsp + 0x48]
lea rcx, [rdi + r11]
inc rcx
inc r11
mov qword [rsp + 0x48], r11
add rax, 0x18
cmp rcx, rdx
jb 0x18006d99f
mov rdx, qword [rsp + 0x48]
shl rdx, 0xc
mov qword [rsp + 0x90], r8
je 0x18006f25e
mov qword [rsp + 0x58], r10
mov rcx, qword [rsp + 0x78]
shl rcx, 0xc
mov eax, ecx
and eax, 0xff000
mov r8d, 0x100000
sub r8, rax
cmp r8, rdx
cmovae r8, rdx
add rcx, r9
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x88], r8
mov qword [rsp + 0xa0], rdx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x98], eax
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x88]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x180070ba7
mov rcx, qword [rsp + 0x78]
mov rax, qword [rsp + 0x88]
add rcx, rax
mov rdx, qword [rsp + 0xa0]
sub rdx, rax
mov eax, 0x100000
cmp rdx, rax
mov r8d, 0x100000
cmovb r8, rdx
test rdx, rdx
jne 0x18006da0a
mov r11b, 1
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
cmp qword [rsp + 0x48], 0
mov rax, qword [rsp + 0x90]
je 0x18006dad5
test r11b, r11b
mov ecx, 0x20
mov edx, 4
cmovne rcx, rdx
mov rdx, qword [rsp + 0x48]
lea rdx, [rdx*8]
lea rdx, [rdx + rdx*2]
xor r8d, r8d
or qword [rax + r8], rcx
add r8, 0x18
cmp rdx, r8
jne 0x18006dac8
test r11b, r11b
je 0x18006e535
mov rax, qword [rsp + 0x48]
add qword [rbx + 0x50], rax
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x90]
jmp 0x18006d97b
mov r8, qword [r9]
test r8, r8
je 0x18006db14
test byte [r8 + 8], 1
jne 0x18006d114
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x180070b8c
mov r9, qword [rdx]
test r9, r9
je 0x18006db43
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18006fa73
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xf0]
mov qword [rcx], r9
jmp 0x18006d114
mov r10, rdx
test rax, rax
je 0x18007189c
cmp qword [rax], rdi
jne 0x18006e1b1
mov qword [rax], r10
test rdx, rdx
je 0x1800718af
mov rdx, qword [rdi]
mov qword [r10], rdx
mov rdx, qword [rdi + 8]
and rdx, 0xfffffffffffffffe
mov r8, qword [r10 + 8]
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
mov r8, qword [rdi + 8]
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
cmp qword [rcx], r10
jne 0x1800718c2
mov qword [rcx], 0
jmp 0x18006cc34
mov rcx, qword [rdx]
test rcx, rcx
je 0x1800718df
test byte [rcx + 8], 1
jne 0x18006e166
or rax, 1
mov qword [rdx + 8], rax
mov rax, qword [rcx]
test rax, rax
je 0x18006dc07
mov r8, qword [rax + 8]
test r8b, 1
jne 0x18006f1cd
or byte [rcx + 8], 1
mov rax, qword [rdx + 8]
mov r9, rax
and r9, 0xfffffffffffffffe
je 0x1800719a5
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
and eax, 1
or rax, rcx
mov qword [rdx + 8], rax
mov qword [r9], rdx
lea rdx, [rsp + 0xf0]
mov qword [rdx], r9
jmp 0x18006d4bf
and r10d, 1
mov r12, qword [r9 + 8]
and r12, 0xfffffffffffffffe
or r12, r10
mov qword [r9 + 8], r12
mov r9, qword [rsp + 0x38]
and byte [r9 + 8], 0xfe
mov r10, qword [r11 + 8]
mov r9, r10
and r9, 0xfffffffffffffffe
je 0x180071110
mov r12, qword [r9]
and r12, 0xfffffffffffffffe
and r10d, 1
or r10, r12
mov qword [r11 + 8], r10
mov qword [r9], r11
mov qword [rdx], r9
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
jne 0x18006cbd9
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov rbp, qword [rsp + 0x38]
mov qword [rdx], rcx
mov r9, qword [rsp + 0x48]
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x180071825
and byte [rcx + 8], 0xfe
mov qword [rbx + 0xa0], rcx
mov r11, qword [rsp + 0x40]
jmp 0x18006d365
and r10, 0xfffffffffffffffe
mov qword [r9 + 8], r10
mov r9, qword [rdx]
test r9, r9
je 0x18007115c
mov r10, qword [r9 + 8]
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r10, rdx
and r10, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r11, qword [rdx + 8]
mov r10, r11
and r10, 0xfffffffffffffffe
je 0x180071123
mov r8, rax
mov rax, r12
mov r12, qword [r10]
and r12, 0xfffffffffffffffe
and r11d, 1
or r11, r12
mov qword [rdx + 8], r11
mov qword [r10], rdx
mov r11, qword [r9 + 8]
and r11d, 1
or r11, r10
mov qword [r9 + 8], r11
mov r12, rax
mov rax, r8
mov r8d, 0xffffffff
jmp 0x18006cc06
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x18006d0fb
mov r8b, dl
jmp 0x18006d0f1
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x18006d339
or r9, 1
mov qword [r15 + 8], r9
mov r9, qword [r15]
test r9, r9
je 0x18006ddd5
mov rdi, qword [r9 + 8]
test dil, 1
jne 0x18006ea8c
mov rdi, qword [rcx + 8]
mov r9, rdi
and r9, 0xfffffffffffffffe
je 0x1800713ea
mov r15, qword [r9]
and r15, 0xfffffffffffffffe
and edi, 1
or rdi, r15
mov qword [rcx + 8], rdi
mov qword [r9], rcx
jmp 0x18006d2c2
mov r12, qword [rbx + 0x68]
mov qword [rsp + 0xf8], r12
mov qword [rsp + 0x100], 0
xor ecx, ecx
cmp r12, r11
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x18006ea14
test eax, eax
je 0x18006f6e5
test r12, r12
je 0x180070ca6
mov rcx, qword [r12 + 0x10]
xor ebp, ebp
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18006f8a9
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18006f8a9
test byte [rdx + 0x10], 1
je 0x18006f8a9
mov r11, qword [rsp + 0x40]
mov r15d, 0xffffffff
xor r13d, r13d
lea rcx, [rsp + 0xe0]
lea r8, [rsp + 0xd8]
mov rdi, r12
mov r12, rax
xor eax, eax
cmp r12, r11
setb al
cmova eax, r15d
cmp eax, 0xffffffff
jne 0x18006ded6
test r12, r12
je 0x18007039e
mov rax, qword [r12 + 8]
test rax, rax
je 0x18007039b
test byte [rax + 0x10], 1
jne 0x18006de8a
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18006fb02
test byte [rdx + 0x10], 1
jne 0x18006de8a
jmp 0x18006fb02
test eax, eax
jne 0x18006def7
test r12, r12
je 0x18007195d
mov rax, qword [r12 + 0x10]
mov rbp, rdi
cmp rax, 1
jbe 0x18006e0d3
jmp 0x18006df05
test r12, r12
je 0x180070c9e
mov rax, qword [r12 + 0x10]
and rax, 0xfffffffffffffffe
je 0x18006df1e
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18006df1e
test byte [rdx + 0x10], 1
jne 0x18006de8a
mov rcx, r8
mov rdx, r12
call fcn.180039460
mov rax, qword [rsp + 0xd8]
cmp qword [rdi + 8], r12
jne 0x18006fae8
jmp 0x18006fe62
mov r12, rdi
mov r11, qword [rsp + 0x40]
jmp 0x18006de7a
mov rcx, qword [rbx + 0x70]
test rcx, rcx
jne 0x18006e991
lea r13, [0x1800cb680]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb6a8]
test rax, rax
je 0x18006f30e
xor ebp, ebp
mov ecx, 0xffffffff
mov rdi, qword [rax + 0x28]
xor edx, edx
cmp rdi, 0x100000
setb dl
cmova edx, ecx
cmp edx, 0xffffffff
jne 0x18006dfa9
mov rbp, rax
mov rax, qword [rax]
test rax, rax
jne 0x18006df81
jmp 0x18006eda4
test edx, edx
jne 0x180071b33
cmp qword [rax + 0x20], 0
jne 0x18006df99
jmp 0x180071b45
and r8, 0xfffffffffffffffe
mov qword [rax], r8
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
and r9, 0xfffffffffffffffe
mov rax, qword [rdx + 8]
and eax, 1
lea rcx, [rax + r9]
mov qword [rdx + 8], rcx
test r9, r9
je 0x180071992
mov rcx, qword [r9]
and rcx, 0xfffffffffffffffe
or rcx, rax
mov qword [rdx + 8], rcx
mov qword [r9], rdx
mov rax, qword [rdx + 8]
and rax, 0xfffffffffffffffe
je 0x18006e15d
mov rcx, qword [rax + 8]
test cl, 1
je 0x18006e15d
and rcx, 0xfffffffffffffffe
mov qword [rax + 8], rcx
mov rax, qword [rdx + 8]
mov rcx, rax
or rcx, 1
mov qword [rdx + 8], rcx
and rax, 0xfffffffffffffffe
je 0x180071b20
mov rcx, qword [rax]
or rcx, 1
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov qword [r9], rax
jmp 0x18006cd23
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdi, qword [r8 + 8]
and edi, 1
or rdi, rcx
mov qword [r8 + 8], rdi
mov rcx, r8
jmp 0x18006d123
shl r13, 0xc
mov eax, r13d
and eax, 0xff000
mov edx, 0x100000
sub rdx, rax
cmp rdx, rcx
cmovae rdx, rcx
add r13, r11
jmp 0x18006cfcb
mov al, 1
mov r11, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
jmp 0x18006d03b
mov r8, qword [rcx + 8]
cmp r8, 1
ja 0x18006fb7d
mov rdx, qword [rcx]
test rdx, rdx
mov r9, qword [rsp + 0x48]
mov r10, qword [rsp + 0x58]
jne 0x18006f69a
mov qword [rsp + 0xf0], rdx
jmp 0x18006d343
mov r13, qword [r12 + 8]
test r13, r13
je 0x18006f1c5
mov rax, qword [r13 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [r12 + 8], rax
mov rax, r12
and rax, 0xfffffffffffffffe
mov rcx, qword [r13 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r13 + 0x10], rcx
mov rcx, qword [r12 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r13 + 0x10], rcx
or byte [r12 + 0x10], 1
and qword [r13 + 0x10], 1
cmp qword [rdi + 8], r12
jne 0x18006eca0
mov qword [rdi + 8], r13
mov rax, qword [rsp + 0xf8]
mov qword [rbx + 0x68], rax
test r11, r11
je 0x18007197f
xorps xmm0, xmm0
movups xmmword [r11 + 8], xmm0
jmp 0x18006d3d9
dec dword [r12 + 0xc]
mov dil, 1
xor r14d, r14d
jmp 0x18006c8a2
mov qword [rdx + 8], rax
jmp 0x18006cd23
lea rcx, [rsp + 0xe8]
call fcn.180008400
lea rax, [rsp + 0xe8]
mov r9, qword [rax]
jmp 0x18006dc30
mov r8, qword [r11 + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
cmp rdx, r9
mov rbp, qword [rsp + 0x38]
mov r9, qword [rsp + 0x48]
jne 0x18006dcd8
and r8d, 1
or r8, rcx
mov qword [r11 + 8], r8
jmp 0x18006dcd8
mov r8, r10
and r8, 0xfffffffffffffffe
mov r9, qword [rax + 8]
and r9d, 1
or r9, r8
mov qword [rax + 8], r9
jmp 0x18006db89
mov al, 1
jmp 0x18006d03b
mov ebp, 1
cmp r15d, 0xffffffff
jne 0x18006d715
jmp 0x18006f89c
mov r10b, 1
mov qword [rsp + 0x58], r10
mov rax, qword [rsp + 0x60]
lea rdx, [r9 + rax]
add rdx, 0x20
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax]
mov rax, rdx
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], 0
mov rdx, qword [rdx + 0x10]
mov r8, 0xfffffffffffff000
mov r9, rdx
and r9, r8
and r8, qword [rcx + 0x10]
xor r10d, r10d
cmp r9, r8
seta r10b
mov r8d, 0xffffffff
cmovae r8d, r10d
test r8d, r8d
mov qword [rsp + 0x48], rax
je 0x18006e970
cmp r8d, 0xffffffff
jne 0x18006e857
mov r9, qword [rcx]
test r9, r9
je 0x1800718cc
mov rdx, qword [r9 + 8]
test dl, 1
je 0x18006e8f4
xor edx, edx
mov qword [rsp + 0x60], rdx
mov r10, 0xfffffffffffff000
mov r8, rcx
mov rcx, r9
mov r9, qword [rax + 0x10]
mov r11, r9
and r11, r10
mov rdi, qword [rcx + 0x10]
and rdi, r10
xor edx, edx
cmp r11, rdi
seta dl
mov r11d, 0xffffffff
cmovb edx, r11d
test edx, edx
jne 0x18006e2cc
test r9b, 0x10
mov r9d, 0
cmove r9, rax
xor edx, edx
cmp r9, rcx
seta r9b
jb 0x18006e2d1
mov dl, r9b
cmp edx, 0xffffffff
jne 0x18006e34e
mov r9, qword [rcx]
test r9, r9
je 0x18006f788
mov rdx, qword [r9 + 8]
test dl, 1
jne 0x18006e283
mov r11, qword [r9]
test r11, r11
je 0x18006e2f5
test byte [r11 + 8], 1
jne 0x18006e283
or rdx, 1
mov qword [r9 + 8], rdx
mov rdi, qword [rcx + 8]
mov rdx, rdi
and rdx, 0xfffffffffffffffe
je 0x180070b71
mov r9, qword [rdx]
test r9, r9
je 0x18006e324
mov r11, qword [r9 + 8]
test r11b, 1
jne 0x18006f7f5
or rdi, 1
mov qword [rcx + 8], rdi
mov r9, qword [rdx]
or r9, 1
mov qword [rcx + 8], r9
mov qword [rdx], rcx
mov r9, rdx
cmp qword [r8], rcx
jne 0x180071965
mov qword [r8], r9
jmp 0x18006e286
test edx, edx
je 0x18006e437
mov rdi, qword [rcx + 8]
mov r9, rdi
and r9, 0xfffffffffffffffe
je 0x18006e375
mov rdx, qword [r9]
test rdx, rdx
je 0x18006e375
test byte [rdx + 8], 1
jne 0x18006e283
mov rdx, qword [rcx]
test rdx, rdx
je 0x180071793
mov r9, qword [rdx + 8]
test r9b, 1
je 0x18006ea44
and r9, 0xfffffffffffffffe
je 0x180070bc9
mov r11, qword [r9]
test r11, r11
je 0x18006e3ac
test byte [r11 + 8], 1
jne 0x18006f981
and edi, 1
or rdi, r9
mov qword [rdx + 8], rdi
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x180071753
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov rdi, qword [rcx + 8]
mov rdx, rdi
and rdx, 0xfffffffffffffffe
je 0x18007176d
mov rax, qword [rdx]
and rax, 0xfffffffffffffffe
and edi, 1
or rdi, rax
mov qword [rcx + 8], rdi
mov qword [rdx], rcx
mov rax, qword [r9 + 8]
and eax, 1
or rax, rdx
mov qword [r9 + 8], rax
or byte [rcx + 8], 1
cmp qword [r8], rcx
jne 0x18006eccb
mov qword [r8], r9
mov rcx, r8
mov rax, qword [rsp + 0x48]
jmp 0x18006e283
mov rdi, qword [rcx + 8]
mov rdx, r8
mov qword [rsp + 0x60], r8
cmp rdi, 1
ja 0x18006e35a
mov rdx, qword [rcx]
test rdx, rdx
je 0x18006e48e
mov r9, qword [rdx + 8]
and r9, 0xfffffffffffffffe
mov qword [rcx], r9
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
mov r10, qword [rcx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
or byte [rcx + 8], 1
and qword [rdx + 8], 1
cmp qword [r8], rcx
mov r11, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x70]
jne 0x18006e9e1
mov qword [r8], rdx
mov r10, qword [rsp + 0x50]
shr rdi, 0xc
mov rax, qword [rsp + 0xf0]
mov qword [r11], rax
xorps xmm0, xmm0
mov rax, qword [rsp + 0x48]
movups xmmword [rax], xmm0
mov rcx, qword [rsp + 0x38]
cmp rdi, rcx
jne 0x18006e5da
test cl, cl
je 0x18006e51a
mov rax, r12
or rax, 1
shl rcx, 3
lea rcx, [rcx + rcx*2]
mov rdx, qword [rsp + 0x80]
lea rdx, [rdx + rdx*2]
lea rdx, [r10 + rdx*8]
add rdx, 0x30
xor r8d, r8d
test byte [rdx + r8], 8
je 0x18006e50d
dec qword [r10 + 0x18]
dec qword [rbx + 0x88]
mov qword [rdx + r8], rax
add r8, 0x18
cmp rcx, r8
jne 0x18006e4fb
cmp qword [r10 + 0x18], 0
jne 0x18006e530
cmp qword [rsp + 0xa8], 0
jne 0x18006ebc9
mov r10, qword [rsp + 0x58]
test r12, r12
je 0x18006f68b
test r10b, 1
je 0x18006f68b
cmp qword [r14], r12
je 0x18006cc51
mov qword [r12], r14
xor eax, eax
cmp dword [rbx + r13 + 0xc4], 1
jne 0x18006e566
xor edx, edx
jmp 0x18006e58c
lea rdx, [rbx + r13]
add rdx, 0xc4
xor ecx, ecx
mov dword [r12 + rcx*4 + 0x10], 0xffffffff
inc rcx
mov r8d, dword [rdx]
dec r8d
cmp rcx, r8
jb 0x18006e573
mov edx, ecx
mov r8d, dword [rbx + r13 + 0xc0]
and r8d, 0x1f
mov ecx, r8d
neg cl
mov r9d, 0xffffffff
shr r9d, cl
cmp r8d, 1
sbb eax, eax
or eax, r9d
mov dword [r12 + rdx*4 + 0x10], eax
mov dword [r12 + 8], 0
mov eax, dword [rbx + r13 + 0xc0]
mov dword [r12 + 0xc], eax
inc dword [rbx + r13 + 0xcc]
mov qword [r14], r12
jmp 0x18006c83d
mov rax, qword [rsp + 0x80]
lea rdx, [rax + rdi]
sub rdi, rcx
shl rdi, 0xc
add rax, rcx
lea rcx, [rax + rax*2]
lea rax, [r10 + rcx*8]
add rax, 0x20
mov r8d, 0xfff
mov r9, qword [rax + 0x10]
and r9, r8
or r9, rdi
mov qword [rax + 0x10], r9
lea rdx, [rdx + rdx*2]
and r8, qword [r10 + rdx*8 + 0x18]
or r8, rdi
mov qword [r10 + rdx*8 + 0x18], r8
mov rdi, qword [r11]
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0xf8], 0
test rdi, rdi
je 0x18006f480
lea rcx, [r10 + rcx*8]
add rcx, 0x30
mov qword [rsp + 0x48], rcx
lea rcx, [rsp + 0xf0]
xor r10d, r10d
mov r11, r10
mov r10, rcx
mov rcx, qword [rdi]
test rcx, rcx
je 0x18006e680
mov r9, qword [rcx + 8]
test r9b, 1
je 0x18006e680
mov r8, qword [rcx]
test r8, r8
je 0x18006e680
test byte [r8 + 8], 1
jne 0x18006e6fe
mov rcx, rdi
mov rdx, qword [rsp + 0x48]
mov r9, qword [rdx]
mov rdx, r9
mov r11, 0xfffffffffffff000
and rdx, r11
mov r8, qword [rcx + 0x10]
and r8, r11
xor r11d, r11d
cmp rdx, r8
seta r11b
mov edx, 0xffffffff
cmovb r11d, edx
test r11d, r11d
je 0x18006e6d0
cmp r11d, 0xffffffff
jne 0x18006e6ee
mov rdi, qword [rcx]
mov r9d, 0xffffffff
test rdi, rdi
jne 0x18006e659
jmp 0x18006e7ec
test r9b, 0x10
mov edx, 0
cmove rdx, rax
xor r9d, r9d
cmp rdx, rcx
seta r8b
jb 0x18006e6bd
mov r9b, r8b
jmp 0x18006e6f4
mov r9d, 1
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
jmp 0x18006e6c6
and r9, 0xfffffffffffffffe
mov qword [rdi], r9
mov r8, rdi
and r8, 0xfffffffffffffffe
mov r9, qword [rcx]
mov rdx, qword [rcx + 8]
and edx, 1
or rdx, r8
mov qword [rcx + 8], rdx
test r9, r9
je 0x1800714f8
and byte [r9 + 8], 0xfe
cmp qword [r10], rdi
jne 0x18006e738
mov qword [r10], rcx
jmp 0x18006e683
and rcx, 0xfffffffffffffffe
mov r9, qword [r10 + 8]
and r9d, 1
lea rdx, [r9 + rcx]
mov qword [r10 + 8], rdx
test rcx, rcx
je 0x18007150b
mov rdx, qword [rcx]
and rdx, 0xfffffffffffffffe
or rdx, r9
mov qword [r10 + 8], rdx
mov qword [rcx], r10
mov rdx, qword [r10 + 8]
and edx, 1
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
or byte [r10 + 8], 1
test r11, r11
je 0x180070c8b
cmp qword [r11], r10
je 0x18006f6dd
jmp 0x18006f96e
mov rdx, qword [rsp + 0x48]
mov r9, qword [rdx]
mov rdx, r9
mov r10, 0xfffffffffffff000
and rdx, r10
mov r8, qword [rcx + 0x10]
and r8, r10
xor r10d, r10d
cmp rdx, r8
seta r10b
mov edx, 0xffffffff
cmovb r10d, edx
test r10d, r10d
jne 0x18006f44b
jmp 0x18006fb58
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
mov r10, rcx
test rdi, rdi
jne 0x18006e65f
mov r10, r11
mov qword [rax], 0
mov qword [rax + 8], 1
cmp r9d, 1
jne 0x18006f497
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, rdx
or r8, rax
mov qword [rcx + 8], r8
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r10], rcx
mov r9, qword [rsp + 0x40]
jne 0x18006f3dd
mov qword [r10], rax
jmp 0x18006f49f
test r8d, r8d
je 0x18006ed6e
mov r8, qword [rcx + 8]
xor edx, edx
mov qword [rsp + 0x60], rdx
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x18006e886
mov rdx, qword [r9]
test rdx, rdx
je 0x18006e886
test byte [rdx + 8], 1
jne 0x18006e27c
mov r10, qword [rcx]
test r10, r10
je 0x180070cd4
mov rdx, qword [r10 + 8]
test dl, 1
jne 0x18006fbb2
or r8, 1
mov qword [rcx + 8], r8
mov rdx, qword [r10]
test rdx, rdx
je 0x18006e8bd
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18006ff79
or byte [r10 + 8], 1
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x180071bd3
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [rcx + 8], rdx
mov qword [r9], rcx
lea rcx, [rsp + 0xf0]
mov qword [rcx], r9
jmp 0x18006e966
mov r8, qword [r9]
test r8, r8
je 0x18006e907
test byte [r8 + 8], 1
jne 0x18006e275
or rdx, 1
mov qword [r9 + 8], rdx
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x180070bf9
mov r9, qword [rdx]
test r9, r9
je 0x18006e936
mov r10, qword [r9 + 8]
test r10b, 1
jne 0x18006ffef
or r8, 1
mov qword [rcx + 8], r8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r9, rdx
and byte [r9 + 8], 0xfe
lea rcx, [rsp + 0xf0]
mov qword [rcx], r9
xor eax, eax
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x48]
jmp 0x18006e27c
xor r9d, r9d
test dl, 0x10
cmove r9, rax
xor r8d, r8d
cmp r9, rcx
seta dl
jb 0x18006e25c
mov r8b, dl
jmp 0x18006e252
xor r8d, r8d
mov qword [rbx + 0x70], r8
lea r14, [rcx + 0x3000]
lea rax, [rcx + 0x68]
xorps xmm0, xmm0
lea rdx, [rsp + 0xf0]
movaps xmmword [rdx], xmm0
mov qword [rcx + 0x68], r8
mov qword [rcx + 0x70], 1
mov qword [rdx], rax
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x180071a0c
and byte [rcx + 8], 0xfe
mov qword [rbx + 0xa0], rcx
jmp 0x18006cecf
and rdx, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rdx
mov qword [r8 + 8], rcx
jmp 0x18006e4a4
mov qword [rcx], 0
mov qword [rcx + 8], 1
lea rdx, [rsp + 0xf0]
jmp 0x18006dcd0
test r12, r12
je 0x18006f413
mov rax, qword [r12 + 8]
test rax, rax
je 0x18006f413
test byte [rax + 0x10], 1
je 0x18006f400
xor ebp, ebp
jmp 0x18006de71
mov qword [rdi], rdx
jmp 0x18006d6e3
or r9, 1
mov qword [rdx + 8], r9
mov rdx, qword [rdx]
test rdx, rdx
je 0x18006ea62
mov r9, qword [rdx + 8]
test r9b, 1
jne 0x18006f71b
mov rdx, qword [rcx + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x1800717a6
mov rax, qword [r9]
and rax, 0xfffffffffffffffe
and edx, 1
or rdx, rax
mov qword [rcx + 8], rdx
mov qword [r9], rcx
jmp 0x18006e41e
and rdi, 0xfffffffffffffffe
mov qword [r9 + 8], rdi
mov r9, qword [rcx]
test r9, r9
je 0x1800713fd
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
mov qword [rcx], rdi
mov rdi, rcx
and rdi, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
je 0x180071417
mov r13, qword [rdi]
and r13, 0xfffffffffffffffe
and r15d, 1
or r15, r13
mov qword [rcx + 8], r15
mov qword [rdi], rcx
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
mov rbp, qword [rsp + 0x38]
jmp 0x18006d2c2
test rdx, rdx
je 0x180071a27
cmp qword [rdx], rax
jne 0x18006fb3d
mov qword [rdx], rcx
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x180071a3a
mov qword [r8], 0
mov rbp, qword [rsp + 0x38]
mov r11, qword [rsp + 0x40]
jmp 0x18006d339
and r13, 0xfffffffffffffffe
mov qword [rdi], r13
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
and r9, 0xfffffffffffffffe
mov rdi, qword [rcx + 8]
and edi, 1
lea r15, [rdi + r9]
mov qword [rcx + 8], r15
test r9, r9
je 0x1800711d3
mov r15, qword [r9]
and r15, 0xfffffffffffffffe
or r15, rdi
mov qword [rcx + 8], r15
mov qword [r9], rcx
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
je 0x18006ebbb
mov r15, qword [rdi + 8]
test r15b, 1
jne 0x18006fdf9
mov qword [rcx + 8], rdi
mov rbp, qword [rsp + 0x38]
jmp 0x18006d1dc
mov r8, qword [rbx + 0x68]
mov qword [rsp + 0xf8], r8
mov qword [rsp + 0x100], 0
xor ecx, ecx
cmp r8, r10
setb cl
mov eax, 0xffffffff
cmovbe eax, ecx
cmp eax, 0xffffffff
je 0x18006f4c6
test eax, eax
je 0x18006fe30
test r8, r8
je 0x180070d0a
mov rdx, r8
mov rcx, qword [r8 + 0x10]
xor eax, eax
mov qword [rsp + 0x40], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x18006fe8d
mov r8, qword [rax + 8]
test r8, r8
je 0x18006fe8d
test byte [r8 + 0x10], 1
je 0x18006fe8d
mov r8, rdx
jmp 0x18006f4ed
mov rdx, qword [rbx + 0x70]
test rdx, rdx
jne 0x18006f460
lea r9, [rsp + 0xf0]
mov ecx, 0x100000
mov edx, 0x100000
xor r8d, r8d
call fcn.180062350
test rax, rax
je 0x18006f68b
mov r12, rax
mov r8b, byte [rsp + 0xf0]
mov rcx, rbx
mov rdx, rax
call fcn.180062ab0
add r12, 0x3000
jmp 0x18006d905
xor r13d, r13d
jmp 0x18006d08e
and r13, 0xfffffffffffffffe
mov rax, qword [rdi + 0x10]
and eax, 1
or rax, r13
mov qword [rdi + 0x10], rax
jmp 0x18006e12b
mov r10, qword [rdi + 8]
and r10d, 1
or r10, rdx
mov qword [rdi + 8], r10
jmp 0x18006d6e3
mov rax, r9
and rax, 0xfffffffffffffffe
mov rcx, qword [r8 + 8]
and ecx, 1
or rcx, rax
mov qword [r8 + 8], rcx
jmp 0x18006e42a
and edi, 1
mov rbp, qword [r9 + 8]
and rbp, 0xfffffffffffffffe
or rbp, rdi
mov qword [r9 + 8], rbp
and byte [r13 + 8], 0xfe
mov rdi, qword [r15 + 8]
mov r9, rdi
and r9, 0xfffffffffffffffe
je 0x1800713c4
mov r13, qword [r9]
and r13, 0xfffffffffffffffe
and edi, 1
or rdi, r13
mov qword [r15 + 8], rdi
mov qword [r9], r15
mov qword [rcx], r9
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
mov qword [rcx], rdi
mov rdi, rcx
and rdi, 0xfffffffffffffffe
mov r15, qword [r9 + 8]
and r15d, 1
or r15, rdi
mov qword [r9 + 8], r15
mov r15, qword [rcx + 8]
mov rdi, r15
and rdi, 0xfffffffffffffffe
mov rbp, qword [rsp + 0x38]
jne 0x18006d29a
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov r8, qword [rcx + 8]
cmp r8, 1
ja 0x1800700f5
mov rdx, qword [rcx]
test rdx, rdx
jne 0x18006fdbb
mov qword [rsp + 0xf0], rdx
mov r10, qword [rsp + 0x50]
mov r11, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x70]
jmp 0x18006e4a9
test rbp, rbp
je 0x18006f30e
mov rdi, qword [rbp + 0x28]
mov r15, qword [rbp + 0x20]
lea r14, [r15 + 0xfffff]
mov rax, 0xfffffffffff00000
and r14, rax
mov rcx, r14
sub rcx, r15
sub rdi, rcx
add rdi, rax
mov eax, dword [rbp + 0x30]
mov dword [rsp + 0x40], eax
mov rcx, rbp
call fcn.180001860
lea rcx, [0x1800cb6b0]
mov rdx, rbp
call section..text
mov rax, r14
sub rax, r15
jne 0x180071a7d
test rdi, rdi
je 0x18006f912
lea rax, [r14 + 0x100000]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rdi
mov eax, dword [rsp + 0x40]
mov dword [rbp + 0x30], eax
mov rcx, rbp
call fcn.180001530
lea rcx, [0x1800cb6b0]
mov rdx, rbp
call fcn.180001ff0
lock add qword [0x1800cb6b8], 0xfffffffffff00000
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 0x100000
mov rcx, r14
mov r8d, 0x1000
call fcn.180062260
test rax, rax
je 0x18006f31b
test r14, r14
je 0x18006f31b
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [0x1800cb678]
mov r13, r14
shr r13, 0x3e
mov r15, qword [rdi + r13*8]
test r15, r15
je 0x1800707fb
mov r13d, 2
xorps xmm6, xmm6
mov rdi, r14
mov ecx, r13d
shl rdi, cl
shr rdi, 0x3d
mov rax, qword [r15 + rdi*8]
test rax, rax
je 0x18007010c
add r13, 3
mov r15, rax
cmp r13d, 0x29
jne 0x18006ee9d
mov ecx, r14d
shr ecx, 0x14
and ecx, 7
mov qword [rax + rcx*8], r14
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r14, r14
je 0x180070c2e
add qword [rbx + 0x48], 0x100000
mov qword [r14], rbx
xor eax, eax
mov qword [r14 + 0x18], rax
mov qword [r14 + 0x30], rax
mov qword [r14 + 0x48], rax
mov qword [r14 + 0x60], 0x20
mov qword [r14 + 0x78], 0xfc024
mov eax, 0x90
mov qword [r14 + rax], 0x24
add rax, 0x18
cmp rax, 0x1800
jne 0x18006ef15
mov qword [r14 + 0x1800], 0xfc024
mov qword [r14 + 0x1818], 0x20
lea r15, [r14 + 0x2000]
mov eax, r15d
and eax, 0xfffff
mov r13d, 0x100000
sub r13, rax
mov ebp, 0xfe000
cmp r13, rbp
cmovae r13, rbp
mov rdi, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, r15
mov rdx, r13
mov r8d, 0x4000
call rdi
test eax, eax
je 0x180071944
add r15, r13
sub rbp, r13
mov eax, 0x100000
cmp rbp, rax
mov r13d, 0x100000
cmovb r13, rbp
test rbp, rbp
jne 0x18006ef6a
add qword [rbx + 0x50], 3
lea rax, [r14 + 0x68]
mov r11, qword [rbx + 0xa0]
mov qword [rsp + 0xf0], r11
mov qword [rsp + 0xf8], 0
test r11, r11
je 0x18006fc9f
lea rcx, [rsp + 0xf0]
xor r9d, r9d
mov rdx, 0xfffffffffffff000
mov r8d, 0xffffffff
mov r10, r9
mov r9, rcx
mov rcx, qword [r11]
test rcx, rcx
je 0x18006f009
mov rdi, qword [rcx + 8]
test dil, 1
je 0x18006f009
mov r15, qword [rcx]
test r15, r15
je 0x18006f009
test byte [r15 + 8], 1
jne 0x18006f075
mov rcx, r11
mov r10, qword [r14 + 0x78]
mov rdi, r10
and rdi, rdx
mov r15, qword [rcx + 0x10]
and r15, rdx
xor r11d, r11d
cmp rdi, r15
seta r11b
cmovb r11d, r8d
test r11d, r11d
je 0x18006f048
cmp r11d, 0xffffffff
jne 0x18006f066
mov r11, qword [rcx]
mov edi, 0xffffffff
test r11, r11
jne 0x18006efe2
jmp 0x18006f154
test r10b, 0x10
mov r10d, 0
cmove r10, rax
xor edi, edi
cmp r10, rcx
seta r10b
jb 0x18006f036
mov dil, r10b
jmp 0x18006f06b
mov edi, 1
mov r11, qword [rcx + 8]
and r11, 0xfffffffffffffffe
jmp 0x18006f03e
and rdi, 0xfffffffffffffffe
mov qword [r11], rdi
mov r15, r11
and r15, 0xfffffffffffffffe
mov rdi, qword [rcx]
mov r13, qword [rcx + 8]
and r13d, 1
or r13, r15
mov qword [rcx + 8], r13
test rdi, rdi
je 0x180071838
and byte [rdi + 8], 0xfe
cmp qword [r9], r11
jne 0x18006f0af
mov qword [r9], rcx
jmp 0x18006f00c
and rcx, 0xfffffffffffffffe
mov r11, qword [r9 + 8]
and r11d, 1
lea rdi, [r11 + rcx]
mov qword [r9 + 8], rdi
test rcx, rcx
je 0x18007184b
mov rdi, qword [rcx]
and rdi, 0xfffffffffffffffe
or rdi, r11
mov qword [r9 + 8], rdi
mov qword [rcx], r9
mov r11, qword [r9 + 8]
and r11d, 1
mov rdi, qword [rcx + 8]
and rdi, 0xfffffffffffffffe
or rdi, r11
mov qword [rcx + 8], rdi
or byte [r9 + 8], 1
test r10, r10
je 0x180070cef
cmp qword [r10], r9
je 0x18006fdb3
jmp 0x18006fe6b
mov r9, qword [r14 + 0x78]
mov rdi, r9
and rdi, rdx
mov r15, qword [rcx + 0x10]
and r15, rdx
xor r11d, r11d
cmp rdi, r15
seta r11b
cmovb r11d, r8d
test r11d, r11d
jne 0x18006fc8b
jmp 0x180070053
mov r11, qword [rcx + 8]
and r11, 0xfffffffffffffffe
mov r9, rcx
test r11, r11
jne 0x18006efe8
mov r9, r10
mov qword [r14 + 0x68], 0
mov qword [r14 + 0x70], 1
cmp edi, 1
jne 0x18006fcb7
and rax, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + rax]
mov qword [rcx + 8], r8
test rax, rax
je 0x180071b4d
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [rax], rcx
mov rdx, qword [rcx + 8]
and edx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rax + 8], r8
or byte [rcx + 8], 1
cmp qword [r9], rcx
jne 0x18006fb8a
mov qword [r9], rax
jmp 0x18006fcba
xor r13d, r13d
jmp 0x18006e11d
and r8, 0xfffffffffffffffe
mov qword [rax + 8], r8
mov r9, qword [rdx]
test r9, r9
je 0x180071af3
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rdx], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
mov rcx, qword [rdx + 8]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180071b0d
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 8], rcx
mov qword [rax], rdx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rax
mov qword [r9 + 8], rcx
jmp 0x18006dc30
test r11b, 0x10
mov r10d, 0
cmove r10, rcx
xor ebp, ebp
cmp r10, rdx
seta r11b
jb 0x18006f89c
mov bpl, r11b
jmp 0x18006d715
mov r11b, 1
jmp 0x18006da93
and r9, 0xfffffffffffffffe
je 0x180070c55
mov r11, qword [r9]
test r11, r11
je 0x18006f283
test byte [r11 + 8], 1
jne 0x18006fef3
and r8d, 1
or r8, r9
mov qword [r10 + 8], r8
or byte [r9 + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x180071b60
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x180071b7a
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
or byte [rcx + 8], 1
mov rbp, qword [rsp + 0x38]
lea rcx, [rsp + 0xf0]
mov qword [rcx], r9
jmp 0x18006d116
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov edx, 0x100000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
test rax, rax
je 0x180070c14
mov rax, r14
shl rax, 0x2c
je 0x18006ee6c
mov rcx, r14
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
je 0x180071e44
mov rdi, qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, 0x1ff000
xor ecx, ecx
mov r8d, 0x3000
call fcn.180062260
test rax, rax
je 0x180070c2e
mov r14, rax
mov rcx, rax
xor edx, edx
mov r8d, 0x8000
call rdi
test eax, eax
je 0x180071e2c
add r14, 0xfffff
and r14, 0xfffffffffff00000
mov edx, 0x100000
mov rcx, r14
mov r8d, 0x3000
call fcn.180062260
cmp rax, r14
jne 0x180070ae4
test r14, r14
jne 0x18006ee6c
jmp 0x18006f375
mov rdx, qword [r10 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
jne 0x18006f49f
and edx, 1
or rdx, rax
mov qword [r10 + 8], rdx
jmp 0x18006f49f
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18006f413
test byte [rcx + 0x10], 1
jne 0x18006ea35
lea r13, [rsp + 0xe8]
mov rcx, r13
mov rdx, r12
call fcn.180039300
mov rax, qword [r13]
test rax, rax
je 0x180071c8e
and byte [rax + 0x10], 0xfe
xor ebp, ebp
jmp 0x18006fcfe
lea rcx, [rsp + 0xf0]
jmp 0x18006d497
mov r9d, 1
cmp r10d, 0xffffffff
jne 0x18006e7d5
jmp 0x18006fe7f
mov qword [rbx + 0x70], 0
lea r12, [rdx + 0x3000]
add rdx, 0x68
mov rcx, rdi
call fcn.180062bd0
jmp 0x18006d905
mov qword [rax], 0
mov qword [rax + 8], 1
lea rcx, [rsp + 0xf0]
mov r9, qword [rsp + 0x40]
mov qword [rcx], rax
mov rax, qword [rsp + 0xf0]
test rax, rax
je 0x180071904
and byte [rax + 8], 0xfe
mov qword [r9], rax
mov r10, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x38]
jmp 0x18006e4d1
test r8, r8
je 0x18006fc5c
mov rax, qword [r8 + 8]
test rax, rax
je 0x18006fc5c
test byte [rax + 0x10], 1
je 0x18006fc49
xor ecx, ecx
mov qword [rsp + 0x40], rcx
mov r9d, 0xffffffff
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x50]
mov rdx, rax
xor eax, eax
cmp rdx, rcx
setb al
cmova eax, r9d
cmp eax, 0xffffffff
jne 0x18006f538
test rdx, rdx
je 0x180071917
mov rax, qword [rdx + 8]
test rax, rax
je 0x180070694
test byte [rax + 0x10], 1
je 0x18006f5cd
mov r8, rdx
jmp 0x18006f4ff
test eax, eax
jne 0x18006f55d
test rdx, rdx
je 0x1800719db
mov rax, qword [rdx + 0x10]
mov rdi, r8
mov qword [rsp + 0x40], r8
cmp rax, 1
jbe 0x18006f5ff
jmp 0x18006f56d
mov rdi, r8
test rdx, rdx
je 0x180070d02
mov rax, qword [rdx + 0x10]
and rax, 0xfffffffffffffffe
je 0x18006ffe7
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18006ffe7
test byte [rcx + 0x10], 1
mov rcx, qword [rsp + 0x50]
mov r8, rdx
mov r9d, 0xffffffff
jne 0x18006f4ff
mov qword [rsp + 0x48], r8
lea rcx, [rsp + 0xd8]
mov rdx, r8
call fcn.180039460
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x48]
cmp qword [rdi + 8], rcx
jne 0x180070078
jmp 0x18007031e
mov rdi, r8
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x180070092
test byte [rcx + 0x10], 1
je 0x180070092
mov r8, rdx
mov rcx, qword [rsp + 0x50]
mov r9d, 0xffffffff
jmp 0x18006f4ff
mov r8, rdi
jmp 0x18006f5ea
mov r8, qword [rdx + 8]
test r8, r8
je 0x18006fadc
mov rax, qword [r8 + 0x10]
and rax, 0xfffffffffffffffe
mov qword [rdx + 8], rax
mov rax, rdx
and rax, 0xfffffffffffffffe
mov rcx, qword [r8 + 0x10]
and ecx, 1
or rcx, rax
mov qword [r8 + 0x10], rcx
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [r8 + 0x10], rcx
or byte [rdx + 0x10], 1
mov rax, r8
mov qword [rsp + 0x38], r8
and qword [r8 + 0x10], 1
cmp qword [rdi + 8], rdx
jne 0x18006f952
mov rax, qword [rsp + 0x38]
mov qword [rdi + 8], rax
mov rax, qword [rsp + 0xf8]
mov qword [rbx + 0x68], rax
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x180071a44
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
cmp byte [rsp + 0x58], 0
jne 0x18006e548
mov qword [r14], 0
mov dil, 1
jmp 0x18006c8a2
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rsp + 0x48]
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x18006e0c6
mov qword [r11], rcx
jmp 0x18006e798
test r12, r12
je 0x18006f707
mov rcx, qword [r12 + 0x10]
cmp rcx, 1
ja 0x180070611
mov rax, qword [r12 + 8]
test rax, rax
jne 0x18006fd72
xor eax, eax
mov qword [rsp + 0xf8], rax
mov r11, qword [rsp + 0x40]
jmp 0x18006e12b
and r9, 0xfffffffffffffffe
mov qword [rdx + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x1800717b9
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov r11, qword [rcx + 8]
mov rdx, r11
and rdx, 0xfffffffffffffffe
je 0x1800717d3
mov rax, qword [rdx]
and rax, 0xfffffffffffffffe
and r11d, 1
or r11, rax
mov qword [rcx + 8], r11
mov qword [rdx], rcx
mov rax, qword [r9 + 8]
and eax, 1
or rax, rdx
mov qword [r9 + 8], rax
jmp 0x18006e41e
cmp qword [rsp + 0x60], 0
je 0x180071b8d
mov rax, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x60]
cmp qword [rdx], rax
jne 0x1800700d5
mov rax, qword [rsp + 0x60]
mov qword [rax], rcx
mov rax, qword [rsp + 0x48]
mov rdx, qword [rax]
mov qword [rcx], rdx
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
mov r9, qword [rcx + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rcx + 8], r9
cmp qword [r8], rcx
jne 0x180071ba0
mov qword [r8], 0
jmp 0x18006ed90
and r11, 0xfffffffffffffffe
mov qword [rdx], r11
mov r11, qword [r9 + 8]
and r11d, 1
or r11, rdx
mov qword [r9 + 8], r11
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r11, [rdx + r9]
mov qword [rcx + 8], r11
test r9, r9
je 0x1800712be
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
or r11, rdx
mov qword [rcx + 8], r11
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18006f850
mov r11, qword [rdx + 8]
test r11b, 1
jne 0x18007019c
mov qword [rcx + 8], rdx
mov rax, qword [rsp + 0x48]
jmp 0x18006e33d
mov rcx, qword [rax + 8]
and rcx, 0xfffffffffffffffe
mov qword [rdx], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov r8, qword [rax + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
mov r8, qword [rdx + 8]
and r8d, 1
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
and qword [rax + 8], 1
jmp 0x18006cdad
mov r15, qword [rdx]
mov ebp, 0xffffffff
jmp 0x18006d71d
mov rax, qword [r12 + 8]
test rax, rax
je 0x180071bb7
test byte [rax + 0x10], 1
jne 0x18006fce7
or rcx, 1
mov qword [r12 + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18006f8e0
mov rdx, qword [rcx + 0x10]
test dl, 1
jne 0x180070327
or byte [rax + 0x10], 1
mov rcx, qword [r12 + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180071ca1
mov rdx, qword [rax + 8]
and rdx, 0xfffffffffffffffe
and ecx, 1
or rcx, rdx
mov qword [r12 + 0x10], rcx
mov qword [rax + 8], r12
jmp 0x18006fcfe
lock add qword [0x1800cb6b8], 0xfffffffffff00000
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea r13, [0x1800cb6c0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb5a0]
mov qword [rbp], rax
mov qword [0x1800cb5a0], rbp
jmp 0x18006ee3e
mov rcx, qword [rsp + 0x38]
and rcx, 0xfffffffffffffffe
mov rax, qword [rdi + 0x10]
and eax, 1
or rax, rcx
mov qword [rdi + 0x10], rax
jmp 0x18006f65f
mov rdx, qword [r11 + 8]
and edx, 1
or rdx, rcx
mov qword [r11 + 8], rdx
jmp 0x18006e798
and edi, 1
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
or rax, rdi
mov qword [r9 + 8], rax
and byte [r11 + 8], 0xfe
mov r11, qword [rdx + 8]
mov r9, r11
and r9, 0xfffffffffffffffe
je 0x180071780
mov rax, qword [r9]
and rax, 0xfffffffffffffffe
and r11d, 1
or r11, rax
mov qword [rdx + 8], r11
mov qword [r9], rdx
mov qword [rcx], r9
mov rax, qword [r9 + 8]
and rax, 0xfffffffffffffffe
mov qword [rcx], rax
mov rax, rcx
and rax, 0xfffffffffffffffe
mov rdx, qword [r9 + 8]
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
mov rdi, qword [rcx + 8]
mov rdx, rdi
and rdx, 0xfffffffffffffffe
jne 0x18006e3f8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
and r9, 0xfffffffffffffffe
mov qword [r8 + 8], r9
mov r9, qword [rcx]
test r9, r9
je 0x180071be6
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
je 0x180071c00
mov r11, qword [r8]
and r11, 0xfffffffffffffffe
and r10d, 1
or r10, r11
mov qword [rcx + 8], r10
mov qword [r8], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, r8
mov qword [r9 + 8], rcx
jmp 0x18006f2f9
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x180071c13
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18006face
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x18007049c
mov qword [rcx + 8], rdx
mov rbp, qword [rsp + 0x38]
jmp 0x18006db5c
xor eax, eax
mov qword [rsp + 0x38], rax
jmp 0x18006f64c
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
jmp 0x18006df40
mov rdx, r12
call fcn.180039300
mov rax, qword [rsp + 0xe0]
cmp qword [rdi + 8], r12
jne 0x180071c26
mov qword [rdi + 8], rax
mov r12, rax
mov r11, qword [rsp + 0x40]
lea rcx, [rsp + 0xe0]
lea r8, [rsp + 0xd8]
jmp 0x18006de90
mov r9, rcx
and r9, 0xfffffffffffffffe
mov r10, qword [rdx + 8]
and r10d, 1
or r10, r9
mov qword [rdx + 8], r10
jmp 0x18006eb15
test r9b, 0x10
mov edx, 0
cmove rdx, rax
xor r9d, r9d
cmp rdx, rcx
seta r8b
jb 0x18006fe7f
mov r9b, r8b
jmp 0x18006e7d5
lea rdx, [rsp + 0xf0]
jmp 0x18006d84a
mov rdx, qword [r9 + 8]
mov r8, rdx
and r8, 0xfffffffffffffffe
cmp rcx, r8
mov rbp, qword [rsp + 0x38]
jne 0x18006fcbf
and edx, 1
or rdx, rax
mov qword [r9 + 8], rdx
jmp 0x18006fcbf
and rdx, 0xfffffffffffffffe
je 0x180070cb9
mov r9, qword [rdx]
test r9, r9
je 0x18006fbcf
test byte [r9 + 8], 1
jne 0x180070417
and r8d, 1
or r8, rdx
mov qword [r10 + 8], r8
or byte [rdx + 8], 1
mov r9, qword [rcx]
test r9, r9
je 0x180071c40
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x180071c5a
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
or byte [rcx + 8], 1
jmp 0x18006e8e7
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18006fc5c
test byte [rcx + 0x10], 1
jne 0x18006f4e6
lea rdi, [rsp + 0xe8]
mov rcx, rdi
mov rdx, r8
call fcn.180039300
mov rax, qword [rdi]
test rax, rax
je 0x180071d3f
and byte [rax + 0x10], 0xfe
xor ecx, ecx
mov qword [rsp + 0x40], rcx
jmp 0x18007014a
mov edi, 1
cmp r11d, 0xffffffff
jne 0x18006f13d
jmp 0x180070311
mov qword [r14 + 0x68], 0
mov qword [r14 + 0x70], 1
lea rcx, [rsp + 0xf0]
mov qword [rcx], rax
mov rbp, qword [rsp + 0x38]
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x1800719f9
and byte [rcx + 8], 0xfe
mov qword [rbx + 0xa0], rcx
add r14, 0x3000
jmp 0x18006cecf
lea r13, [rsp + 0xe8]
mov rcx, r13
mov rdx, r12
call fcn.180039460
mov rax, qword [r13]
lea r12, [rsp + 0xf0]
mov qword [r12 + 8], rax
jmp 0x18006de6c
mov rbx, qword [0x1800cb568]
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x180071c6d
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov qword [rax + 0x10], rbx
jmp 0x18006c7cf
mov r8d, 0x100000
mov rcx, rbx
mov rdx, r12
xor r9d, r9d
call fcn.180001df0
mov r14, rax
jmp 0x18006c8ba
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r12 + 8], rcx
mov rcx, r12
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r12 + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [r12 + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x18006f709
mov qword [r10], rcx
jmp 0x18006f110
mov r8, qword [rdx + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r9, qword [rdx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
mov r9, qword [rcx + 8]
and r9d, 1
or r9, r8
mov qword [rdx + 8], r9
or byte [rcx + 8], 1
and qword [rdx + 8], 1
jmp 0x18006ed88
and r15, 0xfffffffffffffffe
mov qword [rdi + 8], r15
mov rdi, qword [rcx + 8]
mov r15, rdi
or r15, 1
mov qword [rcx + 8], r15
and rdi, 0xfffffffffffffffe
je 0x1800711c0
mov r15, qword [rdi]
or r15, 1
mov qword [rcx + 8], r15
mov qword [rdi], rcx
mov qword [r9], rdi
jmp 0x18006ebbf
test r8, r8
je 0x18006fe53
mov rdx, r8
mov rcx, qword [r8 + 0x10]
cmp rcx, 1
ja 0x1800707d4
mov rax, qword [rdx + 8]
test rax, rax
jne 0x18007015b
xor eax, eax
mov qword [rsp + 0xf8], rax
jmp 0x18006f65f
mov qword [rdi + 8], rax
jmp 0x18006df40
mov r9, qword [r10 + 8]
and r9d, 1
or r9, rcx
mov qword [r10 + 8], r9
jmp 0x18006f110
mov rdi, qword [rcx]
mov r9d, 0xffffffff
jmp 0x18006e7dd
mov rax, qword [rdx + 8]
test rax, rax
je 0x180071cb4
test byte [rax + 0x10], 1
jne 0x180070137
or rcx, 1
mov qword [rdx + 0x10], rcx
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x18006fec3
mov r8, qword [rcx + 0x10]
test r8b, 1
jne 0x18007061e
or byte [rax + 0x10], 1
mov rcx, qword [rdx + 0x10]
mov rax, rcx
and rax, 0xfffffffffffffffe
je 0x180071d52
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
and ecx, 1
or rcx, r8
mov qword [rdx + 0x10], rcx
mov qword [rax + 8], rdx
jmp 0x18007014a
and r8d, 1
mov rdi, qword [r9 + 8]
and rdi, 0xfffffffffffffffe
or rdi, r8
mov qword [r9 + 8], rdi
and byte [r11 + 8], 0xfe
mov r8, qword [r10 + 8]
mov r9, r8
and r9, 0xfffffffffffffffe
je 0x180071ccf
mov r11, qword [r9]
and r11, 0xfffffffffffffffe
and r8d, 1
or r8, r11
mov qword [r10 + 8], r8
mov qword [r9], r10
mov qword [rcx], r9
mov r8, qword [r9 + 8]
and r8, 0xfffffffffffffffe
mov qword [rcx], r8
mov r8, rcx
and r8, 0xfffffffffffffffe
mov r10, qword [r9 + 8]
and r10d, 1
or r10, r8
mov qword [r9 + 8], r10
mov r10, qword [rcx + 8]
mov r8, r10
and r8, 0xfffffffffffffffe
jne 0x18006f2d1
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov r9, qword [rcx]
test r9, r9
je 0x180071ce2
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
je 0x180071cfc
mov r10, qword [rdx]
and r10, 0xfffffffffffffffe
and r8d, 1
or r8, r10
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov rcx, qword [r9 + 8]
and ecx, 1
or rcx, rdx
mov qword [r9 + 8], rcx
jmp 0x18006e8e7
mov r8, rdx
jmp 0x18006f59c
and r10, 0xfffffffffffffffe
mov qword [rdx], r10
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
and r9, 0xfffffffffffffffe
mov rdx, qword [rcx + 8]
and edx, 1
lea r8, [rdx + r9]
mov qword [rcx + 8], r8
test r9, r9
je 0x180071d0f
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
or r8, rdx
mov qword [rcx + 8], r8
mov qword [r9], rcx
mov rdx, qword [rcx + 8]
and rdx, 0xfffffffffffffffe
je 0x18007004a
mov r8, qword [rdx + 8]
test r8b, 1
jne 0x180070734
mov qword [rcx + 8], rdx
jmp 0x18006e94f
test r9b, 0x10
mov r9d, 0
cmove r9, rax
xor edi, edi
cmp r9, rcx
seta r9b
jb 0x180070311
mov dil, r9b
jmp 0x18006f13d
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
jmp 0x18006f5fa
lea rcx, [rsp + 0xe0]
mov qword [rsp + 0x48], rdx
call fcn.180039300
mov rax, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0x48]
cmp qword [rdi + 8], rcx
jne 0x180071d22
mov r8, rdi
mov qword [rdi + 8], rax
mov rdx, rax
mov rcx, qword [rsp + 0x50]
mov r9d, 0xffffffff
jmp 0x18006f502
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov rax, qword [rsp + 0x60]
mov r9, qword [rax + 8]
and r9d, 1
or r9, rdx
mov qword [rax + 8], r9
jmp 0x18006f7af
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x48]
jmp 0x18006e86b
mov ecx, 0x40
call fcn.1800022d0
test rax, rax
je 0x180071922
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov qword [r15 + rdi*8], rax
jmp 0x18006eeb7
lea rdi, [rsp + 0xe8]
mov rcx, rdi
call fcn.180039460
mov rax, qword [rdi]
lea r8, [rsp + 0xf0]
mov qword [r8 + 8], rax
jmp 0x18006f4ed
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov r8, rdx
mov qword [rdx + 8], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r8 + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
or byte [r8 + 0x10], 1
and qword [rax + 0x10], 1
jmp 0x18006fe55
and r11, 0xfffffffffffffffe
mov qword [rdx + 8], r11
mov rdx, qword [rcx + 8]
mov r11, rdx
or r11, 1
mov qword [rcx + 8], r11
and rdx, 0xfffffffffffffffe
je 0x1800712ab
mov r11, qword [rdx]
or r11, 1
mov qword [rcx + 8], r11
mov qword [rdx], rcx
mov qword [r9], rdx
jmp 0x18006f854
lea rcx, [0x1800cb774]
call fcn.180060ac0
cmp dword [0x1800cb774], 0xffffffff
jne 0x18006c731
mov eax, dword [0x1800cb600]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x180070249
lea rcx, [0x1800cb600]
call fcn.180060ac0
cmp dword [0x1800cb600], 0xffffffff
jne 0x180070249
lea rbx, [rsp + 0xf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov qword [0x1800cb5f8], rax
lea rcx, [0x1800cb600]
call fcn.180060b40
mov rdi, qword [0x1800cb5f8]
cmp rdi, 0x1000
jne 0x1800702f2
call fcn.180002fa0
mov qword [0x1800cb640], rax
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x180071fd2
call fcn.180002e80
mov qword [0x1800cb648], rax
lea rbx, [0x1800cb618]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb648]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov qword [rax], rdx
mov r8, rcx
shl r8, 0x17
xor r8, rcx
mov rcx, rdx
shr rcx, 0x1a
xor rcx, rdx
xor rcx, r8
shr r8, 0x11
xor r8, rcx
mov qword [rax + 8], r8
add edx, r8d
and edx, 0x1ffff
inc edx
mov dword [0x1800cb610], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp rdi, 0x1000
sete byte [0x1800cb770]
lea rcx, [0x1800cb774]
call fcn.180060b40
jmp 0x18006c731
mov r11, qword [rcx]
mov edi, 0xffffffff
jmp 0x18006f145
mov qword [rdi + 8], rax
jmp 0x18006f5fa
and rdx, 0xfffffffffffffffe
mov qword [rcx + 0x10], rdx
mov rax, qword [r12 + 8]
test rax, rax
je 0x180071d65
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov qword [r12 + 8], rcx
mov rcx, r12
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r12 + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x180071d81
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r12 + 0x10], rdx
mov qword [rcx + 8], r12
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x18006fcfe
mov r13, r12
test rbp, rbp
je 0x180071d94
mov rax, qword [rsp + 0x40]
cmp qword [rbp + 8], rax
jne 0x1800707e1
mov qword [rbp + 8], r13
cmp qword [rsp + 0x40], 0
je 0x180071db4
test r12, r12
je 0x180071dc8
mov rdx, qword [rsp + 0x40]
mov rax, qword [rdx + 8]
mov qword [r13 + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [r13 + 0x10]
and eax, 1
or rax, rcx
mov qword [r13 + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov qword [r13 + 0x10], rax
cmp qword [rdi + 8], r13
jne 0x180071ddb
mov qword [rdi + 8], 0
jmp 0x18006f711
and r8d, 1
mov r11, qword [rdx + 8]
and r11, 0xfffffffffffffffe
or r11, r8
mov qword [rdx + 8], r11
and byte [r9 + 8], 0xfe
mov rdx, qword [r10 + 8]
mov r9, rdx
and r9, 0xfffffffffffffffe
je 0x180071de5
mov r8, qword [r9]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r10 + 8], rdx
mov qword [r9], r10
mov qword [rcx], r9
mov rdx, qword [r9 + 8]
and rdx, 0xfffffffffffffffe
mov qword [rcx], rdx
mov rdx, rcx
and rdx, 0xfffffffffffffffe
mov r8, qword [r9 + 8]
and r8d, 1
or r8, rdx
mov qword [r9 + 8], r8
mov r8, qword [rcx + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
jne 0x18006fc1c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x180071df8
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
jmp 0x18006fad2
lea rcx, [0x1800cb774]
call fcn.180060ac0
cmp dword [0x1800cb774], 0xffffffff
jne 0x18006c8fa
mov eax, dword [0x1800cb600]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x180070549
lea rcx, [0x1800cb600]
call fcn.180060ac0
cmp dword [0x1800cb600], 0xffffffff
jne 0x180070549
lea rbx, [rsp + 0xf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov qword [0x1800cb5f8], rax
lea rcx, [0x1800cb600]
call fcn.180060b40
mov rdi, qword [0x1800cb5f8]
cmp rdi, 0x1000
jne 0x1800705f2
call fcn.180002fa0
mov qword [0x1800cb640], rax
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x180071fdc
call fcn.180002e80
mov qword [0x1800cb648], rax
lea rbx, [0x1800cb618]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [0x1800cb648]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov qword [rax], rdx
mov r8, rcx
shl r8, 0x17
xor r8, rcx
mov rcx, rdx
shr rcx, 0x1a
xor rcx, rdx
xor rcx, r8
shr r8, 0x11
xor r8, rcx
mov qword [rax + 8], r8
add edx, r8d
and edx, 0x1ffff
inc edx
mov dword [0x1800cb610], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp rdi, 0x1000
sete byte [0x1800cb770]
lea rcx, [0x1800cb774]
call fcn.180060b40
jmp 0x18006c8fa
lea rbp, [rsp + 0xf0]
jmp 0x18006de48
and r8, 0xfffffffffffffffe
mov qword [rcx + 0x10], r8
mov rax, qword [rdx + 8]
test rax, rax
je 0x180071e5c
mov rcx, qword [rax + 0x10]
and rcx, 0xfffffffffffffffe
mov r8, rdx
mov qword [rdx + 8], rcx
mov rcx, rdx
and rcx, 0xfffffffffffffffe
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
mov rdx, qword [r8 + 0x10]
mov rcx, rdx
and rcx, 0xfffffffffffffffe
je 0x180071e77
mov r9, r8
mov r8, qword [rcx + 8]
and r8, 0xfffffffffffffffe
and edx, 1
or rdx, r8
mov qword [r9 + 0x10], rdx
mov qword [rcx + 8], r9
mov rdx, qword [rax + 0x10]
and edx, 1
or rdx, rcx
mov qword [rax + 0x10], rdx
jmp 0x18007014a
mov r9, r8
mov r8, rdx
mov qword [rsp + 0x38], rdx
cmp qword [rsp + 0x40], 0
je 0x180071e8a
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
cmp qword [rcx + 8], rax
jne 0x180070a6e
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 8], rcx
cmp qword [rsp + 0x50], 0
je 0x180071eaa
test r8, r8
je 0x180071ec8
mov rdx, qword [rsp + 0x50]
mov rax, qword [rdx + 8]
mov r8, qword [rsp + 0x38]
mov qword [r8 + 8], rax
mov rcx, qword [rdx + 0x10]
and rcx, 0xfffffffffffffffe
mov rax, qword [r8 + 0x10]
and eax, 1
or rax, rcx
mov qword [r8 + 0x10], rax
mov rax, qword [rdx + 0x10]
and eax, 1
or rax, rcx
mov rcx, qword [rsp + 0x38]
mov qword [rcx + 0x10], rax
cmp qword [r9 + 8], rcx
jne 0x180071edb
mov qword [r9 + 8], 0
jmp 0x18006f65f
and r8, 0xfffffffffffffffe
mov qword [rdx + 8], r8
mov rdx, qword [rcx + 8]
mov r8, rdx
or r8, 1
mov qword [rcx + 8], r8
and rdx, 0xfffffffffffffffe
je 0x180071ee5
mov r8, qword [rdx]
or r8, 1
mov qword [rcx + 8], r8
mov qword [rdx], rcx
mov qword [r9], rdx
jmp 0x18006e94f
mov byte [rbx + 0x78], 0
lea rcx, [rsp + 0xf0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
xor edi, edi
mov r14d, 0
test al, al
je 0x180070795
mov r14, qword [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
test al, al
je 0x1800707b3
mov rdi, qword [rsp + 0xf0]
mov ecx, 0x10
call fcn.1800022d0
mov qword [rax], r14
mov qword [rax + 8], rdi
mov qword [rbx + 0x80], rax
mov byte [rbx + 0x78], 1
jmp 0x18006c807
lea rax, [rsp + 0xf0]
jmp 0x18006ec14
mov rax, r13
and rax, 0xfffffffffffffffe
mov rcx, qword [rbp + 0x10]
and ecx, 1
or rcx, rax
mov qword [rbp + 0x10], rcx
jmp 0x1800703ba
mov ecx, 0x40
call fcn.1800022d0
test rax, rax
je 0x180071922
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [rdi + r13*8], rax
jmp 0x18006ee94
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
cmp dword [0x1800cb718], 0
jne 0x180070a5c
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
je 0x180071f22
mov eax, dword [0x1800cb600]
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x1800708c3
lea rcx, [0x1800cb600]
call fcn.180060ac0
cmp dword [0x1800cb600], 0xffffffff
jne 0x1800708c3
lea rbx, [rsp + 0xf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbx + 4]
mov qword [0x1800cb5f8], rax
lea rcx, [0x1800cb600]
call fcn.180060b40
mov eax, 0x1000
xor edx, edx
div qword [0x1800cb5f8]
test rdx, rdx
jne 0x180071f2c
lea rcx, str.MALLOC_OPTIONS
lea rbx, [0x1800cb730]
mov rdx, rbx
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor edi, edi
test eax, eax
cmovne rdi, rbx
je 0x18007090f
mov al, byte [0x1800cb730]
test al, al
jne 0x180070ab0
xor ebx, ebx
mov qword [0x1800cb6b8], rbx
lea rcx, [0x1800cb680]
mov rdi, qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov edx, 0x1388
call rdi
mov qword [0x1800cb6a8], rbx
mov qword [0x1800cb6b0], rbx
lea rcx, [0x1800cb5b8]
mov edx, 0x1388
call rdi
mov qword [0x1800cb5e0], rbx
mov qword [0x1800cb5e8], rbx
mov qword [0x1800cb5f0], rbx
lea rcx, [0x1800cb6c0]
mov edx, 0x1388
call rdi
mov qword [0x1800cb710], rbx
mov qword [0x1800cb700], rbx
xorps xmm0, xmm0
movups xmmword [0x1800cb578], xmm0
mov qword [0x1800cb588], rbx
lea rcx, [0x1800cb540]
mov qword [rsp + 0xf8], rbx
mov dword [rsp + 0x100], 0
mov rax, qword [0x1800cb038]
mov qword [rsp + 0xf0], rax
mov edx, 0x1388
call rdi
test eax, eax
je 0x180071ef8
lea rdx, [rsp + 0xf0]
xor ecx, ecx
call fcn.180053590
mov qword [0x1800cb568], rax
test rax, rax
je 0x180071f10
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp byte [rcx + 8], 0
je 0x180071f58
mov ecx, dword [0x1800cb4e0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x10], rax
lea rcx, [0x1800cb650]
mov edx, 0x1388
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov ecx, 0x20
call fcn.1800022d0
test rax, rax
je 0x180071f05
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov qword [0x1800cb678], rax
mov dword [0x1800cb718], 1
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x18006c774
mov rax, qword [rsp + 0x38]
and rax, 0xfffffffffffffffe
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rdx + 0x10]
and ecx, 1
or rcx, rax
mov qword [rdx + 0x10], rcx
jmp 0x1800706cd
or r11, 1
mov qword [rdx + 8], r11
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
xor r14d, r14d
movsx edx, al
lea ecx, [rdx - 0x30]
cmp cl, 9
jbe 0x180071f69
xor ecx, ecx
cmp edx, 0x72
jne 0x180071f8e
mov byte [0x1800cb5b0], 1
inc r14d
mov al, byte [rdi + r14]
test al, al
jne 0x180070ab3
jmp 0x18007090f
test rax, rax
jne 0x180071ff7
xor r14d, r14d
jmp 0x18006f3d2
xor r10d, r10d
jmp 0x18006db74
or r15, 1
mov qword [rcx + 8], r15
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
or rcx, 1
mov qword [rdx + 8], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x180072046
cmp eax, 8
je 0x180072046
xor eax, eax
jmp 0x18006e093
and edi, 1
mov qword [r15 + 8], rdi
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
or rdi, 1
mov qword [rcx + 8], rdi
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x180072122
cmp eax, 8
je 0x180072122
xor r11d, r11d
jmp 0x18006da89
and edi, 1
mov qword [rdx + 8], rdi
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5af
je 0x1800721f1
cmp eax, 8
je 0x1800721f1
mov rcx, qword [rsp + 0x80]
cmp dword [rcx + 0x28], 0
je 0x180070c4d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0xc
jmp 0x18006c923
xor r14d, r14d
jmp 0x18006d3f4
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
xor r12d, r12d
jmp 0x18006df1e
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
and r8d, 1
mov qword [r10 + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
or r8, 1
mov qword [rcx + 8], r8
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
xor r8d, r8d
jmp 0x18006f59c
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
mov rcx, qword [rsp + 0xc0]
mov rdx, rsi
call fcn.18000ba00
mov r14, rax
test r14, r14
jne 0x18006c8c3
jmp 0x18006c923
lock inc qword [0x1800cb608]
lock dec dword [0x1800cb610]
jne 0x18006c759
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x180070d74
call fcn.180060de8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 9], 0
jne 0x18006c759
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x180070db5
call fcn.180060de8
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov byte [rax + 9], 1
lea r9, [rsp + 0xf0]
mov qword [r9], 0
mov rdx, qword [rsp + 0x1d8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rcx, [0x180067240]
mov r8d, 0x10
call fcn.18009d790
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rbx, qword [0x1800cb608]
mov r15, qword [0x1800cb648]
mov rcx, qword [r15]
mov rdx, qword [r15 + 8]
mov rax, rcx
shl rax, 0x17
xor rax, rcx
mov rcx, rdx
shr rcx, 0x1a
xor rcx, rdx
xor rcx, rax
shr rax, 0x11
xor rax, rcx
lea ecx, [rdx + rax]
and ecx, 0x7fff
inc ecx
mov dword [rsp + 0x38], ecx
mov qword [r15], rax
mov rcx, rdx
shl rcx, 0x17
xor rcx, rdx
mov r13, rcx
shr r13, 0x11
mov rdx, rax
shr rdx, 0x1a
xor r13, rcx
xor r13, rax
xor r13, rdx
mov qword [r15 + 8], r13
add r13, rax
mov ebp, 0x100
mov rdi, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
movzx r13d, r13b
imul r12, r13, 0x148
cmp dword [r15 + r12 + 0x10], 1
je 0x180070ee5
cmp qword [r15 + r12 + 0x150], rbx
ja 0x180070ee5
mov rax, qword [0x1800cb640]
mov rax, qword [rax]
mov rcx, r13
shl rcx, 0xd
lea r14, [rax + rcx]
add r14, 0x1000
mov edx, 0x1000
mov rcx, r14
mov r8d, 0x1000
mov r9d, 4
call rdi
mov r15, qword [0x1800cb648]
test rax, rax
jne 0x180071432
inc r13
dec rbp
jne 0x180070e86
xor r14d, r14d
mov eax, dword [rsp + 0x38]
mov dword [0x1800cb610], eax
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.180067250
test r14, r14
je 0x18006c759
jmp 0x18006c8c3
call fcn.180060de8
jmp 0x18006c7ac
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0x68]
mov r8, rsi
call fcn.18001e170
jmp 0x18006c94d
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov r14, qword [rsp + 0x68]
sub r14, rax
bt r14d, 0xc
jae 0x180071e0b
mov byte [rsp + 0xe1], 0
mov qword [rsp + 0xf0], 0
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 8], 0
jne 0x180070fac
call fcn.180060de8
mov rbx, r14
shr rbx, 0xd
mov eax, dword [0x1800cb4e0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 9], 0
jne 0x18007100d
lea rcx, [rsp + 0xe0]
call fcn.180067310
lea r9, [rsp + 0xf0]
mov qword [r9], 0
mov rdx, qword [rsp + 0x1d8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rcx, [0x180067240]
mov r8d, 0x10
call fcn.18009d790
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [0x1800cb648]
mov rdx, qword [rsp + 0x68]
mov r8, rbx
call fcn.180067380
cmp rsi, 0x1000
ja 0x18007104e
mov r15, qword [0x1800cb648]
mov eax, dword [r15 + 0x14810]
cmp eax, 1
je 0x1800712d1
cmp byte [rsp + 0xc8], 0
je 0x18007109c
mov rcx, qword [rsp + 0xc0]
mov rdx, rsi
call fcn.18000ba00
mov r14, rax
test rax, rax
jne 0x1800711e6
xor r14d, r14d
lea rcx, [0x1800cb618]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [rsp + 0xe1], 0
je 0x180070d30
call fcn.180067250
jmp 0x180070d30
mov rax, qword [0x1800cb648]
imul rcx, rbx, 0x148
cmp byte [rax + rcx + 0x20], 0
je 0x180071189
add rax, rcx
add rax, 0x18
mov rcx, qword [rax]
jmp 0x180071060
xor edx, edx
jmp 0x18006cc26
and r10d, 1
mov qword [r11 + 8], r10
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rcx, [rsp + 0xe8]
mov qword [rcx], 0
mov rdx, rsi
call fcn.180067460
jmp 0x180071068
mov rdx, r9
and rdx, 0xfffffffffffffffe
mov r10, qword [rcx + 8]
and r10d, 1
or r10, rdx
mov qword [rcx + 8], r10
jmp 0x18006ca46
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov rax, qword [0x1800cb648]
mov rcx, qword [rax]
mov r15, qword [rax + 8]
mov qword [rax], r15
mov rdx, rcx
shl rdx, 0x17
xor rdx, rcx
mov rcx, r15
shr rcx, 0x1a
xor rcx, r15
xor rcx, rdx
shr rdx, 0x11
xor rdx, rcx
mov qword [rax + 8], rdx
add r15d, edx
and r15d, 0x3ffff
add r15d, 0x20001
imul rcx, rbx, 0x148
mov rdx, qword [rax + rcx + 0x28]
and edx, 0xfff
mov r9d, 0x1000
sub r9, rdx
xor r8d, r8d
cmp dword [rax + rcx + 0x10], 0
cmovne r8, r9
cmp r8, rsi
cmovae r8, rsi
mov rcx, r14
mov rdx, qword [rsp + 0x68]
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0xc0]
lea r8, [rsp + 0xf0]
mov rcx, rbx
mov r9d, r15d
call fcn.18006c590
jmp 0x180071077
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
imul rax, rbx, 0x148
mov rcx, qword [r15 + rax + 0x28]
and ecx, 0xfff
mov edx, 0x1000
sub rdx, rcx
xor r8d, r8d
cmp dword [r15 + rax + 0x10], 0
cmovne r8, rdx
cmp rsi, 8
ja 0x1800714de
mov rax, rsi
mov ecx, 0x40
dec rax
je 0x180071317
bsr rcx, rax
xor rcx, 0x3f
neg cl
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov ecx, 0x10
cmovb rax, rcx
cmp rsi, 2
cmovb rax, rcx
mov rcx, qword [0x1800cb640]
and r14, 0xffffffffffffe000
add r14, qword [rcx]
sub r14, rax
add r14, 0x2000
cmp r8, rsi
cmovae r8, rsi
mov rcx, r14
mov rdx, qword [rsp + 0x68]
call sub.VCRUNTIME140.dll_memmove
mov r8, qword [rsp + 0xc0]
mov r9b, byte [rsp + 0xc8]
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov rcx, r15
mov rdx, rbx
call fcn.1800673e0
jmp 0x180071077
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov rax, r9
jmp 0x18006cea1
cmp rsi, 8
ja 0x180071739
mov rax, rsi
mov ecx, 0x40
dec rax
je 0x180071451
bsr rcx, rax
xor rcx, 0x3f
neg cl
mov eax, 1
shl rax, cl
cmp rax, 0x11
mov ecx, 0x10
cmovb rax, rcx
cmp rsi, 2
cmovb rax, rcx
sub r14, rax
add r14, 0x1000
lea rbx, [r15 + r12]
add rbx, 0x30
mov dword [rbx - 0x20], 1
movaps xmm0, xmmword [rsp + 0xc0]
movups xmmword [rbx - 0x18], xmm0
mov qword [rbx - 8], r14
lea rdx, [rsp + 0xf0]
mov r8d, 0x88
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x88], 1
cmp byte [rbx + 0x118], 0
je 0x1800714cd
mov eax, 0x148
add rax, r12
add rax, r15
mov byte [rax], 0
mov qword [r15 + r12 + 0x150], 0xffffffffffffffff
jmp 0x180070ef0
cmp rsi, 0x1f0
ja 0x180071801
lea rax, [rsi + 0xf]
and rax, 0xfffffffffffffff0
jmp 0x180071336
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov r8, qword [rbx + 0x70]
test r8, r8
je 0x18006df5a
xor r11d, r11d
mov qword [rbx + 0x70], r11
lea r14, [r8 + 0x3000]
lea rax, [r8 + 0x68]
lea rdx, [rsp + 0xf0]
mov qword [rdx], rcx
mov qword [rdx + 8], r11
mov r9, 0xfffffffffffff000
mov r10d, 0xffffffff
mov rdi, r11
mov r11, rdx
mov rdx, qword [rcx]
test rdx, rdx
je 0x180071580
mov r15, qword [rdx + 8]
test r15b, 1
je 0x180071580
mov r13, qword [rdx]
test r13, r13
je 0x180071580
test byte [r13 + 8], 1
jne 0x1800715e6
mov rdx, rcx
mov rcx, qword [r8 + 0x78]
mov r15, rcx
and r15, r9
mov r13, qword [rdx + 0x10]
and r13, r9
xor edi, edi
cmp r15, r13
seta dil
cmovb edi, r10d
test edi, edi
je 0x1800715bc
cmp edi, 0xffffffff
jne 0x1800715d7
mov rcx, qword [rdx]
mov ebp, 0xffffffff
test rcx, rcx
jne 0x180071559
jmp 0x1800716c3
test cl, 0x10
mov ecx, 0
cmove rcx, rax
xor ebp, ebp
cmp rcx, rdx
seta cl
jb 0x1800715aa
mov bpl, cl
jmp 0x1800715dc
mov ebp, 1
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
jmp 0x1800715b2
and r15, 0xfffffffffffffffe
mov qword [rcx], r15
mov r13, rcx
and r13, 0xfffffffffffffffe
mov r15, qword [rdx]
mov rbp, qword [rdx + 8]
and ebp, 1
or rbp, r13
mov qword [rdx + 8], rbp
test r15, r15
je 0x18007229c
and byte [r15 + 8], 0xfe
cmp qword [r11], rcx
jne 0x180071620
mov qword [r11], rdx
jmp 0x180071583
and rdx, 0xfffffffffffffffe
mov rcx, qword [r11 + 8]
and ecx, 1
lea r15, [rcx + rdx]
mov qword [r11 + 8], r15
test rdx, rdx
je 0x1800722af
mov r15, qword [rdx]
and r15, 0xfffffffffffffffe
or r15, rcx
mov qword [r11 + 8], r15
mov qword [rdx], r11
mov rcx, qword [r11 + 8]
and ecx, 1
mov r15, qword [rdx + 8]
and r15, 0xfffffffffffffffe
or r15, rcx
mov qword [rdx + 8], r15
or byte [r11 + 8], 1
test rdi, rdi
je 0x180072259
cmp qword [rdi], r11
je 0x180071a1f
jmp 0x180071a57
mov rcx, qword [r8 + 0x78]
mov r15, rcx
and r15, r9
mov r13, qword [rdx + 0x10]
and r13, r9
xor r11d, r11d
cmp r15, r13
seta r11b
cmovb r11d, r10d
test r11d, r11d
jne 0x1800719e5
jmp 0x180071ad1
mov rcx, qword [rdx + 8]
and rcx, 0xfffffffffffffffe
mov r11, rdx
test rcx, rcx
jne 0x18007155f
mov r11, rdi
mov qword [r8 + 0x68], 0
mov qword [r8 + 0x70], 1
cmp ebp, 1
jne 0x1800718fa
and rax, 0xfffffffffffffffe
mov rcx, qword [rdx + 8]
and ecx, 1
lea r8, [rcx + rax]
mov qword [rdx + 8], r8
test rax, rax
je 0x180072289
mov r8, qword [rax]
and r8, 0xfffffffffffffffe
or r8, rcx
mov qword [rdx + 8], r8
mov qword [rax], rdx
mov rcx, qword [rdx + 8]
and ecx, 1
mov r8, qword [rax + 8]
and r8, 0xfffffffffffffffe
or r8, rcx
mov qword [rax + 8], r8
or byte [rdx + 8], 1
cmp qword [r11], rdx
jne 0x1800719b8
mov qword [r11], rax
mov rbp, qword [rsp + 0x38]
jmp 0x18006e9c0
cmp rsi, 0x1f0
ja 0x18007185e
lea rax, [rsi + 0xf]
and rax, 0xfffffffffffffff0
jmp 0x180071470
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov rax, rcx
jmp 0x18006d8d7
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
mov eax, 0x1000
cmp rsi, 0xf00
ja 0x180071336
lea rax, [rsi + 0xff]
and rax, 0xffffffffffffff00
jmp 0x180071336
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov eax, 0x1000
cmp rsi, 0xf00
ja 0x180071470
lea rax, [rsi + 0xff]
and rax, 0xffffffffffffff00
jmp 0x180071470
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdi, qword [r8 + 8]
and edi, 1
or rdi, rcx
mov qword [r8 + 8], rdi
jmp 0x18006d126
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
and qword [rcx + 8], 1
jmp 0x18006cc34
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
or rax, 1
mov qword [rdx + 8], rax
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
mov rbp, qword [rsp + 0x38]
jmp 0x18006e9bd
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
mov r9, r8
mov r8, rdx
jmp 0x18007069f
lea rcx, [0x1800cb650]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 0x100000
mov rcx, r14
xor r8d, r8d
call fcn.180039740
jmp 0x180070c2e
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
xor r12d, r12d
jmp 0x18006e11d
mov rcx, r9
and rcx, 0xfffffffffffffffe
mov rdx, qword [r8 + 8]
and edx, 1
or rdx, rcx
mov qword [r8 + 8], rdx
jmp 0x18006e286
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov rcx, qword [r11 + 8]
mov r8, rcx
and r8, 0xfffffffffffffffe
cmp rdx, r8
jne 0x18007172f
and ecx, 1
or rcx, rax
mov qword [r11 + 8], rcx
jmp 0x18007172f
mov rdi, r8
xor edx, edx
jmp 0x18006f64c
mov ebp, 1
cmp r11d, 0xffffffff
jne 0x1800716ac
jmp 0x180071baa
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
mov qword [rdi], rdx
jmp 0x18007167f
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
and qword [r8 + 8], 1
jmp 0x18006eb51
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov rcx, qword [rdi + 8]
and ecx, 1
or rcx, rdx
mov qword [rdi + 8], rcx
jmp 0x18007167f
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov qword [rbp + 0x28], rax
mov rcx, rbp
call fcn.180001530
lea rcx, [0x1800cb6b0]
mov rdx, rbp
call fcn.180001ff0
test rdi, rdi
je 0x18006ee32
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call fcn.18001fbb0
test rax, rax
je 0x180071c77
mov rbp, rax
lea rcx, [0x1800cb680]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x18006ee05
test cl, 0x10
mov ecx, 0
cmove rcx, rax
xor ebp, ebp
cmp rcx, rdx
seta cl
jb 0x180071baa
mov bpl, cl
jmp 0x1800716ac
mov qword [rdx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
cmp edx, 1
jne 0x180071b45
mov rax, qword [rax + 8]
and rax, 0xfffffffffffffffe
jmp 0x18006df9f
mov rbp, rax
jmp 0x18006edb1
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
and qword [r8 + 8], 1
jmp 0x18006ed90
mov rcx, qword [rdx]
mov ebp, 0xffffffff
jmp 0x1800716b4
or rcx, 1
mov qword [r12 + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
jmp 0x18006fb20
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
call fcn.180060de8
jmp 0x18006fd37
mov edx, 0x100000
mov rcx, r14
mov r8d, dword [rsp + 0x40]
call fcn.180039740
jmp 0x18006f31b
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
or rcx, 1
mov qword [rdx + 0x10], rcx
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov qword [rcx], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov rcx, rax
and rcx, 0xfffffffffffffffe
mov r8, rdi
mov rdx, qword [rdi + 0x10]
and edx, 1
or rdx, rcx
mov qword [rdi + 0x10], rdx
jmp 0x1800700c2
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov qword [r12 + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test r12, r12
je 0x180071dc8
mov qword [r13 + 8], 0
xor eax, eax
jmp 0x1800703fc
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
and qword [rdi + 0x10], 1
jmp 0x18006f711
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov rax, qword [rsp + 0x68]
mov byte [rax], 0
lea rax, str.MOZ_CRASH_unreachable_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x18006f3a8
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x18006f36e
mov qword [rdx + 8], 0
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
test r8, r8
je 0x180071ec8
mov rax, qword [rsp + 0x38]
mov qword [rax + 8], 0
and qword [rax + 0x10], 1
xor eax, eax
jmp 0x180070714
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
and qword [r9 + 0x10], 1
jmp 0x18006f65f
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
mov qword [0x1800cb568], 0
jmp 0x180071f10
mov qword [0x1800cb678], 0
lea rcx, [0x1800cb720]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
jmp 0x180070c3c
call fcn.180060de8
jmp 0x180070866
lea rcx, str._jemalloc_
lea rdx, str.Compile_time_page_size_does_not_divide_the_runtime_one._n
call fcn.180066f70
lea rax, str.MOZ_CRASH__
mov qword [sym.mozglue.dll_gMozCrashReason], rax
int3
call fcn.180060de8
mov rax, qword [0x1800cb568]
jmp 0x180070a02
xor ecx, ecx
lea eax, [rcx + rcx*4]
lea ecx, [rdx + rax*2]
add ecx, 0xffffffd0
inc r14d
mov al, byte [rdi + r14]
movsx edx, al
lea r8d, [rax - 0x30]
cmp r8b, 0xa
jae 0x180070ac4
jmp 0x180071f6b
cmp edx, 0x46
jne 0x180071fe6
cmp ecx, 1
adc ecx, 0
mov rax, qword [0x1800cb038]
xor edx, edx
test rax, rax
sete dl
cmp rax, 1
adc rax, 0
sub ecx, edx
shl rax, cl
test rax, rax
movabs rcx, 0x8000000000000000
cmovne rcx, rax
mov qword [0x1800cb038], rcx
jmp 0x180070ad4
call fcn.180060de8
jmp 0x180070289
call fcn.180060de8
jmp 0x180070589
cmp edx, 0x52
jne 0x18007202b
mov byte [0x1800cb5b0], 0
jmp 0x180070ad4
xor r14d, r14d
mov rcx, rax
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jne 0x18006f3d2
lea rcx, str._jemalloc_
lea rdx, str.:__malloc__Error_in_VirtualFree___n
call fcn.180066f70
jmp 0x180070aed
cmp edx, 0x66
jne 0x1800720cf
cmp ecx, 1
adc ecx, 0
shr qword [0x1800cb038], cl
jmp 0x180070ad4
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0x98], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r13
mov rdx, qword [rsp + 0x70]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0xa0], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0xa0], 0
jne 0x1800721ad
cmp eax, 0x5af
je 0x1800720b4
cmp eax, 8
jne 0x180070b4a
xor eax, eax
dec qword [rsp + 0x98]
mov r11, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
jne 0x180072062
jmp 0x18006d03b
lea rbx, [rsp + 0xf0]
mov byte [rbx], al
mov byte [rbx + 1], 0
lea rdx, str._jemalloc_
mov r15, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__write]
mov ecx, 2
mov r8d, 0xa
call r15
lea rdx, str.:__malloc__Unsupported_character_in_malloc_options:_
mov ecx, 2
mov r8d, 0x35
call r15
lea rdx, [0x1800bf740]
mov rcx, rbx
call fcn.180066f70
jmp 0x180070ad4
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rax, [rax + rax*4]
add rax, 5
mov qword [rsp + 0xb0], rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x88]
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0xb8], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rsp + 0xb8], 0
jne 0x1800721cf
cmp eax, 0x5af
je 0x180072191
cmp eax, 8
jne 0x180070bc1
xor r11d, r11d
dec qword [rsp + 0xb0]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
jne 0x18007213e
jmp 0x18006da93
cmp eax, 0x5af
mov ecx, dword [rsp + 0x90]
je 0x1800721c4
cmp eax, 8
jne 0x18006d005
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18006d005
cmp eax, 0x5af
mov ecx, dword [rsp + 0x98]
je 0x1800721e6
cmp eax, 8
jne 0x18006da54
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18006da54
xor eax, eax
cmp dword [sym.mozglue.dll_enum_GeckoProcessType_mozilla::startup::sChildProcessType], 0
sete al
lea rdi, [rax + rax*4]
add rdi, 5
mov r13, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r15, qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x100000
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call r13
mov r14, rax
call r15
test r14, r14
jne 0x18007226c
cmp eax, 0x5af
je 0x18007224f
cmp eax, 8
jne 0x180070c2e
dec rdi
jne 0x180072213
jmp 0x180070c2e
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070bee
cmp eax, 0x5af
je 0x18007227c
cmp eax, 8
jne 0x18006f348
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18006f348
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070b66
lea rax, str.MOZ_RELEASE_ASSERT_mNode_
mov qword [sym.mozglue.dll_gMozCrashReason], rax
jmp 0x180070aa5