292   loadPtr(token, dest);  in loadFunctionFromCalleeToken()
300   loadPtr(token, dest);  in loadFunctionFromCalleeToken()
486   loadPtr(Address(script, JSScript::offsetOfWarmUpData()), dest);  in loadJitScript()
521   loadPtr(Address(obj, JSObject::offsetOfShape()), scratch);  in branchTestObjClass()
522   loadPtr(Address(scratch, Shape::offsetOfBaseShape()), scratch);  in branchTestObjClass()
534   loadPtr(Address(obj, JSObject::offsetOfShape()), scratch);  in branchTestObjClassNoSpectreMitigations()
535   loadPtr(Address(scratch, Shape::offsetOfBaseShape()), scratch);  in branchTestObjClassNoSpectreMitigations()
547   loadPtr(Address(obj, JSObject::offsetOfShape()), scratch);  in branchTestObjClass()
548   loadPtr(Address(scratch, Shape::offsetOfBaseShape()), scratch);  in branchTestObjClass()
549   loadPtr(Address(scratch, BaseShape::offsetOfClasp()), scratch);  in branchTestObjClass()
561   loadPtr(Address(obj, JSObject::offsetOfShape()), scratch);  in branchTestObjClassNoSpectreMitigations()
562   loadPtr(Address(scratch, Shape::offsetOfBaseShape()), scratch);  in branchTestObjClassNoSpectreMitigations()
563   loadPtr(Address(scratch, BaseShape::offsetOfClasp()), scratch);  in branchTestObjClassNoSpectreMitigations()
574   loadPtr(Address(obj, JSObject::offsetOfShape()), scratch);  in branchTestObjClass()
575   loadPtr(Address(scratch, Shape::offsetOfBaseShape()), scratch);  in branchTestObjClass()
576   loadPtr(Address(scratch, BaseShape::offsetOfClasp()), scratch);  in branchTestObjClass()
618   loadPtr(Address(obj, JSObject::offsetOfShape()), scratch);  in branchTestObjIsFunctionNoSpectreMitigations()
619   loadPtr(Address(scratch, Shape::offsetOfBaseShape()), scratch);  in branchTestObjIsFunctionNoSpectreMitigations()
620   loadPtr(Address(scratch, BaseShape::offsetOfClasp()), scratch);  in branchTestObjIsFunctionNoSpectreMitigations()
709   loadPtr(handlerAddr, scratch);  in branchTestProxyHandlerFamily()
730     loadPtr(AbsoluteAddress(GetJitContext()->runtime->addressOfZone()),  in branchTestNeedsIncrementalBarrierAnyZone()
944   loadPtr(Address(obj, JSObject::offsetOfShape()), dest);  in loadObjClassUnsafe()
945   loadPtr(Address(dest, Shape::offsetOfBaseShape()), dest);  in loadObjClassUnsafe()
946   loadPtr(Address(dest, BaseShape::offsetOfClasp()), dest);  in loadObjClassUnsafe()
967   loadPtr(Address(obj, JSObject::offsetOfShape()), dest);  in loadObjProto()
968   loadPtr(Address(dest, Shape::offsetOfBaseShape()), dest);  in loadObjProto()
969   loadPtr(Address(dest, BaseShape::offsetOfProto()), dest);  in loadObjProto()