Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- __int64 __fastcall DriverMajorFunction(__int64 a1, _IRP *a2)
- {
- _IRP *v2; // rdi
- ULONG_PTR v3; // r13
- unsigned int MajorFunction; // ecx
- unsigned __int64 v5; // r10
- unsigned int v6; // ecx
- unsigned int v7; // ecx
- unsigned int v8; // ecx
- unsigned int v9; // ecx
- unsigned int v10; // ecx
- __int64 i15; // rcx
- unsigned __int64 v12; // rdi
- unsigned __int64 v13; // rdx
- __int64 v14; // rcx
- unsigned __int64 v15; // rdi
- unsigned __int64 v16; // rcx
- unsigned __int64 v17; // rax
- unsigned __int64 v18; // rcx
- unsigned __int64 v19; // rax
- __int64 i16; // rcx
- unsigned __int64 v21; // rdi
- __int64 v22; // rcx
- __int64 i17; // rcx
- unsigned __int64 v24; // rdi
- __int64 v25; // rcx
- __int64 i18; // rcx
- unsigned __int64 v27; // rdi
- __int64 v28; // rcx
- __int64 i14; // rcx
- unsigned __int64 v30; // rdi
- unsigned __int64 v31; // rdi
- __int64 v32; // rcx
- unsigned __int64 v33; // rdx
- unsigned __int64 v34; // rcx
- __int64 i13; // rcx
- unsigned __int64 v36; // rdi
- __int64 v37; // rcx
- __int64 i12; // rcx
- unsigned __int64 v39; // rdi
- __int64 v40; // rcx
- __int64 i11; // rcx
- unsigned __int64 v42; // rdi
- __int64 v43; // rcx
- unsigned int v44; // ecx
- unsigned int v45; // ecx
- unsigned int v46; // ecx
- unsigned int v47; // ecx
- unsigned int v48; // ecx
- __int64 i10; // rcx
- unsigned __int64 v50; // rdi
- __int64 v51; // rcx
- __int64 i9; // rcx
- unsigned __int64 v53; // rdi
- __int64 v54; // rcx
- __int64 i8; // rcx
- unsigned __int64 v56; // rdi
- __int64 v57; // rcx
- __int64 i7; // rcx
- unsigned __int64 v59; // rdi
- __int64 v60; // rcx
- __int64 i6; // rcx
- unsigned __int64 v62; // rdi
- __int64 v63; // rcx
- __int64 i5; // rcx
- unsigned __int64 v65; // rdi
- __int64 v66; // rcx
- __int64 i4; // rcx
- unsigned __int64 v68; // rdi
- __int64 v69; // rcx
- unsigned int v70; // ecx
- unsigned int v71; // ecx
- unsigned int v72; // ecx
- unsigned int v73; // ecx
- unsigned int v74; // ecx
- __int64 i3; // rcx
- unsigned __int64 v76; // rdi
- __int64 v77; // rcx
- __int64 i2; // rcx
- unsigned __int64 v79; // rdi
- __int64 v80; // rcx
- __int64 i1; // rcx
- unsigned __int64 v82; // rdi
- __int64 v83; // rcx
- __int64 nn; // rcx
- unsigned __int64 v85; // rdi
- __int64 v86; // rcx
- __int64 mm; // rcx
- unsigned __int64 v88; // rdi
- unsigned __int64 v89; // rdi
- __int64 v90; // rcx
- __int64 v91; // rdx
- unsigned __int64 v92; // rcx
- __int64 kk; // rcx
- unsigned __int64 v94; // rdi
- __int64 v95; // rcx
- __int64 jj; // rcx
- unsigned __int64 v97; // rdi
- __int64 v98; // rcx
- unsigned int v99; // ecx
- unsigned int v100; // ecx
- unsigned int v101; // ecx
- unsigned int v102; // ecx
- unsigned int v103; // ecx
- __int64 n; // rcx
- unsigned __int64 v105; // rdi
- __int64 v106; // rcx
- __int64 m; // rcx
- unsigned __int64 v108; // rdi
- __int64 v109; // rcx
- __int64 k; // rcx
- unsigned __int64 v111; // rdi
- __int64 v112; // rcx
- __int64 j; // rcx
- unsigned __int64 v114; // rdi
- __int64 v115; // rcx
- __int64 i; // rcx
- unsigned __int64 v117; // rdi
- __int64 v118; // rcx
- __int64 ii; // rcx
- unsigned __int64 v120; // rdi
- __int64 v121; // rcx
- __int64 i27; // rcx
- unsigned __int64 v123; // rdi
- __int64 v124; // rdi
- __int64 v125; // rcx
- __int64 v126; // rdx
- unsigned __int64 v127; // rcx
- _IRP *MasterIrp; // rbx
- PEPROCESS CurrentProcess; // rax
- unsigned __int64 v130; // rdx
- unsigned __int64 v131; // r14
- unsigned __int64 v132; // r8
- unsigned __int64 v133; // rsi
- unsigned __int64 v134; // r9
- int v135; // ecx
- unsigned __int64 v136; // rdx
- __int64 v137; // r8
- unsigned __int64 v138; // r9
- unsigned __int64 v139; // r10
- unsigned __int64 v140; // r11
- unsigned __int64 v141; // rdi
- unsigned __int64 v142; // r8
- __int64 v143; // rcx
- unsigned __int64 v144; // r9
- __int64 v145; // rdx
- __int64 v146; // rbx
- unsigned __int64 v147; // r10
- __int64 v148; // rsi
- unsigned __int64 v149; // rbx
- unsigned __int64 v150; // r9
- __int64 v151; // r15
- unsigned __int64 v152; // rsi
- unsigned __int64 v153; // rdi
- unsigned __int64 v154; // r10
- unsigned __int64 v155; // rsi
- unsigned __int64 v156; // r15
- unsigned __int64 v157; // r11
- unsigned __int64 v158; // r8
- unsigned __int64 v159; // r10
- __int64 v160; // rcx
- unsigned __int64 v161; // rsi
- __int64 v162; // rdx
- __int64 v163; // rbx
- unsigned __int64 v164; // r15
- __int64 v165; // r14
- unsigned __int64 v166; // rbx
- unsigned __int64 v167; // r9
- __int64 v168; // r12
- __int64 v169; // r14
- unsigned __int64 v170; // rdi
- unsigned __int64 v171; // r10
- __int64 v172; // r14
- unsigned __int64 v173; // r12
- unsigned __int64 v174; // r11
- unsigned __int64 v175; // r8
- unsigned __int64 v176; // r10
- __int64 v177; // rcx
- unsigned __int64 v178; // r14
- __int64 v179; // rdx
- __int64 v180; // rbx
- unsigned __int64 v181; // r12
- __int64 v182; // rsi
- unsigned __int64 v183; // rbx
- unsigned __int64 v184; // r9
- __int64 v185; // r15
- __int64 v186; // rsi
- unsigned __int64 v187; // rdi
- unsigned __int64 v188; // r10
- __int64 v189; // rsi
- unsigned __int64 v190; // r15
- unsigned __int64 v191; // r11
- unsigned __int64 v192; // r8
- unsigned __int64 v193; // r10
- __int64 v194; // rcx
- unsigned __int64 v195; // rsi
- __int64 v196; // rdx
- __int64 v197; // rbx
- unsigned __int64 v198; // r15
- __int64 v199; // r14
- unsigned __int64 v200; // rbx
- unsigned __int64 v201; // r9
- __int64 v202; // r12
- __int64 v203; // r14
- unsigned __int64 v204; // rdi
- unsigned __int64 v205; // r10
- __int64 v206; // r14
- unsigned __int64 v207; // r12
- unsigned __int64 v208; // r11
- unsigned __int64 v209; // r8
- unsigned __int64 v210; // r10
- __int64 v211; // rcx
- unsigned __int64 v212; // r14
- __int64 v213; // rdx
- __int64 v214; // rbx
- unsigned __int64 v215; // r12
- __int64 v216; // rsi
- unsigned __int64 v217; // rbx
- unsigned __int64 v218; // r9
- __int64 v219; // r15
- __int64 v220; // rsi
- unsigned __int64 v221; // rdi
- unsigned __int64 v222; // r10
- __int64 v223; // rsi
- unsigned __int64 v224; // r15
- unsigned __int64 v225; // r11
- unsigned __int64 v226; // r8
- unsigned __int64 v227; // r10
- __int64 v228; // rcx
- unsigned __int64 v229; // rsi
- __int64 v230; // rdx
- __int64 v231; // rbx
- unsigned __int64 v232; // r15
- __int64 v233; // r14
- unsigned __int64 v234; // rbx
- unsigned __int64 v235; // r9
- __int64 v236; // r12
- __int64 v237; // r14
- unsigned __int64 v238; // rdi
- unsigned __int64 v239; // r10
- __int64 v240; // r14
- unsigned __int64 v241; // r12
- unsigned __int64 v242; // r11
- unsigned __int64 v243; // r8
- unsigned __int64 v244; // r10
- __int64 v245; // rcx
- unsigned __int64 v246; // r14
- __int64 v247; // rdx
- __int64 v248; // rbx
- unsigned __int64 v249; // r12
- __int64 v250; // rsi
- unsigned __int64 v251; // rbx
- unsigned __int64 v252; // r9
- __int64 v253; // r15
- __int64 v254; // rsi
- unsigned __int64 v255; // rdi
- unsigned __int64 v256; // r10
- __int64 v257; // rsi
- unsigned __int64 v258; // r15
- unsigned __int64 v259; // r11
- unsigned __int64 v260; // r8
- unsigned __int64 v261; // r10
- __int64 v262; // rcx
- unsigned __int64 v263; // rsi
- __int64 v264; // rdx
- __int64 v265; // rbx
- unsigned __int64 v266; // r15
- __int64 v267; // r14
- unsigned __int64 v268; // rbx
- unsigned __int64 v269; // r9
- __int64 v270; // r12
- __int64 v271; // r14
- unsigned __int64 v272; // rdi
- unsigned __int64 v273; // r10
- __int64 v274; // r14
- unsigned __int64 v275; // r12
- unsigned __int64 v276; // r11
- unsigned __int64 v277; // r8
- unsigned __int64 v278; // r10
- __int64 v279; // rcx
- unsigned __int64 v280; // r14
- __int64 v281; // rdx
- __int64 v282; // rbx
- unsigned __int64 v283; // r12
- __int64 v284; // rsi
- unsigned __int64 v285; // rbx
- unsigned __int64 v286; // r9
- __int64 v287; // r15
- __int64 v288; // rsi
- unsigned __int64 v289; // rdi
- unsigned __int64 v290; // r10
- __int64 v291; // rsi
- unsigned __int64 v292; // r15
- unsigned __int64 v293; // r11
- unsigned __int64 v294; // r8
- unsigned __int64 v295; // r10
- __int64 v296; // rcx
- unsigned __int64 v297; // rsi
- __int64 v298; // rdx
- __int64 v299; // rbx
- unsigned __int64 v300; // r15
- __int64 v301; // r14
- unsigned __int64 v302; // rbx
- unsigned __int64 v303; // r9
- __int64 v304; // rsi
- __int64 v305; // r14
- unsigned __int64 v306; // rdi
- unsigned __int64 v307; // r10
- __int64 v308; // r14
- unsigned __int64 v309; // rsi
- unsigned __int64 v310; // r11
- unsigned __int64 v311; // r8
- unsigned __int64 v312; // r10
- __int64 v313; // rcx
- unsigned __int64 v314; // r14
- __int64 v315; // rdx
- __int64 v316; // r9
- unsigned __int64 v317; // rsi
- __int64 v318; // rbx
- unsigned __int64 v319; // r9
- unsigned __int64 v320; // rdi
- __int64 v321; // r10
- __int64 v322; // rbx
- unsigned __int64 v323; // rcx
- unsigned __int64 v324; // r8
- __int64 v325; // rbx
- unsigned __int64 v326; // r10
- unsigned __int64 v327; // rax
- unsigned __int64 v328; // rdx
- unsigned __int64 v329; // r8
- __int64 v330; // rdi
- unsigned __int64 v331; // rbx
- __int64 v332; // r14
- __int64 v333; // rsi
- unsigned __int64 v334; // r10
- __int64 v335; // r9
- unsigned __int64 v336; // r14
- __int64 v337; // r12
- unsigned __int64 v338; // r12
- unsigned __int64 v339; // rsi
- __int64 v340; // r9
- unsigned __int64 v341; // rdx
- unsigned __int8 *v342; // r15
- unsigned __int64 v343; // r10
- __int64 v344; // rdi
- __int64 v345; // r11
- __int64 v346; // r10
- __int64 v347; // r9
- __int64 v348; // r8
- __int64 v349; // rdx
- __int64 v350; // rcx
- __int64 v351; // rcx
- __int64 v352; // r14
- __int64 v353; // r12
- __int64 v354; // r11
- __int64 v355; // r8
- __int64 v356; // r14
- __int64 v357; // rdx
- __int64 v358; // r9
- __int64 v359; // rdi
- __int64 v360; // rbx
- __int64 v361; // rsi
- __int64 v362; // rcx
- __int64 v363; // rbx
- __int64 v364; // r9
- __int64 v365; // r12
- __int64 v366; // rsi
- __int64 v367; // rcx
- unsigned __int64 v368; // r10
- __int64 v369; // rsi
- unsigned __int64 v370; // r12
- unsigned __int64 v371; // r11
- __int64 v372; // r8
- unsigned __int64 v373; // r10
- __int64 v374; // rdx
- unsigned __int64 v375; // rsi
- __int64 v376; // rdi
- __int64 v377; // rbx
- __int64 v378; // r14
- unsigned __int64 v379; // rcx
- unsigned __int64 v380; // rbx
- unsigned __int64 v381; // r9
- __int64 v382; // r12
- __int64 v383; // r14
- unsigned __int64 v384; // rcx
- unsigned __int64 v385; // r10
- __int64 v386; // r14
- unsigned __int64 v387; // r12
- unsigned __int64 v388; // r11
- unsigned __int64 v389; // r8
- unsigned __int64 v390; // r10
- __int64 v391; // rdx
- unsigned __int64 v392; // r14
- __int64 v393; // rdi
- __int64 v394; // rbx
- __int64 v395; // rsi
- unsigned __int64 v396; // rcx
- unsigned __int64 v397; // rbx
- unsigned __int64 v398; // r9
- __int64 v399; // r12
- __int64 v400; // rsi
- unsigned __int64 v401; // rcx
- unsigned __int64 v402; // r10
- __int64 v403; // rsi
- unsigned __int64 v404; // r12
- unsigned __int64 v405; // r11
- unsigned __int64 v406; // r8
- unsigned __int64 v407; // r10
- __int64 v408; // rdx
- unsigned __int64 v409; // rsi
- __int64 v410; // rdi
- __int64 v411; // rbx
- __int64 v412; // r14
- unsigned __int64 v413; // rcx
- unsigned __int64 v414; // rbx
- unsigned __int64 v415; // r9
- __int64 v416; // r12
- __int64 v417; // r14
- unsigned __int64 v418; // rcx
- unsigned __int64 v419; // r10
- __int64 v420; // r14
- unsigned __int64 v421; // r12
- unsigned __int64 v422; // r11
- unsigned __int64 v423; // rsi
- unsigned __int64 v424; // r10
- __int64 v425; // rdi
- unsigned __int64 v426; // r14
- __int64 v427; // r8
- unsigned __int64 v428; // rdx
- __int64 v429; // rbx
- unsigned __int64 v430; // r12
- __int64 v431; // rsi
- unsigned __int64 v432; // rcx
- unsigned __int64 v433; // rbx
- unsigned __int64 v434; // r9
- __int64 v435; // r12
- __int64 v436; // rsi
- __int64 v437; // rcx
- unsigned __int64 v438; // r10
- __int64 v439; // rsi
- unsigned __int64 v440; // r12
- unsigned __int64 v441; // r14
- unsigned __int64 v442; // r8
- __int64 v443; // r10
- unsigned __int64 v444; // rsi
- unsigned __int64 v445; // rax
- __int64 v446; // r14
- unsigned __int64 v447; // rcx
- __int64 v448; // rsi
- __int64 v449; // r9
- unsigned __int64 v450; // rdx
- __int64 v451; // r12
- unsigned __int64 v452; // r12
- unsigned __int8 i19; // di
- unsigned __int8 *v454; // r8
- unsigned int v455; // edx
- unsigned __int64 v456; // r10
- unsigned __int64 v457; // rdx
- __int64 v458; // r14
- __int64 v459; // r9
- __int64 v460; // r12
- __int64 v461; // r11
- unsigned __int64 v462; // r8
- __int64 v463; // r14
- __int64 v464; // rcx
- unsigned __int64 v465; // r9
- __int64 v466; // rdi
- __int64 v467; // rbx
- __int64 v468; // r12
- __int64 v469; // rsi
- unsigned __int64 v470; // rbx
- __int64 v471; // r9
- __int64 v472; // r15
- unsigned __int64 v473; // rsi
- __int64 v474; // rdx
- unsigned __int64 v475; // r10
- __int64 v476; // rsi
- unsigned __int64 v477; // r15
- unsigned __int64 v478; // r11
- __int64 v479; // r8
- unsigned __int64 v480; // r10
- __int64 v481; // rcx
- unsigned __int64 v482; // rsi
- __int64 v483; // rdi
- __int64 v484; // rbx
- unsigned __int64 v485; // r15
- __int64 v486; // r14
- unsigned __int64 v487; // rbx
- unsigned __int64 v488; // r9
- __int64 v489; // r12
- __int64 v490; // r14
- unsigned __int64 v491; // rdx
- unsigned __int64 v492; // r10
- __int64 v493; // r14
- unsigned __int64 v494; // r12
- unsigned __int64 v495; // r11
- unsigned __int64 v496; // r8
- unsigned __int64 v497; // r10
- __int64 v498; // rcx
- unsigned __int64 v499; // r14
- __int64 v500; // rdi
- __int64 v501; // rbx
- unsigned __int64 v502; // r12
- __int64 v503; // rsi
- unsigned __int64 v504; // rbx
- unsigned __int64 v505; // r9
- __int64 v506; // r15
- __int64 v507; // rsi
- unsigned __int64 v508; // rdx
- unsigned __int64 v509; // r10
- __int64 v510; // rsi
- unsigned __int64 v511; // r15
- unsigned __int64 v512; // r11
- unsigned __int64 v513; // r8
- unsigned __int64 v514; // r10
- __int64 v515; // rcx
- unsigned __int64 v516; // rsi
- __int64 v517; // rdi
- __int64 v518; // rbx
- unsigned __int64 v519; // r15
- __int64 v520; // r14
- unsigned __int64 v521; // rbx
- unsigned __int64 v522; // r9
- __int64 v523; // r12
- __int64 v524; // r14
- unsigned __int64 v525; // rdx
- unsigned __int64 v526; // r10
- __int64 v527; // r14
- unsigned __int64 v528; // r12
- unsigned __int64 v529; // r11
- unsigned __int64 v530; // r8
- unsigned __int64 v531; // r10
- __int64 v532; // rcx
- unsigned __int64 v533; // r14
- __int64 v534; // rdi
- __int64 v535; // rbx
- unsigned __int64 v536; // r12
- __int64 v537; // rsi
- unsigned __int64 v538; // rbx
- unsigned __int64 v539; // r9
- __int64 v540; // r15
- __int64 v541; // rsi
- unsigned __int64 v542; // rdx
- unsigned __int64 v543; // r10
- __int64 v544; // rsi
- unsigned __int64 v545; // r15
- unsigned __int64 v546; // r11
- unsigned __int64 v547; // r8
- unsigned __int64 v548; // r10
- __int64 v549; // rcx
- unsigned __int64 v550; // rsi
- __int64 v551; // rdi
- __int64 v552; // rbx
- unsigned __int64 v553; // r15
- __int64 v554; // r14
- unsigned __int64 v555; // rbx
- unsigned __int64 v556; // r9
- __int64 v557; // rsi
- __int64 v558; // r14
- unsigned __int64 v559; // rdx
- unsigned __int64 v560; // r10
- __int64 v561; // r14
- unsigned __int64 v562; // rsi
- unsigned __int64 v563; // r11
- unsigned __int64 v564; // r8
- unsigned __int64 v565; // r10
- __int64 v566; // rcx
- unsigned __int64 v567; // r14
- __int64 v568; // rdi
- __int64 v569; // rbx
- unsigned __int64 v570; // rsi
- __int64 v571; // r15
- unsigned __int64 v572; // rbx
- unsigned __int64 v573; // r9
- __int64 v574; // r14
- __int64 v575; // r15
- unsigned __int64 v576; // rdx
- unsigned __int64 v577; // r10
- __int64 v578; // r15
- unsigned __int64 v579; // r14
- unsigned __int64 v580; // r11
- unsigned __int64 v581; // r8
- unsigned __int64 v582; // r10
- __int64 v583; // rcx
- unsigned __int64 v584; // r15
- __int64 v585; // rdi
- __int64 v586; // rsi
- unsigned __int64 v587; // r14
- __int64 v588; // r12
- unsigned __int64 v589; // rsi
- unsigned __int64 v590; // r9
- __int64 v591; // r13
- __int64 v592; // r12
- unsigned __int64 v593; // rdx
- unsigned __int64 v594; // r10
- __int64 v595; // r12
- unsigned __int64 v596; // r13
- unsigned __int64 v597; // rbx
- unsigned __int64 v598; // r8
- unsigned __int64 v599; // r10
- __int64 v600; // rcx
- unsigned __int64 v601; // r12
- __int64 v602; // rdi
- __int64 v603; // r14
- unsigned __int64 v604; // r13
- __int64 v605; // r15
- unsigned __int64 v606; // r14
- unsigned __int64 v607; // r9
- __int64 v608; // r10
- __int64 v609; // r15
- unsigned __int64 v610; // rdx
- unsigned __int64 v611; // r11
- __int64 v612; // r15
- unsigned __int64 v613; // r10
- unsigned __int64 v614; // rsi
- unsigned __int64 v615; // r8
- unsigned __int64 v616; // r11
- __int64 v617; // rcx
- unsigned __int64 v618; // r15
- __int64 v619; // rdi
- __int64 v620; // r14
- __int64 v621; // r12
- unsigned __int64 v622; // r14
- unsigned __int64 v623; // r10
- __int64 v624; // r15
- __int64 v625; // r12
- unsigned __int64 v626; // rdx
- unsigned __int64 v627; // rbx
- __int64 v628; // r12
- unsigned __int64 v629; // r15
- unsigned __int64 v630; // rsi
- unsigned __int64 v631; // r9
- unsigned __int64 v632; // rbx
- __int64 v633; // rcx
- unsigned __int64 v634; // r12
- __int64 v635; // r8
- __int64 v636; // r11
- unsigned __int64 v637; // r15
- __int64 v638; // r10
- unsigned __int64 v639; // r11
- unsigned __int64 v640; // rdi
- __int64 v641; // rbx
- __int64 v642; // r10
- unsigned __int64 v643; // rcx
- unsigned __int64 v644; // rdx
- __int64 v645; // r10
- unsigned __int64 v646; // rbx
- unsigned __int64 v647; // r8
- unsigned __int64 v648; // rdi
- __int64 v649; // r9
- unsigned __int64 v650; // rbx
- __int64 v651; // rcx
- __int64 v652; // rax
- unsigned __int64 v653; // rcx
- int v654; // eax
- __int64 v655; // rax
- unsigned __int64 v656; // r9
- __int64 v657; // rdx
- unsigned __int64 v658; // rdi
- unsigned __int64 v659; // rdi
- unsigned __int64 v660; // r11
- __int64 v661; // rdi
- __int64 v662; // rcx
- unsigned __int64 v663; // rdx
- unsigned __int64 v664; // rcx
- __int64 p_MdlAddress; // rsi
- unsigned __int64 MdlAddress; // rdi
- __int64 v667; // rdi
- PVOID v668; // rax
- void *v669; // rbx
- int v670; // edi
- __int64 v671; // rdx
- __int64 v672; // r8
- __int64 v673; // r9
- void *v674; // rcx
- ULONG v675; // ecx
- ULONG v676; // ebx
- __int64 v677; // rax
- unsigned __int64 v678; // r9
- __int64 v679; // rdx
- unsigned __int64 v680; // rdi
- unsigned __int64 v681; // rdi
- unsigned __int64 v682; // r11
- __int64 v683; // rdi
- __int64 v684; // rcx
- unsigned __int64 v685; // rdx
- unsigned __int64 v686; // rcx
- ULONG_PTR v687; // rbx
- KIRQL v688; // si
- ULONG Length; // ecx
- unsigned int v690; // ebx
- unsigned int v691; // edi
- _DWORD *PoolWithTag; // r10
- unsigned int v693; // er8
- unsigned __int64 v694; // r11
- unsigned __int64 i20; // r15
- unsigned __int64 v696; // rdi
- unsigned int i21; // ecx
- unsigned __int64 v698; // rdi
- unsigned __int64 v699; // rdi
- __int64 v700; // r9
- __int64 v701; // rdi
- __int64 v702; // r9
- unsigned __int64 i22; // rax
- unsigned __int64 v704; // rdi
- unsigned __int64 v705; // rdi
- unsigned int i23; // er9
- _BYTE *v707; // rcx
- __int64 v708; // rdx
- unsigned __int64 i24; // r11
- __int64 v711; // rdx
- unsigned __int64 v712; // r10
- unsigned __int64 v713; // r9
- unsigned __int64 v714; // r8
- unsigned __int64 v715; // rdi
- unsigned __int64 v716; // rdi
- unsigned __int64 v717; // rcx
- unsigned __int64 v718; // r9
- unsigned __int64 i25; // rbx
- unsigned __int64 v720; // rdi
- unsigned __int64 v721; // rdi
- unsigned __int64 v722; // rcx
- __int64 v723; // rdx
- unsigned __int64 v724; // rdi
- unsigned __int64 v725; // rdx
- unsigned __int64 v726; // rax
- __int64 v727; // rax
- unsigned __int64 v728; // rax
- __int64 v729; // rax
- unsigned __int64 v730; // r9
- __int64 v731; // rdx
- unsigned __int64 v732; // rdi
- unsigned __int64 v733; // rdi
- unsigned __int64 v734; // r10
- __int64 v735; // rdx
- __int64 v736; // rcx
- __int64 v737; // r11
- unsigned __int64 v738; // rdi
- unsigned __int64 v739; // rcx
- unsigned __int64 v740; // rdi
- unsigned __int64 v741; // rbx
- unsigned __int64 v742; // r9
- unsigned __int64 v743; // rdx
- unsigned __int64 v744; // r10
- unsigned __int64 v745; // r9
- unsigned __int64 v746; // rsi
- unsigned __int64 v747; // r11
- unsigned __int64 v748; // r8
- unsigned __int64 v749; // r10
- __int64 v750; // rcx
- unsigned __int64 v751; // r9
- __int64 v752; // rdi
- __int64 v753; // rbx
- unsigned __int64 v754; // rsi
- __int64 v755; // r14
- unsigned __int64 v756; // rbx
- unsigned __int64 v757; // r9
- __int64 v758; // r15
- unsigned __int64 v759; // r14
- unsigned __int64 v760; // rdx
- unsigned __int64 v761; // r10
- unsigned __int64 v762; // r14
- unsigned __int64 v763; // r15
- unsigned __int64 v764; // r11
- unsigned __int64 v765; // r8
- unsigned __int64 v766; // r10
- __int64 v767; // rcx
- unsigned __int64 v768; // r14
- __int64 v769; // rdi
- __int64 v770; // rbx
- unsigned __int64 v771; // r15
- __int64 v772; // rsi
- unsigned __int64 v773; // rbx
- unsigned __int64 v774; // r9
- __int64 v775; // r12
- __int64 v776; // rsi
- unsigned __int64 v777; // rdx
- unsigned __int64 v778; // r10
- __int64 v779; // rsi
- unsigned __int64 v780; // r12
- unsigned __int64 v781; // r11
- unsigned __int64 v782; // r8
- unsigned __int64 v783; // r10
- __int64 v784; // rcx
- unsigned __int64 v785; // rsi
- __int64 v786; // rdi
- __int64 v787; // rbx
- unsigned __int64 v788; // r12
- __int64 v789; // r14
- unsigned __int64 v790; // rbx
- unsigned __int64 v791; // r9
- __int64 v792; // r15
- __int64 v793; // r14
- unsigned __int64 v794; // rdx
- unsigned __int64 v795; // r10
- __int64 v796; // r14
- unsigned __int64 v797; // r15
- unsigned __int64 v798; // r11
- unsigned __int64 v799; // r8
- unsigned __int64 v800; // r10
- __int64 v801; // rcx
- unsigned __int64 v802; // r14
- __int64 v803; // rdi
- __int64 v804; // rbx
- unsigned __int64 v805; // r15
- __int64 v806; // rsi
- unsigned __int64 v807; // rbx
- unsigned __int64 v808; // r9
- __int64 v809; // r12
- __int64 v810; // rsi
- unsigned __int64 v811; // rdx
- unsigned __int64 v812; // r10
- __int64 v813; // rsi
- unsigned __int64 v814; // r12
- unsigned __int64 v815; // r11
- unsigned __int64 v816; // r8
- unsigned __int64 v817; // r10
- __int64 v818; // rcx
- unsigned __int64 v819; // rsi
- __int64 v820; // rdi
- __int64 v821; // rbx
- unsigned __int64 v822; // r12
- __int64 v823; // r14
- unsigned __int64 v824; // rbx
- unsigned __int64 v825; // r9
- __int64 v826; // r15
- __int64 v827; // r14
- unsigned __int64 v828; // rdx
- unsigned __int64 v829; // r10
- __int64 v830; // r14
- unsigned __int64 v831; // r15
- unsigned __int64 v832; // r11
- unsigned __int64 v833; // r8
- unsigned __int64 v834; // r10
- __int64 v835; // rcx
- unsigned __int64 v836; // r14
- __int64 v837; // rdi
- __int64 v838; // rbx
- unsigned __int64 v839; // r15
- __int64 v840; // rsi
- unsigned __int64 v841; // rbx
- unsigned __int64 v842; // r9
- __int64 v843; // r12
- __int64 v844; // rsi
- unsigned __int64 v845; // rdx
- unsigned __int64 v846; // r10
- __int64 v847; // rsi
- unsigned __int64 v848; // r12
- unsigned __int64 v849; // r11
- unsigned __int64 v850; // r8
- unsigned __int64 v851; // r10
- __int64 v852; // rcx
- unsigned __int64 v853; // rsi
- __int64 v854; // rdi
- __int64 v855; // rbx
- unsigned __int64 v856; // r12
- __int64 v857; // r14
- unsigned __int64 v858; // rbx
- unsigned __int64 v859; // r9
- __int64 v860; // r15
- __int64 v861; // r14
- unsigned __int64 v862; // rdx
- unsigned __int64 v863; // r10
- __int64 v864; // r14
- unsigned __int64 v865; // r15
- unsigned __int64 v866; // r11
- unsigned __int64 v867; // r8
- unsigned __int64 v868; // r10
- __int64 v869; // rcx
- unsigned __int64 v870; // r14
- __int64 v871; // rdi
- __int64 v872; // rbx
- unsigned __int64 v873; // r15
- __int64 v874; // rsi
- unsigned __int64 v875; // rbx
- unsigned __int64 v876; // r9
- __int64 v877; // r12
- __int64 v878; // rsi
- unsigned __int64 v879; // rdx
- unsigned __int64 v880; // r10
- __int64 v881; // rsi
- unsigned __int64 v882; // r12
- unsigned __int64 v883; // r11
- unsigned __int64 v884; // r8
- unsigned __int64 v885; // r10
- __int64 v886; // rcx
- unsigned __int64 v887; // rsi
- __int64 v888; // rdi
- __int64 v889; // rbx
- unsigned __int64 v890; // r12
- __int64 v891; // r14
- unsigned __int64 v892; // rbx
- unsigned __int64 v893; // r9
- __int64 v894; // r15
- __int64 v895; // r14
- unsigned __int64 v896; // rdx
- unsigned __int64 v897; // r10
- __int64 v898; // r14
- unsigned __int64 v899; // r15
- unsigned __int64 v900; // r11
- unsigned __int64 v901; // r8
- unsigned __int64 v902; // r10
- __int64 v903; // rcx
- unsigned __int64 v904; // r14
- __int64 v905; // rdi
- __int64 v906; // rbx
- unsigned __int64 v907; // r15
- __int64 v908; // rsi
- unsigned __int64 v909; // rbx
- unsigned __int64 v910; // r9
- __int64 v911; // r14
- __int64 v912; // rsi
- unsigned __int64 v913; // rdx
- unsigned __int64 v914; // r10
- __int64 v915; // rsi
- unsigned __int64 v916; // r14
- unsigned __int64 v917; // r11
- unsigned __int64 v918; // rdi
- unsigned __int64 v919; // r10
- __int64 v920; // rcx
- unsigned __int64 v921; // rsi
- __int64 v922; // rdx
- __int64 v923; // r9
- unsigned __int64 v924; // r14
- __int64 v925; // rbx
- unsigned __int64 v926; // r9
- unsigned __int64 v927; // r8
- __int64 v928; // r10
- __int64 v929; // rbx
- unsigned __int64 v930; // rcx
- unsigned __int64 v931; // rdi
- __int64 v932; // rbx
- unsigned __int64 v933; // r10
- unsigned __int64 v934; // rax
- unsigned __int64 v935; // rdx
- unsigned __int64 v936; // rdi
- __int64 v937; // r11
- unsigned __int64 v938; // rbx
- __int64 v939; // r14
- __int64 v940; // rsi
- unsigned __int64 v941; // r10
- __int64 v942; // rcx
- unsigned __int64 v943; // r14
- unsigned __int64 v944; // r11
- __int64 v945; // r12
- unsigned __int64 v946; // r12
- unsigned __int64 v947; // rsi
- __int64 v948; // r10
- _IRP *v949; // r15
- ULONG_PTR Information; // rdx
- unsigned __int64 v951; // r12
- unsigned __int64 v952; // rcx
- __int64 v953; // r14
- __int64 v954; // r10
- __int64 v955; // r12
- __int64 v956; // r11
- unsigned __int64 v957; // r8
- __int64 v958; // r14
- __int64 v959; // rdx
- unsigned __int64 v960; // r10
- __int64 v961; // rdi
- __int64 v962; // rbx
- __int64 v963; // rsi
- __int64 v964; // rcx
- unsigned __int64 v965; // rbx
- __int64 v966; // r9
- __int64 v967; // r12
- unsigned __int64 v968; // rsi
- __int64 v969; // rcx
- unsigned __int64 v970; // r10
- __int64 v971; // rsi
- unsigned __int64 v972; // r12
- unsigned __int64 v973; // r11
- __int64 v974; // r8
- unsigned __int64 v975; // r10
- __int64 v976; // rdx
- unsigned __int64 v977; // rsi
- __int64 v978; // rdi
- __int64 v979; // rbx
- __int64 v980; // r14
- unsigned __int64 v981; // rcx
- unsigned __int64 v982; // rbx
- unsigned __int64 v983; // r9
- __int64 v984; // r12
- __int64 v985; // r14
- unsigned __int64 v986; // rcx
- unsigned __int64 v987; // r10
- __int64 v988; // r14
- unsigned __int64 v989; // r12
- unsigned __int64 v990; // r11
- unsigned __int64 v991; // r8
- unsigned __int64 v992; // r10
- __int64 v993; // rdx
- unsigned __int64 v994; // r14
- __int64 v995; // rdi
- __int64 v996; // rbx
- __int64 v997; // rsi
- unsigned __int64 v998; // rcx
- unsigned __int64 v999; // rbx
- unsigned __int64 v1000; // r9
- __int64 v1001; // r12
- __int64 v1002; // rsi
- unsigned __int64 v1003; // rcx
- unsigned __int64 v1004; // r10
- __int64 v1005; // rsi
- unsigned __int64 v1006; // r12
- unsigned __int64 v1007; // r11
- unsigned __int64 v1008; // r8
- unsigned __int64 v1009; // r10
- __int64 v1010; // rdx
- unsigned __int64 v1011; // rsi
- __int64 v1012; // rdi
- __int64 v1013; // rbx
- __int64 v1014; // r14
- unsigned __int64 v1015; // rcx
- unsigned __int64 v1016; // rbx
- unsigned __int64 v1017; // r9
- __int64 v1018; // r12
- __int64 v1019; // r14
- unsigned __int64 v1020; // rcx
- unsigned __int64 v1021; // r10
- __int64 v1022; // r14
- unsigned __int64 v1023; // r12
- unsigned __int64 v1024; // r11
- unsigned __int64 v1025; // rsi
- unsigned __int64 v1026; // r10
- __int64 v1027; // rdi
- unsigned __int64 v1028; // r14
- __int64 v1029; // r8
- unsigned __int64 v1030; // rdx
- __int64 v1031; // rbx
- unsigned __int64 v1032; // r12
- __int64 v1033; // rsi
- unsigned __int64 v1034; // rcx
- unsigned __int64 v1035; // rbx
- unsigned __int64 v1036; // r9
- __int64 v1037; // r12
- __int64 v1038; // rsi
- __int64 v1039; // rcx
- unsigned __int64 v1040; // r11
- __int64 v1041; // rsi
- unsigned __int64 v1042; // r12
- unsigned __int64 v1043; // r14
- unsigned __int64 v1044; // r10
- unsigned __int64 v1045; // r8
- __int64 v1046; // r11
- unsigned __int64 v1047; // rsi
- unsigned __int64 v1048; // rax
- __int64 v1049; // r14
- unsigned __int64 v1050; // rdi
- unsigned __int64 v1051; // rcx
- __int64 v1052; // rsi
- unsigned __int64 v1053; // r12
- __int64 v1054; // r10
- unsigned __int64 v1055; // rdx
- __int64 v1056; // r12
- unsigned __int64 v1057; // r12
- unsigned __int8 *v1058; // rdi
- unsigned __int64 v1059; // rdx
- __int64 v1060; // r14
- __int64 v1061; // r10
- __int64 v1062; // r12
- __int64 v1063; // r11
- unsigned __int64 v1064; // r8
- __int64 v1065; // r14
- __int64 v1066; // rcx
- unsigned __int64 v1067; // r10
- __int64 v1068; // rdi
- __int64 v1069; // rbx
- __int64 v1070; // r12
- __int64 v1071; // rsi
- unsigned __int64 v1072; // rbx
- __int64 v1073; // r9
- __int64 v1074; // r15
- unsigned __int64 v1075; // rsi
- __int64 v1076; // rdx
- unsigned __int64 v1077; // r10
- __int64 v1078; // rsi
- unsigned __int64 v1079; // r15
- unsigned __int64 v1080; // r11
- __int64 v1081; // r8
- unsigned __int64 v1082; // r10
- __int64 v1083; // rcx
- unsigned __int64 v1084; // rsi
- __int64 v1085; // rdi
- __int64 v1086; // rbx
- unsigned __int64 v1087; // r15
- __int64 v1088; // r14
- unsigned __int64 v1089; // rbx
- unsigned __int64 v1090; // r9
- __int64 v1091; // r12
- __int64 v1092; // r14
- unsigned __int64 v1093; // rdx
- unsigned __int64 v1094; // r10
- __int64 v1095; // r14
- unsigned __int64 v1096; // r12
- unsigned __int64 v1097; // r11
- unsigned __int64 v1098; // r8
- unsigned __int64 v1099; // r10
- __int64 v1100; // rcx
- unsigned __int64 v1101; // r14
- __int64 v1102; // rdi
- __int64 v1103; // rbx
- unsigned __int64 v1104; // r12
- __int64 v1105; // rsi
- unsigned __int64 v1106; // rbx
- unsigned __int64 v1107; // r9
- __int64 v1108; // r15
- __int64 v1109; // rsi
- unsigned __int64 v1110; // rdx
- unsigned __int64 v1111; // r10
- __int64 v1112; // rsi
- unsigned __int64 v1113; // r15
- unsigned __int64 v1114; // r11
- unsigned __int64 v1115; // r8
- unsigned __int64 v1116; // r10
- __int64 v1117; // rcx
- unsigned __int64 v1118; // rsi
- __int64 v1119; // rdi
- __int64 v1120; // rbx
- unsigned __int64 v1121; // r15
- __int64 v1122; // r14
- unsigned __int64 v1123; // rbx
- unsigned __int64 v1124; // r9
- __int64 v1125; // r12
- __int64 v1126; // r14
- unsigned __int64 v1127; // rdx
- unsigned __int64 v1128; // r10
- __int64 v1129; // r14
- unsigned __int64 v1130; // r12
- unsigned __int64 v1131; // r11
- unsigned __int64 v1132; // r8
- unsigned __int64 v1133; // r10
- __int64 v1134; // rcx
- unsigned __int64 v1135; // r14
- __int64 v1136; // rdi
- __int64 v1137; // rbx
- unsigned __int64 v1138; // r12
- __int64 v1139; // rsi
- unsigned __int64 v1140; // rbx
- unsigned __int64 v1141; // r9
- __int64 v1142; // r15
- __int64 v1143; // rsi
- unsigned __int64 v1144; // rdx
- unsigned __int64 v1145; // r10
- __int64 v1146; // rsi
- unsigned __int64 v1147; // r15
- unsigned __int64 v1148; // r11
- unsigned __int64 v1149; // r8
- unsigned __int64 v1150; // r10
- __int64 v1151; // rcx
- unsigned __int64 v1152; // rsi
- __int64 v1153; // rdi
- __int64 v1154; // rbx
- unsigned __int64 v1155; // r15
- __int64 v1156; // r14
- unsigned __int64 v1157; // rbx
- unsigned __int64 v1158; // r9
- __int64 v1159; // rsi
- __int64 v1160; // r14
- unsigned __int64 v1161; // rdx
- unsigned __int64 v1162; // r10
- __int64 v1163; // r14
- unsigned __int64 v1164; // rsi
- unsigned __int64 v1165; // r11
- unsigned __int64 v1166; // r8
- unsigned __int64 v1167; // r10
- __int64 v1168; // rcx
- unsigned __int64 v1169; // r14
- __int64 v1170; // rdi
- __int64 v1171; // rbx
- unsigned __int64 v1172; // rsi
- __int64 v1173; // r15
- unsigned __int64 v1174; // rbx
- unsigned __int64 v1175; // r9
- __int64 v1176; // r14
- __int64 v1177; // r15
- unsigned __int64 v1178; // rdx
- unsigned __int64 v1179; // r10
- __int64 v1180; // r15
- unsigned __int64 v1181; // r14
- unsigned __int64 v1182; // r11
- unsigned __int64 v1183; // r8
- unsigned __int64 v1184; // r10
- __int64 v1185; // rcx
- unsigned __int64 v1186; // r15
- __int64 v1187; // rdi
- __int64 v1188; // rsi
- unsigned __int64 v1189; // r14
- __int64 v1190; // r12
- unsigned __int64 v1191; // rsi
- unsigned __int64 v1192; // r9
- __int64 v1193; // r13
- __int64 v1194; // r12
- unsigned __int64 v1195; // rdx
- unsigned __int64 v1196; // r10
- __int64 v1197; // r12
- unsigned __int64 v1198; // r13
- unsigned __int64 v1199; // rbx
- unsigned __int64 v1200; // r8
- unsigned __int64 v1201; // r10
- __int64 v1202; // rcx
- unsigned __int64 v1203; // r12
- __int64 v1204; // rdi
- __int64 v1205; // r14
- unsigned __int64 v1206; // r13
- __int64 v1207; // r15
- unsigned __int64 v1208; // r14
- unsigned __int64 v1209; // r9
- __int64 v1210; // r10
- __int64 v1211; // r15
- unsigned __int64 v1212; // rdx
- unsigned __int64 v1213; // r11
- __int64 v1214; // r15
- unsigned __int64 v1215; // r10
- unsigned __int64 v1216; // rsi
- unsigned __int64 v1217; // r8
- unsigned __int64 v1218; // r11
- __int64 v1219; // rcx
- unsigned __int64 v1220; // r15
- __int64 v1221; // rdi
- __int64 v1222; // r14
- __int64 v1223; // r12
- unsigned __int64 v1224; // r14
- unsigned __int64 v1225; // r10
- __int64 v1226; // r15
- __int64 v1227; // r12
- unsigned __int64 v1228; // rdx
- unsigned __int64 v1229; // rbx
- __int64 v1230; // r12
- unsigned __int64 v1231; // r15
- unsigned __int64 v1232; // rsi
- unsigned __int64 v1233; // r9
- unsigned __int64 v1234; // rbx
- __int64 v1235; // rcx
- unsigned __int64 v1236; // r12
- __int64 v1237; // r8
- __int64 v1238; // r11
- unsigned __int64 v1239; // r15
- __int64 v1240; // r10
- unsigned __int64 v1241; // r11
- unsigned __int64 v1242; // rdi
- __int64 v1243; // rbx
- __int64 v1244; // r10
- unsigned __int64 v1245; // rcx
- unsigned __int64 v1246; // rdx
- __int64 v1247; // r10
- unsigned __int64 v1248; // r8
- unsigned __int64 v1249; // rdi
- __int64 v1250; // rcx
- __int64 v1251; // rdx
- unsigned __int64 v1252; // rcx
- unsigned __int64 v1253; // rdx
- __int64 i26; // rcx
- unsigned __int64 v1255; // rdi
- __int64 v1256; // rdx
- __int64 v1257; // rcx
- __int64 v1258; // rdi
- unsigned __int64 v1259; // rcx
- unsigned __int64 v1261; // [rsp+20h] [rbp-268h]
- unsigned __int64 v1262; // [rsp+20h] [rbp-268h]
- unsigned __int64 v1263; // [rsp+28h] [rbp-260h]
- unsigned __int64 v1264; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1265; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1266; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1267; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1268; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1269; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1270; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1271; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1272; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1273; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1274; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1275; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1276; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1277; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1278; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1279; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1280; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1281; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1282; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1283; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1284; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1285; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1286; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1287; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1288; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1289; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1290; // [rsp+30h] [rbp-258h]
- unsigned __int64 v1291; // [rsp+30h] [rbp-258h]
- _IRP *v1292; // [rsp+30h] [rbp-258h]
- unsigned __int64 *v1293; // [rsp+38h] [rbp-250h]
- _QWORD *v1294; // [rsp+38h] [rbp-250h]
- unsigned __int64 v1295; // [rsp+38h] [rbp-250h]
- unsigned __int8 *v1296; // [rsp+38h] [rbp-250h]
- __int64 v1297; // [rsp+38h] [rbp-250h]
- char *v1298; // [rsp+38h] [rbp-250h]
- _QWORD *v1299; // [rsp+38h] [rbp-250h]
- __int64 v1301; // [rsp+48h] [rbp-240h]
- __int64 v1302; // [rsp+48h] [rbp-240h]
- __int64 v1303; // [rsp+48h] [rbp-240h]
- __int64 v1304; // [rsp+48h] [rbp-240h]
- __int64 v1305; // [rsp+48h] [rbp-240h]
- __int64 v1306; // [rsp+48h] [rbp-240h]
- __int64 v1307; // [rsp+48h] [rbp-240h]
- __int64 v1308; // [rsp+48h] [rbp-240h]
- __int64 v1309; // [rsp+48h] [rbp-240h]
- __int64 v1310; // [rsp+48h] [rbp-240h]
- __int64 v1311; // [rsp+48h] [rbp-240h]
- __int64 v1312; // [rsp+48h] [rbp-240h]
- __int64 v1313; // [rsp+48h] [rbp-240h]
- __int64 v1314; // [rsp+48h] [rbp-240h]
- __int64 v1315; // [rsp+48h] [rbp-240h]
- __int64 v1316; // [rsp+48h] [rbp-240h]
- __int64 v1317; // [rsp+48h] [rbp-240h]
- __int64 v1318; // [rsp+48h] [rbp-240h]
- __int64 v1319; // [rsp+48h] [rbp-240h]
- __int64 v1320; // [rsp+48h] [rbp-240h]
- __int64 v1321; // [rsp+48h] [rbp-240h]
- __int64 v1322; // [rsp+48h] [rbp-240h]
- __int64 v1323; // [rsp+48h] [rbp-240h]
- __int64 v1324; // [rsp+48h] [rbp-240h]
- __int64 v1325; // [rsp+48h] [rbp-240h]
- __int64 v1326; // [rsp+48h] [rbp-240h]
- __int64 v1327; // [rsp+48h] [rbp-240h]
- __int64 v1328; // [rsp+48h] [rbp-240h]
- unsigned int *p_MajorFunction; // [rsp+48h] [rbp-240h]
- __int64 v1330; // [rsp+48h] [rbp-240h]
- _BYTE *v1331; // [rsp+48h] [rbp-240h]
- __int64 v1332; // [rsp+48h] [rbp-240h]
- unsigned __int64 P; // [rsp+50h] [rbp-238h]
- __int64 Pa; // [rsp+50h] [rbp-238h]
- __int64 Pb; // [rsp+50h] [rbp-238h]
- char *Pc; // [rsp+50h] [rbp-238h]
- int v1337; // [rsp+58h] [rbp-230h]
- unsigned int v1338; // [rsp+58h] [rbp-230h]
- __int64 v1339; // [rsp+60h] [rbp-228h]
- unsigned int v1340; // [rsp+60h] [rbp-228h]
- unsigned __int64 v1341; // [rsp+60h] [rbp-228h]
- unsigned __int64 v1342; // [rsp+60h] [rbp-228h]
- unsigned __int64 v1343; // [rsp+68h] [rbp-220h]
- unsigned __int64 v1344; // [rsp+68h] [rbp-220h]
- unsigned __int64 v1345; // [rsp+70h] [rbp-218h]
- unsigned __int64 v1346; // [rsp+70h] [rbp-218h]
- unsigned int v1347; // [rsp+7Ch] [rbp-20Ch]
- int v1348; // [rsp+7Ch] [rbp-20Ch]
- unsigned __int64 v1349; // [rsp+88h] [rbp-200h]
- _IO_STACK_LOCATION *CurrentStackLocation; // [rsp+98h] [rbp-1F0h]
- unsigned __int64 v1351; // [rsp+98h] [rbp-1F0h]
- unsigned __int64 v1352; // [rsp+98h] [rbp-1F0h]
- __int64 v1353; // [rsp+B0h] [rbp-1D8h]
- unsigned __int64 v1354; // [rsp+B0h] [rbp-1D8h]
- unsigned int v1355; // [rsp+B0h] [rbp-1D8h]
- unsigned __int64 v1356; // [rsp+B8h] [rbp-1D0h]
- unsigned __int64 v1357; // [rsp+B8h] [rbp-1D0h]
- int v1358; // [rsp+C0h] [rbp-1C8h]
- unsigned __int64 v1359; // [rsp+C8h] [rbp-1C0h]
- unsigned __int8 *v1360; // [rsp+D0h] [rbp-1B8h]
- __int64 v1361; // [rsp+E0h] [rbp-1A8h]
- __int64 v1362; // [rsp+E8h] [rbp-1A0h]
- __int64 v1363; // [rsp+F0h] [rbp-198h]
- __int64 v1364; // [rsp+F8h] [rbp-190h]
- __int64 v1365; // [rsp+100h] [rbp-188h]
- __int64 v1366; // [rsp+108h] [rbp-180h]
- __int64 v1367; // [rsp+110h] [rbp-178h]
- __int64 v1368; // [rsp+118h] [rbp-170h]
- __int64 v1369; // [rsp+120h] [rbp-168h]
- __int64 v1370; // [rsp+128h] [rbp-160h]
- __int64 v1371; // [rsp+130h] [rbp-158h]
- __int64 v1372; // [rsp+138h] [rbp-150h]
- __int64 v1373; // [rsp+140h] [rbp-148h]
- __int64 v1374; // [rsp+148h] [rbp-140h]
- __int64 v1375; // [rsp+150h] [rbp-138h]
- __int64 v1376; // [rsp+158h] [rbp-130h]
- __int64 v1377; // [rsp+160h] [rbp-128h]
- __int64 v1378; // [rsp+168h] [rbp-120h]
- __int64 v1379; // [rsp+170h] [rbp-118h]
- __int64 v1380; // [rsp+178h] [rbp-110h]
- __int64 v1381; // [rsp+180h] [rbp-108h]
- __int64 v1382; // [rsp+188h] [rbp-100h]
- __int64 v1383; // [rsp+190h] [rbp-F8h]
- __int64 v1384; // [rsp+198h] [rbp-F0h]
- __int64 v1385; // [rsp+1A0h] [rbp-E8h]
- __int64 v1386; // [rsp+1A8h] [rbp-E0h]
- __int64 v1387; // [rsp+1B0h] [rbp-D8h]
- __int64 v1388; // [rsp+1D8h] [rbp-B0h]
- __int64 v1389; // [rsp+1E8h] [rbp-A0h]
- __int64 v1390; // [rsp+1F0h] [rbp-98h]
- _QWORD v1391[2]; // [rsp+240h] [rbp-48h] BYREF
- v2 = a2;
- v3 = 0i64;
- a2->IoStatus.Information = 0i64;
- CurrentStackLocation = a2->Tail.Overlay.CurrentStackLocation;
- MajorFunction = CurrentStackLocation->MajorFunction;
- if ( MajorFunction > 0xE )
- {
- if ( MajorFunction > 0x15 )
- {
- v99 = MajorFunction - 22;
- if ( v99 )
- {
- v100 = v99 - 1;
- if ( !v100 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( !g_acDetectionStatus || *(_DWORD *)g_acDetectionStatus >= 0x7D0u )
- goto LABEL_209;
- v1290 = 0xAA2D145923EC7F30ui64;
- for ( i = 0i64; ; i = v1384 + 1 )
- {
- v1384 = i;
- v117 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v117 - 136 * (v117 / 0x11 + 245 * (v117 / 0xF5)));
- v31 = *v1293;
- v118 = __ROL8__(*v1293, 4);
- v1327 = HIDWORD(v1290) & 0x16B0524D;
- v33 = (HIDWORD(v1290) | 0x16B0524D) - v1327;
- if ( !(v118 + (~v118 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v31 << 32) | ((v1290 & 0xE94FADB200000000ui64 | 0x16B0524D00000000i64) - (v1327 << 32))) == (v31 & v33) << 32 )
- goto LABEL_18;
- v1290 = (v1290 & ~v31) - (v31 | ~v1290) - v1290 - 1 + v31;
- }
- goto LABEL_47;
- }
- v101 = v100 - 1;
- if ( !v101 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( !g_acDetectionStatus || *(_DWORD *)g_acDetectionStatus >= 0x7D0u )
- goto LABEL_209;
- v1289 = 0xAA2D145923EC7F30ui64;
- for ( j = 0i64; ; j = v1383 + 1 )
- {
- v1383 = j;
- v114 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * j % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * j % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * j % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v114 - 136 * (v114 / 0x11 + 245 * (v114 / 0xF5)));
- v31 = *v1293;
- v115 = __ROL8__(*v1293, 4);
- v1326 = HIDWORD(v1289) & 0xD84E2215;
- v33 = (HIDWORD(v1289) | 0xD84E2215) - v1326;
- if ( !(v115 + (~v115 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v31 << 32) | ((v1289 & 0x27B1DDEA00000000i64 | 0xD84E221500000000ui64) - (v1326 << 32))) == (v31 & v33) << 32 )
- goto LABEL_18;
- v1289 = v31 - 1 + (v1289 & ~v31) - (v31 | ~v1289) - v1289;
- }
- goto LABEL_47;
- }
- v102 = v101 - 1;
- if ( !v102 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( !g_acDetectionStatus || *(_DWORD *)g_acDetectionStatus >= 0x7D0u )
- goto LABEL_209;
- v1288 = 0xAA2D145923EC7F30ui64;
- for ( k = 0i64; ; k = v1382 + 1 )
- {
- v1382 = k;
- v111 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * k % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * k % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * k % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v111 - 136 * (v111 / 0x11 + 245 * (v111 / 0xF5)));
- v31 = *v1293;
- v112 = __ROL8__(*v1293, 4);
- v1325 = HIDWORD(v1288) & 0x4021BAB6;
- v33 = (HIDWORD(v1288) | 0x4021BAB6) - v1325;
- if ( !(v112 + (~v112 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v31 << 32) | ((v1288 & 0xBFDE454900000000ui64 | 0x4021BAB600000000i64) - (v1325 << 32))) == (v31 & v33) << 32 )
- goto LABEL_18;
- v1288 = v31 - 1 + (v1288 & ~v31) - (v31 | ~v1288) - v1288;
- }
- goto LABEL_47;
- }
- v103 = v102 - 1;
- if ( !v103 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1287 = 0xAA2D145923EC7F30ui64;
- for ( m = 0i64; ; m = v1381 + 1 )
- {
- v1381 = m;
- v108 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * m % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * m % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * m % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760
- + 144 * v108
- - 136 * (v108 / 0x11 + 245 * (v108 / 0xF5)));
- v13 = *v1293;
- v109 = __ROL8__(*v1293, 4);
- v1324 = HIDWORD(v1287) & 0x7B9B1527;
- v15 = (HIDWORD(v1287) | 0x7B9B1527) - v1324;
- if ( !(v109 + (~v109 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1287 & 0x8464EAD800000000ui64 | 0x7B9B152700000000i64) - (v1324 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1287 = v13 - 1 + (v1287 & ~v13) - (v13 | ~v1287) - v1287;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- if ( v103 == 1 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1286 = 0xAA2D145923EC7F30ui64;
- for ( n = 0i64; ; n = v1380 + 1 )
- {
- v1380 = n;
- v105 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * n % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * n % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * n % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760
- + 144 * v105
- - 136 * (v105 / 0x11 + 245 * (v105 / 0xF5)));
- v13 = *v1293;
- v106 = __ROL8__(*v1293, 4);
- v1323 = HIDWORD(v1286) & 0x99E15C84;
- v15 = (HIDWORD(v1286) | 0x99E15C84) - v1323;
- if ( !(v106 + (~v106 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1286 & 0x661EA37B00000000i64 | 0x99E15C8400000000ui64) - (v1323 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1286 = v13 - 1 + (v1286 & ~v13) - (v13 | ~v1286) - v1286;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- }
- else if ( g_acDetectionStatus )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( *(_DWORD *)g_acDetectionStatus >= 0x7D0u )
- goto LABEL_209;
- v1291 = 0xAA2D145923EC7F30ui64;
- for ( ii = 0i64; ; ii = v1385 + 1 )
- {
- v1385 = ii;
- v120 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * ii % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * ii % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * ii % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v120 - 136 * (v120 / 0x11 + 245 * (v120 / 0xF5)));
- v31 = *v1293;
- v121 = __ROL8__(*v1293, 4);
- v1328 = HIDWORD(v1291) & 0x17326A2E;
- v33 = (HIDWORD(v1291) | 0x17326A2E) - v1328;
- if ( !(v121 + (~v121 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v31 << 32) | ((v1291 & 0xE8CD95D100000000ui64 | 0x17326A2E00000000i64) - (v1328 << 32))) == (v31 & v33) << 32 )
- {
- LABEL_18:
- v2 = a2;
- goto LABEL_209;
- }
- v1291 = (v1291 & ~v31) - (v31 | ~v1291) - v1291 - 1 + v31;
- }
- goto LABEL_47;
- }
- }
- else
- {
- if ( MajorFunction == 21 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1285 = 0xAA2D145923EC7F30ui64;
- for ( jj = 0i64; ; jj = v1379 + 1 )
- {
- v1379 = jj;
- v97 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * jj % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * jj % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * jj % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v97 - 136 * (v97 / 0x11 + 245 * (v97 / 0xF5)));
- v13 = *v1293;
- v98 = __ROL8__(*v1293, 4);
- v1322 = HIDWORD(v1285) & 0x48263782;
- v15 = (HIDWORD(v1285) | 0x48263782) - v1322;
- if ( !(v98 + (~v98 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1285 & 0xB7D9C87D00000000ui64 | 0x4826378200000000i64) - (v1322 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1285 = (v1285 & ~v13) - (v13 | ~v1285) - v1285 - 1 + v13;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- v70 = MajorFunction - 15;
- if ( !v70 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1284 = 0xAA2D145923EC7F30ui64;
- for ( kk = 0i64; ; kk = v1378 + 1 )
- {
- v1378 = kk;
- v94 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * kk % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * kk % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * kk % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v94 - 136 * (v94 / 0x11 + 245 * (v94 / 0xF5)));
- v13 = *v1293;
- v95 = __ROL8__(*v1293, 4);
- v1321 = HIDWORD(v1284) & 0xED538DE2;
- v15 = (HIDWORD(v1284) | 0xED538DE2) - v1321;
- if ( !(v95 + (~v95 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1284 & 0x12AC721D00000000i64 | 0xED538DE200000000ui64) - (v1321 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1284 = (v1284 & ~v13) - (v13 | ~v1284) - v1284 - 1 + v13;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- v71 = v70 - 1;
- if ( !v71 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1283 = 0xAA2D145923EC7F30ui64;
- for ( mm = 0i64; ; mm = v1377 + 1 )
- {
- v1377 = mm;
- v88 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * mm % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * mm % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * mm % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v88 - 136 * (v88 / 0x11 + 245 * (v88 / 0xF5)));
- v89 = *v1293;
- v90 = __ROL8__(*v1293, 4);
- v1320 = HIDWORD(v1283) & 0x5FC2EFB3;
- v91 = (HIDWORD(v1283) | 0x5FC2EFB3) - v1320;
- if ( !(v90 + (~v90 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v89 << 32) | ((v1283 & 0xA03D104C00000000ui64 | 0x5FC2EFB300000000i64) - (v1320 << 32))) == (v89 & v91) << 32 )
- goto LABEL_18;
- v1283 = v89 - 1 + (v1283 & ~v89) - (v89 | ~v1283) - v1283;
- }
- v92 = (v89 & 0xEFFFFFFFFFFFFFFFui64) + (~v89 | 0xFFFFFFFF00000000ui64) + 0x1000000000000001i64;
- v19 = (v92 | v91) - (v92 & v91);
- goto LABEL_21;
- }
- goto LABEL_209;
- }
- v72 = v71 - 1;
- if ( !v72 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( !g_acDetectionStatus || *(_DWORD *)g_acDetectionStatus >= 0x7D0u )
- goto LABEL_209;
- v1282 = 0xAA2D145923EC7F30ui64;
- for ( nn = 0i64; ; nn = v1376 + 1 )
- {
- v1376 = nn;
- v85 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * nn % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * nn % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * nn % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v85 - 136 * (v85 / 0x11 + 245 * (v85 / 0xF5)));
- v31 = *v1293;
- v86 = __ROL8__(*v1293, 4);
- v1319 = HIDWORD(v1282) & 0xB2C41B84;
- v33 = (HIDWORD(v1282) | 0xB2C41B84) - v1319;
- if ( !(v86 + (~v86 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v31 << 32) | ((v1282 & 0x4D3BE47B00000000i64 | 0xB2C41B8400000000ui64) - (v1319 << 32))) == (v31 & v33) << 32 )
- goto LABEL_18;
- v1282 = (v1282 & ~v31) - (v31 | ~v1282) - v1282 - 1 + v31;
- }
- goto LABEL_47;
- }
- v73 = v72 - 1;
- if ( !v73 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1281 = 0xAA2D145923EC7F30ui64;
- for ( i1 = 0i64; ; i1 = v1375 + 1 )
- {
- v1375 = i1;
- v82 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i1 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i1 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i1 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v82 - 136 * (v82 / 0x11 + 245 * (v82 / 0xF5)));
- v13 = *v1293;
- v83 = __ROL8__(*v1293, 4);
- v1318 = HIDWORD(v1281) & 0xD00DAA9F;
- v15 = (HIDWORD(v1281) | 0xD00DAA9F) - v1318;
- if ( !(v83 + (~v83 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1281 & 0x2FF2556000000000i64 | 0xD00DAA9F00000000ui64) - (v1318 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1281 = (v1281 & ~v13) - (v13 | ~v1281) - v1281 - 1 + v13;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- v74 = v73 - 1;
- if ( !v74 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1280 = 0xAA2D145923EC7F30ui64;
- for ( i2 = 0i64; ; i2 = v1374 + 1 )
- {
- v1374 = i2;
- v79 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i2 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i2 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i2 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v79 - 136 * (v79 / 0x11 + 245 * (v79 / 0xF5)));
- v13 = *v1293;
- v80 = __ROL8__(*v1293, 4);
- v1317 = HIDWORD(v1280) & 0x2D93783;
- v15 = (HIDWORD(v1280) | 0x2D93783) - v1317;
- if ( !(v80 + (~v80 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1280 & 0xFD26C87C00000000ui64 | 0x2D9378300000000i64) - (v1317 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1280 = v13 - 1 + (v1280 & ~v13) - (v13 | ~v1280) - v1280;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- if ( v74 == 1 )
- {
- v5 = 0xAA2D145923EC7F30ui64;
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1279 = 0xAA2D145923EC7F30ui64;
- for ( i3 = 0i64; ; i3 = v1373 + 1 )
- {
- v1373 = i3;
- v76 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i3 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i3 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i3 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v76 - 136 * (v76 / 0x11 + 245 * (v76 / 0xF5)));
- v13 = *v1293;
- v77 = __ROL8__(*v1293, 4);
- v1316 = HIDWORD(v1279) & 0x5E7F69B8;
- v15 = (HIDWORD(v1279) | 0x5E7F69B8) - v1316;
- if ( !(v77 + (~v77 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1279 & 0xA180964700000000ui64 | 0x5E7F69B800000000i64) - (v1316 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1279 = v13 - 1 + (v1279 & ~v13) - (v13 | ~v1279) - v1279;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- }
- v5 = 0xAA2D145923EC7F30ui64;
- goto LABEL_209;
- }
- v5 = 0xAA2D145923EC7F30ui64;
- if ( MajorFunction == 14 )
- {
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1278 = 0xAA2D145923EC7F30ui64;
- for ( i4 = 0i64; ; i4 = v1372 + 1 )
- {
- v1372 = i4;
- v68 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i4 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i4 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i4 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v68 - 136 * (v68 / 0x11 + 245 * (v68 / 0xF5)));
- v13 = *v1293;
- v69 = __ROL8__(*v1293, 4);
- v1315 = HIDWORD(v1278) & 0x7D2D664A;
- v15 = (HIDWORD(v1278) | 0x7D2D664A) - v1315;
- if ( !(v69 + (~v69 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1278 & 0x82D299B500000000ui64 | 0x7D2D664A00000000i64) - (v1315 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1278 = v13 - 1 + (v1278 & ~v13) - (v13 | ~v1278) - v1278;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- if ( MajorFunction > 7 )
- {
- v44 = MajorFunction - 8;
- if ( !v44 )
- {
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1277 = 0xAA2D145923EC7F30ui64;
- for ( i5 = 0i64; ; i5 = v1371 + 1 )
- {
- v1371 = i5;
- v65 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i5 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i5 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i5 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v65 - 136 * (v65 / 0x11 + 245 * (v65 / 0xF5)));
- v13 = *v1293;
- v66 = __ROL8__(*v1293, 4);
- v1314 = HIDWORD(v1277) & 0xF9736436;
- v15 = (HIDWORD(v1277) | 0xF9736436) - v1314;
- if ( !(v66 + (~v66 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1277 & 0x68C9BC900000000i64 | 0xF973643600000000ui64) - (v1314 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1277 = (v1277 & ~v13) - (v13 | ~v1277) - v1277 - 1 + v13;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- v45 = v44 - 1;
- if ( !v45 )
- {
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1276 = 0xAA2D145923EC7F30ui64;
- for ( i6 = 0i64; ; i6 = v1370 + 1 )
- {
- v1370 = i6;
- v62 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i6 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i6 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i6 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v62 - 136 * (v62 / 0x11 + 245 * (v62 / 0xF5)));
- v13 = *v1293;
- v63 = __ROL8__(*v1293, 4);
- v1313 = HIDWORD(v1276) & 0xE6F6B898;
- v15 = (HIDWORD(v1276) | 0xE6F6B898) - v1313;
- if ( !(v63 + (~v63 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1276 & 0x1909476700000000i64 | 0xE6F6B89800000000ui64) - (v1313 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1276 = (v1276 & ~v13) - (v13 | ~v1276) - v1276 - 1 + v13;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- v46 = v45 - 1;
- if ( !v46 )
- {
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1275 = 0xAA2D145923EC7F30ui64;
- for ( i7 = 0i64; ; i7 = v1369 + 1 )
- {
- v1369 = i7;
- v59 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i7 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i7 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i7 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v59 - 136 * (v59 / 0x11 + 245 * (v59 / 0xF5)));
- v13 = *v1293;
- v60 = __ROL8__(*v1293, 4);
- v1312 = HIDWORD(v1275) & 0x9F97637A;
- v15 = (HIDWORD(v1275) | 0x9F97637A) - v1312;
- if ( !(v60 + (~v60 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1275 & 0x60689C8500000000i64 | 0x9F97637A00000000ui64) - (v1312 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1275 = (v1275 & ~v13) - (v13 | ~v1275) - v1275 - 1 + v13;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- v47 = v46 - 1;
- if ( !v47 )
- {
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1274 = 0xAA2D145923EC7F30ui64;
- for ( i8 = 0i64; ; i8 = v1368 + 1 )
- {
- v1368 = i8;
- v56 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i8 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i8 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i8 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v56 - 136 * (v56 / 0x11 + 245 * (v56 / 0xF5)));
- v13 = *v1293;
- v57 = __ROL8__(*v1293, 4);
- v1311 = HIDWORD(v1274) & 0x57B98901;
- v15 = (HIDWORD(v1274) | 0x57B98901) - v1311;
- if ( !(v57 + (~v57 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1274 & 0xA84676FE00000000ui64 | 0x57B9890100000000i64) - (v1311 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1274 = v13 - 1 + (v1274 & ~v13) - (v13 | ~v1274) - v1274;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- v48 = v47 - 1;
- if ( !v48 )
- {
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1273 = 0xAA2D145923EC7F30ui64;
- for ( i9 = 0i64; ; i9 = v1367 + 1 )
- {
- v1367 = i9;
- v53 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i9 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i9 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i9 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v53 - 136 * (v53 / 0x11 + 245 * (v53 / 0xF5)));
- v13 = *v1293;
- v54 = __ROL8__(*v1293, 4);
- v1310 = HIDWORD(v1273) & 0x5257C4C4;
- v15 = (HIDWORD(v1273) | 0x5257C4C4) - v1310;
- if ( !(v54 + (~v54 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1273 & 0xADA83B3B00000000ui64 | 0x5257C4C400000000i64) - (v1310 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1273 = v13 - 1 + (v1273 & ~v13) - (v13 | ~v1273) - v1273;
- }
- goto LABEL_19;
- }
- goto LABEL_209;
- }
- if ( v48 != 1 || !g_acDetectionStatus || *(_DWORD *)g_acDetectionStatus >= 0x7D0u )
- goto LABEL_209;
- v1272 = 0xAA2D145923EC7F30ui64;
- for ( i10 = 0i64; ; i10 = v1366 + 1 )
- {
- v1366 = i10;
- v50 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i10 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i10 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i10 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v50 - 136 * (v50 / 0x11 + 245 * (v50 / 0xF5)));
- v31 = *v1293;
- v51 = __ROL8__(*v1293, 4);
- v1309 = HIDWORD(v1272) & 0xA7DB1BFB;
- v33 = (HIDWORD(v1272) | 0xA7DB1BFB) - v1309;
- if ( !(v51 + (~v51 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v31 << 32) | ((v1272 & 0x5824E40400000000i64 | 0xA7DB1BFB00000000ui64) - (v1309 << 32))) == (v31 & v33) << 32 )
- goto LABEL_18;
- v1272 = v31 - 1 + (v1272 & ~v31) - (v31 | ~v1272) - v1272;
- }
- LABEL_47:
- v34 = (v31 & 0xEFFFFFFFFFFFFFFFui64) + (~v31 | 0xFFFFFFFF00000000ui64) + 0x1000000000000001i64;
- v17 = v33 | v34;
- v18 = v33 & v34;
- goto LABEL_20;
- }
- if ( MajorFunction == 7 )
- {
- if ( !g_acDetectionStatus || *(_DWORD *)g_acDetectionStatus >= 0x7D0u )
- goto LABEL_209;
- v1271 = 0xAA2D145923EC7F30ui64;
- for ( i11 = 0i64; ; i11 = v1365 + 1 )
- {
- v1365 = i11;
- v42 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i11 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i11 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i11 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v42 - 136 * (v42 / 0x11 + 245 * (v42 / 0xF5)));
- v31 = *v1293;
- v43 = __ROL8__(*v1293, 4);
- v1308 = HIDWORD(v1271) & 0xC8E41653;
- v33 = (HIDWORD(v1271) | 0xC8E41653) - v1308;
- if ( !(v43 + (~v43 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v31 << 32) | ((v1271 & 0x371BE9AC00000000i64 | 0xC8E4165300000000ui64) - (v1308 << 32))) == (v31 & v33) << 32 )
- goto LABEL_18;
- v1271 = v31 - 1 + (v1271 & ~v31) - (v31 | ~v1271) - v1271;
- }
- goto LABEL_47;
- }
- if ( !CurrentStackLocation->MajorFunction )
- {
- if ( !g_acDetectionStatus || *(_DWORD *)g_acDetectionStatus >= 0x7D0u )
- goto LABEL_209;
- v1270 = 0xAA2D145923EC7F30ui64;
- for ( i12 = 0i64; ; i12 = v1364 + 1 )
- {
- v1364 = i12;
- v39 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i12 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i12 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i12 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v39 - 136 * (v39 / 0x11 + 245 * (v39 / 0xF5)));
- v31 = *v1293;
- v40 = __ROL8__(*v1293, 4);
- v1307 = HIDWORD(v1270) & 0xA961F610;
- v33 = (HIDWORD(v1270) | 0xA961F610) - v1307;
- if ( !(v40 + (~v40 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v31 << 32) | ((v1270 & 0x569E09EF00000000i64 | 0xA961F61000000000ui64) - (v1307 << 32))) == (v31 & v33) << 32 )
- goto LABEL_18;
- v1270 = (v1270 & ~v31) - (v31 | ~v1270) - v1270 - 1 + v31;
- }
- goto LABEL_47;
- }
- v6 = MajorFunction - 1;
- if ( !v6 )
- {
- if ( !g_acDetectionStatus || *(_DWORD *)g_acDetectionStatus >= 0x7D0u )
- goto LABEL_209;
- v1269 = 0xAA2D145923EC7F30ui64;
- for ( i13 = 0i64; ; i13 = v1363 + 1 )
- {
- v1363 = i13;
- v36 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i13 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i13 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i13 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v36 - 136 * (v36 / 0x11 + 245 * (v36 / 0xF5)));
- v31 = *v1293;
- v37 = __ROL8__(*v1293, 4);
- v1306 = HIDWORD(v1269) & 0x568F71BD;
- v33 = (HIDWORD(v1269) | 0x568F71BD) - v1306;
- if ( !(v37 + (~v37 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v31 << 32) | ((v1269 & 0xA9708E4200000000ui64 | 0x568F71BD00000000i64) - (v1306 << 32))) == (v31 & v33) << 32 )
- goto LABEL_18;
- v1269 = (v1269 & ~v31) - (v31 | ~v1269) - v1269 - 1 + v31;
- }
- goto LABEL_47;
- }
- v7 = v6 - 1;
- if ( !v7 )
- {
- if ( !g_acDetectionStatus || *(_DWORD *)g_acDetectionStatus >= 0x7D0u )
- goto LABEL_209;
- v1268 = 0xAA2D145923EC7F30ui64;
- for ( i14 = 0i64; ; i14 = v1362 + 1 )
- {
- v1362 = i14;
- v30 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i14 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i14 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i14 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v30 - 136 * (v30 / 0x11 + 245 * (v30 / 0xF5)));
- v31 = *v1293;
- v32 = __ROL8__(*v1293, 4);
- v1305 = HIDWORD(v1268) & 0x50A70B50;
- v33 = (HIDWORD(v1268) | 0x50A70B50) - v1305;
- if ( !(v32 + (~v32 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v31 << 32) | ((v1268 & 0xAF58F4AF00000000ui64 | 0x50A70B5000000000i64) - (v1305 << 32))) == (v31 & v33) << 32 )
- goto LABEL_18;
- v1268 = (v1268 & ~v31) - (v31 | ~v1268) - v1268 - 1 + v31;
- }
- goto LABEL_47;
- }
- v8 = v7 - 1;
- if ( v8 )
- {
- v9 = v8 - 1;
- if ( v9 )
- {
- v10 = v9 - 1;
- if ( v10 )
- {
- if ( v10 == 1 && g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1264 = 0xAA2D145923EC7F30ui64;
- for ( i15 = 0i64; ; i15 = v1387 + 1 )
- {
- v1387 = i15;
- v12 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i15 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i15 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i15 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v12 - 136 * (v12 / 0x11 + 245 * (v12 / 0xF5)));
- v13 = *v1293;
- v14 = __ROL8__(*v1293, 4);
- v1301 = HIDWORD(v1264) & 0x43706C31;
- v15 = (HIDWORD(v1264) | 0x43706C31) - v1301;
- if ( !(v14 + (~v14 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1264 & 0xBC8F93CE00000000ui64 | 0x43706C3100000000i64) - (v1301 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1264 = (v1264 & ~v13) - (v13 | ~v1264) - v1264 - 1 + v13;
- }
- LABEL_19:
- v16 = (v13 & 0xEFFFFFFFFFFFFFFFui64) + (~v13 | 0xFFFFFFFF00000000ui64) + 0x1000000000000001i64;
- v17 = v15 | v16;
- v18 = v15 & v16;
- LABEL_20:
- v19 = v17 - v18;
- LABEL_21:
- *v1293 = v19;
- ++*(_DWORD *)g_acDetectionStatus;
- v2 = a2;
- }
- }
- else if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1265 = 0xAA2D145923EC7F30ui64;
- for ( i16 = 0i64; ; i16 = v1388 + 1 )
- {
- v1388 = i16;
- v21 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i16 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i16 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i16 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v21 - 136 * (v21 / 0x11 + 245 * (v21 / 0xF5)));
- v13 = *v1293;
- v22 = __ROL8__(*v1293, 4);
- v1302 = HIDWORD(v1265) & 0x43F83D14;
- v15 = (HIDWORD(v1265) | 0x43F83D14) - v1302;
- if ( !(v22 + (~v22 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1265 & 0xBC07C2EB00000000ui64 | 0x43F83D1400000000i64) - (v1302 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1265 = v13 - 1 + (v1265 & ~v13) - (v13 | ~v1265) - v1265;
- }
- goto LABEL_19;
- }
- }
- else if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1266 = 0xAA2D145923EC7F30ui64;
- for ( i17 = 0i64; ; i17 = v1390 + 1 )
- {
- v1390 = i17;
- v24 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i17 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i17 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i17 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v24 - 136 * (v24 / 0x11 + 245 * (v24 / 0xF5)));
- v13 = *v1293;
- v25 = __ROL8__(*v1293, 4);
- v1303 = HIDWORD(v1266) & 0x6573C2D0;
- v15 = (HIDWORD(v1266) | 0x6573C2D0) - v1303;
- if ( !(v25 + (~v25 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1266 & 0x9A8C3D2F00000000ui64 | 0x6573C2D000000000i64) - (v1303 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1266 = v13 - 1 + (v1266 & ~v13) - (v13 | ~v1266) - v1266;
- }
- goto LABEL_19;
- }
- }
- else if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v1267 = 0xAA2D145923EC7F30ui64;
- for ( i18 = 0i64; ; i18 = v1361 + 1 )
- {
- v1361 = i18;
- v27 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i18 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i18 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i18 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1293 = (unsigned __int64 *)((char *)&unk_14002B760 + 144 * v27 - 136 * (v27 / 0x11 + 245 * (v27 / 0xF5)));
- v13 = *v1293;
- v28 = __ROL8__(*v1293, 4);
- v1304 = HIDWORD(v1267) & 0xE2A99C94;
- v15 = (HIDWORD(v1267) | 0xE2A99C94) - v1304;
- if ( !(v28 + (~v28 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v13 << 32) | ((v1267 & 0x1D56636B00000000i64 | 0xE2A99C9400000000ui64) - (v1304 << 32))) == (v15 & v13) << 32 )
- goto LABEL_18;
- v1267 = v13 - 1 + (v1267 & ~v13) - (v13 | ~v1267) - v1267;
- }
- goto LABEL_19;
- }
- LABEL_209:
- if ( CurrentStackLocation->MajorFunction != 14 )
- goto LABEL_355;
- v1337 = -536870911;
- v2->IoStatus.Information = 0i64;
- p_MajorFunction = (unsigned int *)&v2->Tail.Overlay.CurrentStackLocation->MajorFunction;
- v1347 = p_MajorFunction[4];
- if ( v1347 >= 0x14 )
- {
- if ( p_MajorFunction[6] == -2147409916 )
- {
- MasterIrp = v2->AssociatedIrp.MasterIrp;
- v1292 = MasterIrp;
- memset(v1391, 0, sizeof(v1391));
- CurrentProcess = IoGetCurrentProcess();
- v1391[0] = PsGetProcessPeb(CurrentProcess);
- v1343 = ((unsigned __int64)(((((unsigned __int64)MEMORY[0xFFFFF78000000320] << 8)
- * (unsigned __int128)((unsigned __int64)MEMORY[0xFFFFF78000000004] << 32)) >> 64)
- - 1023) >> 11)
- * (v1391[0] >> 8);
- v1345 = v1343 ^ ~v1391[0];
- v130 = v1347;
- v1360 = (unsigned __int8 *)MasterIrp;
- v131 = HIBYTE(v1343) | ((BYTE6(v1343) | ((BYTE5(v1343) | ((BYTE4(v1343) | (((((unsigned int)((unsigned __int64)(((((unsigned __int64)MEMORY[0xFFFFF78000000320] << 8) * (unsigned __int128)((unsigned __int64)MEMORY[0xFFFFF78000000004] << 32)) >> 64) - 1023) >> 11)
- * (unsigned int)(v1391[0] >> 8)) >> 24) | ((BYTE2(v1343) | ((BYTE1(v1343) | ((unsigned __int64)(unsigned __int8)v1343 << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8);
- v1351 = v131;
- v132 = HIBYTE(v1345) | ((BYTE6(v1345) | ((BYTE5(v1345) | ((BYTE4(v1345) | (((((unsigned int)v1343 ^ ~LODWORD(v1391[0])) >> 24) | ((BYTE2(v1345) | ((BYTE1(v1345) | ((unsigned __int64)(unsigned __int8)v1345 << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8);
- P = v132;
- v133 = HIBYTE(v1391[0]) | ((BYTE6(v1391[0]) | ((BYTE5(v1391[0]) | ((BYTE4(v1391[0]) | ((BYTE3(v1391[0]) | ((BYTE2(v1391[0]) | ((BYTE1(v1391[0]) | ((unsigned __int64)LOBYTE(v1391[0]) << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8);
- v134 = HIBYTE(v1391[1]) | ((BYTE6(v1391[1]) | ((BYTE5(v1391[1]) | ((BYTE4(v1391[1]) | ((BYTE3(v1391[1]) | ((BYTE2(v1391[1]) | ((BYTE1(v1391[1]) | ((unsigned __int64)LOBYTE(v1391[1]) << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8);
- if ( v1347 >= 0x10ui64 )
- {
- v1339 = v1347 - 16i64;
- v136 = v134 ^ 0x80400C0600000000ui64;
- v137 = v131 ^ v132 ^ 0xF0;
- v138 = v133 ^ v134;
- v139 = v137 & ~v131 ^ v136;
- v140 = v137 ^ v138 & ~v133;
- v141 = v138 ^ v131 & ~v136;
- v142 = v131 ^ v139 ^ v133 & ~v137;
- v143 = __ROR8__(v142, 39);
- v144 = v133 ^ v140 ^ v136 & ~v138;
- v145 = __ROR8__(v140, 1);
- v146 = __ROR8__(v144, 10);
- v147 = v141 ^ v139;
- v148 = __ROR8__(v141, 7);
- v149 = v144 ^ __ROR8__(v146, 7) ^ v146;
- v150 = v143 ^ v142 ^ __ROR8__(v143, 22);
- v151 = __ROR8__(v147, 19);
- v152 = v141 ^ __ROR8__(v148, 34) ^ v148;
- v153 = v152 ^ v151 ^ v147 ^ __ROR8__(v151, 9);
- v154 = v145 ^ v140 ^ v150 ^ __ROR8__(v145, 5) ^ 0xFFFFFFFFFFFFFF1Eui64;
- v155 = v149 ^ v152;
- v156 = v154 & ~v150 ^ v153;
- v157 = v154 ^ v155 & ~v149;
- v158 = v155 ^ v150 & ~v153;
- v159 = v156 ^ v150 ^ v149 & ~v154;
- v160 = __ROR8__(v159, 39);
- v161 = v157 ^ v149 ^ v153 & ~v155;
- v162 = __ROR8__(v157, 1);
- v163 = __ROR8__(v161, 10);
- v164 = v158 ^ v156;
- v165 = __ROR8__(v158, 7);
- v166 = v161 ^ __ROR8__(v163, 7) ^ v163;
- v167 = v160 ^ v159 ^ __ROR8__(v160, 22);
- v168 = __ROR8__(v164, 19);
- v169 = v158 ^ __ROR8__(v165, 34) ^ v165;
- v170 = v169 ^ v168 ^ v164 ^ __ROR8__(v168, 9);
- v171 = v162 ^ v157 ^ v167 ^ __ROR8__(v162, 5) ^ 0xFFFFFFFFFFFFFF2Dui64;
- v172 = v166 ^ v169;
- v173 = v171 & ~v167 ^ v170;
- v174 = v171 ^ v172 & ~v166;
- v175 = v172 ^ v167 & ~v170;
- v176 = v173 ^ v167 ^ v166 & ~v171;
- v177 = __ROR8__(v176, 39);
- v178 = v174 ^ v166 ^ v170 & ~v172;
- v179 = __ROR8__(v174, 1);
- v180 = __ROR8__(v178, 10);
- v181 = v175 ^ v173;
- v182 = __ROR8__(v175, 7);
- v183 = v178 ^ __ROR8__(v180, 7) ^ v180;
- v184 = v177 ^ v176 ^ __ROR8__(v177, 22);
- v185 = __ROR8__(v181, 19);
- v186 = v175 ^ __ROR8__(v182, 34) ^ v182;
- v187 = v186 ^ v185 ^ v181 ^ __ROR8__(v185, 9);
- v188 = v179 ^ v174 ^ v184 ^ __ROR8__(v179, 5) ^ 0xFFFFFFFFFFFFFF3Cui64;
- v189 = v183 ^ v186;
- v190 = v188 & ~v184 ^ v187;
- v191 = v188 ^ v189 & ~v183;
- v192 = v189 ^ v184 & ~v187;
- v193 = v190 ^ v184 ^ v183 & ~v188;
- v194 = __ROR8__(v193, 39);
- v195 = v191 ^ v183 ^ v187 & ~v189;
- v196 = __ROR8__(v191, 1);
- v197 = __ROR8__(v195, 10);
- v198 = v192 ^ v190;
- v199 = __ROR8__(v192, 7);
- v200 = v195 ^ __ROR8__(v197, 7) ^ v197;
- v201 = v194 ^ v193 ^ __ROR8__(v194, 22);
- v202 = __ROR8__(v198, 19);
- v203 = v192 ^ __ROR8__(v199, 34) ^ v199;
- v204 = v203 ^ v202 ^ v198 ^ __ROR8__(v202, 9);
- v205 = v196 ^ v191 ^ v201 ^ __ROR8__(v196, 5) ^ 0xFFFFFFFFFFFFFF4Bui64;
- v206 = v200 ^ v203;
- v207 = v205 & ~v201 ^ v204;
- v208 = v205 ^ v206 & ~v200;
- v209 = v206 ^ v201 & ~v204;
- v210 = v207 ^ v201 ^ v200 & ~v205;
- v211 = __ROR8__(v210, 39);
- v212 = v208 ^ v200 ^ v204 & ~v206;
- v213 = __ROR8__(v208, 1);
- v214 = __ROR8__(v212, 10);
- v215 = v209 ^ v207;
- v216 = __ROR8__(v209, 7);
- v217 = v212 ^ __ROR8__(v214, 7) ^ v214;
- v218 = v211 ^ v210 ^ __ROR8__(v211, 22);
- v219 = __ROR8__(v215, 19);
- v220 = v209 ^ __ROR8__(v216, 34) ^ v216;
- v221 = v220 ^ v219 ^ v215 ^ __ROR8__(v219, 9);
- v222 = v213 ^ v208 ^ v218 ^ __ROR8__(v213, 5) ^ 0xFFFFFFFFFFFFFF5Aui64;
- v223 = v217 ^ v220;
- v224 = v222 & ~v218 ^ v221;
- v225 = v222 ^ v223 & ~v217;
- v226 = v223 ^ v218 & ~v221;
- v227 = v224 ^ v218 ^ v217 & ~v222;
- v228 = __ROR8__(v227, 39);
- v229 = v225 ^ v217 ^ v221 & ~v223;
- v230 = __ROR8__(v225, 1);
- v231 = __ROR8__(v229, 10);
- v232 = v226 ^ v224;
- v233 = __ROR8__(v226, 7);
- v234 = v229 ^ __ROR8__(v231, 7) ^ v231;
- v235 = v228 ^ v227 ^ __ROR8__(v228, 22);
- v236 = __ROR8__(v232, 19);
- v237 = v226 ^ __ROR8__(v233, 34) ^ v233;
- v238 = v237 ^ v236 ^ v232 ^ __ROR8__(v236, 9);
- v239 = v230 ^ v225 ^ v235 ^ __ROR8__(v230, 5) ^ 0xFFFFFFFFFFFFFF69ui64;
- v240 = v234 ^ v237;
- v241 = v239 & ~v235 ^ v238;
- v242 = v239 ^ v240 & ~v234;
- v243 = v240 ^ v235 & ~v238;
- v244 = v241 ^ v235 ^ v234 & ~v239;
- v245 = __ROR8__(v244, 39);
- v246 = v242 ^ v234 ^ v238 & ~v240;
- v247 = __ROR8__(v242, 1);
- v248 = __ROR8__(v246, 10);
- v249 = v243 ^ v241;
- v250 = __ROR8__(v243, 7);
- v251 = v246 ^ __ROR8__(v248, 7) ^ v248;
- v252 = v245 ^ v244 ^ __ROR8__(v245, 22);
- v253 = __ROR8__(v249, 19);
- v254 = v243 ^ __ROR8__(v250, 34) ^ v250;
- v255 = v254 ^ v253 ^ v249 ^ __ROR8__(v253, 9);
- v256 = v247 ^ v242 ^ v252 ^ __ROR8__(v247, 5) ^ 0xFFFFFFFFFFFFFF78ui64;
- v257 = v251 ^ v254;
- v258 = v256 & ~v252 ^ v255;
- v259 = v256 ^ v257 & ~v251;
- v260 = v257 ^ v252 & ~v255;
- v261 = v258 ^ v252 ^ v251 & ~v256;
- v262 = __ROR8__(v261, 39);
- v263 = v259 ^ v251 ^ v255 & ~v257;
- v264 = __ROR8__(v259, 1);
- v265 = __ROR8__(v263, 10);
- v266 = v260 ^ v258;
- v267 = __ROR8__(v260, 7);
- v268 = v263 ^ __ROR8__(v265, 7) ^ v265;
- v269 = v262 ^ v261 ^ __ROR8__(v262, 22);
- v270 = __ROR8__(v266, 19);
- v271 = v260 ^ __ROR8__(v267, 34) ^ v267;
- v272 = v271 ^ v270 ^ v266 ^ __ROR8__(v270, 9);
- v273 = v264 ^ v259 ^ v269 ^ __ROR8__(v264, 5) ^ 0xFFFFFFFFFFFFFF87ui64;
- v274 = v268 ^ v271;
- v275 = v273 & ~v269 ^ v272;
- v276 = v273 ^ v274 & ~v268;
- v277 = v274 ^ v269 & ~v272;
- v278 = v275 ^ v269 ^ v268 & ~v273;
- v279 = __ROR8__(v278, 39);
- v280 = v276 ^ v268 ^ v272 & ~v274;
- v281 = __ROR8__(v276, 1);
- v282 = __ROR8__(v280, 10);
- v283 = v277 ^ v275;
- v284 = __ROR8__(v277, 7);
- v285 = v280 ^ __ROR8__(v282, 7) ^ v282;
- v286 = v279 ^ v278 ^ __ROR8__(v279, 22);
- v287 = __ROR8__(v283, 19);
- v288 = v277 ^ __ROR8__(v284, 34) ^ v284;
- v289 = v288 ^ v287 ^ v283 ^ __ROR8__(v287, 9);
- v290 = v281 ^ v276 ^ v286 ^ __ROR8__(v281, 5) ^ 0xFFFFFFFFFFFFFF96ui64;
- v291 = v285 ^ v288;
- v292 = v290 & ~v286 ^ v289;
- v293 = v290 ^ v291 & ~v285;
- v294 = v291 ^ v286 & ~v289;
- v295 = v292 ^ v286 ^ v285 & ~v290;
- v296 = __ROR8__(v295, 39);
- v297 = v293 ^ v285 ^ v289 & ~v291;
- v298 = __ROR8__(v293, 1);
- v299 = __ROR8__(v297, 10);
- v300 = v294 ^ v292;
- v301 = __ROR8__(v294, 7);
- v302 = v297 ^ __ROR8__(v299, 7) ^ v299;
- v303 = v296 ^ v295 ^ __ROR8__(v296, 22);
- v304 = __ROR8__(v300, 19);
- v305 = v294 ^ __ROR8__(v301, 34) ^ v301;
- v306 = v305 ^ v304 ^ v300 ^ __ROR8__(v304, 9);
- v307 = v298 ^ v293 ^ v303 ^ __ROR8__(v298, 5) ^ 0xFFFFFFFFFFFFFFA5ui64;
- v308 = v302 ^ v305;
- v309 = v307 & ~v303 ^ v306;
- v310 = v307 ^ v308 & ~v302;
- v311 = v308 ^ v303 & ~v306;
- v312 = v309 ^ v303 ^ v302 & ~v307;
- v313 = __ROR8__(v312, 39);
- v314 = v310 ^ v302 ^ v306 & ~v308;
- v315 = __ROR8__(v310, 1);
- v316 = __ROR8__(v314, 10);
- v317 = v311 ^ v309;
- v318 = __ROR8__(v311, 7);
- v319 = v314 ^ __ROR8__(v316, 7) ^ v316;
- v320 = v313 ^ v312 ^ __ROR8__(v313, 22);
- v321 = __ROR8__(v317, 19);
- v322 = v311 ^ __ROR8__(v318, 34) ^ v318;
- v323 = v322 ^ v321 ^ v317 ^ __ROR8__(v321, 9);
- v324 = v315 ^ v310 ^ v320 ^ __ROR8__(v315, 5) ^ 0xFFFFFFFFFFFFFFB4ui64;
- v325 = v319 ^ v322;
- v326 = v324 & ~v320 ^ v323;
- v327 = v324 ^ v325 & ~v319;
- v328 = v325 ^ v320 & ~v323;
- v329 = v326 ^ v320 ^ v319 & ~v324;
- v330 = __ROR8__(v329, 39);
- v331 = v327 ^ v319 ^ v323 & ~v325;
- v332 = __ROR8__(v327, 1);
- v333 = __ROR8__(v331, 10);
- v334 = v328 ^ v326;
- v335 = __ROR8__(v328, 7);
- v336 = ~(v332 ^ v327 ^ __ROR8__(v332, 5));
- v1356 = v330 ^ v329 ^ __ROR8__(v330, 22);
- v337 = __ROR8__(v334, 19);
- v338 = v337 ^ v334 ^ __ROR8__(v337, 9);
- v339 = v1351 ^ v333 ^ v331 ^ __ROR8__(v333, 7);
- v1295 = v339;
- v340 = P ^ v335 ^ v328 ^ __ROR8__(v335, 34) ^ 1;
- v1353 = v340;
- v341 = v1339;
- v342 = v1360;
- v343 = v1356;
- while ( 1 )
- {
- v1359 = v341;
- if ( v341 < 8 )
- break;
- *v342 ^= HIBYTE(v338);
- v344 = *v342;
- v345 = (unsigned __int8)(v342[1] ^ BYTE6(v338));
- v342[1] = v345;
- v346 = (unsigned __int8)(v342[2] ^ BYTE5(v338));
- v342[2] = v346;
- v347 = (unsigned __int8)(v342[3] ^ BYTE4(v338));
- v342[3] = v347;
- v348 = (unsigned __int8)(v342[4] ^ BYTE3(v338));
- v342[4] = v348;
- v349 = (unsigned __int8)(v342[5] ^ BYTE2(v338));
- v342[5] = v349;
- v350 = (unsigned __int8)(v342[6] ^ BYTE1(v338));
- v342[6] = v350;
- v342[7] ^= v338;
- v351 = v1353 ^ (v342[7] | ((v350 | ((v349 | ((v348 | ((v347 | ((v346 | ((v345 | (v344 << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) ^ v338;
- v352 = v1356 ^ v336 ^ 0x96;
- v353 = v352 & ~v1356 ^ v351;
- v354 = v352 ^ (v1295 ^ v1353) & ~v1295;
- v355 = v1295 ^ v1353 ^ v1356 & ~v351;
- v356 = v353 ^ v1356 ^ v1295 & ~v352;
- v357 = __ROR8__(v356, 39);
- v358 = v354 ^ v1295 ^ v351 & ~(v1295 ^ v1353);
- v359 = __ROR8__(v354, 1);
- v360 = __ROR8__(v358, 10);
- v361 = __ROR8__(v355, 7);
- v362 = v355 ^ v353;
- v363 = v358 ^ __ROR8__(v360, 7) ^ v360;
- v364 = v357 ^ v356 ^ __ROR8__(v357, 22);
- v365 = __ROR8__(v355 ^ v353, 19);
- v366 = v355 ^ __ROR8__(v361, 34) ^ v361;
- v367 = v366 ^ v365 ^ v362 ^ __ROR8__(v365, 9);
- v368 = v359 ^ v354 ^ v364 ^ __ROR8__(v359, 5) ^ 0xFFFFFFFFFFFFFF78ui64;
- v369 = v363 ^ v366;
- v370 = v368 & ~v364 ^ v367;
- v371 = v368 ^ v369 & ~v363;
- v372 = v369 ^ v364 & ~v367;
- v373 = v370 ^ v364 ^ v363 & ~v368;
- v374 = __ROR8__(v373, 39);
- v375 = v371 ^ v363 ^ v367 & ~v369;
- v376 = __ROR8__(v371, 1);
- v377 = __ROR8__(v375, 10);
- v378 = __ROR8__(v372, 7);
- v379 = v372 ^ v370;
- v380 = v375 ^ __ROR8__(v377, 7) ^ v377;
- v381 = v374 ^ v373 ^ __ROR8__(v374, 22);
- v382 = __ROR8__(v372 ^ v370, 19);
- v383 = v372 ^ __ROR8__(v378, 34) ^ v378;
- v384 = v383 ^ v382 ^ v379 ^ __ROR8__(v382, 9);
- v385 = v376 ^ v371 ^ v381 ^ __ROR8__(v376, 5) ^ 0xFFFFFFFFFFFFFF87ui64;
- v386 = v380 ^ v383;
- v387 = v385 & ~v381 ^ v384;
- v388 = v385 ^ v386 & ~v380;
- v389 = v386 ^ v381 & ~v384;
- v390 = v387 ^ v381 ^ v380 & ~v385;
- v391 = __ROR8__(v390, 39);
- v392 = v388 ^ v380 ^ v384 & ~v386;
- v393 = __ROR8__(v388, 1);
- v394 = __ROR8__(v392, 10);
- v395 = __ROR8__(v389, 7);
- v396 = v389 ^ v387;
- v397 = v392 ^ __ROR8__(v394, 7) ^ v394;
- v398 = v391 ^ v390 ^ __ROR8__(v391, 22);
- v399 = __ROR8__(v389 ^ v387, 19);
- v400 = v389 ^ __ROR8__(v395, 34) ^ v395;
- v401 = v400 ^ v399 ^ v396 ^ __ROR8__(v399, 9);
- v402 = v393 ^ v388 ^ v398 ^ __ROR8__(v393, 5) ^ 0xFFFFFFFFFFFFFF96ui64;
- v403 = v397 ^ v400;
- v404 = v402 & ~v398 ^ v401;
- v405 = v402 ^ v403 & ~v397;
- v406 = v403 ^ v398 & ~v401;
- v407 = v404 ^ v398 ^ v397 & ~v402;
- v408 = __ROR8__(v407, 39);
- v409 = v405 ^ v397 ^ v401 & ~v403;
- v410 = __ROR8__(v405, 1);
- v411 = __ROR8__(v409, 10);
- v412 = __ROR8__(v406, 7);
- v413 = v406 ^ v404;
- v414 = v409 ^ __ROR8__(v411, 7) ^ v411;
- v415 = v408 ^ v407 ^ __ROR8__(v408, 22);
- v416 = __ROR8__(v406 ^ v404, 19);
- v417 = v406 ^ __ROR8__(v412, 34) ^ v412;
- v418 = v417 ^ v416 ^ v413 ^ __ROR8__(v416, 9);
- v419 = v410 ^ v405 ^ v415 ^ __ROR8__(v410, 5) ^ 0xFFFFFFFFFFFFFFA5ui64;
- v420 = v414 ^ v417;
- v421 = v419 & ~v415 ^ v418;
- v422 = v419 ^ v420 & ~v414;
- v423 = v420 ^ v415 & ~v418;
- v424 = v421 ^ v415 ^ v414 & ~v419;
- v425 = __ROR8__(v424, 39);
- v426 = v422 ^ v414 ^ v418 & ~v420;
- v427 = __ROR8__(v422, 1);
- v428 = v423;
- v429 = __ROR8__(v426, 10);
- v430 = v423 ^ v421;
- v431 = __ROR8__(v423, 7);
- v432 = v430;
- v433 = v426 ^ __ROR8__(v429, 7) ^ v429;
- v434 = v425 ^ v424 ^ __ROR8__(v425, 22);
- v435 = __ROR8__(v430, 19);
- v436 = v428 ^ __ROR8__(v431, 34) ^ v431;
- v437 = v436 ^ v435 ^ v432 ^ __ROR8__(v435, 9);
- v438 = v427 ^ v422 ^ v434 ^ __ROR8__(v427, 5) ^ 0xFFFFFFFFFFFFFFB4ui64;
- v439 = v433 ^ v436;
- v440 = v438 & ~v434 ^ v437;
- v441 = v438 ^ v439 & ~v433;
- v1354 = v439 ^ v434 & ~v437;
- v442 = v440 ^ v434 ^ v433 & ~v438;
- v443 = __ROR8__(v442, 39);
- v444 = v441 ^ v433 ^ v437 & ~v439;
- v445 = v441;
- v446 = __ROR8__(v441, 1);
- v447 = v444;
- v448 = __ROR8__(v444, 10);
- v449 = __ROR8__(v1354, 7);
- v450 = v1354 ^ v440;
- v336 = ~(v446 ^ v445 ^ __ROR8__(v446, 5));
- v339 = v448 ^ v447 ^ __ROR8__(v448, 7);
- v1295 = v339;
- v343 = v443 ^ v442 ^ __ROR8__(v443, 22);
- v1356 = v343;
- v451 = __ROR8__(v1354 ^ v440, 19);
- v340 = v449 ^ v1354 ^ __ROR8__(v449, 34);
- v1353 = v340;
- v338 = v451 ^ v450 ^ __ROR8__(v451, 9);
- v341 = v1359 - 8;
- v342 += 8;
- v1360 = v342;
- }
- v452 = (128i64 << (8 * (7 - (unsigned __int8)v341))) ^ v338;
- for ( i19 = 0; ; ++i19 )
- {
- v454 = v342 + 1;
- v1296 = v342 + 1;
- if ( i19 >= v341 )
- break;
- v455 = *v342;
- *v342++ = v455 ^ (v452 >> (8 * (7 - i19)));
- v1360 = v454;
- v452 = ((unsigned __int64)v455 << (8 * (7 - i19))) | ~(255i64 << (8 * (7 - i19))) & v452;
- v341 = v1359;
- }
- v456 = v1351 ^ v343;
- v457 = v340 ^ v452;
- v458 = P ^ v456 ^ v336 ^ 0xF0;
- v459 = v339 ^ v340;
- v460 = v458 & ~v456 ^ v457;
- v461 = v458 ^ v459 & ~v339;
- v462 = v459 ^ v456 & ~v457;
- v463 = v460 ^ v456 ^ v339 & ~v458;
- v464 = __ROR8__(v463, 39);
- v465 = v461 ^ v339 ^ v457 & ~v459;
- v466 = __ROR8__(v461, 1);
- v467 = __ROR8__(v465, 10);
- v468 = v462 ^ v460;
- v469 = __ROR8__(v462, 7);
- v470 = v465 ^ __ROR8__(v467, 7) ^ v467;
- v471 = v464 ^ v463 ^ __ROR8__(v464, 22);
- v472 = __ROR8__(v468, 19);
- v473 = v462 ^ __ROR8__(v469, 34) ^ v469;
- v474 = v473 ^ v472 ^ v468 ^ __ROR8__(v472, 9);
- v475 = v466 ^ v461 ^ v471 ^ __ROR8__(v466, 5) ^ 0xFFFFFFFFFFFFFF1Eui64;
- v476 = v470 ^ v473;
- v477 = v475 & ~v471 ^ v474;
- v478 = v475 ^ v476 & ~v470;
- v479 = v476 ^ v471 & ~v474;
- v480 = v477 ^ v471 ^ v470 & ~v475;
- v481 = __ROR8__(v480, 39);
- v482 = v478 ^ v470 ^ v474 & ~v476;
- v483 = __ROR8__(v478, 1);
- v484 = __ROR8__(v482, 10);
- v485 = v479 ^ v477;
- v486 = __ROR8__(v479, 7);
- v487 = v482 ^ __ROR8__(v484, 7) ^ v484;
- v488 = v481 ^ v480 ^ __ROR8__(v481, 22);
- v489 = __ROR8__(v485, 19);
- v490 = v479 ^ __ROR8__(v486, 34) ^ v486;
- v491 = v490 ^ v489 ^ v485 ^ __ROR8__(v489, 9);
- v492 = v483 ^ v478 ^ v488 ^ __ROR8__(v483, 5) ^ 0xFFFFFFFFFFFFFF2Dui64;
- v493 = v487 ^ v490;
- v494 = v492 & ~v488 ^ v491;
- v495 = v492 ^ v493 & ~v487;
- v496 = v493 ^ v488 & ~v491;
- v497 = v494 ^ v488 ^ v487 & ~v492;
- v498 = __ROR8__(v497, 39);
- v499 = v495 ^ v487 ^ v491 & ~v493;
- v500 = __ROR8__(v495, 1);
- v501 = __ROR8__(v499, 10);
- v502 = v496 ^ v494;
- v503 = __ROR8__(v496, 7);
- v504 = v499 ^ __ROR8__(v501, 7) ^ v501;
- v505 = v498 ^ v497 ^ __ROR8__(v498, 22);
- v506 = __ROR8__(v502, 19);
- v507 = v496 ^ __ROR8__(v503, 34) ^ v503;
- v508 = v507 ^ v506 ^ v502 ^ __ROR8__(v506, 9);
- v509 = v500 ^ v495 ^ v505 ^ __ROR8__(v500, 5) ^ 0xFFFFFFFFFFFFFF3Cui64;
- v510 = v504 ^ v507;
- v511 = v509 & ~v505 ^ v508;
- v512 = v509 ^ v510 & ~v504;
- v513 = v510 ^ v505 & ~v508;
- v514 = v511 ^ v505 ^ v504 & ~v509;
- v515 = __ROR8__(v514, 39);
- v516 = v512 ^ v504 ^ v508 & ~v510;
- v517 = __ROR8__(v512, 1);
- v518 = __ROR8__(v516, 10);
- v519 = v513 ^ v511;
- v520 = __ROR8__(v513, 7);
- v521 = v516 ^ __ROR8__(v518, 7) ^ v518;
- v522 = v515 ^ v514 ^ __ROR8__(v515, 22);
- v523 = __ROR8__(v519, 19);
- v524 = v513 ^ __ROR8__(v520, 34) ^ v520;
- v525 = v524 ^ v523 ^ v519 ^ __ROR8__(v523, 9);
- v526 = v517 ^ v512 ^ v522 ^ __ROR8__(v517, 5) ^ 0xFFFFFFFFFFFFFF4Bui64;
- v527 = v521 ^ v524;
- v528 = v526 & ~v522 ^ v525;
- v529 = v526 ^ v527 & ~v521;
- v530 = v527 ^ v522 & ~v525;
- v531 = v528 ^ v522 ^ v521 & ~v526;
- v532 = __ROR8__(v531, 39);
- v533 = v529 ^ v521 ^ v525 & ~v527;
- v534 = __ROR8__(v529, 1);
- v535 = __ROR8__(v533, 10);
- v536 = v530 ^ v528;
- v537 = __ROR8__(v530, 7);
- v538 = v533 ^ __ROR8__(v535, 7) ^ v535;
- v539 = v532 ^ v531 ^ __ROR8__(v532, 22);
- v540 = __ROR8__(v536, 19);
- v541 = v530 ^ __ROR8__(v537, 34) ^ v537;
- v542 = v541 ^ v540 ^ v536 ^ __ROR8__(v540, 9);
- v543 = v534 ^ v529 ^ v539 ^ __ROR8__(v534, 5) ^ 0xFFFFFFFFFFFFFF5Aui64;
- v544 = v538 ^ v541;
- v545 = v543 & ~v539 ^ v542;
- v546 = v543 ^ v544 & ~v538;
- v547 = v544 ^ v539 & ~v542;
- v548 = v545 ^ v539 ^ v538 & ~v543;
- v549 = __ROR8__(v548, 39);
- v550 = v546 ^ v538 ^ v542 & ~v544;
- v551 = __ROR8__(v546, 1);
- v552 = __ROR8__(v550, 10);
- v553 = v547 ^ v545;
- v554 = __ROR8__(v547, 7);
- v555 = v550 ^ __ROR8__(v552, 7) ^ v552;
- v556 = v549 ^ v548 ^ __ROR8__(v549, 22);
- v557 = __ROR8__(v553, 19);
- v558 = v547 ^ __ROR8__(v554, 34) ^ v554;
- v559 = v558 ^ v557 ^ v553 ^ __ROR8__(v557, 9);
- v560 = v551 ^ v546 ^ v556 ^ __ROR8__(v551, 5) ^ 0xFFFFFFFFFFFFFF69ui64;
- v561 = v555 ^ v558;
- v562 = v560 & ~v556 ^ v559;
- v563 = v560 ^ v561 & ~v555;
- v564 = v561 ^ v556 & ~v559;
- v565 = v562 ^ v556 ^ v555 & ~v560;
- v566 = __ROR8__(v565, 39);
- v567 = v563 ^ v555 ^ v559 & ~v561;
- v568 = __ROR8__(v563, 1);
- v569 = __ROR8__(v567, 10);
- v570 = v564 ^ v562;
- v571 = __ROR8__(v564, 7);
- v572 = v567 ^ __ROR8__(v569, 7) ^ v569;
- v573 = v566 ^ v565 ^ __ROR8__(v566, 22);
- v574 = __ROR8__(v570, 19);
- v575 = v564 ^ __ROR8__(v571, 34) ^ v571;
- v576 = v575 ^ v574 ^ v570 ^ __ROR8__(v574, 9);
- v577 = v568 ^ v563 ^ v573 ^ __ROR8__(v568, 5) ^ 0xFFFFFFFFFFFFFF78ui64;
- v578 = v572 ^ v575;
- v579 = v577 & ~v573 ^ v576;
- v580 = v577 ^ v578 & ~v572;
- v581 = v578 ^ v573 & ~v576;
- v582 = v579 ^ v573 ^ v572 & ~v577;
- v583 = __ROR8__(v582, 39);
- v584 = v580 ^ v572 ^ v576 & ~v578;
- v585 = __ROR8__(v580, 1);
- v586 = __ROR8__(v584, 10);
- v587 = v581 ^ v579;
- v588 = __ROR8__(v581, 7);
- v589 = v584 ^ __ROR8__(v586, 7) ^ v586;
- v590 = v583 ^ v582 ^ __ROR8__(v583, 22);
- v591 = __ROR8__(v587, 19);
- v592 = v581 ^ __ROR8__(v588, 34) ^ v588;
- v593 = v592 ^ v591 ^ v587 ^ __ROR8__(v591, 9);
- v594 = v585 ^ v580 ^ v590 ^ __ROR8__(v585, 5) ^ 0xFFFFFFFFFFFFFF87ui64;
- v595 = v589 ^ v592;
- v596 = v594 & ~v590 ^ v593;
- v597 = v594 ^ v595 & ~v589;
- v598 = v595 ^ v590 & ~v593;
- v599 = v596 ^ v590 ^ v589 & ~v594;
- v600 = __ROR8__(v599, 39);
- v601 = v597 ^ v589 ^ v593 & ~v595;
- v602 = __ROR8__(v597, 1);
- v603 = __ROR8__(v601, 10);
- v604 = v598 ^ v596;
- v605 = __ROR8__(v598, 7);
- v606 = v601 ^ __ROR8__(v603, 7) ^ v603;
- v607 = v600 ^ v599 ^ __ROR8__(v600, 22);
- v608 = __ROR8__(v604, 19);
- v609 = v598 ^ __ROR8__(v605, 34) ^ v605;
- v610 = v609 ^ v608 ^ v604 ^ __ROR8__(v608, 9);
- v611 = v602 ^ v597 ^ v607 ^ __ROR8__(v602, 5) ^ 0xFFFFFFFFFFFFFF96ui64;
- v612 = v606 ^ v609;
- v613 = v611 & ~v607 ^ v610;
- v614 = v611 ^ v612 & ~v606;
- v615 = v612 ^ v607 & ~v610;
- v616 = v613 ^ v607 ^ v606 & ~v611;
- v617 = __ROR8__(v616, 39);
- v618 = v614 ^ v606 ^ v610 & ~v612;
- v619 = __ROR8__(v614, 1);
- v620 = __ROR8__(v618, 10);
- v1262 = v615 ^ v613;
- v621 = __ROR8__(v615, 7);
- v622 = v618 ^ __ROR8__(v620, 7) ^ v620;
- v623 = v617 ^ v616 ^ __ROR8__(v617, 22);
- v624 = __ROR8__(v1262, 19);
- v625 = v615 ^ __ROR8__(v621, 34) ^ v621;
- v626 = v625 ^ v624 ^ v1262 ^ __ROR8__(v624, 9);
- v627 = v619 ^ v614 ^ v623 ^ __ROR8__(v619, 5) ^ 0xFFFFFFFFFFFFFFA5ui64;
- v628 = v622 ^ v625;
- v629 = v627 & ~v623 ^ v626;
- v630 = v627 ^ v628 & ~v622;
- v631 = v628 ^ v623 & ~v626;
- v632 = v629 ^ v623 ^ v622 & ~v627;
- v633 = __ROR8__(v632, 39);
- v634 = v630 ^ v622 ^ v626 & ~v628;
- v635 = __ROR8__(v630, 1);
- v636 = __ROR8__(v634, 10);
- v637 = v631 ^ v629;
- v638 = __ROR8__(v631, 7);
- v639 = v634 ^ __ROR8__(v636, 7) ^ v636;
- v640 = v633 ^ v632 ^ __ROR8__(v633, 22);
- v641 = __ROR8__(v637, 19);
- v642 = v631 ^ __ROR8__(v638, 34) ^ v638;
- v643 = v642 ^ v641 ^ v637 ^ __ROR8__(v641, 9);
- v644 = v635 ^ v630 ^ v640 ^ __ROR8__(v635, 5) ^ 0xFFFFFFFFFFFFFFB4ui64;
- v645 = v639 ^ v642;
- v646 = v644 & ~v640 ^ v643;
- v647 = v645 ^ v640 & ~v643;
- v648 = v644 ^ (v639 | v645) ^ v643 & ~v645;
- v649 = __ROR8__(v648, 10);
- v650 = v647 ^ v646;
- v651 = __ROR8__(v647, 7);
- v652 = __ROR8__(v650, 19);
- v1261 = v652 ^ v650 ^ __ROR8__(v652, 9);
- v134 = v1351 ^ v649 ^ v648 ^ __ROR8__(v649, 7);
- v653 = P ^ v651 ^ v647 ^ __ROR8__(v651, 34);
- v132 = (unsigned __int64)v1360;
- v130 = v134 ^ (v1360[7] | ((v1360[6] | ((v1360[5] | ((v1360[4] | ((v1360[3] | ((v1360[2] | ((*v1296 | ((unsigned __int64)*v1360 << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) | v653 ^ (v1360[15] | ((v1360[14] | ((v1360[13] | ((v1360[12] | ((v1360[11] | ((v1360[10] | ((v1360[9] | ((unsigned __int64)v1360[8] << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8));
- MasterIrp = v1292;
- if ( v130 )
- {
- v132 = (unsigned __int64)&v1360[-v1339];
- memset(&v1360[-v1339], 0, v1347);
- v3 = 0i64;
- v1339 = 0i64;
- v135 = 2;
- }
- else
- {
- memset(v1360, 0, 0x10ui64);
- v3 = 0i64;
- v135 = 0;
- }
- }
- else
- {
- v1339 = 0i64;
- v135 = 1;
- }
- if ( v1339 && !v135 )
- {
- v654 = *(_DWORD *)&MasterIrp->Type;
- if ( *(_DWORD *)&MasterIrp->Type != 603533740 )
- {
- switch ( v654 )
- {
- case 2132362219:
- v688 = KeAcquireSpinLockRaiseToDpc(&SpinLock);
- Length = a2->Tail.Overlay.CurrentStackLocation->Parameters.Read.Length;
- v690 = *(_DWORD *)g_acDetectionStatus;
- v1355 = *(_DWORD *)g_acDetectionStatus;
- v691 = 4 * *(_DWORD *)g_acDetectionStatus + 20;
- v1338 = v691;
- if ( Length && Length >= v691 )
- {
- PoolWithTag = ExAllocatePoolWithTag(NonPagedPool, 4i64 * v690, 0x656E6F4Eu);
- if ( PoolWithTag )
- {
- v693 = 0;
- if ( v690 )
- {
- v1358 = 0;
- if ( g_acDetectionStatus )
- {
- v1340 = *(_DWORD *)g_acDetectionStatus;
- v1348 = *((_DWORD *)g_acDetectionStatus + 2);
- v694 = 0i64;
- for ( i20 = 0i64; i20 < 8; ++i20 )
- {
- v696 = 14
- * (8
- * (unsigned __int64)byte_140033988[4 * (9 * (8 * i20 % 9) % 0x11)
- - 3
- * (9 * (8 * i20 % 9) % 0x11 / 3
- + 10 * (9 * (8 * i20 % 9) % 0x11 / 0xA))]
- % 0xD)
- % 0xD;
- v694 = byte_140033988[4 * v696 - 3 * (v696 / 3 + 10 * (v696 / 0xA)) + 32] + (v694 << 8);
- }
- for ( i21 = *((_DWORD *)g_acDetectionStatus + 2); i21 < v1340; i21 = ++v1348 )
- {
- if ( v693 >= v1355 )
- break;
- v698 = 3611 * (2000 * (unsigned __int64)i21 % 0xE1B) % 0x1107;
- v699 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * v698
- - 102 * (v698 / 0x33 + 98 * (v698 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v700 = *(_QWORD *)((char *)&unk_14002B760
- + 144 * v699
- - 136 * (v699 / 0x11 + 245 * (v699 / 0xF5)));
- v1297 = v700;
- v701 = __ROR8__(v700, 60);
- if ( !((((((~v701 & 0xFFFFFFFFFFFFFFFEui64) + 1) & v701)
- + (((~v701 & 0xFFFFFFFFFFFFFFFEui64) + 1) | v701)) ^ 1)
- + 2i64 * (((_BYTE)v701 - 1) & 1)) )
- break;
- v702 = ~v700;
- PoolWithTag[v1358] = ((HIDWORD(v694) + v702 - (2 * (HIDWORD(v694) | ~(_DWORD)v1297) + 2) + 1) | 0xDC98993)
- - ((HIDWORD(v694) + v702 - (2 * (HIDWORD(v694) | v702) + 2) + 1) & 0xDC98993);
- v693 = ++v1358;
- v694 = (((v694 & v702) + v1297) & ~(v694 + (v1297 | ~v694) + 1))
- - ((v694 + (v1297 | ~v694) + 1) & ~((v694 & v702) + v1297));
- }
- for ( i22 = 0i64; i22 < 8; ++i22 )
- {
- v704 = 9 * (8 * (7 - i22) % 9) % 0x11;
- v705 = 14
- * (8 * (unsigned __int64)byte_140033988[4 * v704 - 3 * (v704 / 3 + 10 * (v704 / 0xA))] % 0xD)
- % 0xD;
- byte_140033988[4 * v705 - 3 * (v705 / 3 + 10 * (v705 / 0xA)) + 32] = v694;
- v694 >>= 8;
- }
- *((_DWORD *)g_acDetectionStatus + 2) = v1348;
- v691 = v1338;
- }
- }
- if ( v693 > v1355 )
- v693 = v1355;
- for ( i23 = 0; i23 < v693; ++i23 )
- *(_DWORD *)(&v1292->Size + 2 * i23 + 1) = PoolWithTag[i23];
- *(_DWORD *)&v1292->Type = v693;
- a2->IoStatus.Information = v691;
- memset(PoolWithTag, 0, 4i64 * v690);
- ExFreePoolWithTag(PoolWithTag, 0);
- v707 = g_acDetectionStatus;
- if ( g_acDetectionStatus )
- {
- v708 = 12i64;
- while ( v708-- )
- *v707++ = 0;
- for ( i24 = 0i64; i24 < 0x7D0; ++i24 )
- {
- v711 = (2000 * i24 * (unsigned __int128)0x2262427FC07A8175ui64) >> 64;
- v712 = 3611 * (2000 * i24 - 3611 * ((v711 + ((2000 * i24 - v711) >> 1)) >> 11)) % 0x1107;
- v713 = 102 * (v712 / 0x33 + 98 * (v712 / 0x62));
- v714 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050 + 104 * v712 - v713)
- % 0xC9D)
- % 0xC9D;
- v715 = 136 * (v714 / 0x11 + 245 * (v714 / 0xF5));
- *(_QWORD *)((char *)&unk_14002B760 + 144 * v714 - v715) ^= (*(_QWORD *)((char *)&unk_14002B760
- + 144 * v714
- - v715) ^ __rdtsc()) << 32;
- v716 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050 + 104 * v712 - v713)
- % 0xC9D)
- % 0xC9D;
- v717 = 144 * v716 - 136 * (v716 / 0x11 + 245 * (v716 / 0xF5));
- *(_QWORD *)((char *)&unk_14002B760 + v717) &= 0xEFFFFFFFFFFFFFE0ui64;
- }
- v718 = 0xAA2D145923EC7F30ui64;
- for ( i25 = 0i64; i25 < 8; ++i25 )
- {
- v720 = 9 * (8 * (7 - i25) % 9) % 0x11;
- v721 = 14
- * (8 * (unsigned __int64)byte_140033988[4 * v720 - 3 * (v720 / 3 + 10 * (v720 / 0xA))] % 0xD)
- % 0xD;
- byte_140033988[4 * v721 - 3 * (v721 / 3 + 10 * (v721 / 0xA)) + 32] = v718;
- v718 >>= 8;
- }
- }
- KeReleaseSpinLock(&SpinLock, v688);
- goto LABEL_250;
- }
- KeReleaseSpinLock(&SpinLock, v688);
- v1337 = -536870889;
- }
- else
- {
- v1337 = v691 & 0x1FFFFFFF | 0x60000000;
- KeReleaseSpinLock(&SpinLock, v688);
- }
- LABEL_337:
- v1344 = ((unsigned __int64)(((((unsigned __int64)MEMORY[0xFFFFF78000000320] << 8)
- * (unsigned __int128)((unsigned __int64)MEMORY[0xFFFFF78000000004] << 32)) >> 64)
- - 1023) >> 11)
- * (v1391[0] >> 8);
- v1346 = v1344 ^ ~v1391[0];
- Pc = (char *)a2->IoStatus.Information;
- v740 = HIBYTE(v1344) | ((BYTE6(v1344) | ((BYTE5(v1344) | ((BYTE4(v1344) | (((((unsigned int)((unsigned __int64)(((((unsigned __int64)MEMORY[0xFFFFF78000000320] << 8) * (unsigned __int128)((unsigned __int64)MEMORY[0xFFFFF78000000004] << 32)) >> 64) - 1023) >> 11)
- * (unsigned int)(v1391[0] >> 8)) >> 24) | ((BYTE2(v1344) | ((BYTE1(v1344) | ((unsigned __int64)(unsigned __int8)v1344 << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8);
- v1352 = v740;
- v1357 = HIBYTE(v1346) | ((BYTE6(v1346) | ((BYTE5(v1346) | ((BYTE4(v1346) | (((((unsigned int)v1344 ^ ~LODWORD(v1391[0])) >> 24) | ((BYTE2(v1346) | ((BYTE1(v1346) | ((unsigned __int64)(unsigned __int8)v1346 << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8);
- v741 = HIBYTE(v1391[0]) | ((BYTE6(v1391[0]) | ((BYTE5(v1391[0]) | ((BYTE4(v1391[0]) | ((BYTE3(v1391[0]) | ((BYTE2(v1391[0]) | ((BYTE1(v1391[0]) | ((unsigned __int64)LOBYTE(v1391[0]) << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8);
- v742 = HIBYTE(v1391[1]) | ((BYTE6(v1391[1]) | ((BYTE5(v1391[1]) | ((BYTE4(v1391[1]) | ((BYTE3(v1391[1]) | ((BYTE2(v1391[1]) | ((BYTE1(v1391[1]) | ((unsigned __int64)LOBYTE(v1391[1]) << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8);
- v1298 = Pc + 16;
- if ( p_MajorFunction[2] >= (unsigned __int64)(Pc + 16) )
- {
- v743 = v742 ^ 0x80400C0600000000ui64;
- v744 = v740 ^ (HIBYTE(v1346) | ((BYTE6(v1346) | ((BYTE5(v1346) | ((BYTE4(v1346) | (((((unsigned int)v1344 ^ ~LODWORD(v1391[0])) >> 24) | ((BYTE2(v1346) | ((BYTE1(v1346) | ((unsigned __int64)(unsigned __int8)v1346 << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) ^ 0xF0;
- v745 = v741 ^ v742;
- v746 = v744 & ~v740 ^ v743;
- v747 = v744 ^ v745 & ~v741;
- v748 = v745 ^ v740 & ~v743;
- v749 = v740 ^ v746 ^ v741 & ~v744;
- v750 = __ROR8__(v749, 39);
- v751 = v741 ^ v747 ^ v743 & ~v745;
- v752 = __ROR8__(v747, 1);
- v753 = __ROR8__(v751, 10);
- v754 = v748 ^ v746;
- v755 = __ROR8__(v748, 7);
- v756 = v751 ^ __ROR8__(v753, 7) ^ v753;
- v757 = v750 ^ v749 ^ __ROR8__(v750, 22);
- v758 = __ROR8__(v754, 19);
- v759 = v748 ^ __ROR8__(v755, 34) ^ v755;
- v760 = v759 ^ v758 ^ v754 ^ __ROR8__(v758, 9);
- v761 = v752 ^ v747 ^ v757 ^ __ROR8__(v752, 5) ^ 0xFFFFFFFFFFFFFF1Eui64;
- v762 = v756 ^ v759;
- v763 = v761 & ~v757 ^ v760;
- v764 = v761 ^ v762 & ~v756;
- v765 = v762 ^ v757 & ~v760;
- v766 = v763 ^ v757 ^ v756 & ~v761;
- v767 = __ROR8__(v766, 39);
- v768 = v764 ^ v756 ^ v760 & ~v762;
- v769 = __ROR8__(v764, 1);
- v770 = __ROR8__(v768, 10);
- v771 = v765 ^ v763;
- v772 = __ROR8__(v765, 7);
- v773 = v768 ^ __ROR8__(v770, 7) ^ v770;
- v774 = v767 ^ v766 ^ __ROR8__(v767, 22);
- v775 = __ROR8__(v771, 19);
- v776 = v765 ^ __ROR8__(v772, 34) ^ v772;
- v777 = v776 ^ v775 ^ v771 ^ __ROR8__(v775, 9);
- v778 = v769 ^ v764 ^ v774 ^ __ROR8__(v769, 5) ^ 0xFFFFFFFFFFFFFF2Dui64;
- v779 = v773 ^ v776;
- v780 = v778 & ~v774 ^ v777;
- v781 = v778 ^ v779 & ~v773;
- v782 = v779 ^ v774 & ~v777;
- v783 = v780 ^ v774 ^ v773 & ~v778;
- v784 = __ROR8__(v783, 39);
- v785 = v781 ^ v773 ^ v777 & ~v779;
- v786 = __ROR8__(v781, 1);
- v787 = __ROR8__(v785, 10);
- v788 = v782 ^ v780;
- v789 = __ROR8__(v782, 7);
- v790 = v785 ^ __ROR8__(v787, 7) ^ v787;
- v791 = v784 ^ v783 ^ __ROR8__(v784, 22);
- v792 = __ROR8__(v788, 19);
- v793 = v782 ^ __ROR8__(v789, 34) ^ v789;
- v794 = v793 ^ v792 ^ v788 ^ __ROR8__(v792, 9);
- v795 = v786 ^ v781 ^ v791 ^ __ROR8__(v786, 5) ^ 0xFFFFFFFFFFFFFF3Cui64;
- v796 = v790 ^ v793;
- v797 = v795 & ~v791 ^ v794;
- v798 = v795 ^ v796 & ~v790;
- v799 = v796 ^ v791 & ~v794;
- v800 = v797 ^ v791 ^ v790 & ~v795;
- v801 = __ROR8__(v800, 39);
- v802 = v798 ^ v790 ^ v794 & ~v796;
- v803 = __ROR8__(v798, 1);
- v804 = __ROR8__(v802, 10);
- v805 = v799 ^ v797;
- v806 = __ROR8__(v799, 7);
- v807 = v802 ^ __ROR8__(v804, 7) ^ v804;
- v808 = v801 ^ v800 ^ __ROR8__(v801, 22);
- v809 = __ROR8__(v805, 19);
- v810 = v799 ^ __ROR8__(v806, 34) ^ v806;
- v811 = v810 ^ v809 ^ v805 ^ __ROR8__(v809, 9);
- v812 = v803 ^ v798 ^ v808 ^ __ROR8__(v803, 5) ^ 0xFFFFFFFFFFFFFF4Bui64;
- v813 = v807 ^ v810;
- v814 = v812 & ~v808 ^ v811;
- v815 = v812 ^ v813 & ~v807;
- v816 = v813 ^ v808 & ~v811;
- v817 = v814 ^ v808 ^ v807 & ~v812;
- v818 = __ROR8__(v817, 39);
- v819 = v815 ^ v807 ^ v811 & ~v813;
- v820 = __ROR8__(v815, 1);
- v821 = __ROR8__(v819, 10);
- v822 = v816 ^ v814;
- v823 = __ROR8__(v816, 7);
- v824 = v819 ^ __ROR8__(v821, 7) ^ v821;
- v825 = v818 ^ v817 ^ __ROR8__(v818, 22);
- v826 = __ROR8__(v822, 19);
- v827 = v816 ^ __ROR8__(v823, 34) ^ v823;
- v828 = v827 ^ v826 ^ v822 ^ __ROR8__(v826, 9);
- v829 = v820 ^ v815 ^ v825 ^ __ROR8__(v820, 5) ^ 0xFFFFFFFFFFFFFF5Aui64;
- v830 = v824 ^ v827;
- v831 = v829 & ~v825 ^ v828;
- v832 = v829 ^ v830 & ~v824;
- v833 = v830 ^ v825 & ~v828;
- v834 = v831 ^ v825 ^ v824 & ~v829;
- v835 = __ROR8__(v834, 39);
- v836 = v832 ^ v824 ^ v828 & ~v830;
- v837 = __ROR8__(v832, 1);
- v838 = __ROR8__(v836, 10);
- v839 = v833 ^ v831;
- v840 = __ROR8__(v833, 7);
- v841 = v836 ^ __ROR8__(v838, 7) ^ v838;
- v842 = v835 ^ v834 ^ __ROR8__(v835, 22);
- v843 = __ROR8__(v839, 19);
- v844 = v833 ^ __ROR8__(v840, 34) ^ v840;
- v845 = v844 ^ v843 ^ v839 ^ __ROR8__(v843, 9);
- v846 = v837 ^ v832 ^ v842 ^ __ROR8__(v837, 5) ^ 0xFFFFFFFFFFFFFF69ui64;
- v847 = v841 ^ v844;
- v848 = v846 & ~v842 ^ v845;
- v849 = v846 ^ v847 & ~v841;
- v850 = v847 ^ v842 & ~v845;
- v851 = v848 ^ v842 ^ v841 & ~v846;
- v852 = __ROR8__(v851, 39);
- v853 = v849 ^ v841 ^ v845 & ~v847;
- v854 = __ROR8__(v849, 1);
- v855 = __ROR8__(v853, 10);
- v856 = v850 ^ v848;
- v857 = __ROR8__(v850, 7);
- v858 = v853 ^ __ROR8__(v855, 7) ^ v855;
- v859 = v852 ^ v851 ^ __ROR8__(v852, 22);
- v860 = __ROR8__(v856, 19);
- v861 = v850 ^ __ROR8__(v857, 34) ^ v857;
- v862 = v861 ^ v860 ^ v856 ^ __ROR8__(v860, 9);
- v863 = v854 ^ v849 ^ v859 ^ __ROR8__(v854, 5) ^ 0xFFFFFFFFFFFFFF78ui64;
- v864 = v858 ^ v861;
- v865 = v863 & ~v859 ^ v862;
- v866 = v863 ^ v864 & ~v858;
- v867 = v864 ^ v859 & ~v862;
- v868 = v865 ^ v859 ^ v858 & ~v863;
- v869 = __ROR8__(v868, 39);
- v870 = v866 ^ v858 ^ v862 & ~v864;
- v871 = __ROR8__(v866, 1);
- v872 = __ROR8__(v870, 10);
- v873 = v867 ^ v865;
- v874 = __ROR8__(v867, 7);
- v875 = v870 ^ __ROR8__(v872, 7) ^ v872;
- v876 = v869 ^ v868 ^ __ROR8__(v869, 22);
- v877 = __ROR8__(v873, 19);
- v878 = v867 ^ __ROR8__(v874, 34) ^ v874;
- v879 = v878 ^ v877 ^ v873 ^ __ROR8__(v877, 9);
- v880 = v871 ^ v866 ^ v876 ^ __ROR8__(v871, 5) ^ 0xFFFFFFFFFFFFFF87ui64;
- v881 = v875 ^ v878;
- v882 = v880 & ~v876 ^ v879;
- v883 = v880 ^ v881 & ~v875;
- v884 = v881 ^ v876 & ~v879;
- v885 = v882 ^ v876 ^ v875 & ~v880;
- v886 = __ROR8__(v885, 39);
- v887 = v883 ^ v875 ^ v879 & ~v881;
- v888 = __ROR8__(v883, 1);
- v889 = __ROR8__(v887, 10);
- v890 = v884 ^ v882;
- v891 = __ROR8__(v884, 7);
- v892 = v887 ^ __ROR8__(v889, 7) ^ v889;
- v893 = v886 ^ v885 ^ __ROR8__(v886, 22);
- v894 = __ROR8__(v890, 19);
- v895 = v884 ^ __ROR8__(v891, 34) ^ v891;
- v896 = v895 ^ v894 ^ v890 ^ __ROR8__(v894, 9);
- v897 = v888 ^ v883 ^ v893 ^ __ROR8__(v888, 5) ^ 0xFFFFFFFFFFFFFF96ui64;
- v898 = v892 ^ v895;
- v899 = v897 & ~v893 ^ v896;
- v900 = v897 ^ v898 & ~v892;
- v901 = v898 ^ v893 & ~v896;
- v902 = v899 ^ v893 ^ v892 & ~v897;
- v903 = __ROR8__(v902, 39);
- v904 = v900 ^ v892 ^ v896 & ~v898;
- v905 = __ROR8__(v900, 1);
- v906 = __ROR8__(v904, 10);
- v907 = v901 ^ v899;
- v908 = __ROR8__(v901, 7);
- v909 = v904 ^ __ROR8__(v906, 7) ^ v906;
- v910 = v903 ^ v902 ^ __ROR8__(v903, 22);
- v911 = __ROR8__(v907, 19);
- v912 = v901 ^ __ROR8__(v908, 34) ^ v908;
- v913 = v912 ^ v911 ^ v907 ^ __ROR8__(v911, 9);
- v914 = v905 ^ v900 ^ v910 ^ __ROR8__(v905, 5) ^ 0xFFFFFFFFFFFFFFA5ui64;
- v915 = v909 ^ v912;
- v916 = v914 & ~v910 ^ v913;
- v917 = v914 ^ v915 & ~v909;
- v918 = v915 ^ v910 & ~v913;
- v919 = v916 ^ v910 ^ v909 & ~v914;
- v920 = __ROR8__(v919, 39);
- v921 = v917 ^ v909 ^ v913 & ~v915;
- v922 = __ROR8__(v917, 1);
- v923 = __ROR8__(v921, 10);
- v924 = v918 ^ v916;
- v925 = __ROR8__(v918, 7);
- v926 = v921 ^ __ROR8__(v923, 7) ^ v923;
- v927 = v920 ^ v919 ^ __ROR8__(v920, 22);
- v928 = __ROR8__(v924, 19);
- v929 = v918 ^ __ROR8__(v925, 34) ^ v925;
- v930 = v929 ^ v928 ^ v924 ^ __ROR8__(v928, 9);
- v931 = v922 ^ v917 ^ v927 ^ __ROR8__(v922, 5) ^ 0xFFFFFFFFFFFFFFB4ui64;
- v932 = v926 ^ v929;
- v933 = v931 & ~v927 ^ v930;
- v934 = v931 ^ v932 & ~v926;
- v935 = v932 ^ v927 & ~v930;
- v936 = v933 ^ v927 ^ v926 & ~v931;
- v937 = __ROR8__(v936, 39);
- v938 = v934 ^ v926 ^ v930 & ~v932;
- v939 = __ROR8__(v934, 1);
- v940 = __ROR8__(v938, 10);
- v941 = v935 ^ v933;
- v942 = __ROR8__(v935, 7);
- v943 = ~(v939 ^ v934 ^ __ROR8__(v939, 5));
- v944 = v937 ^ v936 ^ __ROR8__(v937, 22);
- v1341 = v944;
- v945 = __ROR8__(v941, 19);
- v946 = v945 ^ v941 ^ __ROR8__(v945, 9);
- v947 = v1352 ^ v940 ^ v938 ^ __ROR8__(v940, 7);
- v948 = v1357 ^ v942 ^ v935 ^ __ROR8__(v942, 34) ^ 1;
- v949 = v1292;
- Information = a2->IoStatus.Information;
- while ( Information >= 8 )
- {
- v951 = (*((unsigned __int8 *)&v949->Size + 5) | ((*((unsigned __int8 *)&v949->Size + 4) | ((*((unsigned __int8 *)&v949->Size + 3) | ((*((unsigned __int8 *)&v949->Size + 2) | ((HIBYTE(v949->Size) | ((LOBYTE(v949->Size) | ((HIBYTE(v949->Type) | ((unsigned __int64)LOBYTE(v949->Type) << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) << 8)) ^ v946;
- LOBYTE(v949->Type) = HIBYTE(v951);
- HIBYTE(v949->Type) = BYTE6(v951);
- LOBYTE(v949->Size) = BYTE5(v951);
- HIBYTE(v949->Size) = BYTE4(v951);
- *((_BYTE *)&v949->Size + 2) = BYTE3(v951);
- *((_BYTE *)&v949->Size + 3) = BYTE2(v951);
- *((_BYTE *)&v949->Size + 4) = BYTE1(v951);
- *((_BYTE *)&v949->Size + 5) = v951;
- v952 = v948 ^ v951;
- v953 = v944 ^ v943 ^ 0x96;
- v954 = v947 ^ v948;
- v955 = v953 & ~v944 ^ v952;
- v956 = v953 ^ v954 & ~v947;
- v957 = v954 ^ v1341 & ~v952;
- v958 = v955 ^ v1341 ^ v947 & ~v953;
- v959 = __ROR8__(v958, 39);
- v960 = v956 ^ v947 ^ v952 & ~v954;
- v961 = __ROR8__(v956, 1);
- v962 = __ROR8__(v960, 10);
- v963 = __ROR8__(v957, 7);
- v964 = v957 ^ v955;
- v965 = v960 ^ __ROR8__(v962, 7) ^ v962;
- v966 = v959 ^ v958 ^ __ROR8__(v959, 22);
- v967 = __ROR8__(v957 ^ v955, 19);
- v968 = v957 ^ __ROR8__(v963, 34) ^ v963;
- v969 = v968 ^ v967 ^ v964 ^ __ROR8__(v967, 9);
- v970 = v961 ^ v956 ^ v966 ^ __ROR8__(v961, 5) ^ 0xFFFFFFFFFFFFFF78ui64;
- v971 = v965 ^ v968;
- v972 = v970 & ~v966 ^ v969;
- v973 = v970 ^ v971 & ~v965;
- v974 = v971 ^ v966 & ~v969;
- v975 = v972 ^ v966 ^ v965 & ~v970;
- v976 = __ROR8__(v975, 39);
- v977 = v973 ^ v965 ^ v969 & ~v971;
- v978 = __ROR8__(v973, 1);
- v979 = __ROR8__(v977, 10);
- v980 = __ROR8__(v974, 7);
- v981 = v974 ^ v972;
- v982 = v977 ^ __ROR8__(v979, 7) ^ v979;
- v983 = v976 ^ v975 ^ __ROR8__(v976, 22);
- v984 = __ROR8__(v974 ^ v972, 19);
- v985 = v974 ^ __ROR8__(v980, 34) ^ v980;
- v986 = v985 ^ v984 ^ v981 ^ __ROR8__(v984, 9);
- v987 = v978 ^ v973 ^ v983 ^ __ROR8__(v978, 5) ^ 0xFFFFFFFFFFFFFF87ui64;
- v988 = v982 ^ v985;
- v989 = v987 & ~v983 ^ v986;
- v990 = v987 ^ v988 & ~v982;
- v991 = v988 ^ v983 & ~v986;
- v992 = v989 ^ v983 ^ v982 & ~v987;
- v993 = __ROR8__(v992, 39);
- v994 = v990 ^ v982 ^ v986 & ~v988;
- v995 = __ROR8__(v990, 1);
- v996 = __ROR8__(v994, 10);
- v997 = __ROR8__(v991, 7);
- v998 = v991 ^ v989;
- v999 = v994 ^ __ROR8__(v996, 7) ^ v996;
- v1000 = v993 ^ v992 ^ __ROR8__(v993, 22);
- v1001 = __ROR8__(v991 ^ v989, 19);
- v1002 = v991 ^ __ROR8__(v997, 34) ^ v997;
- v1003 = v1002 ^ v1001 ^ v998 ^ __ROR8__(v1001, 9);
- v1004 = v995 ^ v990 ^ v1000 ^ __ROR8__(v995, 5) ^ 0xFFFFFFFFFFFFFF96ui64;
- v1005 = v999 ^ v1002;
- v1006 = v1004 & ~v1000 ^ v1003;
- v1007 = v1004 ^ v1005 & ~v999;
- v1008 = v1005 ^ v1000 & ~v1003;
- v1009 = v1006 ^ v1000 ^ v999 & ~v1004;
- v1010 = __ROR8__(v1009, 39);
- v1011 = v1007 ^ v999 ^ v1003 & ~v1005;
- v1012 = __ROR8__(v1007, 1);
- v1013 = __ROR8__(v1011, 10);
- v1014 = __ROR8__(v1008, 7);
- v1015 = v1008 ^ v1006;
- v1016 = v1011 ^ __ROR8__(v1013, 7) ^ v1013;
- v1017 = v1010 ^ v1009 ^ __ROR8__(v1010, 22);
- v1018 = __ROR8__(v1008 ^ v1006, 19);
- v1019 = v1008 ^ __ROR8__(v1014, 34) ^ v1014;
- v1020 = v1019 ^ v1018 ^ v1015 ^ __ROR8__(v1018, 9);
- v1021 = v1012 ^ v1007 ^ v1017 ^ __ROR8__(v1012, 5) ^ 0xFFFFFFFFFFFFFFA5ui64;
- v1022 = v1016 ^ v1019;
- v1023 = v1021 & ~v1017 ^ v1020;
- v1024 = v1021 ^ v1022 & ~v1016;
- v1025 = v1022 ^ v1017 & ~v1020;
- v1026 = v1023 ^ v1017 ^ v1016 & ~v1021;
- v1027 = __ROR8__(v1026, 39);
- v1028 = v1024 ^ v1016 ^ v1020 & ~v1022;
- v1029 = __ROR8__(v1024, 1);
- v1030 = v1025;
- v1031 = __ROR8__(v1028, 10);
- v1032 = v1025 ^ v1023;
- v1033 = __ROR8__(v1025, 7);
- v1034 = v1032;
- v1035 = v1028 ^ __ROR8__(v1031, 7) ^ v1031;
- v1036 = v1027 ^ v1026 ^ __ROR8__(v1027, 22);
- v1037 = __ROR8__(v1032, 19);
- v1038 = v1030 ^ __ROR8__(v1033, 34) ^ v1033;
- v1039 = v1038 ^ v1037 ^ v1034 ^ __ROR8__(v1037, 9);
- v1040 = v1029 ^ v1036 ^ __ROR8__(v1029, 5) ^ v1024 ^ 0xFFFFFFFFFFFFFFB4ui64;
- v1041 = v1035 ^ v1038;
- v1042 = v1040 & ~v1036 ^ v1039;
- v1043 = v1040 ^ v1041 & ~v1035;
- v1044 = v1041 ^ v1036 & ~v1039;
- v1045 = v1042 ^ v1036 ^ v1035 & ~v1040;
- v1046 = __ROR8__(v1045, 39);
- v1047 = v1043 ^ v1035 ^ v1039 & ~v1041;
- v1048 = v1043;
- v1049 = __ROR8__(v1043, 1);
- v1050 = v1044;
- v1051 = v1047;
- v1052 = __ROR8__(v1047, 10);
- v1053 = v1044 ^ v1042;
- v1054 = __ROR8__(v1044, 7);
- v1055 = v1053;
- v943 = ~(v1049 ^ v1048 ^ __ROR8__(v1049, 5));
- v947 = v1052 ^ v1051 ^ __ROR8__(v1052, 7);
- v944 = v1046 ^ v1045 ^ __ROR8__(v1046, 22);
- v1341 = v944;
- v1056 = __ROR8__(v1053, 19);
- v948 = v1054 ^ v1050 ^ __ROR8__(v1054, 34);
- v946 = v1056 ^ v1055 ^ __ROR8__(v1056, 9);
- Information = (ULONG_PTR)(Pc - 8);
- Pc -= 8;
- v949 = (_IRP *)((char *)v949 + 8);
- v1292 = v949;
- }
- v1057 = (128i64 << (8 * (7 - (unsigned __int8)Information))) ^ v946;
- while ( 1 )
- {
- v1058 = (unsigned __int8 *)&v949->Type + 1;
- v1331 = (char *)&v949->Type + 1;
- if ( (unsigned __int8)v3 >= Information )
- break;
- v1057 ^= (unsigned __int64)LOBYTE(v949->Type) << (8 * (7 - (unsigned __int8)v3));
- LOBYTE(v949->Type) = v1057 >> (8 * (7 - (unsigned __int8)v3));
- v949 = (_IRP *)((char *)v949 + 1);
- v1292 = (_IRP *)v1058;
- LOBYTE(v3) = v3 + 1;
- }
- v1342 = v1352 ^ v944;
- v1059 = v948 ^ v1057;
- v1060 = v1357 ^ v1352 ^ v944 ^ v943 ^ 0xF0;
- v1061 = v947 ^ v948;
- v1062 = v1060 & ~(v1352 ^ v944) ^ v1059;
- v1063 = v1060 ^ v1061 & ~v947;
- v1064 = v1061 ^ v1342 & ~v1059;
- v1065 = v1062 ^ v1342 ^ v947 & ~v1060;
- v1066 = __ROR8__(v1065, 39);
- v1067 = v1063 ^ v947 ^ v1059 & ~v1061;
- v1068 = __ROR8__(v1063, 1);
- v1069 = __ROR8__(v1067, 10);
- v1070 = v1064 ^ v1062;
- v1071 = __ROR8__(v1064, 7);
- v1072 = v1067 ^ __ROR8__(v1069, 7) ^ v1069;
- v1073 = v1066 ^ v1065 ^ __ROR8__(v1066, 22);
- v1074 = __ROR8__(v1070, 19);
- v1075 = v1064 ^ __ROR8__(v1071, 34) ^ v1071;
- v1076 = v1075 ^ v1074 ^ v1070 ^ __ROR8__(v1074, 9);
- v1077 = v1068 ^ v1063 ^ v1073 ^ __ROR8__(v1068, 5) ^ 0xFFFFFFFFFFFFFF1Eui64;
- v1078 = v1072 ^ v1075;
- v1079 = v1077 & ~v1073 ^ v1076;
- v1080 = v1077 ^ v1078 & ~v1072;
- v1081 = v1078 ^ v1073 & ~v1076;
- v1082 = v1079 ^ v1073 ^ v1072 & ~v1077;
- v1083 = __ROR8__(v1082, 39);
- v1084 = v1080 ^ v1072 ^ v1076 & ~v1078;
- v1085 = __ROR8__(v1080, 1);
- v1086 = __ROR8__(v1084, 10);
- v1087 = v1081 ^ v1079;
- v1088 = __ROR8__(v1081, 7);
- v1089 = v1084 ^ __ROR8__(v1086, 7) ^ v1086;
- v1090 = v1083 ^ v1082 ^ __ROR8__(v1083, 22);
- v1091 = __ROR8__(v1087, 19);
- v1092 = v1081 ^ __ROR8__(v1088, 34) ^ v1088;
- v1093 = v1092 ^ v1091 ^ v1087 ^ __ROR8__(v1091, 9);
- v1094 = v1085 ^ v1080 ^ v1090 ^ __ROR8__(v1085, 5) ^ 0xFFFFFFFFFFFFFF2Dui64;
- v1095 = v1089 ^ v1092;
- v1096 = v1094 & ~v1090 ^ v1093;
- v1097 = v1094 ^ v1095 & ~v1089;
- v1098 = v1095 ^ v1090 & ~v1093;
- v1099 = v1096 ^ v1090 ^ v1089 & ~v1094;
- v1100 = __ROR8__(v1099, 39);
- v1101 = v1097 ^ v1089 ^ v1093 & ~v1095;
- v1102 = __ROR8__(v1097, 1);
- v1103 = __ROR8__(v1101, 10);
- v1104 = v1098 ^ v1096;
- v1105 = __ROR8__(v1098, 7);
- v1106 = v1101 ^ __ROR8__(v1103, 7) ^ v1103;
- v1107 = v1100 ^ v1099 ^ __ROR8__(v1100, 22);
- v1108 = __ROR8__(v1104, 19);
- v1109 = v1098 ^ __ROR8__(v1105, 34) ^ v1105;
- v1110 = v1109 ^ v1108 ^ v1104 ^ __ROR8__(v1108, 9);
- v1111 = v1102 ^ v1097 ^ v1107 ^ __ROR8__(v1102, 5) ^ 0xFFFFFFFFFFFFFF3Cui64;
- v1112 = v1106 ^ v1109;
- v1113 = v1111 & ~v1107 ^ v1110;
- v1114 = v1111 ^ v1112 & ~v1106;
- v1115 = v1112 ^ v1107 & ~v1110;
- v1116 = v1113 ^ v1107 ^ v1106 & ~v1111;
- v1117 = __ROR8__(v1116, 39);
- v1118 = v1114 ^ v1106 ^ v1110 & ~v1112;
- v1119 = __ROR8__(v1114, 1);
- v1120 = __ROR8__(v1118, 10);
- v1121 = v1115 ^ v1113;
- v1122 = __ROR8__(v1115, 7);
- v1123 = v1118 ^ __ROR8__(v1120, 7) ^ v1120;
- v1124 = v1117 ^ v1116 ^ __ROR8__(v1117, 22);
- v1125 = __ROR8__(v1121, 19);
- v1126 = v1115 ^ __ROR8__(v1122, 34) ^ v1122;
- v1127 = v1126 ^ v1125 ^ v1121 ^ __ROR8__(v1125, 9);
- v1128 = v1119 ^ v1114 ^ v1124 ^ __ROR8__(v1119, 5) ^ 0xFFFFFFFFFFFFFF4Bui64;
- v1129 = v1123 ^ v1126;
- v1130 = v1128 & ~v1124 ^ v1127;
- v1131 = v1128 ^ v1129 & ~v1123;
- v1132 = v1129 ^ v1124 & ~v1127;
- v1133 = v1130 ^ v1124 ^ v1123 & ~v1128;
- v1134 = __ROR8__(v1133, 39);
- v1135 = v1131 ^ v1123 ^ v1127 & ~v1129;
- v1136 = __ROR8__(v1131, 1);
- v1137 = __ROR8__(v1135, 10);
- v1138 = v1132 ^ v1130;
- v1139 = __ROR8__(v1132, 7);
- v1140 = v1135 ^ __ROR8__(v1137, 7) ^ v1137;
- v1141 = v1134 ^ v1133 ^ __ROR8__(v1134, 22);
- v1142 = __ROR8__(v1138, 19);
- v1143 = v1132 ^ __ROR8__(v1139, 34) ^ v1139;
- v1144 = v1143 ^ v1142 ^ v1138 ^ __ROR8__(v1142, 9);
- v1145 = v1136 ^ v1131 ^ v1141 ^ __ROR8__(v1136, 5) ^ 0xFFFFFFFFFFFFFF5Aui64;
- v1146 = v1140 ^ v1143;
- v1147 = v1145 & ~v1141 ^ v1144;
- v1148 = v1145 ^ v1146 & ~v1140;
- v1149 = v1146 ^ v1141 & ~v1144;
- v1150 = v1147 ^ v1141 ^ v1140 & ~v1145;
- v1151 = __ROR8__(v1150, 39);
- v1152 = v1148 ^ v1140 ^ v1144 & ~v1146;
- v1153 = __ROR8__(v1148, 1);
- v1154 = __ROR8__(v1152, 10);
- v1155 = v1149 ^ v1147;
- v1156 = __ROR8__(v1149, 7);
- v1157 = v1152 ^ __ROR8__(v1154, 7) ^ v1154;
- v1158 = v1151 ^ v1150 ^ __ROR8__(v1151, 22);
- v1159 = __ROR8__(v1155, 19);
- v1160 = v1149 ^ __ROR8__(v1156, 34) ^ v1156;
- v1161 = v1160 ^ v1159 ^ v1155 ^ __ROR8__(v1159, 9);
- v1162 = v1153 ^ v1148 ^ v1158 ^ __ROR8__(v1153, 5) ^ 0xFFFFFFFFFFFFFF69ui64;
- v1163 = v1157 ^ v1160;
- v1164 = v1162 & ~v1158 ^ v1161;
- v1165 = v1162 ^ v1163 & ~v1157;
- v1166 = v1163 ^ v1158 & ~v1161;
- v1167 = v1164 ^ v1158 ^ v1157 & ~v1162;
- v1168 = __ROR8__(v1167, 39);
- v1169 = v1165 ^ v1157 ^ v1161 & ~v1163;
- v1170 = __ROR8__(v1165, 1);
- v1171 = __ROR8__(v1169, 10);
- v1172 = v1166 ^ v1164;
- v1173 = __ROR8__(v1166, 7);
- v1174 = v1169 ^ __ROR8__(v1171, 7) ^ v1171;
- v1175 = v1168 ^ v1167 ^ __ROR8__(v1168, 22);
- v1176 = __ROR8__(v1172, 19);
- v1177 = v1166 ^ __ROR8__(v1173, 34) ^ v1173;
- v1178 = v1177 ^ v1176 ^ v1172 ^ __ROR8__(v1176, 9);
- v1179 = v1170 ^ v1165 ^ v1175 ^ __ROR8__(v1170, 5) ^ 0xFFFFFFFFFFFFFF78ui64;
- v1180 = v1174 ^ v1177;
- v1181 = v1179 & ~v1175 ^ v1178;
- v1182 = v1179 ^ v1180 & ~v1174;
- v1183 = v1180 ^ v1175 & ~v1178;
- v1184 = v1181 ^ v1175 ^ v1174 & ~v1179;
- v1185 = __ROR8__(v1184, 39);
- v1186 = v1182 ^ v1174 ^ v1178 & ~v1180;
- v1187 = __ROR8__(v1182, 1);
- v1188 = __ROR8__(v1186, 10);
- v1189 = v1183 ^ v1181;
- v1190 = __ROR8__(v1183, 7);
- v1191 = v1186 ^ __ROR8__(v1188, 7) ^ v1188;
- v1192 = v1185 ^ v1184 ^ __ROR8__(v1185, 22);
- v1193 = __ROR8__(v1189, 19);
- v1194 = v1183 ^ __ROR8__(v1190, 34) ^ v1190;
- v1195 = v1194 ^ v1193 ^ v1189 ^ __ROR8__(v1193, 9);
- v1196 = v1187 ^ v1182 ^ v1192 ^ __ROR8__(v1187, 5) ^ 0xFFFFFFFFFFFFFF87ui64;
- v1197 = v1191 ^ v1194;
- v1198 = v1196 & ~v1192 ^ v1195;
- v1199 = v1196 ^ v1197 & ~v1191;
- v1200 = v1197 ^ v1192 & ~v1195;
- v1201 = v1198 ^ v1192 ^ v1191 & ~v1196;
- v1202 = __ROR8__(v1201, 39);
- v1203 = v1199 ^ v1191 ^ v1195 & ~v1197;
- v1204 = __ROR8__(v1199, 1);
- v1205 = __ROR8__(v1203, 10);
- v1206 = v1200 ^ v1198;
- v1207 = __ROR8__(v1200, 7);
- v1208 = v1203 ^ __ROR8__(v1205, 7) ^ v1205;
- v1209 = v1202 ^ v1201 ^ __ROR8__(v1202, 22);
- v1210 = __ROR8__(v1206, 19);
- v1211 = v1200 ^ __ROR8__(v1207, 34) ^ v1207;
- v1212 = v1211 ^ v1210 ^ v1206 ^ __ROR8__(v1210, 9);
- v1213 = v1204 ^ v1199 ^ v1209 ^ __ROR8__(v1204, 5) ^ 0xFFFFFFFFFFFFFF96ui64;
- v1214 = v1208 ^ v1211;
- v1215 = v1213 & ~v1209 ^ v1212;
- v1216 = v1213 ^ v1214 & ~v1208;
- v1217 = v1214 ^ v1209 & ~v1212;
- v1218 = v1215 ^ v1209 ^ v1208 & ~v1213;
- v1219 = __ROR8__(v1218, 39);
- v1220 = v1216 ^ v1208 ^ v1212 & ~v1214;
- v1221 = __ROR8__(v1216, 1);
- v1222 = __ROR8__(v1220, 10);
- v1263 = v1217 ^ v1215;
- v1223 = __ROR8__(v1217, 7);
- v1224 = v1220 ^ __ROR8__(v1222, 7) ^ v1222;
- v1225 = v1219 ^ v1218 ^ __ROR8__(v1219, 22);
- v1226 = __ROR8__(v1263, 19);
- v1227 = v1217 ^ __ROR8__(v1223, 34) ^ v1223;
- v1228 = v1227 ^ v1226 ^ v1263 ^ __ROR8__(v1226, 9);
- v1229 = v1221 ^ v1216 ^ v1225 ^ __ROR8__(v1221, 5) ^ 0xFFFFFFFFFFFFFFA5ui64;
- v1230 = v1224 ^ v1227;
- v1231 = v1229 & ~v1225 ^ v1228;
- v1232 = v1229 ^ v1230 & ~v1224;
- v1233 = v1230 ^ v1225 & ~v1228;
- v1234 = v1231 ^ v1225 ^ v1224 & ~v1229;
- v1235 = __ROR8__(v1234, 39);
- v1236 = v1232 ^ v1224 ^ v1228 & ~v1230;
- v1237 = __ROR8__(v1232, 1);
- v1238 = __ROR8__(v1236, 10);
- v1239 = v1233 ^ v1231;
- v1240 = __ROR8__(v1233, 7);
- v1241 = v1236 ^ __ROR8__(v1238, 7) ^ v1238;
- v1242 = v1235 ^ v1234 ^ __ROR8__(v1235, 22);
- v1243 = __ROR8__(v1239, 19);
- v1244 = v1233 ^ __ROR8__(v1240, 34) ^ v1240;
- v1245 = v1244 ^ v1243 ^ v1239 ^ __ROR8__(v1243, 9);
- v1246 = v1237 ^ v1232 ^ v1242 ^ __ROR8__(v1237, 5) ^ 0xFFFFFFFFFFFFFFB4ui64;
- v1247 = v1241 ^ v1244;
- v1248 = v1247 ^ v1242 & ~v1245;
- v1249 = v1246 ^ (v1241 | v1247) ^ v1245 & ~v1247;
- v1250 = __ROR8__(v1249, 10);
- v1251 = __ROR8__(v1248, 7);
- v1252 = v1352 ^ v1250 ^ v1249 ^ __ROR8__(v1250, 7);
- v1253 = v1357 ^ v1251 ^ v1248 ^ __ROR8__(v1251, 34);
- LOBYTE(v1292->Type) = HIBYTE(v1252);
- *v1331 = BYTE6(v1252);
- LOBYTE(v1292->Size) = BYTE5(v1252);
- HIBYTE(v1292->Size) = BYTE4(v1252);
- *((_BYTE *)&v1292->Size + 2) = BYTE3(v1252);
- *((_BYTE *)&v1292->Size + 3) = BYTE2(v1252);
- *((_BYTE *)&v1292->Size + 4) = BYTE1(v1252);
- *((_BYTE *)&v1292->Size + 5) = v1252;
- LOBYTE(v1292->MdlAddress) = HIBYTE(v1253);
- BYTE1(v1292->MdlAddress) = BYTE6(v1253);
- BYTE2(v1292->MdlAddress) = BYTE5(v1253);
- BYTE3(v1292->MdlAddress) = BYTE4(v1253);
- BYTE4(v1292->MdlAddress) = BYTE3(v1253);
- BYTE5(v1292->MdlAddress) = BYTE2(v1253);
- BYTE6(v1292->MdlAddress) = BYTE1(v1253);
- HIBYTE(v1292->MdlAddress) = v1253;
- v3 = (ULONG_PTR)v1298;
- }
- v2 = a2;
- a2->IoStatus.Information = v3;
- goto LABEL_354;
- case -1745399631:
- KeAcquireGuardedMutex(&unk_1400339E0, v130, v132, v134, v1261);
- v675 = a2->Tail.Overlay.CurrentStackLocation->Parameters.Read.Length;
- v676 = 570 * qword_140033A18 + 16;
- if ( !v675 || v675 < v676 )
- {
- KeReleaseGuardedMutex(&unk_1400339E0);
- v670 = v676 & 0x1FFFFFFF | 0x60000000;
- goto LABEL_336;
- }
- if ( ::P )
- {
- v687 = 570 * qword_140033A18;
- memcpy((__int64)a2->AssociatedIrp.MasterIrp, (__int64)::P, 570 * qword_140033A18);
- a2->IoStatus.Information = v687;
- qword_140033A18 = 0i64;
- memset(::P, 0, v687);
- v674 = &unk_1400339E0;
- LABEL_249:
- KeReleaseGuardedMutex(v674);
- LABEL_250:
- v670 = 0x20000000;
- goto LABEL_336;
- }
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v677 = 0i64;
- v678 = 0xAA2D145923EC7F30ui64;
- while ( 1 )
- {
- v679 = ((unsigned __int64)(2000 * v677) * (unsigned __int128)0x2262427FC07A8175ui64) >> 64;
- v680 = 3611 * (2000 * v677 - 3611 * ((v679 + ((unsigned __int64)(2000 * v677 - v679) >> 1)) >> 11))
- % 0x1107;
- v681 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * v680
- - 102 * (v680 / 0x33 + 98 * (v680 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v682 = 144 * v681 - 136 * (v681 / 0x11 + 245 * (v681 / 0xF5));
- v683 = *(_QWORD *)((char *)&unk_14002B760 + v682);
- v684 = __ROL8__(v683, 4);
- Pb = HIDWORD(v678) & 0xF9B81B18;
- v685 = (HIDWORD(v678) | 0xF9B81B18) - Pb;
- if ( !(v684 + (~v684 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v683 << 32) | ((v678 & 0x647E4E700000000i64 | 0xF9B81B1800000000ui64) - (Pb << 32))) == (v683 & v685) << 32 )
- goto LABEL_261;
- v678 = v683 - 1 + (v678 & ~v683) - (v683 | ~v678) - v678;
- ++v677;
- }
- v686 = (v683 & 0xEFFFFFFFFFFFFFFFui64) + (~v683 | 0xFFFFFFFF00000000ui64) + 0x1000000000000001i64;
- *(_QWORD *)((char *)&unk_14002B760 + v682) = (v685 | v686) - (v685 & v686);
- ++*(_DWORD *)g_acDetectionStatus;
- }
- LABEL_261:
- KeReleaseGuardedMutex(&unk_1400339E0);
- break;
- case -509605707:
- p_MdlAddress = (__int64)&MasterIrp->MdlAddress;
- MdlAddress = (unsigned __int64)MasterIrp->MdlAddress;
- if ( MdlAddress <= 0x1000 )
- {
- v667 = 16 * MdlAddress;
- v668 = ExAllocatePoolWithTag(NonPagedPool, v667, 0x656E6F4Eu);
- v669 = v668;
- if ( !v668 )
- {
- v670 = -536870758;
- LABEL_336:
- v1337 = v670;
- goto LABEL_337;
- }
- memcpy((__int64)v668, p_MdlAddress, v667);
- KeAcquireGuardedMutex(&g_blockHandleFileHashesMutex, v671, v672, v673, v1261);
- ExFreePoolWithTag(g_blockHandleFileHashes, 0);
- g_blockHandleFileHashes = v669;
- v674 = &g_blockHandleFileHashesMutex;
- goto LABEL_249;
- }
- break;
- default:
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v655 = 0i64;
- v656 = 0xAA2D145923EC7F30ui64;
- while ( 1 )
- {
- v657 = ((unsigned __int64)(2000 * v655) * (unsigned __int128)0x2262427FC07A8175ui64) >> 64;
- v658 = 3611 * (2000 * v655 - 3611 * ((v657 + ((unsigned __int64)(2000 * v655 - v657) >> 1)) >> 11))
- % 0x1107;
- v659 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * v658
- - 102 * (v658 / 0x33 + 98 * (v658 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v660 = 144 * v659 - 136 * (v659 / 0x11 + 245 * (v659 / 0xF5));
- v661 = *(_QWORD *)((char *)&unk_14002B760 + v660);
- v662 = __ROL8__(v661, 4);
- Pa = HIDWORD(v656) & 0xC2D7A1D8;
- v663 = (HIDWORD(v656) | 0xC2D7A1D8) - Pa;
- if ( !(v662 + (~v662 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v661 << 32) | ((v656 & 0x3D285E2700000000i64 | 0xC2D7A1D800000000ui64) - (Pa << 32))) == (v661 & v663) << 32 )
- goto LABEL_337;
- v656 = v661 - 1 + (v656 & ~v661) - (v661 | ~v656) - v656;
- ++v655;
- }
- v664 = (v661 & 0xEFFFFFFFFFFFFFFFui64) + (~v661 | 0xFFFFFFFF00000000ui64) + 0x1000000000000001i64;
- *(_QWORD *)((char *)&unk_14002B760 + v660) = (v663 | v664) - (v663 & v664);
- ++*(_DWORD *)g_acDetectionStatus;
- }
- goto LABEL_337;
- }
- LABEL_335:
- v670 = -536870911;
- goto LABEL_336;
- }
- if ( a2->Tail.Overlay.CurrentStackLocation->Parameters.Read.Length < 0x10 )
- goto LABEL_335;
- if ( MasterIrp->MdlAddress != (PMDL)0x943DC9FA3FB97C84i64 )
- {
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- v729 = 0i64;
- v730 = 0xAA2D145923EC7F30ui64;
- while ( 1 )
- {
- v731 = ((unsigned __int64)(2000 * v729) * (unsigned __int128)0x2262427FC07A8175ui64) >> 64;
- v732 = 3611 * (2000 * v729 - 3611 * ((v731 + ((unsigned __int64)(2000 * v729 - v731) >> 1)) >> 11))
- % 0x1107;
- v733 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * v732
- - 102 * (v732 / 0x33 + 98 * (v732 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v734 = 144 * v733 - 136 * (v733 / 0x11 + 245 * (v733 / 0xF5));
- v735 = *(_QWORD *)((char *)&unk_14002B760 + v734);
- v736 = __ROL8__(v735, 4);
- v737 = HIDWORD(v730) & 0x1CF650BE;
- v738 = (HIDWORD(v730) | 0x1CF650BE) - v737;
- if ( !(v736 + (~v736 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v735 << 32) | ((v730 & 0xE309AF4100000000ui64 | 0x1CF650BE00000000i64) - (v737 << 32))) == (v738 & v735) << 32 )
- goto LABEL_335;
- v730 = v735 - 1 + (v730 & ~v735) - (v735 | ~v730) - v730;
- ++v729;
- }
- v739 = (v735 & 0xEFFFFFFFFFFFFFFFui64) + (~v735 | 0xFFFFFFFF00000000ui64) + 0x1000000000000001i64;
- *(_QWORD *)((char *)&unk_14002B760 + v734) = (v738 | v739) - (v738 & v739);
- ++*(_DWORD *)g_acDetectionStatus;
- }
- goto LABEL_335;
- }
- *(_QWORD *)&MasterIrp->Type = 0x6BC23605C046837Bi64;
- v722 = (unsigned __int64)IoGetCurrentProcess();
- if ( !v722 )
- {
- LABEL_327:
- *((_QWORD *)qword_140033A38 + 1) = v722;
- a2->IoStatus.Information = 8i64;
- goto LABEL_250;
- }
- v723 = 0x7A3690389EBE2836i64;
- v724 = 0x8881AFBFC89217A8ui64;
- while ( 1 )
- {
- while ( 1 )
- {
- v725 = v724 * v723;
- v726 = HIDWORD(v725);
- if ( HIDWORD(v725) > 0xDE2890EC )
- break;
- if ( HIDWORD(v725) == 3727200492 )
- {
- v722 *= 0x574CFBE22FE5C00Di64;
- v723 = v725 ^ 0x827C39A4EB56B4ABui64;
- v728 = 0x7F1EB980D09E1301i64;
- goto LABEL_318;
- }
- switch ( v726 )
- {
- case 0x77A8AC17ui64:
- v723 = v725 ^ 0xE4058CA8F88E1E78ui64;
- v724 ^= 0x3CDA24DACE80DA4Dui64;
- v722 ^= v722 >> 16;
- break;
- case 0x8871F891ui64:
- v722 *= *(_QWORD *)(qword_140029006 + 21);
- v723 = v725 ^ 0xC8B6103BC413840Cui64;
- v724 ^= 0xD563B635ABEF365Cui64;
- break;
- case 0xB86D136Eui64:
- v723 = v725 ^ 0x44963F7D1C242482i64;
- v724 ^= 0x6B6C845AE16D86AFui64;
- v1349 = 0xE5CD2BCE7B085DF3ui64 * *(_QWORD *)(qword_140029006 + 23) * v722 + 0x154F70F37985E72i64;
- v722 = (v1349 >> 33) ^ v1349;
- break;
- case 0xD667F5FEui64:
- v724 ^= 0x5172F2895ECFFF61ui64;
- v723 = v725 ^ 0xC9E33E37AEF85DA6ui64;
- break;
- case 0xDDD6FD9Fui64:
- v722 *= 0x140000000ui64;
- v724 ^= 0x43E9C56D854990E1ui64;
- v727 = 0x49C6B14E250BD7A7i64;
- LABEL_311:
- v723 = v727 ^ v725;
- break;
- default:
- goto LABEL_327;
- }
- }
- if ( v726 == 3784008972 )
- break;
- switch ( v726 )
- {
- case 0xF112CD23ui64:
- v723 = v725 ^ 0xA147C438ACA13A2Cui64;
- v724 ^= 0xA1813C4B40C30CFFui64;
- v722 += 0x140000000ui64;
- break;
- case 0xF58DC504ui64:
- v722 ^= v722 >> 7;
- v724 ^= 0xBB1F18A940222B4Cui64;
- v727 = 0x1645E5D66DE66FE5i64;
- goto LABEL_311;
- case 0xF7A5BD92ui64:
- v723 = v725 ^ 0xDCF06DC8735A9CA7ui64;
- v728 = 0xA9C60962872A3897ui64;
- LABEL_318:
- v724 ^= v728;
- break;
- default:
- goto LABEL_327;
- }
- }
- v722 = ((v722 >> 22) ^ v722) + 0x569A61B40AFCD250i64;
- v723 = v725 ^ 0x6E10A753D69C74Ci64;
- v728 = 0x60BCA4C2D88A505Bi64;
- goto LABEL_318;
- }
- }
- else
- {
- if ( !g_acDetectionStatus || *(_DWORD *)g_acDetectionStatus >= 0x7D0u )
- goto LABEL_354;
- for ( i26 = 0i64; ; i26 = v1389 + 1 )
- {
- v1389 = i26;
- v1255 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i26 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i26 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i26 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1299 = (_QWORD *)((char *)&unk_14002B760 + 144 * v1255 - 136 * (v1255 / 0x11 + 245 * (v1255 / 0xF5)));
- v1256 = *v1299;
- v1257 = __ROL8__(*v1299, 4);
- v1332 = HIDWORD(v5) & 0x6F735D2C;
- v1258 = (HIDWORD(v5) | 0x6F735D2C) - v1332;
- if ( !(v1257 + (~v1257 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v1256 << 32) | ((v5 & 0x908CA2D300000000ui64 | 0x6F735D2C00000000i64) - (v1332 << 32))) == (v1258 & v1256) << 32 )
- goto LABEL_353;
- v5 = v1256 - 1 + (v5 & ~v1256) - (v1256 | ~v5) - v5;
- }
- v1259 = (v1256 & 0xEFFFFFFFFFFFFFFFui64) + (~v1256 | 0xFFFFFFFF00000000ui64) + 0x1000000000000001i64;
- *v1299 = (v1258 | v1259) - (v1258 & v1259);
- ++*(_DWORD *)g_acDetectionStatus;
- }
- LABEL_353:
- v2 = a2;
- LABEL_354:
- LODWORD(v3) = v1337;
- goto LABEL_355;
- }
- if ( g_acDetectionStatus && *(_DWORD *)g_acDetectionStatus < 0x7D0u )
- {
- for ( i27 = 0i64; ; i27 = v1386 + 1 )
- {
- v1386 = i27;
- v123 = 3637
- * (2000
- * (unsigned __int64)*(unsigned __int16 *)((char *)&word_140029050
- + 104 * (3611 * (2000 * i27 % 0xE1Bui64) % 0x1107)
- - 102
- * (3611 * (2000 * i27 % 0xE1Bui64) % 0x1107 / 0x33
- + 98 * (3611 * (2000 * i27 % 0xE1Bui64) % 0x1107 / 0x62)))
- % 0xC9D)
- % 0xC9D;
- v1294 = (_QWORD *)((char *)&unk_14002B760 + 144 * v123 - 136 * (v123 / 0x11 + 245 * (v123 / 0xF5)));
- v124 = *v1294;
- v125 = __ROL8__(*v1294, 4);
- v1330 = HIDWORD(v5) & 0x25B416CF;
- v126 = (HIDWORD(v5) | 0x25B416CF) - v1330;
- if ( !(v125 + (~v125 & 0xFFFFFFFFFFFFFFFEui64) + 2) )
- break;
- if ( ((v124 << 32) | ((v5 & 0xDA4BE93000000000ui64 | 0x25B416CF00000000i64) - (v1330 << 32))) == (v124 & v126) << 32 )
- goto LABEL_218;
- v5 = v124 - 1 + (v5 & ~v124) - (v124 | ~v5) - v5;
- }
- v127 = (v124 & 0xEFFFFFFFFFFFFFFFui64) + (~v124 | 0xFFFFFFFF00000000ui64) + 0x1000000000000001i64;
- *v1294 = (v126 | v127) - (v126 & v127);
- ++*(_DWORD *)g_acDetectionStatus;
- LABEL_218:
- v2 = a2;
- }
- LODWORD(v3) = -536870911;
- LABEL_355:
- v2->IoStatus.Status = v3;
- IofCompleteRequest(v2, 0);
- return (unsigned int)v3;
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement