RtlDecompressBufferLZNT1

INT64 __fastcall RtlDecompressBufferLZNT1(
        UINT8 *UncompressedBuffer,
        UINT64 UncompressedBufferSize,
        UINT8 *CompressedBuffer,
        UINT64 CompressedBufferSize,
        UINT64 ExplicitChunkSize,
        UINT64 *FinalUncompressedSize,
        VOID *WorkSpace){
  UINT8 *v7; 
  UINT8 *v8; 
  BYTE *v9; 
  UINT8 *v10; 
  NTSTATUS v11; 
  __int16 v12; 
  __int64 v13; 
  INT32 v14; 
  unsigned __int32 v15; 
  __int64 v16; 
  UINT64 *v17; 
  unsigned __int32 v19; 
  UINT8 *v20; 
  INT64 a6; 
  struct _KEVENT Event; 
  __int64 v23; 
  int v24; 
  INT32 FinalUncompressedChunkSize; 
  v24 = (int)UncompressedBuffer;
  v7 = CompressedBuffer;
  v8 = UncompressedBuffer;
  memset(&Event, 0, sizeof(Event));
  v9 = &UncompressedBuffer[(unsigned int)UncompressedBufferSize];
  v10 = &CompressedBuffer[(unsigned int)CompressedBufferSize];
  v11 = 0;
  KeInitializeEvent(&Event, SynchronizationEvent, 0);
  v23 = 1i64;
  v12 = *(_WORD *)v7;
  FinalUncompressedChunkSize = 0;
  while( 1 )
  {
    v16 = (v12 & 0xFFFu) + 3;
    if( &v7[v16] > v10 )
    {
LABEL_32:
      v17 = FinalUncompressedSize;
LABEL_20:
      v11 = -1073741246;
      *(_DWORD *)v17 = (_DWORD)v7;
      goto LABEL_14;
    }
    v13 = (unsigned int)v16;
    if( v12 >= 0 )
    {
      if( (unsigned int)v16 < 2ui64 )
        goto LABEL_32;
      v19 = v16 - 2;
      FinalUncompressedChunkSize = v19;
      if( &v8[v19] > v9 )
      {
        v19 = (_DWORD)v9 - (_DWORD)v8;
        FinalUncompressedChunkSize = (_DWORD)v9 - (_DWORD)v8;
      }
      if( &v7[v19 + 2] > v10 )
        goto LABEL_32;
      memmove(v8, v7 + 2, v19);
LABEL_28:
      v15 = FinalUncompressedChunkSize;
      goto LABEL_6;
    }
    v14 = ExplicitChunkSize;
    if( !(_DWORD)ExplicitChunkSize )
    {
      v11 = LZNT1DecompressChunk(v8, v9, v7 + 2, (INT64)&v7[v16], &FinalUncompressedChunkSize);
      if( v11 < 0 )
      {
        *(_DWORD *)FinalUncompressedSize = FinalUncompressedChunkSize;
        goto LABEL_14;
      }
      goto LABEL_28;
    }
    LODWORD(a6) = ExplicitChunkSize;
    v11 = LZNT1DecompressChunkNewThread((INT64)&Event, v8, v9, v7 + 2, (INT64)&v7[v16], a6);
    if( v11 < 0 )
      break;
    v15 = v14;
    FinalUncompressedChunkSize = v14;
LABEL_6:
    v7 += v13;
    v8 += v15;
    if( v8 == v9 || v7 > v10 - 2 || (v12 = *(_WORD *)v7) == 0 )
    {
LABEL_12:
      v17 = FinalUncompressedSize;
      if( v7 <= v10 )
      {
        *(_DWORD *)FinalUncompressedSize = (_DWORD)v8 - v24;
        goto LABEL_14;
      }
      goto LABEL_20;
    }
    if( v15 < 0x1000 )
    {
      v20 = &v8[4096 - v15];
      if( v20 >= v9 )
        goto LABEL_12;
      memset((INT64)v8, 0i64);
      v8 = v20;
    }
  }
  *(_DWORD *)FinalUncompressedSize = FinalUncompressedChunkSize;
LABEL_14:
  if( _InterlockedExchangeAdd((volatile signed __int32 *)&v23, 0xFFFFFFFF) == 1 )
    KeSetEvent(&Event, 0);
  KeWaitForSingleObject(&Event, Executive, 0, 0, 0i64);
  if( v11 >= 0 && v23 < 0 )
    return(unsigned int)HIDWORD(v23);
  return(unsigned int)v11;
}

Referenced by: