{"name": "ehci_execute", "code": "__int64 __fastcall ehci_execute ( _QWORD * @@a1@@ , __int64 @@a2@@ ) { bool @@v3@@ ; __int64 @@v4@@ ; if ( * ( ( _DWORD * ) @@a1@@ + Number ) && * ( ( _DWORD * ) @@a1@@ + Number ) != Number ) _assert_fail ( String , String , Number , String ) ; if ( ( @@a1@@ [ Number ] & Number ) == Number ) { fwrite ( String , Number , Number , stderr ) ; return Number ; } if ( ( HIWORD ( * ( ( _DWORD * ) @@a1@@ + Number ) ) & Number ) > Number ) { ehci_trace_guest_bug ( * ( _QWORD * ) * @@a1@@ , String ) ; return Number ; } if ( ! ehci_verify_pid ( * @@a1@@ , ( __int64 ) ( @@a1@@ + Number ) ) ) ehci_queue_stopped ( * @@a1@@ ) ; * ( ( _DWORD * ) @@a1@@ + Number ) = ehci_get_pid ( ( __int64 ) ( @@a1@@ + Number ) ) ; * ( _DWORD * ) ( * @@a1@@ + Number L ) = * ( ( _DWORD * ) @@a1@@ + Number ) ; @@v4@@ = usb_ep_get ( * ( _QWORD * ) ( * @@a1@@ + Number L ) , * ( ( unsigned int * ) @@a1@@ + Number ) , ( * ( _DWORD * ) ( * @@a1@@ + Number L ) >> Number ) & Number ) ; if ( ! * ( ( _DWORD * ) @@a1@@ + Number ) ) { if ( ( unsigned int ) ehci_init_transfer ( @@a1@@ ) ) return Number ; @@v3@@ = * ( ( _DWORD * ) @@a1@@ + Number ) == Number && ( * ( ( _DWORD * ) @@a1@@ + Number ) & Number ) == Number ; usb_packet_setup ( @@a1@@ + Number , * ( ( unsigned int * ) @@a1@@ + Number ) , @@v4@@ , Number L , * ( ( unsigned int * ) @@a1@@ + Number ) , @@v3@@ , ( @@a1@@ [ Number ] & Number ) != Number ) ; usb_packet_map ( @@a1@@ + Number , @@a1@@ + Number ) ; * ( ( _DWORD * ) @@a1@@ + Number ) = Number ; } trace_usb_ehci_packet_action ( * @@a1@@ , @@a1@@ , @@a2@@ ) ; usb_handle_packet ( * ( _QWORD * ) ( * @@a1@@ + Number L ) , @@a1@@ + Number ) ; if ( * ( ( int * ) @@a1@@ + Number ) <= Number ) return Number L ; fwrite ( String , Number , Number , stderr ) ; return Number ; }", "source": [{"n": "a1", "t": {"T": 3, "t": "_QWORD"}, "location": "r56"}, {"n": "a2", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "r64"}, {"n": "v3", "t": {"T": 1, "n": "bool", "s": 1}, "location": "r8"}, {"n": "v4", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "s16"}]}
{"name": "ehci_trace_guest_bug", "code": "unsigned __int64 __fastcall ehci_trace_guest_bug ( __int64 @@a1@@ , const char * @@a2@@ ) { unsigned __int64 @@v3@@ ; @@v3@@ = __readfsqword ( Number ) ; trace_usb_ehci_guest_bug ( @@a2@@ ) ; fprintf ( stderr , String , @@a2@@ ) ; return __readfsqword ( Number ) ^ @@v3@@ ; }", "source": [{"n": "a1", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "r56"}, {"n": "a2", "t": {"T": 3, "t": "const char"}, "location": "r64"}, {"n": "v3", "t": {"T": 1, "n": "unsigned __int64", "s": 8}, "location": "s8"}]} {"name": "ehci_get_pid", "code": "__int64 __fastcall ehci_get_pid ( __int64 @@a1@@ ) { int v1 ; __int64 result ; v1 = ( * ( _DWORD * ) ( @@a1@@ + Number ) >> Number ) & Number ; if ( v1 == Number ) return Number L ; if ( ( ( * ( _DWORD * ) ( @@a1@@ + Number ) >> Number ) & Number ) == Number ) { fwrite ( String , Number , Number , stderr ) ; result = Number L ; } else if ( v1 ) { result = Number L ; } else { result = Number L ; } return result ; }", "source": [{"n": "a1", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "r56"}]} {"name": "ehci_verify_pid", "code": "_BOOL8 __fastcall ehci_verify_pid ( __int64 @@a1@@ , __int64 @@a2@@ ) { int @@v3@@ ; int @@v4@@ ; @@v3@@ = ( * ( _DWORD * ) ( @@a1@@ + Number ) >> Number ) & Number ; @@v4@@ = ehci_get_pid ( @@a2@@ ) ; return ! * ( _DWORD * ) ( @@a1@@ + Number ) || ! @@v3@@ || @@v4@@ == * ( _DWORD * ) ( @@a1@@ + Number ) ; }", "source": [{"n": "a1", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "r56"}, {"n": "a2", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "r64"}, {"n": "v4", "t": {"T": 1, "n": "int", "s": 4}, "location": "s12"}, {"n": "v3", "t": {"T": 1, "n": "int", "s": 4}, "location": "s16"}]} {"name": "ehci_queue_stopped", "code": "unsigned __int64 __fastcall ehci_queue_stopped ( __int64 @@a1@@ ) { __int64 @@v1@@ ; unsigned __int64 @@v3@@ ; @@v3@@ = __readfsqword ( Number ) ; if ( * ( _DWORD * ) ( @@a1@@ + Number ) && * ( _QWORD * ) ( @@a1@@ + Number ) ) { @@v1@@ = usb_ep_get ( * ( _QWORD * ) ( @@a1@@ + Number ) , * ( unsigned int * ) ( @@a1@@ + Number ) , ( * ( _DWORD * ) ( @@a1@@ + Number ) >> Number ) & Number ) ; usb_device_ep_stopped ( * ( _QWORD * ) ( @@a1@@ + Number ) , @@v1@@ ) ; } return __readfsqword ( Number ) ^ @@v3@@ ; }", "source": [{"n": "a1", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "r56"}, {"n": "v1", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "r8"}, {"n": "v3", "t": {"T": 1, "n": "unsigned __int64", "s": 8}, "location": "s8"}]} {"name": "ehci_init_transfer", "code": "__int64 __fastcall ehci_init_transfer ( _DWORD * @@a1@@ ) { unsigned int @@v2@@ ; unsigned int @@v3@@ ; unsigned int @@v4@@ ; unsigned int @@v5@@ ; unsigned __int64 @@v6@@ ; @@v2@@ = ( @@a1@@ [ Number ] >> Number ) & Number ; @@v4@@ = HIWORD ( @@a1@@ [ Number ] ) & Number ; @@v3@@ = @@a1@@ [ Number ] & Number ; qemu_sglist_init ( @@a1@@ + Number , * ( _QWORD * ) ( * * ( _QWORD * * ) @@a1@@ + Number L ) , Number L , * ( _QWORD * ) ( * * ( _QWORD * * ) @@a1@@ + Number L ) ) ; while ( @@v4@@ ) { if ( @@v2@@ > Number ) { fprintf ( stderr , String , @@v2@@ ) ; return Number ; } @@v6@@ = @@v3@@ + ( unsigned __int64 ) ( @@a1@@ [ @@v2@@ + Number ] & Number ) ; @@v5@@ = @@v4@@ ; if ( @@v4@@ > Number - @@v3@@ ) { @@v5@@ = Number - @@v3@@ ; @@v3@@ = Number ; ++ @@v2@@ ; } qemu_sglist_add ( @@a1@@ + Number , @@v6@@ , @@v5@@ ) ; @@v4@@ -= @@v5@@ ; } return Number L ; }", "source": [{"n": "a1", "t": {"T": 3, "t": "_DWORD"}, "location": "r56"}, {"n": "v6", "t": {"T": 1, "n": "unsigned __int64", "s": 8}, "location": "s16"}, {"n": "v5", "t": {"T": 1, "n": "unsigned int", "s": 4}, "location": "s20"}, {"n": "v4", "t": {"T": 1, "n": "unsigned int", "s": 4}, "location": "s24"}, {"n": "v3", "t": {"T": 1, "n": "unsigned int", "s": 4}, "location": "s28"}, {"n": "v2", "t": {"T": 1, "n": "unsigned int", "s": 4}, "location": "s32"}]} {"name": "ehci_execute_complete", "code": "unsigned __int64 __fastcall ehci_execute_complete ( __int64 @@a1@@ ) { int @@v1@@ ; int v3 ; int v4 ; _DWORD * @@v5@@ ; unsigned __int64 @@v6@@ ; @@v6@@ = __readfsqword ( Number ) ; @@v5@@ = * ( _DWORD * * ) ( @@a1@@ + Number ) ; if ( ! @@v5@@ ) _assert_fail ( String , String , Number , String ) ; if ( @@v5@@ [ Number ] != * ( _DWORD * ) ( @@a1@@ + Number ) ) _assert_fail ( String , String , Number , String ) ; if ( @@v5@@ [ Number ] != Number && @@v5@@ [ Number ] != Number ) _assert_fail ( String , String , Number , String ) ; switch ( @@v5@@ [ Number ] ) { case Number : case Number : * ( _DWORD * ) ( @@a1@@ + Number ) |= Number ; * ( _DWORD * ) ( @@a1@@ + Number ) &= Number ; ehci_raise_irq ( * ( _QWORD * ) @@a1@@ , Number ) ; goto LABEL_14 ; case Number : * ( _DWORD * ) ( @@a1@@ + Number ) |= Number ; ehci_raise_irq ( * ( _QWORD * ) @@a1@@ , Number ) ; goto LABEL_14 ; case Number : * ( _DWORD * ) ( @@a1@@ + Number ) |= Number ; ehci_raise_irq ( * ( _QWORD * ) @@a1@@ , Number ) ; goto LABEL_14 ; case Number : * ( _DWORD * ) ( @@a1@@ + Number ) &= Number ; return __readfsqword ( Number ) ^ @@v6@@ ; case Number : goto LABEL_14 ; default : fprintf ( stderr , String , ( unsigned int ) @@v5@@ [ Number ] ) ; g_assertion_message_expr ( Number L , String , Number L , String , Number L ) ; LABEL_14 : v3 = HIWORD ( * ( _DWORD * ) ( @@a1@@ + Number ) ) & Number ; if ( v3 && @@v5@@ [ Number ] == Number ) { v4 = v3 - @@v5@@ [ Number ] ; if ( v4 ) { ehci_raise_irq ( * ( _QWORD * ) @@a1@@ , Number ) ; if ( * ( _DWORD * ) ( @@a1@@ + Number ) ) * ( _BYTE * ) ( * ( _QWORD * ) @@a1@@ + Number L ) = Number ; } } else { v4 = Number ; } * ( _DWORD * ) ( @@a1@@ + Number ) = ( v4 << Number ) & Number | * ( _DWORD * ) ( @@a1@@ + Number ) & Number ; ehci_finish_transfer ( @@a1@@ , @@v5@@ [ Number ] ) ; usb_packet_unmap ( @@v5@@ + Number , @@v5@@ + Number ) ; qemu_sglist_destroy ( @@v5@@ + Number ) ; @@v5@@ [ Number ] = Number ; * ( _DWORD * ) ( @@a1@@ + Number ) ^= Number ; @@v1@@ = * ( _DWORD * ) ( @@a1@@ + Number ) ; LOBYTE ( @@v1@@ ) = @@v1@@ & Number ; * ( _DWORD * ) ( @@a1@@ + Number ) = @@v1@@ ; if ( ( * ( _DWORD * ) ( @@a1@@ + Number ) & Number ) != Number ) { ehci_raise_irq ( * ( _QWORD * ) @@a1@@ , Number ) ; if ( * ( _DWORD * ) ( @@a1@@ + Number ) ) * ( _BYTE * ) ( * ( _QWORD * ) @@a1@@ + Number L ) = Number ; } return __readfsqword ( Number ) ^ @@v6@@ ; } }", "source": [{"n": "a1", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "r56"}, {"n": "v1", "t": {"T": 1, "n": "int", "s": 4}, "location": "r8"}, {"n": "v5", "t": {"T": 3, "t": "_DWORD"}, "location": "s16"}, {"n": "v6", "t": {"T": 1, "n": "unsigned __int64", "s": 8}, "location": "s8"}]} {"name": "ehci_fill_queue", "code": "__int64 __fastcall ehci_fill_queue ( __int64 @@a1@@ ) { __int64 v1 ; __int64 v2 ; __int64 v4 ; __int64 v5 ; __int64 i ; _QWORD * v7 ; int @@v8@@ ; __int64 @@v9@@ ; __int64 * @@v10@@ ; __int64 @@v11@@ ; __int64 @@v12@@ ; __int64 @@v13@@ ; __int64 @@v14@@ ; unsigned __int64 @@v15@@ ; @@v15@@ = __readfsqword ( Number ) ; @@v9@@ = * ( _QWORD * ) ( @@a1@@ + Number ) ; @@v10@@ = * ( __int64 * * ) @@a1@@ ; v1 = * ( _QWORD * ) ( @@a1@@ + Number ) ; @@v11@@ = * ( _QWORD * ) ( @@a1@@ + Number ) ; @@v12@@ = v1 ; v2 = * ( _QWORD * ) ( @@a1@@ + Number ) ; @@v13@@ = * ( _QWORD * ) ( @@a1@@ + Number ) ; @@v14@@ = v2 ; while ( ( @@v11@@ & Number ) == Number ) { @@v8@@ = @@v11@@ ; for ( i = @@v10@@ [ Number ] ; i ; i = * ( _QWORD * ) ( i + Number ) ) { if ( ( _DWORD ) @@v11@@ == * ( _DWORD * ) ( i + Number ) ) goto LABEL_17 ; } if ( ( int ) get_dwords ( * @@v10@@ , ( unsigned int ) @@v11@@ & Number , ( unsigned int * ) & @@v11@@ , Number ) < Number ) return Number ; ehci_trace_qtd ( ( __int64 ) @@v10@@ , @@v8@@ & Number , ( unsigned int * ) & @@v11@@ ) ; if ( ( @@v12@@ & Number ) == Number ) break ; if ( ! ehci_verify_pid ( ( __int64 ) @@v10@@ , ( __int64 ) & @@v11@@ ) ) { ehci_trace_guest_bug ( * @@v10@@ , String ) ; break ; } v7 = ehci_alloc_packet ( ( __int64 ) @@v10@@ ) ; * ( ( _DWORD * ) v7 + Number ) = @@v8@@ ; v4 = @@v12@@ ; v7 [ Number ] = @@v11@@ ; v7 [ Number ] = v4 ; v5 = @@v14@@ ; v7 [ Number ] = @@v13@@ ; v7 [ Number ] = v5 ; if ( ( unsigned int ) ehci_execute ( v7 , ( __int64 ) String ) == Number ) return Number ; if ( * ( ( _DWORD * ) v7 + Number ) != Number ) _assert_fail ( String , String , Number , String ) ; * ( ( _DWORD * ) v7 + Number ) = Number ; } LABEL_17 : usb_device_flush_ep_queue ( * ( _QWORD * ) ( @@v9@@ + Number ) , @@v9@@ ) ; return Number L ; }", "source": [{"n": "a1", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "r56"}, {"n": "v14", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "s24"}, {"n": "v13", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "s32"}, {"n": "v12", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "s40"}, {"n": "v11", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "s48"}, {"n": "v10", "t": {"T": 3, "t": "__int64"}, "location": "s56"}, {"n": "v9", "t": {"T": 1, "n": "__int64", "s": 8}, "location": "s64"}, {"n": "v8", "t": {"T": 1, "n": "int", "s": 4}, "location": "s68"}, {"n": "v15", "t": {"T": 1, "n": "unsigned __int64", "s": 8}, "location": "s8"}]} {"name": "ehci_state_execute", "code": "__int64 __fastcall ehci_state_execute ( _DWORD * * @@a1@@ ) { unsigned int @@v2@@ ; _QWORD * @@v3@@ ; @@v3@@ = @@a1@@ [ Number ] ; if ( ! @@v3@@ ) _assert_fail ( String , String , Number , String ) ; if ( * ( ( _DWORD * ) @@v3@@ + Number ) != * ( ( _DWORD * ) @@a1@@ + Number ) ) _assert_fail ( String , String , Number , String ) ; if ( ( unsigned int ) ehci_qh_do_overlay ( ( __int64 ) @@a1@@ ) ) return Number ; if ( * ( ( _DWORD * ) @@a1@@ + Number ) || * ( ( _DWORD * ) @@a1@@ + Number ) ) { if ( * ( ( _DWORD * ) @@a1@@ + Number ) ) ehci_set_usbsts ( ( __int64 ) * @@a1@@ , Number ) ; @@v2@@ = ehci_execute ( @@v3@@ , ( __int64 ) String ) ; if ( @@v2@@ != Number ) { if ( * ( ( _DWORD * ) @@v3@@ + Number ) == Number ) { ehci_flush_qh ( ( __int64 ) @@a1@@ ) ; trace_usb_ehci_packet_action ( * @@v3@@ , @@v3@@ , String ) ; * ( ( _DWORD * ) @@v3@@ + Number ) = Number ; ehci_set_state ( * @@a1@@ , * ( ( _DWORD * ) @@a1@@ + Number ) , Number ) ; if ( * ( ( _DWORD * ) @@a1@@ + Number ) ) @@v2@@ = ehci_fill_queue ( ( __int64 ) @@v3@@ ) ; else @@v2@@ = Number ; } else { ehci_set_state ( * @@a1@@ , * ( ( _DWORD * ) @@a1@@ + Number ) , Number ) ; @@v2@@ = Number ; } } } else { ehci_set_state ( * @@a1@@ , * ( ( _DWORD * ) @@a1@@ + Number ) , Number ) ; @@v2@@ = Number ; } return @@v2@@ ; }", "source": [{"n": "a1", "t": {"T": 3, "t": "_DWORD *"}, "location": "r56"}, {"n": "v3", "t": {"T": 3, "t": "_QWORD"}, "location": "s16"}, {"n": "v2", "t": {"T": 1, "n": "unsigned int", "s": 4}, "location": "s20"}]} {"name": "ehci_state_executing", "code": "__int64 __fastcall ehci_state_executing ( _DWORD * * @@a1@@ ) { _DWORD * @@v2@@ ; @@v2@@ = @@a1@@ [ Number ] ; if ( ! @@v2@@ ) _assert_fail ( String , String , Number , String ) ; if ( @@v2@@ [ Number ] != * ( ( _DWORD * ) @@a1@@ + Number ) ) _assert_fail ( String , String , Number , String ) ; ehci_execute_complete ( ( __int64 ) @@a1@@ ) ; if ( ! * ( ( _DWORD * ) @@a1@@ + Number ) && * ( ( int * ) @@a1@@ + Number ) > Number ) -- * ( ( _DWORD * ) @@a1@@ + Number ) ; if ( @@v2@@ [ Number ] == Number ) ehci_set_state ( * @@a1@@ , * ( ( _DWORD * ) @@a1@@ + Number ) , Number ) ; else ehci_set_state ( * @@a1@@ , * ( ( _DWORD * ) @@a1@@ + Number ) , Number ) ; ehci_flush_qh ( ( __int64 ) @@a1@@ ) ; return Number L ; }", "source": [{"n": "a1", "t": {"T": 3, "t": "_DWORD *"}, "location": "r56"}, {"n": "v2", "t": {"T": 3, "t": "_DWORD"}, "location": "s16"}]}