Function at 0x6add6e11
Capabilities:
Check if file exists
Get disk information via ioctl
Read file on windows

Disassembly:
push ebp
push edi
push esi
mov esi, str.A:System_Volume_InformationWimOverlay.dat
push ebx
mov ebx, eax
sub esp, 0x38c
cmp word [eax], 0
mov dword [esp + 0x54], ecx
lea edi, [esp + 0xa8]
mov ecx, 0x16
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x34], edx
mov esi, str.A:System_Volume_InformationWimOverlay.backup
mov ecx, 0x5e
lea edi, [esp + 0x100]
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x1c4]
mov esi, str.A:System_Volume_InformationWimOverlay.wimlib_backup
mov ecx, 0x1b
rep movsd dword es:[edi], dword [esi]
lea edi, [esp + 0x15e]
mov esi, str.A:System_Volume_InformationWimOverlay.wimlib_new
mov ecx, 0x66
rep movsb byte es:[edi], byte [esi]
je 0x6add6e85
cmp word [eax + 2], 0x3a
jne 0x6add6e85
cmp word [eax + 4], 0
je 0x6add6ea2
mov dword [esp + 8], 0x31f
mov dword [esp + 4], str.src_wimboot.c
mov dword [esp], str.drive_0____L0__drive_1___L:__drive_2___L0
call dword [0x6add9074]
mov ax, word [ebx]
mov ebp, 2
lea ebx, [esp + 0xa8]
mov word [esp + 0xa8], ax
mov word [esp + 0x100], ax
mov word [esp + 0x1c4], ax
mov word [esp + 0x15e], ax
mov edx, 0x80000000
mov eax, ebx
call fcn.6adbc230
mov esi, eax
cmp eax, 0xffffffff
jne 0x6add6fa0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x6add74ea
cmp eax, 3
jne 0x6add6f7b
cmp dword [0x6ae1f050], 0
je 0x6add6f7b
lea edi, [esp + 0x2c0]
mov esi, str.__X:_
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
lea esi, [esp + 0x2c0]
mov dword [esp + 4], 0x58
mov dword [esp], esi
call sub.msvcrt.dll_wcschr
mov edx, dword [esp + 0xa8]
mov word [eax], dx
lea eax, [esp + 0x230]
mov dword [esp + 0x230], 0x10000e
mov dword [esp + 0x234], esi
mov dword [esp], eax
call dword [0x6ae1f050]
push edx
mov dword [esp], eax
call sub.ntdll.dll_RtlNtStatusToDosError
push ecx
test eax, eax
jne 0x6add6f7b
dec ebp
je 0x6add6f76
mov ebp, 1
jmp 0x6add6ed1
mov eax, 3
lea edx, [esp + 0xa8]
mov dword [esp + 4], str.__ls_:_Cant_open_for_reading
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.6add80c9
mov ebx, 0x2f
jmp 0x6add7dc7
lea eax, [esp + 0x2c0]
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
push edi
push edi
test eax, eax
jne 0x6add6fe8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 8], ebx
mov ebx, 0x3f
mov dword [esp + 4], str.__ls_:_Cant_query_metadata
mov dword [esp], eax
call fcn.6add80c9
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
jmp 0x6add7dc7
mov edi, dword [esp + 0x2e0]
test edi, edi
je 0x6add7019
lea eax, [esp + 0xa8]
mov dword [esp], str.__ls_:_File_is_too_large_to_fit_into_memory
mov dword [esp + 4], eax
call fcn.6add55ba
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edx
jmp 0x6add7cdd
mov eax, dword [esp + 0x2e4]
mov dword [esp], eax
call fcn.6adaeec0
mov ebp, eax
test eax, eax
je 0x6add6ff3
xor eax, eax
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push eax
xor eax, eax
mov dword [esp + 0x10], eax
lea eax, [esp + 0x230]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x2e4]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x6add707a
mov eax, dword [esp + 0x230]
cmp dword [esp + 0x2e4], eax
je 0x6add70b7
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [esp + 0xa8]
mov ebx, 0x32
mov dword [esp + 4], str.__ls_:_Cant_read_data
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.6add80c9
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add7dc7
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
mov eax, dword [esp + 0x2e4]
mov dword [esp + 0x30], eax
cmp eax, 0x17
ja 0x6add70f2
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], str.__ls_:_File_is_unexpectedly_small__only__u_bytes_
call fcn.6add55ba
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add7dab
cmp dword [ebp], 0x66436f57
jne 0x6add7107
cmp dword [ebp + 4], 1
jne 0x6add7107
cmp dword [ebp + 8], 0x28
je 0x6add7166
lea eax, [esp + 0xa8]
mov dword [esp], str.__ls_:_Header_contains_unexpected_data:
mov dword [esp + 4], eax
call fcn.6add55ba
cmp byte [0x6ae1f044], 0
je 0x6add76f8
mov eax, dword [0x6ae1f040]
mov dword [esp + 4], 0x18
mov dword [esp], ebp
mov dword [esp + 8], eax
call fcn.6ad8d920
mov eax, dword [0x6ae1f040]
mov dword [esp], 0xa
mov dword [esp + 4], eax
call sub.msvcrt.dll_fputc
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add7dab
mov eax, dword [ebp + 0xc]
mov ecx, dword [esp + 0x30]
xor ebx, ebx
mov dword [esp + 0x40], eax
mov eax, 0x28
mul dword [esp + 0x40]
lea esi, [ecx - 0x18]
mov ecx, ebx
cmp esi, eax
sbb ecx, edx
jb 0x6add71a1
lea eax, [ebp + 0x18]
xor esi, esi
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x5c], esi
mov dword [esp + 0x58], eax
jmp 0x6add72e2
mov eax, dword [esp + 0x40]
mov dword [esp], str.__ls_:_File_is_unexpectedly_small__only__u_bytes__but_has__u_entries_
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
lea eax, [esp + 0xa8]
mov dword [esp + 4], eax
call fcn.6add55ba
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add7dab
mov ebx, dword [esp + 0x50]
lea eax, [ecx - 0x68]
mov dword [esp + 0x50], eax
mov eax, ecx
add ebx, ebp
and eax, 1
jne 0x6add742b
cmp dword [esp + 0x50], 3
jbe 0x6add742b
mov edx, dword [esp + 0x50]
shr edx, 1
cmp word [ebx + eax*2 + 0x68], 0
je 0x6add720b
inc eax
cmp eax, edx
jne 0x6add71fe
dec edx
cmp edx, eax
jne 0x6add742b
cmp dword [ebx], 0
jne 0x6add7480
cmp dword [ebx + 4], 0
jne 0x6add7480
cmp dword [ebx + 0xc], 0
jne 0x6add7480
cmp ecx, dword [ebx + 8]
jne 0x6add7480
cmp dword [ebx + 0x10], 5
jne 0x6add7480
cmp dword [ebx + 0x14], 1
jne 0x6add7480
sub ecx, 0x14
cmp dword [ebx + 0x18], ecx
jne 0x6add7480
cmp dword [ebx + 0x1c], 5
jne 0x6add7480
cmp dword [ebx + 0x20], 6
jne 0x6add7480
cmp dword [ebx + 0x24], 0
jne 0x6add7480
cmp dword [ebx + 0x28], 0x48
jne 0x6add7480
cmp dword [ebx + 0x2c], 0
jne 0x6add7480
cmp dword [ebx + 0x40], 0
jne 0x6add7480
cmp dword [ebx + 0x44], 1
ja 0x6add7480
mov edx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x3c]
jne 0x6add7478
or eax, edx
jne 0x6add7480
cmp dword [ebx + 0x58], 0
jne 0x6add7480
cmp dword [ebx + 0x5c], 0
jne 0x6add7480
cmp dword [ebx + 0x60], 0
jne 0x6add7480
add dword [esp + 0x38], 0x28
cmp dword [ebx + 0x64], 0
jne 0x6add7480
inc edi
cmp dword [esp + 0x40], edi
je 0x6add74ec
mov eax, dword [esp + 0x38]
mov edx, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x38]
cmp dword [esp + 0x2c], edx
mov esi, dword [eax + 4]
mov eax, dword [ebp + 0x14]
mov ecx, esi
sbb ecx, eax
jb 0x6add7349
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xa8]
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edi
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], str.__ls_:_value_of_next_data_source_id__0x_016llx__is_unexpected__since_entry__u_has_data_source_ID_0x_016llx
call fcn.6add55ba
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add7dab
mov eax, dword [esp + 0x38]
xor ebx, ebx
xor edx, edx
mov dword [esp + 0x4c], ebx
mov ebx, dword [esp + 0x5c]
mov eax, dword [eax + 8]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x50]
mov dword [esp + 0x48], ecx
add eax, dword [esp + 0x48]
adc edx, dword [esp + 0x4c]
cmp dword [esp + 0x30], eax
sbb ebx, edx
jae 0x6add73b3
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
lea eax, [esp + 0xa8]
mov dword [esp + 4], eax
mov dword [esp], str.__ls_:_entry__u__2___data_source_ID_0x_016llx__overflows_file
call fcn.6add55ba
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add7dab
cmp ecx, 0x67
ja 0x6add73ec
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
lea eax, [esp + 0xa8]
mov dword [esp + 4], eax
mov dword [esp], str.__ls_:_entry__u__2___data_source_ID_0x_016llx__is_too_short
call fcn.6add55ba
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add7dab
test byte [esp + 0x50], 1
je 0x6add71d5
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
lea eax, [esp + 0xa8]
mov dword [esp + 4], eax
mov dword [esp], str.__ls_:_entry__u__2___data_source_ID_0x_016llx__is_misaligned
call fcn.6add55ba
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add7dab
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
lea eax, [esp + 0xa8]
mov dword [esp + 4], eax
mov dword [esp], str.__ls_:_entry__u__2___data_source_ID_0x_016llx__has_invalid_WIM_file_name
call fcn.6add55ba
cmp byte [0x6ae1f044], 0
je 0x6add76f8
mov eax, dword [0x6ae1f040]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
lea eax, [ebx + 0x68]
mov dword [esp], eax
jmp 0x6add74cb
or eax, edx
jne 0x6add72b4
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
lea eax, [esp + 0xa8]
mov dword [esp + 4], eax
mov dword [esp], str.__ls_:_entry__u__2___data_source_ID_0x_016llx__contains_unexpected_data_
call fcn.6add55ba
cmp byte [0x6ae1f044], 0
je 0x6add76f8
mov eax, dword [0x6ae1f040]
mov dword [esp + 8], eax
imul eax, edi, 0x28
mov eax, dword [ebp + eax + 0x24]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.6ad8d920
mov eax, dword [0x6ae1f040]
mov dword [esp], 0xa
mov dword [esp + 4], eax
call sub.msvcrt.dll_fputc
jmp 0x6add76f8
xor ebp, ebp
mov eax, dword [esp + 0x34]
lea edi, [esp + 0x62]
mov esi, str..X:
mov ecx, 0xe
rep movsb byte es:[edi], byte [esi]
lea ebx, [esp + 0x62]
lea edi, [esp + 0x70]
mov esi, str._PhysicalDriveXXXXXXXXXX
cmp word [eax], 0
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
je 0x6add7521
cmp word [eax + 2], 0x3a
je 0x6add753e
mov dword [esp + 8], 0x5c
mov dword [esp + 4], str.src_wimboot.c
mov dword [esp], str.path_0____L0__path_1___L:
call dword [0x6add9074]
mov dword [esp + 4], 0x58
mov dword [esp], ebx
call sub.msvcrt.dll_wcschr
mov ecx, dword [esp + 0x34]
mov dx, word [ecx]
mov word [eax], dx
mov edx, 0x80000000
mov eax, ebx
call fcn.6adbc230
mov dword [esp + 0x2c], eax
inc eax
jne 0x6add758f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 8], ebx
mov dword [esp + 4], str.__ls_:_Cant_open_volume_device
mov dword [esp], eax
call fcn.6add80c9
xor ecx, ecx
mov dword [esp], ecx
jmp 0x6add776a
xor eax, eax
xor edx, edx
lea edi, [esp + 0x2c0]
mov esi, 0x20
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x230]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], edx
mov edx, dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], 0x90
mov dword [esp + 4], 0x70048
mov dword [esp], eax
mov dword [esp + 0x30], edx
call edx
sub esp, 0x20
test eax, eax
jne 0x6add761f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], str.__ls_:_Cant_get_partition_info
call fcn.6add80c9
xor eax, eax
mov dword [esp], eax
call fcn.6adaeef0
xor eax, eax
mov dword [esp], eax
call fcn.6adaeef0
jmp 0x6add76af
mov dword [esp], ebx
call fcn.6adaeef0
add esi, 0x60
mov dword [esp], esi
call fcn.6adaeec0
mov ebx, eax
test eax, eax
je 0x6add794e
xor eax, eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], eax
xor eax, eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], esi
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], ebx
mov dword [esp + 4], 0x560000
call eax
sub esp, 0x20
test eax, eax
jne 0x6add76b9
mov edx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x38], edx
call edx
mov edx, dword [esp + 0x38]
cmp eax, 0xea
je 0x6add7617
call edx
lea edx, [esp + 0x62]
mov dword [esp + 4], str.__ls_:_Cant_get_volume_extent_info
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.6add80c9
mov dword [esp], ebx
xor ebx, ebx
call fcn.6adaeef0
mov dword [esp], ebx
call fcn.6adaeef0
mov ebx, 0x32
jmp 0x6add7965
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
mov eax, dword [ebx]
cmp eax, 1
je 0x6add7705
mov dword [esp + 8], eax
lea eax, [esp + 0x62]
mov dword [esp + 4], eax
mov dword [esp], str.__ls_:_This_volume_has__u_disk_extents__but_this_code_is_untested_for_more_than_1
call fcn.6add55ba
mov dword [esp], ebx
call fcn.6adaeef0
xor edx, edx
mov dword [esp], edx
call fcn.6adaeef0
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add7dab
lea edi, [esp + 0x70]
mov esi, dword [ebx + 8]
mov dword [esp + 4], 0x58
mov dword [esp], edi
call sub.msvcrt.dll_wcschr
mov dword [esp + 8], esi
mov esi, 0xc0
mov dword [esp + 4], 0x6ade9bdc
mov dword [esp], eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov edx, 0x80000000
mov eax, edi
call fcn.6adbc230
mov dword [esp + 0x2c], eax
inc eax
je 0x6add774d
mov edi, ebx
jmp 0x6add778e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 8], edi
mov dword [esp + 4], str.__ls_:_Cant_open_disk_device
mov dword [esp], eax
call fcn.6add80c9
mov dword [esp], ebx
call fcn.6adaeef0
xor eax, eax
mov dword [esp], eax
call fcn.6adaeef0
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add6f96
mov dword [esp], ebx
call fcn.6adaeef0
add esi, 0x240
mov dword [esp], esi
call fcn.6adaeec0
mov ebx, eax
test eax, eax
je 0x6add794c
xor eax, eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x2c0]
mov dword [esp + 0x18], eax
xor eax, eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], ebx
mov dword [esp + 4], 0x70050
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
sub esp, 0x20
test eax, eax
jne 0x6add7836
mov edx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x30], edx
call edx
mov edx, dword [esp + 0x30]
cmp eax, 0x7a
je 0x6add7786
mov dword [esp + 0x30], ebx
mov ebx, 0x32
call edx
lea edx, [esp + 0x70]
mov dword [esp + 4], str.__ls_:_Cant_get_disk_info
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.6add80c9
mov dword [esp], edi
call fcn.6adaeef0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.6adaeef0
jmp 0x6add7965
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x2c]
mov ebx, edi
mov ecx, 0x30
mov esi, dword [esp + 0x30]
lea edi, [esp + 0x2c0]
rep movsd dword es:[edi], dword [esi]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x230]
cmp dword [ecx], eax
je 0x6add7884
lea eax, [esp + 0x70]
mov dword [esp], str.__ls_____ls_:_Inconsistent_partition_table_type_
mov dword [esp + 8], eax
lea eax, [esp + 0x62]
mov dword [esp + 4], eax
jmp 0x6add78dd
cmp eax, 1
jne 0x6add78c8
mov eax, dword [esp + 0x30]
mov dword [esp + 8], 0x10
add eax, 8
mov dword [esp + 4], eax
lea eax, [esp + 0x260]
mov dword [esp], eax
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x6add7903
lea eax, [esp + 0x70]
mov dword [esp], str.__ls_____ls_:_Partition_GUID_is_the_same_as_the_disk_GUID___
mov dword [esp + 8], eax
lea eax, [esp + 0x62]
mov dword [esp + 4], eax
jmp 0x6add78dd
jbe 0x6add7903
mov dword [esp + 8], eax
lea eax, [esp + 0x62]
mov dword [esp + 4], eax
mov dword [esp], str.__ls_:_Unknown_partition_style_0x_08x
call fcn.6add55ba
mov dword [esp], ebx
call fcn.6adaeef0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.6adaeef0
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add7dab
mov dword [esp], ebx
call fcn.6adaeef0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.6adaeef0
test ebp, ebp
je 0x6add7980
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
mov esi, 0x18
xor edi, edi
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x44], edx
mov dword [esp], eax
call sub.msvcrt.dll_wcslen
mov edx, dword [ebp + 0xc]
add eax, 0x33
add eax, eax
mov dword [esp + 0x30], eax
xor eax, eax
jmp 0x6add79a8
mov ebx, edi
mov dword [esp], ebx
mov ebx, 0x27
call fcn.6adaeef0
xor eax, eax
mov dword [esp], eax
call fcn.6adaeef0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
mov dword [esp], ebp
call fcn.6adaeef0
jmp 0x6add7dc7
mov eax, dword [esp + 0x34]
xor esi, esi
xor edi, edi
mov dword [esp], eax
call sub.msvcrt.dll_wcslen
mov dword [esp + 0x40], esi
add eax, 0x33
mov dword [esp + 0x44], esi
mov esi, 0x18
add eax, eax
mov dword [esp + 0x30], eax
jmp 0x6add79c2
cmp eax, edx
je 0x6add79c2
imul ecx, eax, 0x28
xor ebx, ebx
mov ecx, dword [ebp + ecx + 0x24]
add ecx, 0x28
adc ebx, 0
add esi, ecx
adc edi, ebx
inc eax
jmp 0x6add79a8
mov eax, dword [esp + 0x30]
add esi, 0x28
adc edi, 0
xor edx, edx
add eax, esi
adc edx, edi
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x3c], edx
cmp dword [esp + 0x3c], 0
mov dword [esp + 0x50], eax
ja 0x6add76f8
mov dword [esp], eax
call fcn.6adaeec0
mov dword [esp + 0x2c], eax
test eax, eax
je 0x6add7cd5
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x66436f57
add eax, 0x18
mov dword [eax - 0x14], 1
mov dword [eax - 0x10], 0x28
test ebp, ebp
je 0x6add7a54
mov ecx, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x14]
mov edi, dword [esp + 0x2c]
lea edx, [ecx + 1]
mov ecx, dword [esp + 0x2c]
mov dword [ecx + 0xc], edx
mov ecx, dword [ebp + 0x10]
add ecx, 1
adc ebx, 0
imul edx, edx, 0x28
mov dword [edi + 0x10], ecx
lea ecx, [ebp + 0x18]
mov dword [edi + 0x14], ebx
xor ebx, ebx
mov dword [esp + 0x48], ecx
add edx, 0x18
jmp 0x6add7a72
mov edx, dword [esp + 0x2c]
xor ebx, ebx
mov dword [edx + 0xc], 1
mov dword [edx + 0x10], 1
mov dword [edx + 0x14], ebx
mov edx, 0x40
jmp 0x6add7a95
cmp ebx, dword [ebp + 0xc]
jae 0x6add7a95
mov esi, dword [esp + 0x48]
mov edi, eax
mov ecx, 0xa
add dword [esp + 0x48], 0x28
rep movsd dword es:[edi], dword [esi]
inc ebx
mov dword [eax + 8], edx
add eax, 0x28
add edx, dword [eax - 0x1c]
jmp 0x6add7a72
mov ecx, dword [esp + 0x40]
mov ebx, dword [esp + 0x44]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0x54]
mov dword [eax], ecx
mov ecx, 4
mov dword [eax + 0xc], edx
xor edx, edx
mov dword [eax + 0x10], edx
mov edx, dword [esp + 0x3a0]
mov dword [eax + 4], ebx
lea ebx, [eax + 0x28]
mov dword [eax + 0x14], edx
lea edx, [eax + 0x18]
mov edi, edx
rep movsd dword es:[edi], dword [esi]
test ebp, ebp
je 0x6add7b80
xor edi, edi
mov eax, dword [0x6add9074]
mov edx, 0x24
mov dword [esp + 0x48], edi
mov dword [esp + 0x54], eax
mov eax, ebx
mov ebx, edx
mov ecx, dword [esp + 0x48]
cmp ecx, dword [ebp + 0xc]
jae 0x6add7b7e
mov ecx, dword [esp + 0x2c]
mov edx, eax
sub edx, ecx
cmp dword [ecx + ebx - 4], edx
je 0x6add7b2e
mov dword [esp + 0x58], eax
mov dword [esp + 8], 0x17d
mov dword [esp + 4], str.src_wimboot.c
mov dword [esp], str.new_hdr__entry_1s_i_.entry_2_offset__p___buf
call dword [0x6add9074]
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x2c]
mov edx, dword [edx + ebx]
cmp dword [ebp + ebx], edx
je 0x6add7b60
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], 0x17e
mov dword [esp + 4], str.src_wimboot.c
mov dword [esp], str.old_hdr__entry_1s_i_.entry_2_length__new_hdr__entry_1s_i_.entry_2_length
call eax
mov eax, dword [esp + 0x58]
mov esi, dword [ebp + ebx - 4]
mov ecx, dword [ebp + ebx]
mov edi, eax
inc dword [esp + 0x48]
add esi, ebp
rep movsb byte es:[edi], byte [esi]
add eax, dword [ebp + ebx]
add ebx, 0x28
jmp 0x6add7aee
mov ebx, eax
mov eax, dword [esp + 0x30]
xor edi, edi
xor esi, esi
xor edx, edx
xor ecx, ecx
mov dword [ebx], edi
mov dword [ebx + 8], eax
sub eax, 0x14
cmp dword [esp + 0x230], 0
mov dword [ebx + 4], edi
mov dword [ebx + 0xc], edx
mov dword [ebx + 0x10], 5
mov dword [ebx + 0x14], 1
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], 5
mov dword [ebx + 0x20], 6
mov dword [ebx + 0x24], ecx
mov dword [ebx + 0x28], 0x48
mov dword [ebx + 0x2c], esi
mov dword [ebx + 0x40], esi
jne 0x6add7c0d
mov eax, dword [esp + 0x238]
mov edx, dword [esp + 0x23c]
xor esi, esi
xor ecx, ecx
mov dword [ebx + 0x38], ecx
mov dword [ebx + 0x30], eax
mov eax, dword [esp + 0x2c8]
mov dword [ebx + 0x34], edx
mov dword [ebx + 0x3c], ecx
mov dword [ebx + 0x44], 1
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x4c], esi
mov dword [ebx + 0x50], esi
mov dword [ebx + 0x54], esi
jmp 0x6add7c38
lea eax, [ebx + 0x30]
lea esi, [esp + 0x260]
mov ecx, 4
xor edx, edx
mov edi, eax
lea eax, [ebx + 0x48]
rep movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x44], edx
lea esi, [esp + 0x2c8]
mov edi, eax
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov dword [ebx + 0x58], eax
mov dword [ebx + 0x5c], eax
mov dword [ebx + 0x60], eax
mov dword [ebx + 0x64], eax
mov eax, dword [esp + 0x34]
cmp word [eax + 4], 0x5c
je 0x6add7c6e
mov dword [esp + 8], 0x1b5
mov dword [esp + 4], str.src_wimboot.c
mov dword [esp], str.wim_path_2___L
call dword [0x6add9074]
mov ecx, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
add ebx, 0x68
mov edi, ebx
mov eax, dword [esp + 0x2c]
sub ecx, 0x68
add esi, 4
rep movsb byte es:[edi], byte [esi]
sub edi, eax
mov eax, dword [esp + 0x38]
cmp edi, eax
je 0x6add7cae
mov dword [esp + 8], 0x1fa
mov dword [esp + 4], str.src_wimboot.c
mov dword [esp], str.end___buf__new_contents_size
call dword [0x6add9074]
mov dword [esp], ebp
call fcn.6adaeef0
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x15e]
call fcn.6add6d10
mov ebx, eax
test eax, eax
je 0x6add7ce7
jmp 0x6add7d9a
mov dword [esp], ebp
call fcn.6adaeef0
mov ebx, 0x27
jmp 0x6add7dc7
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x100]
call fcn.6add6d10
mov ebx, eax
test eax, eax
jne 0x6add7d9a
test ebp, ebp
je 0x6add7d4e
lea esi, [esp + 0x1c4]
lea ebx, [esp + 0xa8]
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.6adc5640
test eax, eax
je 0x6add7d4e
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], str.Cant_rename___ls______ls_
mov ebx, 0x34
call fcn.6add55e2
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.6adaeef0
jmp 0x6add7dc7
lea edi, [esp + 0xa8]
lea esi, [esp + 0x15e]
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.6adc5640
mov ebx, eax
test eax, eax
je 0x6add7d78
mov dword [esp + 8], edi
mov dword [esp + 4], esi
jmp 0x6add7d2f
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.6adaeef0
mov eax, dword [esp + 0x3a4]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [eax], edx
mov dword [eax + 4], ecx
jmp 0x6add7dc7
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.6adaeef0
cmp ebx, 0x44
jne 0x6add7dc7
lea eax, [esp + 0xa8]
mov dword [esp], str.Please_report_to_developer__https:__wimlib.net_forums__._n________If_possible_send_the_file___ls_._n_n
mov ebx, 0x44
mov dword [esp + 4], eax
call fcn.6add55ba
add esp, 0x38c
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret