Function at 0x6ad82c30
Capabilities:
Encode data using xor

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xcc
mov eax, dword [esp + 0xe0]
mov dword [esp + 0x7c], 0
mov esi, dword [eax + 0x40]
mov edi, dword [eax + 0x44]
lea eax, [esp + 0x7c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 4], eax
add eax, 0x30
mov dword [esp], eax
call fcn.6ada4da0
mov dword [esp + 0x60], eax
test eax, eax
je 0x6ad82c90
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.6adab410
mov eax, dword [esp + 0x60]
add esp, 0xcc
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 4], edi
mov dword [esp + 8], 0x32
mov dword [esp + 0xc], 0
mov dword [esp], esi
call fcn.6adf5af0
mov dword [esp], eax
mov edi, eax
mov dword [esp + 0x50], eax
call fcn.6ad82210
mov dword [esp + 0x5c], eax
test eax, eax
je 0x6ae0b151
test edi, edi
je 0x6ad834a7
mov dword [esp + 0x48], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], 0
lea esi, [esi]
lea esi, [esi]
lea eax, [esp + 0x90]
mov ebx, dword [esp + 0x48]
add ebx, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov edi, ebx
mov dword [esp], ebx
call fcn.6ada55b0
mov eax, dword [esp + 0xe0]
cmp dword [eax + 8], 0x10d00
jne 0x6ad82d45
and byte [esp + 0x97], 0xef
mov dword [esp + 4], 0x88
mov dword [esp], 1
call fcn.6adab440
mov ebp, eax
test eax, eax
je 0x6ae0b01d
movzx eax, word [ebx + 0x18]
lea edx, [ebp + 0x10]
mov dword [esp + 0x44], edx
mov word [esp + 0x4e], ax
mov eax, dword [ebx + 0x1a]
mov dword [ebp + 0x24], eax
mov ecx, dword [ebx + 0x1e]
mov dword [ebp + 0x10], ecx
mov ecx, dword [ebx + 0x22]
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebx + 0x26]
mov dword [ebp + 0x18], ecx
mov ecx, dword [ebx + 0x2a]
mov dword [ebp + 0x1c], ecx
mov eax, dword [ebx + 0x2e]
mov dword [ebp + 0x20], eax
movzx eax, byte [esp + 0x97]
test al, 0x10
je 0x6ad83020
mov esi, dword [esp + 0x3c]
test esi, esi
je 0x6ad831e8
mov eax, dword [esp + 0xa4]
xor eax, 1
or eax, dword [esp + 0xa0]
je 0x6ad82ec2
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x40]
mov esi, dword [esp + 0x98]
mov edi, dword [esp + 0x9c]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x94]
and eax, 0xffffff
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], edx
test ecx, ecx
je 0x6ad83526
xor ecx, ecx
mov dword [esp + 0x54], ebp
mov dword [esp + 0x28], esi
mov ebp, ecx
mov dword [esp + 0x2c], edi
jmp 0x6ad82e35
sub dword [esp + 0x28], eax
sbb dword [esp + 0x2c], edx
add ebp, 1
cmp ebp, dword [esp + 0x40]
je 0x6ad8352b
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x30]
add ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0x34]
mov eax, dword [eax + ebp*4]
adc ebx, dword [esp + 0x2c]
mov edx, dword [eax + 0x1c]
mov edi, eax
mov eax, dword [eax + 0x18]
mov esi, edx
cmp eax, ecx
sbb esi, ebx
jb 0x6ad82e20
mov ebp, dword [esp + 0x54]
mov ebx, edi
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
movzx eax, byte [ebp + 0x2c]
mov dword [ebp + 0x30], ebx
lea edx, [ebp + 0x40]
add ebx, 0x20
and eax, 0xfffffff0
or eax, 1
mov byte [ebp + 0x2c], al
mov eax, dword [ebx + 4]
mov dword [ebx + 4], edx
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x44], eax
mov dword [eax], edx
mov dword [ebp + 0x38], esi
mov dword [ebp + 0x3c], edi
cmp dword [esp + 0x44], 0x6ae19be0
je 0x6ad82ec2
mov eax, dword [esp + 0x44]
mov dword [esp + 8], 0x14
mov dword [esp + 4], 0x6ae19be0
mov dword [esp], eax
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x6ad830bc
movzx eax, byte [ebp + 0x2c]
and eax, 0xf
cmp al, 1
jne 0x6ad82edc
mov edx, dword [ebp + 0x44]
mov eax, dword [ebp + 0x40]
mov dword [edx], eax
mov dword [eax + 4], edx
and byte [ebp + 0x2c], 0xf0
mov dword [esp], ebp
call fcn.6ad82370
mov dword [esp], ebp
call fcn.6adab410
add dword [esp + 0x48], 0x32
sub dword [esp + 0x50], 1
jne 0x6ad82d10
mov esi, dword [esp + 0x3c]
test esi, esi
je 0x6ad82fce
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
call fcn.6ad82920
test eax, eax
je 0x6ad82fce
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x5c]
xor edi, edi
mov eax, dword [eax]
mov ebp, dword [eax + edi*4]
test ebp, ebp
jne 0x6ad82f70
jmp 0x6ad82fa5
cmp al, 1
ja 0x6ad83480
jne 0x6ad82f60
mov esi, dword [ebx + 0x30]
mov eax, dword [ebx + 0x40]
mov edx, dword [ebx + 0x44]
mov dword [edx], eax
mov dword [eax + 4], edx
lea eax, [esi + 0x20]
cmp dword [esi + 0x20], eax
je 0x6ad83490
lea esi, [esi]
and byte [ebx + 0x2c], 0xf0
mov dword [esp], ebx
call fcn.6adab410
test ebp, ebp
je 0x6ad82f9f
mov ebx, ebp
mov ebp, dword [ebp]
movzx eax, byte [ebx + 0x2c]
and eax, 0xf
cmp al, 3
jbe 0x6ad82f38
cmp al, 4
jne 0x6ad82f60
mov eax, dword [ebx + 0x30]
mov dword [esp], eax
call fcn.6adbeb30
and byte [ebx + 0x2c], 0xf0
mov dword [esp], ebx
call fcn.6adab410
test ebp, ebp
jne 0x6ad82f70
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
mov esi, dword [esp + 0x5c]
add edi, 1
cmp edi, dword [esi + 8]
jbe 0x6ad82f29
mov dword [esp], eax
call fcn.6adab410
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.6adab410
jmp 0x6ad82c75
mov eax, dword [esp + 0xe0]
cmp word [eax + 0x24], 1
je 0x6ad83465
mov ebx, dword [esp + 0x64]
test ebx, ebx
jne 0x6ae0b041
mov ecx, dword [esp + 0x68]
test ecx, ecx
jne 0x6ae0b08f
mov edx, dword [esp + 0x6c]
test edx, edx
jne 0x6ae0b16a
mov eax, dword [esp + 0xe0]
mov edi, dword [esp + 0x5c]
mov dword [eax + 0x138], edi
jmp 0x6ad82c75
mov edx, dword [esp + 0x3c]
test edx, edx
jne 0x6ad833fa
test al, 4
je 0x6ad8341f
mov dword [esp], 0x30
call fcn.6adab3e0
test eax, eax
je 0x6ae0af70
mov dword [esp + 8], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xc], ebp
mov dword [esp + 4], eax
lea eax, [esp + 0x90]
mov dword [esp], eax
call fcn.6ada54b0
mov eax, dword [esp + 0xe0]
add dword [eax + 0x13c], 1
cmp dword [esp + 0x44], 0x6ae19be0
je 0x6ad83110
mov eax, dword [esp + 0x44]
mov dword [esp + 8], 0x14
mov dword [esp + 4], 0x6ae19be0
mov dword [esp], eax
call sub.msvcrt.dll_memcmp
test eax, eax
je 0x6ad83110
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov eax, edx
mov edx, ecx
or edx, eax
je 0x6ad833e0
mov eax, dword [esp + 0xe0]
movzx edi, word [esp + 0x4e]
cmp word [eax + 0x24], di
jne 0x6ad833f0
movzx eax, byte [esp + 0x97]
test al, 2
je 0x6ad83120
mov edx, dword [ebp + 0x24]
test edx, edx
jne 0x6ad83170
mov edi, dword [esp + 0x3c]
test edi, edi
jne 0x6ad82ec2
jmp 0x6ad82edc
mov dword [esp + 0x3c], 0
jmp 0x6ad82edc
mov edi, dword [esp + 0x5c]
mov eax, dword [ebp + 0x10]
mov edx, dword [edi]
and eax, dword [edi + 8]
mov ebx, dword [edx + eax*4]
test ebx, ebx
je 0x6ad83450
mov esi, dword [esp + 0x44]
jmp 0x6ad8314a
mov ebx, dword [ebx]
test ebx, ebx
je 0x6ad83450
lea eax, [ebx + 0x10]
mov dword [esp + 8], 0x14
mov dword [esp + 4], eax
mov dword [esp], esi
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x6ad83140
add dword [esp + 0x64], 1
jmp 0x6ad830f9
cmp edx, 1
jne 0x6ae0b10a
test al, 0x10
jne 0x6ae0af89
cmp word [esp + 0x4e], 1
jne 0x6ae0afde
mov eax, dword [esp + 0xe0]
mov edi, dword [esp + 0x58]
cmp dword [eax + 0x28], edi
je 0x6ae0b05a
mov eax, dword [esp + 0xe0]
mov esi, dword [esp + 0x58]
mov eax, dword [eax + 0x130]
mov dword [esp], ebp
lea ebx, [eax + esi*4]
call fcn.6adabf70
mov dword [ebx], eax
mov eax, dword [esp + 0xe0]
mov eax, dword [eax + 0x130]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x6ae0b06b
add esi, 1
mov dword [esp + 0x58], esi
jmp 0x6ad82eec
mov eax, dword [esp + 0x50]
xor ecx, ecx
mov dword [esp + 0x28], edi
mov dword [esp + 0x30], ebx
mov esi, ecx
mov edi, eax
jmp 0x6ad8321c
mov eax, dword [esp + 0xbc]
xor eax, 1
or eax, dword [esp + 0xb8]
cmp eax, 1
adc esi, 0
sub edi, 1
je 0x6ad8323e
mov eax, ebx
lea ecx, [esp + 0xa8]
add ebx, 0x32
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.6ada55b0
test byte [esp + 0xaf], 0x10
jne 0x6ad83200
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
mov dword [esp + 4], 4
mov dword [esp], esi
mov dword [esp + 0x40], esi
call fcn.6adab440
mov dword [esp + 0x3c], eax
mov ecx, eax
test eax, eax
je 0x6ad8351b
mov eax, esi
test esi, esi
je 0x6ad833c0
xor esi, esi
mov dword [esp + 0x28], edi
mov edi, ecx
mov dword [esp + 0x30], ebx
mov ebx, esi
mov esi, eax
lea esi, [esi]
mov dword [esp], 0x30
call fcn.6adab3e0
mov dword [edi + ebx*4], eax
test eax, eax
je 0x6ad834d0
add ebx, 1
cmp ebx, esi
jne 0x6ad83288
mov eax, dword [esp + 0xe0]
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
add eax, 0x148
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x28], eax
lea eax, [eax + esi*4 - 4]
mov dword [esp + 0x30], eax
lea esi, [esi]
lea eax, [esp + 0xa8]
mov dword [esp], edi
mov esi, ebx
add ebx, 0x32
mov dword [esp + 4], eax
mov edi, ebx
call fcn.6ada55b0
mov eax, dword [esp + 0xbc]
xor eax, 1
or eax, dword [esp + 0xb8]
jne 0x6ad832d8
mov eax, dword [esp + 0x28]
mov edi, dword [eax]
mov eax, dword [esp + 0xe0]
mov dword [esp + 4], eax
lea eax, [esp + 0xa8]
mov dword [esp], eax
mov dword [esp + 8], edi
call fcn.6ada5400
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
mov dword [esp + 8], 0x10
mov dword [esp + 0xc], eax
lea eax, [esp + 0x80]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x10], edx
mov dword [esp], eax
call fcn.6ad90790
test eax, eax
jne 0x6ae0b0d7
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
mov dword [edi + 0x18], eax
mov eax, dword [edi + 0x28]
mov dword [edi + 0x1c], edx
mov edx, dword [esp + 0x8c]
and eax, 0x3ff
shl edx, 0xa
or eax, edx
mov dword [edi + 0x28], eax
mov eax, dword [esp + 0x88]
mov dword [edi + 0x2c], eax
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x30]
cmp eax, edi
je 0x6ad833c0
add eax, 4
lea edi, [esi + 0x32]
mov dword [esp + 0x28], eax
jmp 0x6ad832d8
mov eax, dword [esp + 0xe0]
mov edi, dword [esp + 0x40]
add dword [eax + 0x13c], edi
jmp 0x6ad82db3
add dword [esp + 0x68], 1
jmp 0x6ad830f9
add dword [esp + 0x6c], 1
jmp 0x6ad830f9
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
call fcn.6ad82920
test eax, eax
jne 0x6ad83520
movzx eax, byte [esp + 0x97]
test al, 4
jne 0x6ad83034
mov eax, dword [esp + 0x94]
mov edx, dword [esp + 0x90]
xor edx, dword [esp + 0xa0]
and eax, 0xffffff
xor eax, dword [esp + 0xa4]
or eax, edx
je 0x6ad83034
jmp 0x6ae0b138
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], ebp
mov dword [esp], eax
call fcn.6ad82510
jmp 0x6ad82eec
mov eax, dword [esp + 0xe0]
mov edi, dword [esp + 0x58]
cmp dword [eax + 0x28], edi
je 0x6ad82fe0
jmp 0x6ae0b0a8
mov eax, dword [ebx + 0x30]
mov dword [esp], eax
call fcn.6adab410
jmp 0x6ad82f60
mov eax, dword [esi]
mov dword [esp], eax
call fcn.6adac9d0
mov dword [esp], esi
call fcn.6adab410
jmp 0x6ad82f60
mov eax, dword [esp + 0xe0]
cmp word [eax + 0x24], 1
jne 0x6ad83004
mov eax, dword [esp + 0xe0]
mov eax, dword [eax + 0x28]
test eax, eax
je 0x6ad83004
jmp 0x6ae0b11b
mov dword [esp + 0x60], 0x27
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
xor ebx, ebx
lea esi, [esi]
mov eax, dword [esi + ebx*4]
add ebx, 1
mov dword [esp], eax
call fcn.6adab410
cmp ebx, edi
jb 0x6ad834e8
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.6adab410
mov dword [esp], ebp
call fcn.6ad82370
mov dword [esp], ebp
call fcn.6adab410
jmp 0x6ad82f21
mov eax, 0x27
mov dword [esp + 0x60], eax
jmp 0x6ad83506
jmp 0x6ae0affc
mov eax, dword [esp + 0x54]
mov ebp, eax
jmp 0x6ae0affc
mov dword [esp], str.Not_enough_memory_to_read_blob_table_
call fcn.6ae0b475
mov dword [esp + 0x60], 0x27
jmp 0x6ad83506
mov dword [esp], str.Image_metadata_in_solid_resources_is_unsupported.
call fcn.6ae0b475
cmp dword [esp + 0x3c], 0
je 0x6ae0afef
mov dword [esp + 0x60], 0x14
xor ebx, ebx
cmp dword [esp + 0x40], 0
je 0x6ae0afc5
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + ebx*4]
lea edx, [eax + 0x20]
cmp dword [eax + 0x20], edx
je 0x6ae0b00a
add ebx, 1
cmp dword [esp + 0x40], ebx
jne 0x6ae0afad
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.6adab410
test ebp, ebp
jne 0x6ad83506
jmp 0x6ad82f21
mov dword [esp], str.Ignoring_metadata_resource_found_in_a_non_first_part_of_the_split_WIM
call fcn.6ae0b4c9
jmp 0x6ad830f9
mov dword [esp + 0x60], 0x14
jmp 0x6ad83506
mov dword [esp], str.blob_could_not_be_assigned_to_a_solid_resource
call fcn.6ae0b475
jmp 0x6ae0af9c
mov edx, dword [eax]
sub dword [edx + 0x13c], 1
mov dword [esp], eax
call fcn.6adab410
jmp 0x6ae0afbc
mov dword [esp], str.Not_enough_memory_to_read_blob_table_
call fcn.6ae0b475
cmp dword [esp + 0x3c], 0
mov dword [esp + 0x60], 0x27
jne 0x6ae0afa4
jmp 0x6ad82f21
mov eax, dword [esp + 0x64]
mov dword [esp], str.Ignoring__zu_duplicate_blobs
mov dword [esp + 4], eax
call fcn.6ae0b4c9
jmp 0x6ad82fec
mov dword [esp], str.Found_more_metadata_resources_than_images
call fcn.6ae0b4c9
jmp 0x6ad830f9
mov dword [esp], str.Not_enough_memory_to_read_blob_table_
call fcn.6ae0b475
cmp dword [esp + 0x3c], 0
mov dword [esp + 0x60], 0x27
jne 0x6ae0afa4
jmp 0x6ad83506
mov eax, dword [esp + 0x68]
mov dword [esp], str.Ignoring__zu_empty_blobs
mov dword [esp + 4], eax
call fcn.6ae0b4c9
jmp 0x6ad82ff8
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x50], eax
mov dword [esp], str.Could_not_find_metadata_resources_for_all_images
call fcn.6ae0b4c9
mov eax, dword [esp + 0xe0]
mov edi, dword [esp + 0x58]
mov dword [eax + 0x28], edi
mov eax, dword [esp + 0x50]
mov dword [esp + 0x6c], eax
jmp 0x6ad82fe0
mov ecx, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb4]
mov dword [esp], str.Failed_to_read_header_of_solid_resource__offset_in_wim_llu_
mov dword [esp + 0x28], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.6ae0b475
mov eax, dword [esp + 0x28]
mov dword [esp + 0x60], eax
jmp 0x6ad834d8
mov dword [esp], str.Found_metadata_resource_with_refcnt___1
call fcn.6ae0b475
jmp 0x6ae0af95
mov dword [esp + 0x64], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x68], 0
jmp 0x6ae0b0b0
mov dword [esp], str.Uncompressed_resource_has_size_in_wim___uncompressed_size
call fcn.6ae0b475
mov dword [esp + 0x60], 0x14
jmp 0x6ad83506
mov dword [esp], str.Not_enough_memory_to_read_blob_table_
call fcn.6ae0b475
mov dword [esp + 0x60], 0x27
jmp 0x6ad82c75
mov eax, dword [esp + 0x6c]
mov dword [esp], str.Ignoring__zu_blobs_with_wrong_part_number
mov dword [esp + 4], eax
call fcn.6ae0b4c9
jmp 0x6ad83004