Function at 0x6ad150
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x28
test ecx, ecx
je 0x6ad397
mov esi, ecx
test dl, dl
je 0x6ad190
push esi
call sub.msvcrt.dll__strdup
add esp, 4
mov esi, eax
push eax
call fcn.0068f220
add esp, 4
mov ecx, eax
xor edx, edx
call fcn.006ad150
push esi
call sub.msvcrt.dll_free
add esp, 0x2c
jmp 0x6ad39a
lea eax, [esp + 4]
push eax
push esi
call fcn.0066a6d0
add esp, 8
test eax, eax
js 0x6ad397
movzx eax, word [esp + 0xa]
and eax, 0xf000
cmp eax, 0x4000
jne 0x6ad397
push 2
push esi
call sub.msvcrt.dll__access
add esp, 8
test eax, eax
jne 0x6ad397
sub esp, 0x1c
movaps xmm0, xmmword [0x7046b0]
movups xmmword [esp + 4], xmm0
mov dword [esp], esi
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x2000000
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
je 0x6ad2e2
mov edi, eax
push 0
push eax
call dword [sym.imp.msvcrt.dll__open_osfhandle]
add esp, 8
test eax, eax
js 0x6ad2e9
mov ebx, eax
push eax
call dword [sym.imp.msvcrt.dll__get_osfhandle]
add esp, 4
cmp eax, 0xffffffff
je 0x6ad2ff
mov edi, eax
mov ebp, esp
push 4
push ebp
push 0x17
push eax
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandleEx]
test eax, eax
je 0x6ad2a2
mov bl, 1
test byte [esp], 1
jne 0x6ad383
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, esi
mov edx, 0x40000000
push 0
call fcn.006ac2f0
add esp, 4
test eax, eax
js 0x6ad32f
mov ebx, eax
push eax
call dword [sym.imp.msvcrt.dll__get_osfhandle]
add esp, 4
cmp eax, 0xffffffff
je 0x6ad2ff
mov edi, eax
mov ecx, esi
call fcn.006ad580
or byte [esp], 1
push 4
push ebp
push 0x17
push edi
call dword [sym.imp.KERNEL32.dll_SetFileInformationByHandle]
test eax, eax
mov bl, 1
jne 0x6ad383
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp byte [0x72631c], 0
je 0x6ad381
cmp eax, 0x56
jg 0x6ad30c
cmp eax, 5
je 0x6ad333
cmp eax, 0x32
jne 0x6ad364
push 2
call dword [0x71401c]
add esp, 4
push eax
push 1
push 0x5e
push str.winsup_fs_internal:_Detected:_Windows_Subsystem_for_Linux_may_not_be_enabled_on_this_machine._n
jmp 0x6ad379
xor ebx, ebx
jmp 0x6ad38a
push 0x57
call dword [sym.imp.KERNEL32.dll_SetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
jmp 0x6ad38a
push ebx
call sub.msvcrt.dll__close
add esp, 4
xor ebx, ebx
jmp 0x6ad38a
cmp eax, 0x91
je 0x6ad34a
cmp eax, 0x57
jne 0x6ad364
push 2
call dword [0x71401c]
add esp, 4
push eax
push 1
push 0x6a
push str.winsup_fs_internal:_Detected:_You_may_be_on_an_OS_version_that_doesnt_support_case_sensitivity_settings._n
jmp 0x6ad379
xor edi, edi
jmp 0x6ad381
push 2
call dword [0x71401c]
add esp, 4
push eax
push 1
push 0x76
push str.winsup_fs_internal:_Detected:_You_may_not_have_enough_rights_to_have_this_directory_case_sensitive_with_current_user._n
jmp 0x6ad379
push 2
call dword [0x71401c]
add esp, 4
push eax
push 1
push 0xfc
push str.winsup_fs_internal:_Detected:_The_directory_is_not_empty__due_to_Windows_limitation__please_place_magiskboot_binary_and_image_files_outside_of_your_working_directory._nOr__use_fsutil_to_set_the_case_sensitivity_before_filling_this_directory_with_files._n
jmp 0x6ad379
push 2
call dword [0x71401c]
add esp, 4
push eax
push 1
push 0x75
push str.winsup_fs_internal:_Note:_Unable_to_determine_reason__try_using_fsutil_to_set_the_case_sensitivity_manually_and_see._n
call sub.msvcrt.dll_fwrite
add esp, 0x10
xor ebx, ebx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
jne 0x6ad397
cmp byte [0x72631c], 0
jne 0x6ad39f
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret
push 2
call dword [0x71401c]
sub esp, 8
mov dword [esp + 8], esi
mov dword [esp], eax
call fcn.006ad3c0
add esp, 0xc
call sub.msvcrt.dll_abort
int3