Function at 0x44acc0
Capabilities:
Write file on windows

Disassembly:
push edi
push esi
push ebx
sub esp, 0x40
mov ebx, dword [esp + 0x50]
mov dword [esp + 0x3c], 0
test ebx, ebx
je 0x44af55
mov eax, dword [ebx + 0x30]
mov edx, dword [eax + 0x88]
test edx, edx
je 0x44aee0
mov edx, dword [ebx + 0x20]
mov edi, dword [edx + 0x10]
test edi, edi
jne 0x44ae10
mov edi, dword [eax + 0xb8]
test edi, edi
je 0x44ae20
mov edx, dword [eax + 0x80]
mov ecx, dword [eax + 0x84]
xor edx, dword [eax + 0xc0]
xor ecx, dword [eax + 0xc4]
or ecx, edx
je 0x44adfa
lea edx, [esp + 0x3c]
mov dword [esp + 0x3c], edi
mov dword [esp + 0xc], edx
mov esi, dword [ebx + 0x2c]
xor edx, edx
test esi, esi
setne dl
add eax, 0x30
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
call fcn.0042fb10
mov esi, eax
mov eax, edx
or eax, esi
jne 0x44ae4f
cmp dword [esp + 0x3c], edi
je 0x44add9
mov esi, dword [fcn.004a1b90]
mov dword [esp], 2
call esi
mov dword [esp + 8], 0x53ded9
mov dword [esp + 4], str.__s__Unexpected:_stream_was_reallocated_in_exfat_cluster_stream_create_with_locator_
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call esi
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x53ded6
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call esi
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov eax, dword [ebx + 0x30]
add eax, 0xb8
mov dword [esp], eax
call fcn.0042ff80
mov edi, dword [esp + 0x3c]
mov ecx, dword [ebx + 0x30]
mov eax, dword [ecx + 0x80]
mov edx, dword [ecx + 0x84]
mov dword [ecx + 0xb8], edi
mov dword [ecx + 0xc0], eax
mov dword [ecx + 0xc4], edx
mov eax, dword [esp + 0x54]
xor esi, esi
xor edx, edx
mov dword [eax], edi
add esp, 0x40
mov eax, esi
pop ebx
pop esi
pop edi
ret
add esp, 0x40
mov esi, 2
xor edx, edx
mov eax, esi
pop ebx
pop esi
pop edi
ret
lea edx, [esp + 0x3c]
mov dword [esp + 0xc], edx
mov ecx, dword [ebx + 0x2c]
xor edx, edx
test ecx, ecx
setne dl
add eax, 0x30
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
call fcn.0042fb10
mov esi, eax
mov eax, edx
or eax, esi
je 0x44add5
mov dword [esp + 4], edx
mov dword [esp], esi
mov dword [esp + 0x2c], edx
call fcn.0041d490
mov ebx, dword [fcn.004a1b90]
mov dword [esp], 2
mov edi, eax
call ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x53dea0
mov dword [esp + 4], 0x53e940
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x53ded6
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov edx, dword [esp + 0x2c]
add esp, 0x40
mov eax, esi
pop ebx
pop esi
pop edi
ret
mov esi, dword [fcn.004a1b90]
mov dword [esp], 2
call esi
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x53dea0
mov dword [esp + 4], 0x53e920
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call esi
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x53ded6
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call esi
mov esi, 0x16
mov dword [esp], eax
call sub.msvcrt.dll_fflush
add esp, 0x40
mov eax, esi
xor edx, edx
pop ebx
pop esi
pop edi
ret
mov ebx, dword [fcn.004a1b90]
mov dword [esp], 2
mov esi, 0x16
call ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x53dea0
mov dword [esp + 4], 0x53e8fc
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x53ded6
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
xor edx, edx
jmp 0x44ae04