Function at 0x448300
Capabilities:
Write file on windows

Disassembly:
push ebp
push edi
push esi
mov esi, eax
push ebx
sub esp, 0x5c
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x30], edx
mov dword [esp + 0x2c], 0
test ecx, ecx
je 0x4484d0
mov ebx, dword [esi]
mov ecx, dword [ebx + 0x18]
mov edx, dword [ecx + 0xc]
mov eax, dword [ecx + 8]
mov edi, edx
or edi, eax
je 0x4485d2
add eax, 0xffffffff
mov ebp, dword [ebx + 0xc]
adc edx, 0xffffffff
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], edx
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x38], eax
or edx, eax
jne 0x4484a8
mov edx, dword [esp + 0x34]
test edx, edx
je 0x4484a0
mov eax, dword [ecx]
mov dword [esi], 0
mov dword [esp + 0x4c], eax
test ebp, ebp
je 0x448390
lea eax, [ebx + 0xc]
mov dword [esp], eax
call fcn.00448120
mov ebp, eax
mov eax, edx
or eax, ebp
jne 0x448660
mov edx, dword [esp + 0x30]
mov ecx, 1
mov eax, ebx
call fcn.00447d30
mov ebp, eax
mov eax, edx
mov ecx, edx
or eax, ebp
jne 0x4484b2
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4483ce
mov dword [esp + 0x34], edx
lea edx, [esp + 0x4c]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0041d440
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
mov dword [esi], 0
test eax, eax
je 0x4484be
mov eax, dword [esp + 0x30]
mov dword [esp + 0x2c], ecx
mov dword [esp], eax
call fcn.00414000
mov ecx, dword [esp + 0x2c]
mov ebx, eax
mov eax, edx
mov esi, edx
or eax, ebx
je 0x4484be
mov dword [esp + 4], edx
mov dword [esp], ebx
mov dword [esp + 0x30], ecx
call fcn.0041d490
mov edi, dword [fcn.004a1b90]
mov dword [esp], 2
mov dword [esp + 0x2c], eax
call edi
mov edx, dword [esp + 0x2c]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x53dea0
mov dword [esp + 0x10], edx
mov dword [esp + 4], 0x53df38
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call edi
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x53ded6
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call edi
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov ecx, dword [esp + 0x30]
mov eax, ecx
or eax, ebp
cmove ebp, ebx
cmove ecx, esi
add esp, 0x5c
pop ebx
pop esi
mov eax, ebp
mov edx, ecx
pop edi
pop ebp
ret
test ebp, ebp
jne 0x448570
mov dword [esi], 0
xor ebp, ebp
xor ecx, ecx
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x4483e0
add esp, 0x5c
mov eax, ebp
mov edx, ecx
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], edx
call fcn.00413ff0
mov dword [esp + 0x2c], 1
mov ebp, eax
mov eax, edx
or eax, ebp
je 0x448325
mov dword [esp + 4], edx
mov dword [esp], ebp
mov dword [esp + 0x2c], edx
call fcn.0041d490
mov ebx, dword [fcn.004a1b90]
mov dword [esp], 2
mov esi, eax
call ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 8], 0x53dea0
mov dword [esp + 4], 0x53dea8
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x53ded6
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov ecx, dword [esp + 0x2c]
jmp 0x4484be
lea eax, [esp + 0x4c]
mov dword [esi], 0
mov dword [esp], eax
mov dword [esp + 0x4c], ebp
call fcn.00448120
mov ebp, eax
mov eax, edx
mov ecx, edx
or eax, ebp
je 0x4483ce
mov dword [esp + 4], edx
mov dword [esp], ebp
mov dword [esp + 0x34], edx
call fcn.0041d490
mov dword [esp], 2
mov ebx, dword [fcn.004a1b90]
mov esi, eax
call ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 8], 0x53dea0
mov dword [esp + 4], 0x53e11c
jmp 0x448699
mov esi, dword [fcn.004a1b90]
mov dword [esp], 2
mov ebp, 6
call esi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], str.exfat_inode_reference_release_internal
mov dword [esp + 0x10], 0x1c1
mov dword [esp + 0xc], 0x53df68
mov dword [esp + 8], 0x53df70
mov dword [esp + 4], 0x53e078
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call esi
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x53ded6
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call esi
mov dword [esp], eax
call sub.msvcrt.dll_fflush
xor ecx, ecx
jmp 0x4484b2
mov dword [esp + 4], edx
mov dword [esp], ebp
mov dword [esp + 0x34], edx
call fcn.0041d490
mov dword [esp], 2
mov ebx, dword [fcn.004a1b90]
mov esi, eax
call ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 8], 0x53dea0
mov dword [esp + 4], 0x53e0c8
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x53ded6
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov ecx, dword [esp + 0x34]
jmp 0x4484b2