Function at 0x4493e0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x330
mov dword [ebp - 4], 0
mov eax, dword [0x51a74c]
push eax
mov ecx, dword [0x51a744]
push ecx
push str.Primary_memory:_Reading_0x_x_bytes_from_0x_x_n
call fcn.00463e31
add esp, 0xc
mov edx, dword [0x51a744]
push edx
call fcn.00463cd9
add esp, 4
mov dword [ebp - 0xc], eax
mov eax, dword [0x51a744]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [0x51a74c]
push edx
mov eax, dword [0x51aa58]
push eax
call fcn.00445f90
add esp, 0x10
cmp eax, 0xffffffff
jne 0x449452
push str.ReadBlock_failed__n
call fcn.00463e31
add esp, 4
jmp 0x449550
push str.Scanning_for_changes..._n
call fcn.00463e31
add esp, 4
mov dword [ebp - 0x10], 0
jmp 0x449471
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
cmp edx, dword [0x51a744]
jae 0x449498
mov eax, dword [0x51a740]
add eax, dword [ebp - 0x10]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x10]
movzx eax, byte [edx]
cmp ecx, eax
je 0x449496
jmp 0x449498
jmp 0x449468
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [0x51a744]
jae 0x449543
push str.unpack
call fcn.004492c0
add esp, 4
mov dword [ebp - 4], eax
push 0xe
call fcn.00447170
add esp, 4
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x10]
push eax
push str.Change_found_at__i_dumping_to__s_n
call fcn.00463e31
add esp, 0xc
push 0x4cda54
mov ecx, dword [ebp - 4]
push ecx
call fcn.004675ba
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4494ff
push 0x4cda58
call fcn.00463e31
add esp, 4
jmp 0x449530
mov edx, dword [ebp - 8]
push edx
mov eax, dword [0x51a744]
push eax
push 1
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00467474
add esp, 0x10
mov edx, dword [ebp - 8]
push edx
call fcn.00467296
add esp, 4
push str.Data_dumped_successfully_to_disk_n
call fcn.00463e31
add esp, 4
call fcn.004470a0
mov eax, dword [ebp - 4]
push eax
call fcn.00463da3
add esp, 4
jmp 0x449550
push str.No_changes_found_in_primary_memory__dump_not_created._n
call fcn.00463e31
add esp, 4
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00463da3
add esp, 4
cmp dword [0x51aa4c], 0
jle 0x4496df
push 0xe
call fcn.00447170
add esp, 4
mov edx, dword [0x51aa4c]
push edx
push str.Dumping__d_runtime_memory_allocations.._n
call fcn.00463e31
add esp, 8
mov dword [ebp - 0x10], 0
jmp 0x449599
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [0x51aa4c]
jge 0x4496da
mov edx, dword [ebp - 0x10]
mov eax, dword [edx*8 + 0x51a684]
push eax
call fcn.00463cd9
add esp, 4
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx*8 + 0x51a684]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx*8 + 0x51a680]
push edx
mov eax, dword [0x51aa58]
push eax
call fcn.00445f90
add esp, 0x10
cmp eax, 0xffffffff
jne 0x449613
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx*8 + 0x51a684]
push edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax*8 + 0x51a680]
push ecx
push str.ReadBlock_failed__base_x_size_x_n
call fcn.00463e31
add esp, 0xc
jmp 0x4496c9
mov edx, dword [ebp - 0x10]
mov eax, dword [edx*8 + 0x51a680]
push eax
push str.alloc_0x_x
lea ecx, [ebp - 0x330]
push ecx
call fcn.00466eca
add esp, 0xc
lea edx, [ebp - 0x330]
push edx
call fcn.004492c0
add esp, 4
mov dword [ebp - 4], eax
push 0x4cdb28
mov eax, dword [ebp - 4]
push eax
call fcn.004675ba
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44966d
push str.Failed_to_create_file_n
call fcn.00463e31
add esp, 4
jmp 0x4496bd
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx*8 + 0x51a684]
push eax
push 1
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00467474
add esp, 0x10
mov edx, dword [ebp - 8]
push edx
call fcn.00467296
add esp, 4
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx*8 + 0x51a684]
push edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax*8 + 0x51a680]
push ecx
push str.Alloc__x___x_bytes__dumped_successfully_to_disk_as__s_n
call fcn.00463e31
add esp, 0x10
mov edx, dword [ebp - 4]
push edx
call fcn.00463da3
add esp, 4
mov eax, dword [ebp - 0xc]
push eax
call fcn.00463da3
add esp, 4
jmp 0x449590
call fcn.004470a0
mov esp, ebp
pop ebp
ret