Function at 0x408930
Capabilities:
Create process memory minidump

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x898
mov eax, dword [0x41c214]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, byte [0x41c524]
test eax, eax
jne 0x408953
jmp 0x408c59
mov ecx, 1
lock xadd dword [0x41c73c], ecx
inc ecx
mov dword [ebp - 0x87c], ecx
cmp dword [ebp - 0x87c], 1
jne 0x408c52
push 0xc
push 0
lea edx, [ebp - 0x894]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 8
push 0
lea eax, [ebp - 0x888]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x50
push 0
lea ecx, [ebp - 0x874]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov edx, dword [ebp + 8]
mov dword [ebp - 0x884], edx
lea eax, [ebp - 0x874]
mov dword [ebp - 0x888], eax
lea ecx, [ebp - 0x888]
mov dword [ebp - 0x890], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x894], eax
xor edx, edx
mov word [ebp - 0x824], dx
xor eax, eax
mov dword [ebp - 0x822], eax
mov dword [ebp - 0x81e], eax
mov dword [ebp - 0x81a], eax
mov word [ebp - 0x816], ax
lea ecx, [ebp - 0x824]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
xor edx, edx
mov word [ebp - 0x60c], dx
push 0x1fe
push 0
lea eax, [ebp - 0x60a]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x100
lea ecx, [ebp - 0x60c]
push ecx
push str.HHmmss
lea edx, [ebp - 0x824]
push edx
push 0
push 0x800
call dword [sym.imp.KERNEL32.dll_GetTimeFormatW]
xor eax, eax
mov word [ebp - 0x40c], ax
push 0x1fe
push 0
lea ecx, [ebp - 0x40a]
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x100
lea edx, [ebp - 0x40c]
push edx
push str.yyyyMMdd
lea eax, [ebp - 0x824]
push eax
push 0
push 0x800
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
xor ecx, ecx
mov word [ebp - 0x20c], cx
push 0x206
push 0
lea edx, [ebp - 0x20a]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ecx + 0x41c528]
test edx, edx
je 0x408aed
push 0x41c528
lea eax, [ebp - 0x20c]
push eax
call fcn.004043e0
add esp, 8
push 0x415a98
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004043e0
add esp, 8
push str.dump
lea edx, [ebp - 0x20c]
push edx
call fcn.004043e0
add esp, 8
push 0x41604c
lea eax, [ebp - 0x20c]
push eax
call fcn.004043e0
add esp, 8
lea ecx, [ebp - 0x40c]
push ecx
lea edx, [ebp - 0x20c]
push edx
call fcn.004043e0
add esp, 8
push 0x41604c
lea eax, [ebp - 0x20c]
push eax
call fcn.004043e0
add esp, 8
lea ecx, [ebp - 0x60c]
push ecx
lea edx, [ebp - 0x20c]
push edx
call fcn.004043e0
add esp, 8
movzx eax, byte [0x41c525]
test eax, eax
je 0x408bd5
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x880], eax
xor ecx, ecx
mov word [ebp - 0x814], cx
push 0x206
push 0
lea edx, [ebp - 0x812]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x880]
push eax
push 0x416050
push 0x104
lea ecx, [ebp - 0x814]
push ecx
call fcn.00411820
add esp, 0x10
push 0x41604c
lea edx, [ebp - 0x20c]
push edx
call fcn.004043e0
add esp, 8
lea eax, [ebp - 0x814]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004043e0
add esp, 8
push str..dmp
lea edx, [ebp - 0x20c]
push edx
call fcn.004043e0
add esp, 8
push 0
push 0x80
push 2
push 0
push 3
push 0x1f01ff
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x878], eax
push 0
push 0
lea ecx, [ebp - 0x894]
push ecx
push 2
mov edx, dword [ebp - 0x878]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call sub.dbghelp.dll_MiniDumpWriteDump
mov dword [ebp - 0x898], eax
mov eax, dword [ebp - 0x878]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x878], 0
lock dec dword [0x41c73c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004134d5
mov esp, ebp
pop ebp
ret