Function at 0x46de00
Capabilities:
Create process memory minidump

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x378
push esi
push edi
lea eax, [ebp - 0x10]
mov edi, ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x12c
lea eax, [ebp - 0x378]
push eax
push dword [0x597e78]
call dword [0x595e30]
lea eax, [ebp - 0x378]
push 0x4f3530
push eax
call fcn.00480290
add esp, 8
mov esi, eax
push str._s__04d_02d_02d__02d_02d_02d__ld__ld.dmp
call dword [0x595ea0]
push eax
call dword [0x595e80]
movzx ecx, word [ebp - 4]
push eax
movzx eax, word [ebp - 8]
push ecx
movzx ecx, word [ebp - 6]
push ecx
push eax
movzx eax, word [ebp - 0xa]
push eax
movzx eax, word [ebp - 0xe]
push eax
movzx eax, word [ebp - 0x10]
push eax
push esi
lea eax, [ebp - 0x378]
push eax
push 0x2a77
push str.Main.c
push str._s__04d_02d_02d__02d_02d_02d__ld__ld.dmp
lea eax, [ebp - 0x24c]
push 0x104
push eax
call fcn.00482bc0
push 0
push 0
push 2
push 0
push 3
lea eax, [ebp - 0x24c]
push 0xc0000000
push eax
call fcn.0047da90
add esp, 0x5c
mov esi, eax
call dword [0x595ea0]
push 0
push 0
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 1
push esi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], 1
call dword [0x595e80]
push eax
call dword [0x595eb4]
push eax
call dword [sym.imp.dbghelp.dll_MiniDumpWriteDump]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [edi]
xor eax, eax
mov ecx, dword [edx]
nop dword [eax]
cmp ecx, dword [eax*4 + 0x4ed948]
je 0x46df18
add eax, 2
cmp eax, 0x2c
jb 0x46df00
mov eax, str._unknown_
jmp 0x46df1f
mov eax, dword [eax*4 + 0x4ed94c]
push str.Exception_0x_X___s__at_address_0x_X_in_Service_function
push dword [edx + 0xc]
push eax
push ecx
push 0x2a82
push str.Main.c
push str.Exception_0x_X___s__at_address_0x_X_in_Service_function
lea eax, [ebp - 0x148]
push 0x12c
push eax
call fcn.00482bc0
add esp, 0x24
call fcn.00493410
test eax, eax
je 0x46dfaf
call fcn.00493410
cmp dword [eax], 0
je 0x46dfaf
mov eax, dword [0x52e820]
test eax, eax
je 0x46df70
mov esi, dword [eax + 0x190]
jmp 0x46df76
mov esi, dword [0x52e824]
call fcn.00493410
test eax, eax
je 0x46df88
call fcn.00493410
mov eax, dword [eax]
jmp 0x46df8a
xor eax, eax
lea ecx, [ebp - 0x148]
push ecx
push ecx
push dword [0x52e820]
push esi
push 0
push 0x2a83
push str.Main.c
push 0x103
call eax
add esp, 0x20
mov eax, dword [edi]
cmp dword [eax], 0xc0000005
jne 0x46e076
cmp dword [eax + 0x10], 2
jne 0x46e076
mov ecx, dword [eax + 0x14]
mov edx, str.from
push str.Attempt_to__s__s_address_0x_.8x
push dword [eax + 0x18]
test ecx, ecx
mov eax, 0x4f35c0
cmove eax, edx
mov edx, str.read
push eax
mov eax, str.write
cmove eax, edx
push eax
push 0x2a85
push str.Main.c
push str.Attempt_to__s__s_address_0x_.8x
lea eax, [ebp - 0x148]
push 0x12c
push eax
call fcn.00482bc0
add esp, 0x24
call fcn.00493410
test eax, eax
je 0x46e076
call fcn.00493410
cmp dword [eax], 0
je 0x46e076
mov eax, dword [0x52e820]
test eax, eax
je 0x46e037
mov esi, dword [eax + 0x190]
jmp 0x46e03d
mov esi, dword [0x52e824]
call fcn.00493410
test eax, eax
je 0x46e04f
call fcn.00493410
mov eax, dword [eax]
jmp 0x46e051
xor eax, eax
lea ecx, [ebp - 0x148]
push ecx
push ecx
push dword [0x52e820]
push esi
push 0
push 0x2a86
push str.Main.c
push 0x103
call eax
add esp, 0x20
push str.You_must_restart_the__s._nDump_file__s_created.
lea eax, [ebp - 0x24c]
push eax
push str.application
push 0x2a88
push str.Main.c
push str.You_must_restart_the__s._nDump_file__s_created.
lea eax, [ebp - 0x148]
push 0x12c
push eax
call fcn.00482bc0
add esp, 0x20
call fcn.00493410
test eax, eax
je 0x46e10d
call fcn.00493410
cmp dword [eax], 0
je 0x46e10d
mov eax, dword [0x52e820]
test eax, eax
je 0x46e0ce
mov esi, dword [eax + 0x190]
jmp 0x46e0d4
mov esi, dword [0x52e824]
call fcn.00493410
test eax, eax
je 0x46e0e6
call fcn.00493410
mov eax, dword [eax]
jmp 0x46e0e8
xor eax, eax
lea ecx, [ebp - 0x148]
push ecx
push ecx
push dword [0x52e820]
push esi
push 0
push 0x2a89
push str.Main.c
push 0x103
call eax
add esp, 0x20
pop edi
mov eax, 1
pop esi
mov esp, ebp
pop ebp
ret