Function at 0x421fc0
Capabilities:
Check if file exists
Create directory
Create process on windows
Get common file path
Print debug messages
Query environment variable
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1088
call fcn.00427f00
mov eax, dword [0x44ef24]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x61c]
push 0x208
push 0
push eax
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0x824]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0x18
push 1
push str.DBGHELP.DLL
call fcn.00422a60
test eax, eax
je 0x42264a
push str.MiniDumpWriteDump
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1038], eax
test eax, eax
je 0x42264a
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0xa2c]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0x24
lea eax, [ebp - 0x1034]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x208
lea eax, [ebp - 0x20c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov esi, eax
test esi, esi
je 0x4221ee
lea ecx, [ebp - 0xa2c]
mov edx, 0x104
mov eax, ecx
sub esi, eax
lea ecx, [ecx]
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x4220e0
movzx eax, word [esi + ecx]
test ax, ax
je 0x4220e0
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x4220c0
jmp 0x4220e4
test edx, edx
jne 0x4220e7
sub ecx, 2
xor eax, eax
mov word [ecx], ax
lea eax, [ebp - 0xa2c]
push eax
movzx eax, word [ebp - 0x1028]
push eax
movzx eax, word [ebp - 0x102a]
push eax
movzx eax, word [ebp - 0x102c]
push eax
movzx eax, word [ebp - 0x102e]
push eax
movzx eax, word [ebp - 0x1032]
push eax
movzx eax, word [ebp - 0x1034]
push eax
push str._4d__02d__02d__02d__02d__02d__s_.dmp
lea eax, [ebp - 0x414]
push 0x208
push eax
call fcn.00421f50
add esp, 0x28
lea eax, [ebp - 0x20c]
push 0x104
push eax
push str.TEMP
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x42215e
mov eax, str.360
jmp 0x422175
push 0x104
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov eax, str.Temp360
push eax
push 0x208
lea eax, [ebp - 0x20c]
push eax
call fcn.0041b1d0
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4221c7
push eax
lea eax, [ebp - 0x20c]
push eax
call ebx
test eax, eax
jne 0x4221c7
push 0x208
lea eax, [ebp - 0x20c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x20c]
push eax
push str._s_s
lea eax, [ebp - 0x61c]
push 0x208
push eax
call fcn.00421f50
add esp, 0x14
xor eax, eax
push eax
push 0x80
push 2
push eax
push 2
mov dword [ebp - 0x1044], eax
mov dword [ebp - 0x1040], eax
mov dword [ebp - 0x103c], eax
lea eax, [ebp - 0x61c]
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x422275
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0
push 0
mov dword [ebp - 0x1044], eax
lea eax, [ebp - 0x1044]
push eax
push 0
push esi
mov dword [ebp - 0x1040], edi
mov dword [ebp - 0x103c], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x1038]
test eax, eax
je 0x42264a
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x422280
push str._Error_:Cant_create_MiniDump_file__n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0
push 0x1a
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov edi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x4223a9
push str.360safe
lea eax, [ebp - 0x20c]
push eax
call edi
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [ebp - 0x20c]
push eax
call esi
test eax, eax
jne 0x4222e2
push eax
lea eax, [ebp - 0x20c]
push eax
call ebx
push str.360Down
lea eax, [ebp - 0x20c]
push eax
call edi
lea eax, [ebp - 0x20c]
push eax
call esi
test eax, eax
jne 0x422307
push eax
lea eax, [ebp - 0x20c]
push eax
call ebx
push str.FullDump.dmp
lea eax, [ebp - 0x20c]
push eax
call edi
lea ecx, [ebp - 0x824]
mov edx, 0x104
lea esi, [ebp - 0x20c]
mov eax, ecx
sub esi, eax
lea ebx, [ebx]
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x422350
movzx eax, word [esi + ecx]
test ax, ax
je 0x422350
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x422330
jmp 0x422354
test edx, edx
jne 0x422357
sub ecx, 2
xor eax, eax
push eax
push 0x80
push 2
push eax
push 2
mov word [ecx], ax
lea eax, [ebp - 0x824]
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4223a9
push 0
push 0
lea eax, [ebp - 0x1044]
push eax
push 2
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x1038]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00403270
test eax, eax
je 0x422634
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x20c]
add esp, 0xc
push 0x104
push eax
push 0
call esi
push str.......DumpUper.ini
lea eax, [ebp - 0x20c]
push eax
call edi
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [ebp - 0x20c]
push eax
call ebx
test eax, eax
je 0x422634
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
push 0x104
lea eax, [ebp - 0x414]
push eax
push 0x44066c
push str.domainName
push 0x445080
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x414]
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x422450
sub ecx, edx
sar ecx, 1
je 0x422634
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0x104
push eax
push 0
call esi
push str.......DumpUper.exe
lea eax, [ebp - 0x20c]
push eax
call edi
lea eax, [ebp - 0x20c]
push eax
call ebx
test eax, eax
je 0x422634
push 0
lea eax, [ebp - 0x20c]
push eax
call fcn.00424530
test eax, eax
je 0x422634
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x414]
push 0x104
push eax
push 0
call esi
push 0x800
lea eax, [ebp - 0x1024]
push 0
push eax
call sub.msvcrt.dll_memset
push 1
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x20c]
push eax
push str.__s____s____s____d_
lea eax, [ebp - 0x1024]
push 0x800
push eax
call fcn.00421f50
lea eax, [ebp - 0x1024]
push eax
push str._MiniDumpUpload_Upload_Dump:_s_n
call fcn.00401530
xor eax, eax
mov dword [ebp - 0x1084], 0
add esp, 0x30
mov dword [ebp - 0x1034], eax
mov dword [ebp - 0x1030], eax
mov dword [ebp - 0x102c], eax
mov dword [ebp - 0x1028], eax
lea eax, [ebp - 0x61c]
push eax
mov dword [ebp - 0x1080], 0
mov dword [ebp - 0x107c], 0
mov dword [ebp - 0x1078], 0
mov dword [ebp - 0x1074], 0
mov dword [ebp - 0x1070], 0
mov dword [ebp - 0x106c], 0
mov dword [ebp - 0x1068], 0
mov dword [ebp - 0x1064], 0
mov dword [ebp - 0x1060], 0
mov dword [ebp - 0x105c], 0
mov dword [ebp - 0x1058], 0
mov dword [ebp - 0x1054], 0
mov dword [ebp - 0x1050], 0
mov dword [ebp - 0x104c], 0
mov dword [ebp - 0x1048], 0
mov dword [ebp - 0x1088], 0x44
call ebx
test eax, eax
je 0x422634
lea eax, [ebp - 0x1034]
push eax
lea eax, [ebp - 0x1088]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x1024]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00427ee9
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00427ee9
mov esp, ebp
pop ebp
ret