Function at 0x1c5fb08
Capabilities:
Create process memory minidump

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x130
mov eax, dword [ebp + 0x18]
mov ecx, dword [0x1d01324]
xor ecx, ebp
mov dword [esp + 0x128], ecx
lea esi, [esp + 0x5c]
mov dword [esi], 0xffffffff
push eax
push esi
call fcn.01c84848
add esp, 8
mov ecx, dword [esi]
test ecx, ecx
je 0x1c5fb5e
lea eax, [esp + 0x58]
mov dword [eax], 0
mov edx, dword [ecx]
push eax
call dword [edx + 8]
test eax, eax
je 0x1c5fb65
xor ebx, ebx
jmp 0x1c6020c
xor ebx, ebx
jmp 0x1c60242
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0xa0], xmm0
mov ecx, dword [esp + 0x5c]
mov eax, dword [ecx]
call dword [eax + 4]
test eax, eax
je 0x1c5fb8e
lea edx, [esp + 0xa0]
mov ecx, eax
push edx
call fcn.01c85372
xor eax, eax
dec eax
lea esi, [esp + 0x4c]
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov ecx, esi
call fcn.01c58150
push esi
call fcn.01c858c0
add esp, 4
test al, al
je 0x1c5fd12
pcmpeqd xmm0, xmm0
lea edi, [esp + 0x30]
movdqu xmmword [edi + 0xc], xmm0
movdqa xmmword [edi], xmm0
mov ecx, edi
push 0x2061
push esi
call fcn.01c67350
mov ecx, edi
call fcn.01c85930
test al, al
je 0x1c601f8
mov eax, dword [esp + 0x58]
pxor xmm0, xmm0
lea ecx, [esp + 0xbc]
movdqu xmmword [ecx + 0x24], xmm0
xor edx, edx
inc edx
mov dword [ecx], edx
movaps xmm0, xmmword [esp + 0xa0]
movups xmmword [ecx + 0x14], xmm0
movdqu xmm0, xmmword [eax + 0x34]
movdqu xmmword [ecx + 4], xmm0
lea eax, [esp + 0x80]
mov dword [eax], 0x43500001
mov dword [eax + 4], 0x34
mov dword [eax + 8], ecx
lea esi, [esp + 0x78]
mov dword [esi], edx
mov dword [esi + 4], eax
mov ebx, dword [ebp + 8]
lea ecx, [esp + 0x30]
call fcn.01c85940
mov edi, eax
mov ecx, ebx
call fcn.01c47d60
mov ebx, eax
mov ecx, dword [ebp + 8]
call fcn.01c47d40
push 0
push esi
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push edi
push ebx
push eax
call sub.dbghelp.dll_MiniDumpWriteDump
test eax, eax
je 0x1c601f8
pxor xmm0, xmm0
movdqa xmmword [esp + 0x60], xmm0
lea ebx, [esp + 0xf0]
movdqa xmmword [ebx + 0x10], xmm0
movdqa xmmword [ebx], xmm0
xor eax, eax
lea ecx, [esp + 0x30]
push 0x20
push ebx
push eax
push eax
call fcn.01c85b40
cmp eax, 0x20
jne 0x1c6010b
cmp dword [esp + 0xf0], 0x504d444d
jne 0x1c6010b
mov eax, dword [esp + 0xf8]
test eax, eax
je 0x1c6010b
lea esi, [esp + 0x64]
mov ecx, esi
push eax
call fcn.01c60306
mov eax, dword [esp + 0xf8]
shl eax, 2
lea edi, [eax + eax*2]
lea ecx, [esp + 0x30]
push edi
push dword [esi]
push 0
push dword [esp + 0x108]
call fcn.01c85b40
cmp eax, edi
jne 0x1c6010b
mov eax, dword [esp + 0x64]
mov edi, dword [esp + 0x68]
cmp eax, edi
je 0x1c5fd19
mov esi, eax
cmp dword [esi], 0
je 0x1c5fdef
add esi, 0xc
cmp edi, esi
jne 0x1c5fd00
jmp 0x1c5fd1b
xor ebx, ebx
jmp 0x1c60203
mov eax, edi
mov esi, edi
cmp esi, edi
je 0x1c5fd42
mov ecx, edi
sub ecx, esi
add ecx, esi
sub edi, ecx
je 0x1c5fd3a
push edi
push ecx
push esi
call fcn.01cb7160
add esp, 0xc
mov eax, dword [esp + 0x64]
add esi, edi
mov dword [esp + 0x68], esi
jmp 0x1c5fd44
mov esi, edi
sub esi, eax
mov dword [esp + 0xf4], 0xa793
mov ecx, esi
sar ecx, 2
imul ecx, ecx, 0xaaaaaaab
mov dword [esp + 0xf8], ecx
lea ecx, [esp + 0x30]
push esi
push eax
push 0
push dword [esp + 0x108]
call fcn.01c85d60
cmp eax, esi
jne 0x1c6010b
xor eax, eax
lea esi, [esp + 0x30]
mov ecx, esi
push 0x20
push ebx
push eax
push eax
call fcn.01c85d60
cmp eax, 0x20
jne 0x1c6010b
mov dword [esp + 0x60], esi
pxor xmm0, xmm0
movdqa xmmword [esp + 0x110], xmm0
movdqa xmmword [esp + 0x100], xmm0
movdqa xmmword [esp + 0xf0], xmm0
mov dword [esp + 0x120], 0
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
je 0x1c6010b
mov esi, dword [ebp + 0x14]
cmp dword [eax], 0x43500001
je 0x1c5fe2f
add eax, 0xc
cmp ecx, eax
jne 0x1c5fddb
jmp 0x1c6010b
cmp edi, esi
je 0x1c5fd1d
lea ecx, [edi - 0xc]
cmp ecx, esi
je 0x1c5fd1d
lea eax, [esi + 0xc]
cmp dword [eax], 0
je 0x1c5fe1b
mov ecx, dword [eax + 8]
mov dword [esi + 8], ecx
movq xmm0, qword [eax]
movq qword [esi], xmm0
add esi, 0xc
add eax, 0xc
cmp edi, eax
jne 0x1c5fe05
mov eax, dword [esp + 0x64]
mov edi, dword [esp + 0x68]
jmp 0x1c5fd1d
cmp dword [eax + 4], 0x34
jne 0x1c6010b
mov eax, dword [eax + 8]
test eax, eax
je 0x1c6010b
lea ecx, [esp + 0x30]
push 0x34
push ebx
push 0
mov dword [esp + 0x34], eax
push eax
call fcn.01c85b40
cmp eax, 0x34
jne 0x1c6010b
xor edx, edx
cmp dword [esp + 0xf0], 1
jne 0x1c6010d
mov ecx, dword [esp + 0x60]
push edx
push edx
push 2
call fcn.01c85a30
mov dword [esp + 0xc], eax
and eax, edx
cmp eax, 0xffffffff
je 0x1c6010b
test edx, edx
mov edx, 0
jg 0x1c6010d
xor eax, eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov edi, dword [esi]
add esi, 4
mov dword [esp + 0x24], esi
cmp edi, esi
je 0x1c6025a
movzx eax, byte [edi + 0x27]
test al, al
jns 0x1c5fecc
mov eax, dword [edi + 0x20]
test eax, eax
je 0x1c600c5
lea esi, [edi + 0x10]
movzx eax, byte [esi + 0xb]
test al, al
jns 0x1c5fee2
mov eax, dword [edi + 0x14]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x60]
push 4
lea eax, [esp + 0x94]
push eax
call fcn.01c85e70
cmp eax, 0xffffffff
je 0x1c602d0
cmp byte [esi + 0xb], 0
jns 0x1c5ff0d
mov esi, dword [esi]
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
test eax, eax
js 0x1c602d0
mov ecx, dword [esp + 0x60]
push dword [esp + 8]
push esi
call fcn.01c85e70
cmp eax, 0xffffffff
je 0x1c602d0
lea esi, [edi + 0x1c]
movzx eax, byte [esi + 0xb]
test al, al
jns 0x1c5ff45
mov eax, dword [edi + 0x20]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x60]
push 4
lea eax, [esp + 0x90]
push eax
call fcn.01c85e70
cmp eax, 0xffffffff
je 0x1c602d0
cmp byte [esi + 0xb], 0
jns 0x1c5ff70
mov esi, dword [esi]
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x20], eax
test eax, eax
js 0x1c602d0
mov ecx, dword [esp + 0x60]
push dword [esp + 0x20]
push esi
call fcn.01c85e70
cmp eax, 0xffffffff
je 0x1c602d0
mov eax, dword [esp + 0xc]
add eax, 4
add eax, dword [esp + 8]
mov dword [esp + 8], eax
mov esi, dword [esp + 0x98]
cmp esi, dword [esp + 0x9c]
je 0x1c5ffd5
mov eax, dword [esp + 8]
mov dword [esi + 4], eax
mov eax, dword [esp + 0xc]
mov dword [esi], eax
add esi, 8
mov dword [esp + 0x98], esi
jmp 0x1c600b6
mov eax, dword [esp + 0x94]
mov dword [esp + 0x18], eax
sub esi, eax
mov eax, esi
sar eax, 3
mov ecx, eax
mov dword [esp + 0x1c], eax
inc eax
cmp eax, 0x20000000
jae 0x1c602f4
mov ecx, esi
sar ecx, 2
cmp ecx, eax
cmovb ecx, eax
cmp dword [esp + 0x1c], 0xfffffff
mov eax, 0x1fffffff
cmovae ecx, eax
mov eax, ecx
mov dword [esp + 0x14], ecx
test ecx, ecx
je 0x1c60045
cmp dword [esp + 0x14], 0x20000000
jae 0x1c60300
mov eax, dword [esp + 0x14]
lea eax, [eax*8]
push eax
call fcn.01cb30d6
add esp, 4
mov dword [esp + 0x10], eax
jmp 0x1c6004d
mov dword [esp + 0x10], 0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov dword [edx + ecx*8 + 4], eax
mov eax, dword [esp + 0xc]
mov dword [edx + ecx*8], eax
test esi, esi
jle 0x1c60079
push esi
push dword [esp + 0x1c]
push dword [esp + 0x18]
call fcn.01cb6be0
add esp, 0xc
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
lea eax, [edx + eax*8]
mov ecx, dword [esp + 0x1c]
lea ecx, [edx + ecx*8]
add ecx, 8
mov dword [esp + 0x94], edx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
cmp dword [esp + 0x18], 0
je 0x1c600b6
push dword [esp + 0x18]
call fcn.01cb3106
add esp, 4
mov eax, dword [esp + 8]
add eax, 4
add eax, dword [esp + 0x20]
mov dword [esp + 0xc], eax
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x1c600d6
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x1c600cc
jmp 0x1c600ec
mov eax, dword [edi + 8]
cmp dword [eax], edi
je 0x1c600ec
add edi, 8
mov ecx, dword [edi]
lea edi, [ecx + 8]
mov eax, dword [ecx + 8]
cmp dword [eax], ecx
jne 0x1c600e0
mov edi, eax
cmp eax, dword [esp + 0x24]
jne 0x1c5fec1
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
jmp 0x1c6025c
xor edx, edx
mov eax, dword [esp + 0x64]
test eax, eax
je 0x1c60126
mov dword [esp + 0x68], eax
push eax
mov esi, edx
call fcn.01cb3106
mov edx, esi
add esp, 4
xor ebx, ebx
test dl, dl
je 0x1c601fa
mov eax, dword [esp + 0x58]
mov edi, dword [eax]
lea ecx, [esp + 0x30]
push ebx
push ebx
push ebx
call fcn.01c85a30
and edx, eax
cmp edx, 0xffffffff
je 0x1c601fa
xor eax, eax
lea esi, [esp + 0xf0]
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov ecx, esi
push 0x400
call fcn.01c2201a
lea ebx, [esp + 0x30]
mov eax, dword [esp + 0xf0]
mov edx, dword [esp + 0xf4]
sub edx, eax
mov ecx, ebx
push edx
push eax
call fcn.01c85c60
test eax, eax
js 0x1c601a0
je 0x1c601a4
mov edx, dword [edi]
mov ecx, edi
push eax
push dword [esp + 0xf4]
call dword [edx + 4]
test al, al
jne 0x1c6016e
xor ebx, ebx
jmp 0x1c601a6
mov bl, 1
mov eax, dword [esp + 0xf0]
test eax, eax
je 0x1c601c1
mov dword [esp + 0xf4], eax
push eax
call fcn.01cb3106
add esp, 4
test bl, bl
je 0x1c601f8
pxor xmm0, xmm0
movdqa xmmword [esp + 0xf0], xmm0
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
mov dword [esp + 0x58], 0
mov dword [esp + 0x2c], eax
mov eax, dword [ecx]
mov edx, dword [esp + 0x2c]
push esi
push edx
call dword [eax + 0xc]
test eax, eax
sete bl
jmp 0x1c601fa
xor ebx, ebx
lea ecx, [esp + 0x30]
call fcn.01c67440
lea ecx, [esp + 0x4c]
call fcn.01c582a0
mov esi, dword [esp + 0x58]
mov dword [esp + 0x58], 0
test esi, esi
je 0x1c6022c
mov ecx, esi
call fcn.01c86306
push esi
call fcn.01cb3106
add esp, 4
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x5c], 0
test ecx, ecx
je 0x1c60242
mov eax, dword [ecx]
push 1
call dword [eax]
mov ecx, dword [esp + 0x128]
xor ecx, ebp
call fcn.01cb3141
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor ecx, ecx
sub ecx, eax
sar ecx, 3
lea eax, [esp + 0x90]
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
push 4
push eax
call fcn.01c85e70
cmp eax, 0xffffffff
je 0x1c602d0
mov esi, dword [esp + 0x90]
shl esi, 3
test esi, esi
js 0x1c602d0
mov ecx, dword [esp + 0x60]
push esi
push dword [esp + 0x98]
call fcn.01c85e70
cmp eax, 0xffffffff
je 0x1c602d0
or esi, 4
mov dword [esp + 0x114], esi
mov eax, dword [esp + 0xc]
mov dword [esp + 0x118], eax
mov ecx, dword [esp + 0x60]
push 0x34
push ebx
push 0
push dword [esp + 0x34]
call fcn.01c85d60
cmp eax, 0x34
sete al
mov esi, eax
jmp 0x1c602d2
xor esi, esi
mov eax, dword [esp + 0x94]
test eax, eax
je 0x1c602ed
mov dword [esp + 0x98], eax
push eax
call fcn.01cb3106
add esp, 4
mov edx, esi
jmp 0x1c6010d
lea ecx, [esp + 0x94]
call fcn.01c41eac
call fcn.01cc6b80
int3