Function at 0x447f00
Capabilities:
Create process memory minidump

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x220c
call fcn.004abe10
mov eax, dword [0x4e2204]
xor eax, esp
mov dword [esp + 0x2208], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
lea ecx, [esp + 0xebe]
push ecx
lea edx, [esp + 0xdc1]
push edx
mov dword [esp + 0x24], eax
xor ebx, ebx
lea eax, [esp + 0xcc4]
push eax
lea ecx, [esp + 0xcc4]
push ecx
push 0x561e80
mov dword [esp + 0x34], ebx
mov dword [esp + 0xfd4], ebx
mov byte [esp + 0xac4], bl
mov byte [esp + 0xccc], bl
mov byte [esp + 0xcd0], bl
mov byte [esp + 0xdd1], bl
mov byte [esp + 0xed2], bl
call fcn.004a055c
add esp, 0x14
push ebx
call fcn.0049d8e4
add esp, 4
push edx
push eax
lea edx, [esp + 0xdc5]
push edx
push str.minidump_s__d.dmp
lea ecx, [esp + 0x30]
call fcn.00401480
mov eax, dword [esp + 0x30]
add esp, 0x10
mov dword [esp + 0x590], ebx
cmp eax, ebx
je 0x447fbd
add eax, 4
jmp 0x447fbf
xor eax, eax
mov byte [esp + 0x80], bl
mov byte [esp + 0x288], bl
mov byte [esp + 0x28c], bl
mov byte [esp + 0x38d], bl
mov byte [esp + 0x48e], bl
cmp eax, ebx
je 0x448009
lea ecx, [esp + 0x48e]
push ecx
lea edx, [esp + 0x391]
push edx
lea ecx, [esp + 0x294]
push ecx
lea edx, [esp + 0x294]
push edx
push eax
jmp 0x44802e
lea eax, [esp + 0x48e]
push eax
lea ecx, [esp + 0x391]
push ecx
lea edx, [esp + 0x294]
push edx
lea eax, [esp + 0x294]
push eax
push 0x4cb498
call fcn.004a055c
add esp, 0x14
lea ecx, [esp + 0x80]
push 1
push ecx
call fcn.00447920
add esp, 8
lea ecx, [esp + 0x80]
call fcn.0045fdc0
lea edx, [esp + 0x48e]
push edx
lea eax, [esp + 0x391]
push eax
lea ecx, [esp + 0x294]
push ecx
lea edx, [esp + 0x294]
push edx
lea eax, [esp + 0x90]
push 0x208
push eax
call fcn.004a05a8
lea eax, [esp + 0x98]
add esp, 0x18
mov dword [esp + 0xc], ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x448097
sub eax, edx
push eax
lea ecx, [esp + 0x84]
push ecx
lea edx, [esp + 0x14]
push edx
call fcn.0043c500
lea eax, [esp + 0xc]
push eax
lea edi, [esp + 0x24]
call fcn.00401250
mov esi, dword [esp + 0xc]
cmp esi, ebx
je 0x4480ee
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
and eax, 0xff
cmp eax, 0x80
jl 0x4480e5
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4480ee
cmp eax, ebx
jne 0x4480ee
call fcn.0045f5a0
mov esi, dword [esp + 0x20]
cmp esi, ebx
je 0x4480fb
lea eax, [esi + 4]
jmp 0x4480fd
xor eax, eax
push ebx
push 0x80
push 2
push ebx
push 1
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x448189
lea ecx, [esp + 0x80]
call fcn.00403870
lea ecx, [esp + 0xab0]
call fcn.00403870
cmp esi, ebx
je 0x448171
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
and eax, 0xff
cmp eax, 0x80
jl 0x448168
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
or eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2208]
xor ecx, esp
call fcn.0049ceb0
mov esp, ebp
pop ebp
ret
cmp eax, ebx
jne 0x448171
call fcn.0045f5a0
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2208]
xor ecx, esp
call fcn.0049ceb0
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [esp + 0x1c]
push ebx
push ebx
lea edx, [esp + 0x2c]
push edx
push 0x50
push edi
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call sub.dbghelp.dll_MiniDumpWriteDump
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00447b70
inc dword [0x5670bc]
push 4
push str.Confirm
push str.f.lux_has_crashed._Would_you_like_to_send_crash_data_so_it_can_be_fixed_
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
sete byte [esp + 0x13]
call fcn.00446820
cmp byte [esp + 0x13], bl
je 0x44844b
lea esi, [esp + 0xfc8]
mov dword [esp + 0xfc8], ebx
call fcn.004786f0
push str.https:__justgetflux.com_crash
mov eax, esi
call fcn.004787d0
test eax, eax
sete al
lea ecx, [esp + 0x80]
mov byte [esp + 0x2208], al
call fcn.0045fac0
mov ecx, esi
push eax
push ecx
lea esi, [esp + 0x38]
call fcn.00447bc0
lea esi, [esp + 0x80]
call fcn.0045fbe0
mov dword [esp + 0xc], ebx
cmp eax, ebx
je 0x448275
mov ecx, eax
lea esi, [ecx + 1]
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x448260
sub ecx, esi
push ecx
push eax
lea edx, [esp + 0x14]
push edx
call fcn.0043c500
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x34]
push ecx
call fcn.00447c80
lea ecx, [esp + 0xc]
call fcn.00401420
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
call fcn.00447870
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push str._d._d
lea ecx, [esp + 0x30]
mov dword [esp + 0x30], ebx
call fcn.00401480
add esp, 0x14
push 3
push 0x4cff98
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebx
call fcn.0043c500
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x38]
push eax
call fcn.00447d50
lea ecx, [esp + 0xc]
call fcn.00401420
mov eax, 0x561e80
mov dword [esp + 0x18], ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x448301
sub eax, edx
push eax
push 0x561e80
lea ecx, [esp + 0x20]
push ecx
call fcn.0043c500
mov eax, dword [esp + 0x18]
mov dword [esp + 0xaa8], ebx
cmp eax, ebx
je 0x44832e
add eax, 4
jmp 0x448330
xor eax, eax
lea edx, [esp + 0x9a6]
mov byte [esp + 0x598], bl
mov byte [esp + 0x7a0], bl
mov byte [esp + 0x7a4], bl
mov byte [esp + 0x8a5], bl
mov byte [esp + 0x9a6], bl
push edx
cmp eax, ebx
je 0x44837a
lea ecx, [esp + 0x8a9]
push ecx
lea edx, [esp + 0x7ac]
push edx
lea ecx, [esp + 0x7ac]
push ecx
push eax
jmp 0x448397
lea eax, [esp + 0x8a9]
push eax
lea ecx, [esp + 0x7ac]
push ecx
lea edx, [esp + 0x7ac]
push edx
push 0x4cb498
call fcn.004a055c
add esp, 0x14
lea esi, [esp + 0x598]
call fcn.0045fbe0
mov dword [esp + 0x14], ebx
cmp eax, ebx
je 0x4483cd
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x4483b8
sub ecx, esi
push ecx
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.0043c500
push 4
push str.prod
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x18], ebx
call fcn.0043c500
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.00447d50
lea ecx, [esp + 0xc]
call fcn.00401420
lea ecx, [esp + 0x14]
call fcn.00401420
lea edx, [esp + 0x30]
push edx
call fcn.00461c40
lea ecx, [esp + 0x598]
call fcn.00403870
lea ecx, [esp + 0x18]
call fcn.00401420
lea ecx, [esp + 0x1c]
call fcn.00401420
lea eax, [esp + 0x30]
call fcn.00447de0
lea edi, [esp + 0xfc8]
call fcn.0042f360
mov esi, dword [esp + 0x20]
jmp 0x44845f
cmp esi, ebx
je 0x448454
lea eax, [esi + 4]
jmp 0x448456
xor eax, eax
push eax
call fcn.00448550
add esp, 4
lea ecx, [esp + 0x80]
call fcn.00403870
lea ecx, [esp + 0xab0]
call fcn.00403870
cmp esi, ebx
je 0x4484b5
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
and eax, 0xff
cmp eax, 0x80
jl 0x4484ac
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2208]
xor ecx, esp
call fcn.0049ceb0
mov esp, ebp
pop ebp
ret
cmp eax, ebx
jne 0x4484b5
call fcn.0045f5a0
mov ecx, dword [esp + 0x2214]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.0049ceb0
mov esp, ebp
pop ebp
ret