Function at 0x457cf4
Capabilities:
Create process memory minidump
Get common file path
Get file size
Read file on windows

Disassembly:
push 0xab0
mov eax, 0x4b60bb
call fcn.00461a91
mov ebx, edx
mov dword [ebp - 0xa98], ebx
mov dword [ebp - 0xaa4], ecx
push dword [ebx + 0xc]
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0xabc], esi
and dword [ebp - 4], 0
test esi, esi
je 0x458072
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [ebp - 0xa94]
push eax
push 8
lea eax, [ebp - 0xaac]
push eax
push dword [ebx + 0x14]
push esi
call edi
test eax, eax
je 0x457e3a
cmp dword [ebp - 0xa94], 8
jne 0x457e3a
push 0x2cc
call fcn.004612cd
pop ecx
lea ecx, [ebp - 0xa94]
mov dword [ebp - 0xaa0], eax
push ecx
push 0x2cc
push eax
push dword [ebp - 0xaa8]
push esi
call edi
test eax, eax
je 0x457e3a
cmp dword [ebp - 0xa94], 0x2cc
jne 0x457e3a
push 0x50
call fcn.004612cd
pop ecx
mov edi, eax
lea eax, [ebp - 0xa94]
push eax
push 0x50
push edi
push dword [ebp - 0xaac]
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x457e3a
cmp dword [ebp - 0xa94], 0x50
jne 0x457e3a
cmp dword [edi + 8], 0
je 0x457e21
mov ebx, edi
push 0x50
call fcn.004612cd
pop ecx
lea ecx, [ebp - 0xa94]
mov dword [ebp - 0xa9c], eax
push ecx
push 0x50
push eax
push dword [ebx + 8]
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x457e1b
cmp dword [ebp - 0xa94], 0x50
jne 0x457e1b
mov eax, dword [ebp - 0xa9c]
mov dword [ebx + 8], eax
mov ebx, eax
cmp dword [eax + 8], 0
jne 0x457ddb
mov ebx, dword [ebp - 0xa98]
push 8
call fcn.004612cd
mov dword [ebx + 0x18], eax
pop ecx
mov ecx, dword [ebp - 0xaa0]
mov dword [eax], edi
mov eax, dword [ebx + 0x18]
mov dword [eax + 4], ecx
mov eax, dword [ebx + 0x10]
and dword [ebp - 0xab0], 0
mov dword [ebp - 0xab8], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0xab4], eax
lea eax, [ebp - 0x258]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea ecx, [ebp - 0xa90]
call fcn.0040a6f3
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
lea eax, [ebp - 0x258]
push str._se_crashdump_
push eax
lea eax, [ebp - 0xa90]
push eax
call fcn.0040a68b
pop ecx
pop ecx
push eax
call fcn.0040a68b
push 0xa
mov edi, eax
lea eax, [ebp - 0x50]
push 0x20
push eax
push ebx
call fcn.004670f9
lea eax, [ebp - 0x50]
push eax
push edi
call fcn.0040a68b
add esp, 0x20
push str..dmp
push 0x5f
push eax
call fcn.0040a321
pop ecx
pop ecx
push eax
call fcn.0040a68b
pop ecx
pop ecx
xor eax, eax
lea ecx, [ebp - 0xa90]
push eax
push 0x4000180
push 2
push eax
push eax
push 0xc0000000
call fcn.0040a840
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x458060
cmp byte [ebp + 8], 0
mov edi, 0x140
je 0x457f77
lea ecx, [ebp - 0x684]
call fcn.0040a6f3
push 0x4d3f84
push 0x4d3ff0
lea eax, [ebp - 0x684]
mov byte [ebp - 4], 2
push 0x4d3fc8
push eax
call fcn.0040a68b
pop ecx
pop ecx
push eax
call fcn.0040a68b
pop ecx
pop ecx
push eax
call fcn.0040a68b
pop ecx
pop ecx
push 0x40040
push 0x4d4050
lea ecx, [ebp - 0x684]
call fcn.0040a840
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 2
pop edi
lea ecx, [ebp - 0x684]
mov byte [ebp - 4], 1
call fcn.0040a6d0
jmp 0x457fd6
xor eax, eax
lea edx, [ebp - 0x268]
mov ecx, str.dbghelp.dll
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x268], eax
call fcn.00415afc
test al, al
je 0x457fd6
push 0x1db0
push 0
push 1
push 6
lea ecx, [ebp - 0x278]
call fcn.0040a4c6
xor ecx, ecx
mov edx, dword [eax + ecx*4]
cmp dword [ebp + ecx*4 - 0x268], edx
ja 0x457fd1
jb 0x457fd6
inc ecx
cmp ecx, 4
jl 0x457fbd
mov edi, 0x940
mov ecx, dword [ebp - 0xa98]
lea eax, [ebp - 0xab8]
push 0
xor edx, edx
push 0
cmp dword [ecx + 0x18], edx
cmove eax, edx
push eax
push edi
push ebx
push dword [ecx + 0xc]
push esi
call dword [sym.imp.dbghelp.dll_MiniDumpWriteDump]
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
push edi
call fcn.0046142c
pop ecx
mov dword [ebp - 0xa98], eax
xor eax, eax
push eax
push eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea eax, [ebp - 0xa94]
push eax
push edi
push dword [ebp - 0xa98]
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0xa94], edi
jne 0x458059
push ecx
mov ecx, dword [ebp - 0xaa4]
mov edx, str.crash.dmp
push edi
push dword [ebp - 0xa98]
call fcn.0045c811
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa90]
call fcn.0040a6d0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00461a3b
ret