Function at 0x42ec50
Capabilities:
Check if file exists
Create process memory minidump
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4883dd
mov eax, dword fs:[0]
push eax
sub esp, 0x4e4
mov eax, dword [0x4ad0cc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4a4], edx
mov dword [ebp - 0x4a0], ecx
xor eax, eax
mov dword [ebp - 0x4a8], 0
push 0x206
push eax
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea eax, [ebp - 0x420]
push 0x103
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x448]
call fcn.00403390
lea ecx, [ebp - 0x478]
mov dword [ebp - 4], 0
call fcn.00403390
lea eax, [ebp - 0x478]
mov byte [ebp - 4], 1
push eax
lea edx, [ebp - 0x448]
lea ecx, [ebp - 0x420]
call fcn.00417910
add esp, 4
lea eax, [ebp - 0x420]
lea ecx, [ebp - 0x4d8]
push eax
call fcn.00405950
lea edx, [ebp - 0x4d8]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x490]
call fcn.00417d50
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 4
call fcn.004033c0
push 0x496c80
lea ecx, [ebp - 0x4c0]
call fcn.00405950
push 0x496eb4
lea ecx, [ebp - 0x4f0]
mov byte [ebp - 4], 5
call fcn.00405950
lea eax, [ebp - 0x4c0]
mov byte [ebp - 4], 6
push eax
lea edx, [ebp - 0x4f0]
lea ecx, [ebp - 0x448]
call fcn.004189a0
add esp, 4
lea ecx, [ebp - 0x4f0]
call fcn.004033c0
lea ecx, [ebp - 0x4c0]
mov byte [ebp - 4], 4
call fcn.004033c0
lea eax, [ebp - 0x430]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x4c0]
call fcn.0042da40
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebp - 0x448]
call fcn.00403480
push eax
movzx eax, word [ebp - 0x424]
lea ecx, [ebp - 0x490]
push eax
movzx eax, word [ebp - 0x426]
push eax
movzx eax, word [ebp - 0x428]
push eax
call fcn.00403480
push eax
mov ecx, esi
call fcn.00403480
push eax
push str._s_s__02d_02d_02d__s__ld__ld.dmp
lea eax, [ebp - 0x218]
push 0xffffffffffffffff
push eax
call fcn.004085d0
add esp, 0x2c
lea ecx, [ebp - 0x4c0]
call fcn.004033c0
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x460]
call fcn.00405950
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 7
call fcn.00403480
push eax
push str.GenerateDump_fileName:_s
push 0
push str.Wisdom_pub.cpp
call fcn.00410970
add esp, 0x10
lea eax, [ebp - 0x218]
push 0
push 0
push 2
push 0
push 3
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x4a4]
push 0
mov dword [ebp - 0x498], eax
lea eax, [ebp - 0x49c]
push eax
push 1
push esi
mov dword [ebp - 0x494], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.dbghelp.dll_MiniDumpWriteDump]
test eax, eax
je 0x42eee9
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x42eee9
lea eax, [ebp - 0x218]
push eax
jmp 0x42eeee
push 0x496c80
mov ecx, dword [ebp - 0x4a0]
call fcn.00405950
lea ecx, [ebp - 0x460]
call fcn.004033c0
lea ecx, [ebp - 0x490]
call fcn.004033c0
lea ecx, [ebp - 0x478]
call fcn.004033c0
lea ecx, [ebp - 0x448]
call fcn.004033c0
mov eax, dword [ebp - 0x4a0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048079e
mov esp, ebp
pop ebp
ret