Function at 0x460db8
Capabilities:
Create process memory minidump
Get common file path
Get file size
Read file on windows

Disassembly:
push 0xab0
mov eax, 0x4b9d09
call fcn.00469c08
mov ebx, edx
mov dword [ebp - 0xa98], ebx
mov dword [ebp - 0xaa4], ecx
push dword [ebx + 0xc]
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0xabc], esi
and dword [ebp - 4], 0
test esi, esi
je 0x46114b
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [ebp - 0xa94]
push eax
push 8
lea eax, [ebp - 0xaac]
push eax
push dword [ebx + 0x14]
push esi
call edi
test eax, eax
je 0x460efe
cmp dword [ebp - 0xa94], 8
jne 0x460efe
push 0x2cc
call fcn.00469351
pop ecx
lea ecx, [ebp - 0xa94]
mov dword [ebp - 0xaa0], eax
push ecx
push 0x2cc
push eax
push dword [ebp - 0xaa8]
push esi
call edi
test eax, eax
je 0x460efe
cmp dword [ebp - 0xa94], 0x2cc
jne 0x460efe
push 0x50
call fcn.00469351
pop ecx
mov edi, eax
lea eax, [ebp - 0xa94]
push eax
push 0x50
push edi
push dword [ebp - 0xaac]
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x460efe
cmp dword [ebp - 0xa94], 0x50
jne 0x460efe
cmp dword [edi + 8], 0
je 0x460ee5
mov ebx, edi
push 0x50
call fcn.00469351
pop ecx
lea ecx, [ebp - 0xa94]
mov dword [ebp - 0xa9c], eax
push ecx
push 0x50
push eax
push dword [ebx + 8]
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x460edf
cmp dword [ebp - 0xa94], 0x50
jne 0x460edf
mov eax, dword [ebp - 0xa9c]
mov dword [ebx + 8], eax
mov ebx, eax
cmp dword [eax + 8], 0
jne 0x460e9f
mov ebx, dword [ebp - 0xa98]
push 8
call fcn.00469351
mov dword [ebx + 0x18], eax
pop ecx
mov ecx, dword [ebp - 0xaa0]
mov dword [eax], edi
mov eax, dword [ebx + 0x18]
mov dword [eax + 4], ecx
mov eax, dword [ebx + 0x10]
and dword [ebp - 0xab0], 0
mov dword [ebp - 0xab8], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0xab4], eax
lea eax, [ebp - 0x258]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea ecx, [ebp - 0xa90]
call fcn.00411071
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
lea eax, [ebp - 0x258]
push str._se_crashdump_
push eax
lea eax, [ebp - 0xa90]
push eax
call fcn.00411005
pop ecx
pop ecx
push eax
call fcn.00411005
push 0xa
mov edi, eax
lea eax, [ebp - 0x50]
push 0x20
push eax
push ebx
call fcn.0046f50b
lea eax, [ebp - 0x50]
push eax
push edi
call fcn.00411005
add esp, 0x20
push str..dmp
push 0x5f
push eax
call fcn.0041bcaf
pop ecx
pop ecx
push eax
call fcn.00411005
pop ecx
pop ecx
xor eax, eax
lea ecx, [ebp - 0xa90]
push eax
push 0x4000180
push 2
push eax
push eax
push 0xc0000000
call fcn.00412324
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x461139
cmp byte [ebp + 8], 0
mov edi, 0x140
je 0x46103b
lea ecx, [ebp - 0x684]
call fcn.00411071
push 0x4d6aa4
push 0x4d6b10
lea eax, [ebp - 0x684]
mov byte [ebp - 4], 2
push 0x4d6ae8
push eax
call fcn.00411005
pop ecx
pop ecx
push eax
call fcn.00411005
pop ecx
pop ecx
push eax
call fcn.00411005
pop ecx
pop ecx
push 0x40040
push 0x4d6b70
lea ecx, [ebp - 0x684]
call fcn.00412324
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 2
pop edi
lea ecx, [ebp - 0x684]
mov byte [ebp - 4], 1
call fcn.0041104c
jmp 0x4610af
xor eax, eax
lea edx, [ebp - 0x268]
mov ecx, str.dbghelp.dll
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x268], eax
call fcn.0041faa8
test al, al
je 0x4610af
and dword [ebp - 0x270], 0
xor eax, eax
mov dword [ebp - 0x278], 6
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x26c], 0x1db0
mov ecx, dword [ebp + eax - 0x278]
cmp dword [ebp + eax - 0x268], ecx
ja 0x4610aa
jb 0x4610af
add eax, 4
cmp eax, 0x10
jl 0x461090
mov edi, 0x940
mov ecx, dword [ebp - 0xa98]
lea eax, [ebp - 0xab8]
push 0
xor edx, edx
push 0
cmp dword [ecx + 0x18], edx
cmove eax, edx
push eax
push edi
push ebx
push dword [ecx + 0xc]
push esi
call dword [sym.imp.dbghelp.dll_MiniDumpWriteDump]
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
push edi
call fcn.0046949c
pop ecx
mov dword [ebp - 0xa98], eax
xor eax, eax
push eax
push eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea eax, [ebp - 0xa94]
push eax
push edi
push dword [ebp - 0xa98]
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0xa94], edi
jne 0x461132
push ecx
mov ecx, dword [ebp - 0xaa4]
mov edx, str.crash.dmp
push edi
push dword [ebp - 0xa98]
call fcn.00464a4e
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa90]
call fcn.0041104c
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00469bb2
ret