Function at 0x4560d7
Capabilities:
Create process memory minidump
Get common file path
Get file size
Read file on windows

Disassembly:
push 0xab0
mov eax, 0x4ae4ea
call fcn.0045edc9
mov ebx, edx
mov dword [ebp - 0xa98], ebx
mov dword [ebp - 0xaa4], ecx
push dword [ebx + 0xc]
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0xabc], esi
and dword [ebp - 4], 0
test esi, esi
je 0x45646a
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [ebp - 0xa94]
push eax
push 8
lea eax, [ebp - 0xaac]
push eax
push dword [ebx + 0x14]
push esi
call edi
test eax, eax
je 0x45621d
cmp dword [ebp - 0xa94], 8
jne 0x45621d
push 0x2cc
call fcn.0045e68b
pop ecx
lea ecx, [ebp - 0xa94]
mov dword [ebp - 0xaa0], eax
push ecx
push 0x2cc
push eax
push dword [ebp - 0xaa8]
push esi
call edi
test eax, eax
je 0x45621d
cmp dword [ebp - 0xa94], 0x2cc
jne 0x45621d
push 0x50
call fcn.0045e68b
pop ecx
mov edi, eax
lea eax, [ebp - 0xa94]
push eax
push 0x50
push edi
push dword [ebp - 0xaac]
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x45621d
cmp dword [ebp - 0xa94], 0x50
jne 0x45621d
cmp dword [edi + 8], 0
je 0x456204
mov ebx, edi
push 0x50
call fcn.0045e68b
pop ecx
lea ecx, [ebp - 0xa94]
mov dword [ebp - 0xa9c], eax
push ecx
push 0x50
push eax
push dword [ebx + 8]
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x4561fe
cmp dword [ebp - 0xa94], 0x50
jne 0x4561fe
mov eax, dword [ebp - 0xa9c]
mov dword [ebx + 8], eax
mov ebx, eax
cmp dword [eax + 8], 0
jne 0x4561be
mov ebx, dword [ebp - 0xa98]
push 8
call fcn.0045e68b
mov dword [ebx + 0x18], eax
pop ecx
mov ecx, dword [ebp - 0xaa0]
mov dword [eax], edi
mov eax, dword [ebx + 0x18]
mov dword [eax + 4], ecx
mov eax, dword [ebx + 0x10]
and dword [ebp - 0xab0], 0
mov dword [ebp - 0xab8], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0xab4], eax
lea eax, [ebp - 0x258]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea ecx, [ebp - 0xa90]
call fcn.00408fc1
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
lea eax, [ebp - 0x258]
push str._se_crashdump_
push eax
lea eax, [ebp - 0xa90]
push eax
call fcn.00408f55
pop ecx
pop ecx
push eax
call fcn.00408f55
push 0xa
mov edi, eax
lea eax, [ebp - 0x50]
push 0x20
push eax
push ebx
call fcn.0046476b
lea eax, [ebp - 0x50]
push eax
push edi
call fcn.00408f55
add esp, 0x20
push str..dmp
push 0x5f
push eax
call fcn.00412185
pop ecx
pop ecx
push eax
call fcn.00408f55
pop ecx
pop ecx
xor eax, eax
lea ecx, [ebp - 0xa90]
push eax
push 0x4000180
push 2
push eax
push eax
push 0xc0000000
call fcn.0040a274
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x456458
cmp byte [ebp + 8], 0
mov edi, 0x140
je 0x45635a
lea ecx, [ebp - 0x684]
call fcn.00408fc1
push 0x4cafb8
push 0x4caf70
lea eax, [ebp - 0x684]
mov byte [ebp - 4], 2
push 0x4caffc
push eax
call fcn.00408f55
pop ecx
pop ecx
push eax
call fcn.00408f55
pop ecx
pop ecx
push eax
call fcn.00408f55
pop ecx
pop ecx
push 0x40040
push 0x4caff0
lea ecx, [ebp - 0x684]
call fcn.0040a274
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 2
pop edi
lea ecx, [ebp - 0x684]
mov byte [ebp - 4], 1
call fcn.00408f9c
jmp 0x4563ce
xor eax, eax
lea edx, [ebp - 0x268]
mov ecx, str.dbghelp.dll
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x268], eax
call fcn.00414e2f
test al, al
je 0x4563ce
and dword [ebp - 0x270], 0
xor eax, eax
mov dword [ebp - 0x278], 6
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x26c], 0x1db0
mov ecx, dword [ebp + eax - 0x278]
cmp dword [ebp + eax - 0x268], ecx
ja 0x4563c9
jb 0x4563ce
add eax, 4
cmp eax, 0x10
jl 0x4563af
mov edi, 0x940
mov ecx, dword [ebp - 0xa98]
lea eax, [ebp - 0xab8]
push 0
xor edx, edx
push 0
cmp dword [ecx + 0x18], edx
cmove eax, edx
push eax
push edi
push ebx
push dword [ecx + 0xc]
push esi
call dword [sym.imp.dbghelp.dll_MiniDumpWriteDump]
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
push edi
call fcn.0045e7d6
pop ecx
mov dword [ebp - 0xa98], eax
xor eax, eax
push eax
push eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea eax, [ebp - 0xa94]
push eax
push edi
push dword [ebp - 0xa98]
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0xa94], edi
jne 0x456451
push ecx
mov ecx, dword [ebp - 0xaa4]
mov edx, str.crash.dmp
push edi
push dword [ebp - 0xa98]
call fcn.00459d6c
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa90]
call fcn.00408f9c
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.0045ed73
ret