Function at 0x447be0
Capabilities:
Create process memory minidump

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x220c
call fcn.004ab980
mov eax, dword [0x4e2204]
xor eax, esp
mov dword [esp + 0x2208], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
lea ecx, [esp + 0xebe]
push ecx
lea edx, [esp + 0xdc1]
push edx
mov dword [esp + 0x24], eax
xor ebx, ebx
lea eax, [esp + 0xcc4]
push eax
lea ecx, [esp + 0xcc4]
push ecx
push 0x561880
mov dword [esp + 0x34], ebx
mov dword [esp + 0xfd4], ebx
mov byte [esp + 0xac4], bl
mov byte [esp + 0xccc], bl
mov byte [esp + 0xcd0], bl
mov byte [esp + 0xdd1], bl
mov byte [esp + 0xed2], bl
call fcn.004a00bc
add esp, 0x14
push ebx
call fcn.0049d454
add esp, 4
push edx
push eax
lea edx, [esp + 0xdc5]
push edx
push str.minidump_s__d.dmp
lea ecx, [esp + 0x30]
call fcn.00401480
mov eax, dword [esp + 0x30]
add esp, 0x10
mov dword [esp + 0x590], ebx
cmp eax, ebx
je 0x447c9d
add eax, 4
jmp 0x447c9f
xor eax, eax
mov byte [esp + 0x80], bl
mov byte [esp + 0x288], bl
mov byte [esp + 0x28c], bl
mov byte [esp + 0x38d], bl
mov byte [esp + 0x48e], bl
cmp eax, ebx
je 0x447ce9
lea ecx, [esp + 0x48e]
push ecx
lea edx, [esp + 0x391]
push edx
lea ecx, [esp + 0x294]
push ecx
lea edx, [esp + 0x294]
push edx
push eax
jmp 0x447d0e
lea eax, [esp + 0x48e]
push eax
lea ecx, [esp + 0x391]
push ecx
lea edx, [esp + 0x294]
push edx
lea eax, [esp + 0x294]
push eax
push 0x4cb498
call fcn.004a00bc
add esp, 0x14
lea ecx, [esp + 0x80]
push 1
push ecx
call fcn.00447600
add esp, 8
lea ecx, [esp + 0x80]
call fcn.0045f950
lea edx, [esp + 0x48e]
push edx
lea eax, [esp + 0x391]
push eax
lea ecx, [esp + 0x294]
push ecx
lea edx, [esp + 0x294]
push edx
lea eax, [esp + 0x90]
push 0x208
push eax
call fcn.004a0108
lea eax, [esp + 0x98]
add esp, 0x18
mov dword [esp + 0xc], ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x447d77
sub eax, edx
push eax
lea ecx, [esp + 0x84]
push ecx
lea edx, [esp + 0x14]
push edx
call fcn.0043c200
lea eax, [esp + 0xc]
push eax
lea edi, [esp + 0x24]
call fcn.00401250
mov esi, dword [esp + 0xc]
cmp esi, ebx
je 0x447dce
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
and eax, 0xff
cmp eax, 0x80
jl 0x447dc5
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x447dce
cmp eax, ebx
jne 0x447dce
call fcn.0045f130
mov esi, dword [esp + 0x20]
cmp esi, ebx
je 0x447ddb
lea eax, [esi + 4]
jmp 0x447ddd
xor eax, eax
push ebx
push 0x80
push 2
push ebx
push 1
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x447e69
lea ecx, [esp + 0x80]
call fcn.00403870
lea ecx, [esp + 0xab0]
call fcn.00403870
cmp esi, ebx
je 0x447e51
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
and eax, 0xff
cmp eax, 0x80
jl 0x447e48
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
or eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2208]
xor ecx, esp
call fcn.0049ca20
mov esp, ebp
pop ebp
ret
cmp eax, ebx
jne 0x447e51
call fcn.0045f130
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2208]
xor ecx, esp
call fcn.0049ca20
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [esp + 0x1c]
push ebx
push ebx
lea edx, [esp + 0x2c]
push edx
push 0x50
push edi
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call sub.dbghelp.dll_MiniDumpWriteDump
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00447850
inc dword [0x566acc]
push 4
push str.Confirm
push str.f.lux_has_crashed._Would_you_like_to_send_crash_data_so_it_can_be_fixed_
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
sete byte [esp + 0x13]
call fcn.00446500
cmp byte [esp + 0x13], bl
je 0x44812b
lea esi, [esp + 0xfc8]
mov dword [esp + 0xfc8], ebx
call fcn.00478290
push str.https:__justgetflux.com_crash
mov eax, esi
call fcn.00478370
test eax, eax
sete al
lea ecx, [esp + 0x80]
mov byte [esp + 0x2208], al
call fcn.0045f650
mov ecx, esi
push eax
push ecx
lea esi, [esp + 0x38]
call fcn.004478a0
lea esi, [esp + 0x80]
call fcn.0045f770
mov dword [esp + 0xc], ebx
cmp eax, ebx
je 0x447f55
mov ecx, eax
lea esi, [ecx + 1]
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x447f40
sub ecx, esi
push ecx
push eax
lea edx, [esp + 0x14]
push edx
call fcn.0043c200
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x34]
push ecx
call fcn.00447960
lea ecx, [esp + 0xc]
call fcn.00401420
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
call fcn.00447550
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push str._d._d
lea ecx, [esp + 0x30]
mov dword [esp + 0x30], ebx
call fcn.00401480
add esp, 0x14
push 3
push 0x4cff88
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebx
call fcn.0043c200
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x38]
push eax
call fcn.00447a30
lea ecx, [esp + 0xc]
call fcn.00401420
mov eax, 0x561880
mov dword [esp + 0x18], ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x447fe1
sub eax, edx
push eax
push 0x561880
lea ecx, [esp + 0x20]
push ecx
call fcn.0043c200
mov eax, dword [esp + 0x18]
mov dword [esp + 0xaa8], ebx
cmp eax, ebx
je 0x44800e
add eax, 4
jmp 0x448010
xor eax, eax
lea edx, [esp + 0x9a6]
mov byte [esp + 0x598], bl
mov byte [esp + 0x7a0], bl
mov byte [esp + 0x7a4], bl
mov byte [esp + 0x8a5], bl
mov byte [esp + 0x9a6], bl
push edx
cmp eax, ebx
je 0x44805a
lea ecx, [esp + 0x8a9]
push ecx
lea edx, [esp + 0x7ac]
push edx
lea ecx, [esp + 0x7ac]
push ecx
push eax
jmp 0x448077
lea eax, [esp + 0x8a9]
push eax
lea ecx, [esp + 0x7ac]
push ecx
lea edx, [esp + 0x7ac]
push edx
push 0x4cb498
call fcn.004a00bc
add esp, 0x14
lea esi, [esp + 0x598]
call fcn.0045f770
mov dword [esp + 0x14], ebx
cmp eax, ebx
je 0x4480ad
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x448098
sub ecx, esi
push ecx
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.0043c200
push 4
push str.prod
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x18], ebx
call fcn.0043c200
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.00447a30
lea ecx, [esp + 0xc]
call fcn.00401420
lea ecx, [esp + 0x14]
call fcn.00401420
lea edx, [esp + 0x30]
push edx
call fcn.004617d0
lea ecx, [esp + 0x598]
call fcn.00403870
lea ecx, [esp + 0x18]
call fcn.00401420
lea ecx, [esp + 0x1c]
call fcn.00401420
lea eax, [esp + 0x30]
call fcn.00447ac0
lea edi, [esp + 0xfc8]
call fcn.0042f0e0
mov esi, dword [esp + 0x20]
jmp 0x44813f
cmp esi, ebx
je 0x448134
lea eax, [esi + 4]
jmp 0x448136
xor eax, eax
push eax
call fcn.00448230
add esp, 4
lea ecx, [esp + 0x80]
call fcn.00403870
lea ecx, [esp + 0xab0]
call fcn.00403870
cmp esi, ebx
je 0x448195
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
and eax, 0xff
cmp eax, 0x80
jl 0x44818c
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2208]
xor ecx, esp
call fcn.0049ca20
mov esp, ebp
pop ebp
ret
cmp eax, ebx
jne 0x448195
call fcn.0045f130
mov ecx, dword [esp + 0x2214]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.0049ca20
mov esp, ebp
pop ebp
ret