Function at 0x488f9d
Capabilities:
Create process memory minidump
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x3124
call fcn.005c1510
mov eax, dword [0x6d9d44]
xor eax, esp
mov dword [esp + 0x3120], eax
push ebx
push esi
mov eax, ecx
push edi
push 0x108
mov dword [esp + 0x10], eax
mov edi, dword [eax + 4]
lea eax, [esp + 0x24]
push 0
push eax
call fcn.005c37d0
mov eax, dword [0x76a4e8]
xor edx, edx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
add esp, 0xc
mov byte [esp + 0x128], dl
test eax, eax
je 0x48904b
push edx
push 0x80
push 2
push edx
push 1
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
and dword [esp + 0x18], 0
mov esi, eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0
push 0
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 0x1a65
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call ebx
push eax
call dword [sym.imp.dbghelp.dll_MiniDumpWriteDump]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov eax, dword [edi + 0xb8]
push 3
pop ecx
push edx
push dword [sym.imp.dbghelp.dll_SymGetModuleBase64]
mov dword [esp + 0x28], eax
push dword [sym.imp.dbghelp.dll_SymFunctionTableAccess64]
mov dword [esp + 0x30], edx
mov dword [esp + 0x38], ecx
mov eax, dword [edi + 0xb4]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], edx
mov dword [esp + 0x58], ecx
mov eax, dword [edi + 0xc4]
push edx
mov dword [esp + 0x60], eax
lea eax, [esp + 0x30]
push edx
push eax
mov dword [esp + 0x6c], edx
mov dword [esp + 0x74], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call ebx
push eax
push 0x14c
call dword [sym.imp.dbghelp.dll_StackWalk64]
test eax, eax
je 0x4891e2
mov eax, dword [esp + 0x20]
or eax, dword [esp + 0x24]
je 0x4891e2
push str.FATAL_EXCEPTION__
mov edi, 0x1000
mov dword [esp + 0x112c], 0x58
lea eax, [esp + 0x12c]
mov dword [esp + 0x117c], 0x7d0
xorps xmm0, xmm0
mov dword [esp + 0x212c], 0x18
push edi
push eax
movlpd qword [esp + 0x1c], xmm0
call fcn.0040117f
mov esi, eax
add esp, 0xc
mov eax, 0x48807d
mov ecx, eax
sub ecx, dword [esp + 0x20]
push ecx
push eax
push dword [esp + 0x28]
mov ecx, edi
lea eax, [esp + 0x134]
push str._FuncAddr:_0x_08x___BaseAddr:_0x_08x___Delta:__d__n
sub ecx, esi
add eax, esi
push ecx
push eax
call fcn.0040117f
add esp, 0x18
add esi, eax
lea eax, [esp + 0x1128]
push eax
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x2c]
push dword [esp + 0x2c]
call ebx
push eax
call dword [sym.imp.dbghelp.dll_SymFromAddr]
test eax, eax
je 0x4891e2
lea eax, [esp + 0x117c]
push eax
mov eax, edi
sub eax, esi
push str.______s
push eax
lea eax, [esp + 0x134]
add eax, esi
push eax
call fcn.0040117f
add esp, 0x10
add esi, eax
lea eax, [esp + 0x2128]
push eax
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x2c]
push dword [esp + 0x2c]
call ebx
push eax
call dword [sym.imp.dbghelp.dll_SymGetLineFromAddr64]
sub edi, esi
test eax, eax
lea eax, [esp + 0x128]
je 0x4891d1
push dword [esp + 0x2130]
add eax, esi
push dword [esp + 0x2138]
push 0x757198
push edi
push eax
call fcn.0040117f
add esp, 0x14
jmp 0x4891e2
push 0x7571a4
add eax, esi
push edi
push eax
call fcn.0040117f
add esp, 0xc
push 0
push 0
push 0xad8
mov edx, 0x7571a8
lea ecx, [esp + 0x134]
call fcn.0048f95e
add esp, 0xc
push eax
push 0x7571c4
call fcn.00401109
pop ecx
pop ecx
push 0xfe
call fcn.005d0820
int3