Function at 0x140005e30
Capabilities:
Check if file exists
Create directory
Delete file
Get common file path
Move file

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x40
mov ecx, 0x208
mov rbx, 0xffffffffffffffff
call fcn.140017574
mov ecx, 0x208
mov r15, rax
call fcn.140017574
mov rsi, rax
test r15, r15
je 0x140006158
test rax, rax
je 0x140006158
mov rdx, r15
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x140005e94
lea rcx, str.WDDMCoreDump:_GetTempPath___failed._n
jmp 0x14000615f
lea rdi, str.VM3D
mov r9, r15
lea r8, str._s_s
mov qword [rsp + 0x20], rdi
mov edx, 0x104
mov rcx, rsi
call fcn.140006190
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x140005ee7
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140005ee7
mov rdx, rsi
lea rcx, str.WDDMCoreDump:_CreateDirectory___for__S_failed._n
call fcn.140004cb0
jmp 0x140006164
mov qword [rsp + 0x28], rdi
lea r8, str._s_s_s.dmp
mov r9, r15
mov qword [rsp + 0x20], rdi
mov edx, 0x104
mov rcx, rsi
call fcn.140006190
mov qword [rsp + 0x30], 0
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 1
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140006164
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x50
jne 0x140006147
mov ecx, 0x208
call fcn.140017574
mov r14, rax
test rax, rax
je 0x140006158
mov qword [rsp + 0x28], rdi
lea r8, str._s_s_s
mov r9, r15
mov qword [rsp + 0x20], rdi
mov edx, 0x104
mov qword [rsp + 0x60], rbp
mov rcx, rax
call fcn.140006190
mov rdx, rsi
lea rcx, str.WDDMCoreDump:_Minidump_file__S_exists._Rotating_..._n
call fcn.140004600
mov ecx, 0x208
call fcn.140017574
mov ecx, 0x208
mov rbp, rax
call fcn.140017574
mov rbx, rax
test rbp, rbp
je 0x1400060d0
test rax, rax
je 0x1400060d0
mov qword [rsp + 0x68], r12
mov edi, 9
lea r12, str..dmp
nop dword [rax]
mov r9, r14
mov edx, 0x104
mov rcx, rbx
test edi, edi
jne 0x140006063
lea r8, str._s_s
mov qword [rsp + 0x20], r12
call fcn.140006190
mov r9, r14
mov qword [rsp + 0x28], r12
lea r8, str._s__d_s
mov dword [rsp + 0x20], edi
mov edx, 0x104
mov rcx, rbp
call fcn.140006190
mov rdx, rbp
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x140006054
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x140006054
mov r9, rbp
lea rdx, str.FileRotateWDDM
mov r8, rbx
lea rcx, str.__s:_failed_to_rename__S_____S_n
call fcn.140004600
sub edi, 1
jns 0x140005fe0
mov r12, qword [rsp + 0x68]
jmp 0x1400060e3
lea eax, [rdi - 1]
mov qword [rsp + 0x28], r12
lea r8, str._s__d_s
mov dword [rsp + 0x20], eax
call fcn.140006190
mov r9, r14
mov qword [rsp + 0x28], r12
lea r8, str._s__d_s
mov dword [rsp + 0x20], edi
mov edx, 0x104
mov rcx, rbp
call fcn.140006190
cmp edi, 9
jne 0x140006020
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140006054
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x140006054
mov r8, rbx
lea rdx, str.FileRotateWDDM
lea rcx, str.__s:_failed_to_remove__S_n
call fcn.140004600
jmp 0x140006054
lea rdx, str.FileRotateWDDM
lea rcx, str.__s:_failed_to_malloc_n
call fcn.140004600
mov rcx, rbp
call fcn.140017560
mov rcx, rbx
call fcn.140017560
mov rcx, r14
call fcn.140017560
mov qword [rsp + 0x30], 0
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 1
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbp, qword [rsp + 0x60]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140006164
mov rdx, rsi
lea rcx, str.WDDMCoreDump:_Cannot_rotate_open_minidump_file__S._n
call fcn.140004cb0
jmp 0x140006164
mov rdx, rsi
lea rcx, str.WDDMCoreDump:_Cannot_open_minidump_file__S._n
call fcn.140004cb0
jmp 0x140006164
lea rcx, str.WDDMCoreDump:_malloc___failed._n
call fcn.140004cb0
mov rcx, r15
call fcn.140017560
mov rcx, rsi
call fcn.140017560
mov rsi, qword [rsp + 0x78]
mov rax, rbx
mov rbx, qword [rsp + 0x70]
add rsp, 0x40
pop r15
pop r14
pop rdi
ret