Function at 0x14000b438
Capabilities:
Check if file exists
Delete file
Move file

Disassembly:
mov dword [rsp + 0x10], edx
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov r15, rcx
mov rcx, qword [0x140015038]
lea rax, [0x140015038]
cmp rcx, rax
je 0x14000b486
test dword [rcx + 0x1c], 0x20000000
je 0x14000b486
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400120a0]
mov edx, 0x14
call fcn.140001800
mov r9d, 1
lea rdx, str.SxMergeExtraLogs
mov r8d, 0x173
lea rcx, [rbp - 0x19]
call fcn.14000ab2c
and dword [rbp + 0x77], 0
lea rax, [0x1400122e0]
and dword [rbp + 0x6f], 0
and dword [rbp + 0x67], 0
and qword [rbp - 0x31], 0
and qword [rbp - 0x21], 0
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x29], rax
test r15, r15
jne 0x14000b4db
mov ebx, 0x80070057
mov eax, 0x17e
jmp 0x14000b6a6
and dword [rbp - 0x19], 0
lea r9, [rbp + 0x67]
mov eax, 0x17f
lea r8, [rbp + 0x6f]
lea rdx, [rbp + 0x77]
mov word [rbp - 0x15], ax
mov rcx, r15
call fcn.14000afd8
mov ebx, eax
mov dword [rbp - 0x19], eax
test eax, eax
mov eax, 0x186
js 0x14000b6a9
mov word [rbp - 0x15], ax
mov eax, dword [rbp + 0x6f]
test eax, eax
jne 0x14000b52c
xor ebx, ebx
mov eax, 0x18b
mov dword [rbp - 0x19], ebx
mov word [rbp - 0x15], ax
jmp 0x14000b6ad
mov r14d, dword [rbp + 0x67]
mov esi, 4
neg r14d
mov edi, esi
cmp r14d, esi
jg 0x14000b6ad
lea r12d, [rsi + 1]
sub r12d, eax
lea r8, [0x140012098]
mov qword [rsp + 0x20], r8
mov r8, r15
lea rcx, str._s._d._s
cmp edi, r12d
jl 0x14000b5ca
mov rdx, rcx
mov r9d, edi
lea rcx, [rbp - 0x39]
call fcn.14000d9f8
mov ebx, eax
mov dword [rbp - 0x19], eax
test eax, eax
mov eax, 0x19a
js 0x14000b6a9
mov rcx, qword [rbp - 0x39]
mov word [rbp - 0x15], ax
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_DeleteFileW]
nop dword [rax + rax]
test eax, eax
jne 0x14000b66f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 2
jne 0x14000b67e
mov eax, 0x19e
xor ebx, ebx
mov word [rbp - 0x15], ax
mov dword [rbp - 0x19], ebx
jmp 0x14000b672
mov eax, edi
cdq
xor eax, edx
sub eax, edx
lea rdx, str._s.0._d._s
test edi, edi
mov r9d, eax
cmovns rdx, rcx
lea rcx, [rbp - 0x39]
call fcn.14000d9f8
mov ebx, eax
mov dword [rbp - 0x19], eax
test eax, eax
mov eax, 0x1aa
js 0x14000b6a9
mov word [rbp - 0x15], ax
lea rdx, str._s._d._s
lea rax, [0x140012098]
mov r9d, esi
mov r8, r15
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x29]
call fcn.14000d9f8
mov ebx, eax
mov dword [rbp - 0x19], eax
test eax, eax
mov eax, 0x1af
js 0x14000b6a9
mov rdx, qword [rbp - 0x29]
mov r8d, 1
mov rcx, qword [rbp - 0x39]
mov word [rbp - 0x15], ax
call qword [sym.imp.api_ms_win_core_file_l2_1_0.dll_MoveFileExW]
nop dword [rax + rax]
test eax, eax
jne 0x14000b66d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 2
jne 0x14000b693
mov eax, 0x1b4
jmp 0x14000b5bc
dec esi
mov ebx, dword [rbp - 0x19]
dec edi
cmp edi, r14d
jl 0x14000b6ad
jmp 0x14000b54a
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov eax, 0x19e
jmp 0x14000b6a6
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov eax, 0x1b4
mov dword [rbp - 0x19], ebx
mov word [rbp - 0x13], ax
lea rcx, [rbp - 0x29]
call fcn.14000d4e8
lea rcx, [rbp - 0x39]
call fcn.14000d4e8
lea rcx, [rbp - 0x19]
call fcn.14000ac34
mov eax, ebx
add rsp, 0x90
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret