Function at 0x1400e4700
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov r8, qword [rcx + 0x10]
lea rdx, [0x14001f9ac]
mov rcx, qword [rcx + 0x28]
xor r9d, r9d
jmp 0x1400e4700
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r15
sub rsp, 0x50
xor r12d, r12d
mov r15d, r9d
test byte [rcx + 0x58], 4
mov rdi, r8
mov rbx, rcx
mov qword [rsp + 0x40], r12
mov ebp, r12d
mov qword [rsp + 0x80], r12
mov esi, r12d
je 0x1400e473f
mov eax, 0xfffff019
jmp 0x1400e4a66
mov qword [rcx + 0xe8], rdx
mov rcx, rdi
mov qword [rsp + 0x88], r14
call fcn.1400d9d10
mov qword [rbx + 0x60], rax
test rax, rax
je 0x1400e4a97
mov eax, dword [rbx + 0x58]
test al, 4
jne 0x1400e477b
or eax, 4
mov dword [rbx + 0x58], eax
test al, 8
je 0x1400e477b
mov rax, qword [rbx + 8]
inc dword [rax + 8]
lea rdx, [rsp + 0x80]
mov rcx, rdi
call fcn.1400e4bb0
mov edi, eax
test eax, eax
jne 0x1400e49b7
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400e49a8
mov rcx, qword [rsp + 0x80]
xor r8d, r8d
xor edx, edx
test al, 0x10
je 0x1400e482e
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
mov r14d, eax
test eax, eax
je 0x1400e4821
lea rcx, [r14 + r14]
call fcn.1400d9bc0
mov rdi, rax
test rax, rax
je 0x1400e4a97
mov rcx, qword [rsp + 0x80]
mov r8d, r14d
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
mov eax, eax
test rax, rax
je 0x1400e4819
mov word [rdi + rax*2], r12w
mov rcx, qword [rsp + 0x80]
call fcn.1400d9a00
mov qword [rsp + 0x80], rdi
jmp 0x1400e48c6
mov rcx, rdi
call fcn.1400d9a00
mov rdi, qword [rsp + 0x80]
jmp 0x1400e48c6
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
mov edi, eax
test eax, eax
je 0x1400e486f
mov ecx, edi
add rcx, rcx
call fcn.1400d9bc0
mov rsi, rax
test rax, rax
je 0x1400e486f
mov rcx, qword [rsp + 0x80]
mov r8d, edi
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
test eax, eax
jne 0x1400e486f
mov rcx, rsi
call fcn.1400d9a00
mov rsi, r12
mov rcx, qword [rsp + 0x80]
lea r8, [rbx + 0xf0]
lea rdx, [rsp + 0x40]
call fcn.1400e4500
test eax, eax
jne 0x1400e49a8
lea r8, [rbx + 0xf8]
xor edx, edx
mov rcx, rsi
call fcn.1400e4500
test eax, eax
jne 0x1400e49a8
mov rbp, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x80]
mov rdi, rbp
call fcn.1400d9a00
mov qword [rsp + 0x80], r12
xor r9d, r9d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x42000000
mov rcx, rdi
mov dword [rsp + 0x20], 3
lea edx, [r9 + 1]
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbx + 0xd8], rax
test rbp, rbp
je 0x1400e4903
mov rcx, rbp
call fcn.1400d9a00
mov rcx, qword [rbx + 0xd8]
cmp rcx, 0xffffffffffffffff
je 0x1400e49a8
mov rdx, qword [rbx + 8]
xor r9d, r9d
mov r8, rbx
mov rdx, qword [rdx + 0x38]
call qword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
test rax, rax
je 0x1400e49a8
mov rax, qword [rbx + 0x108]
test rax, rax
jne 0x1400e4953
mov ecx, 0x1000
call fcn.1400d9bc0
mov qword [rbx + 0x108], rax
test rax, rax
je 0x1400e4a97
lea rax, [rbx + 0xa8]
mov qword [rsp + 0x38], r12
xorps xmm0, xmm0
mov qword [rsp + 0x30], rax
movups xmmword [rax], xmm0
shr r15d, 2
mov r8d, 0x1000
movups xmmword [rax + 0x10], xmm0
mov rdx, qword [rbx + 0x108]
and r15d, 1
mov rcx, qword [rbx + 0xd8]
mov r9d, r15d
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x17f
call qword [sym.imp.KERNEL32.dll_ReadDirectoryChangesW]
test eax, eax
jne 0x1400e4a7a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.1400ee860
mov edi, eax
mov rcx, qword [rbx + 0x60]
test rcx, rcx
je 0x1400e49c9
call fcn.1400d9a00
mov qword [rbx + 0x60], r12
mov rcx, qword [rbx + 0xf0]
test rcx, rcx
je 0x1400e49e1
call fcn.1400d9a00
mov qword [rbx + 0xf0], r12
mov rcx, qword [rbx + 0xf8]
test rcx, rcx
je 0x1400e49f9
call fcn.1400d9a00
mov qword [rbx + 0xf8], r12
mov rcx, qword [rsp + 0x80]
call fcn.1400d9a00
mov rcx, qword [rbx + 0xd8]
cmp rcx, 0xffffffffffffffff
je 0x1400e4a24
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx + 0xd8], 0xffffffffffffffff
mov rcx, qword [rbx + 0x108]
test rcx, rcx
je 0x1400e4a3c
call fcn.1400d9a00
mov qword [rbx + 0x108], r12
mov eax, dword [rbx + 0x58]
test al, 4
je 0x1400e4a54
and eax, 0xfffffffb
mov dword [rbx + 0x58], eax
test al, 8
je 0x1400e4a54
mov rax, qword [rbx + 8]
dec dword [rax + 8]
mov rcx, rsi
call fcn.1400d9a00
mov eax, edi
mov r14, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rax, qword [rsp + 0x80]
mov qword [rbx + 0x100], rax
xor eax, eax
mov dword [rbx + 0xe0], 1
jmp 0x1400e4a5e
lea rdx, str.uv__malloc
mov ecx, select
call fcn.1400ee7b0
int3