Function at 0x140028ed0
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1400a2320]
xor rax, rsp
mov qword [rbp - 8], rax
mov r13, r9
mov rbx, rdx
mov rsi, rcx
xor r12d, r12d
mov edi, r12d
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
lea r14, [rcx + 0xa8]
mov qword [rbp - 0x18], r14
mov byte [rbp - 0x10], r12b
mov rcx, r14
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x140028f33
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov byte [rbp - 0x10], 1
mov eax, dword [rsi + 0xf8]
cmp eax, 1
jne 0x140028f4c
mov ebx, 0x8004da74
jmp 0x1400290b6
cmp eax, 2
jne 0x140028f5b
mov ebx, 0x8004da99
jmp 0x1400290b6
cmp byte [rsi + 0xfe], r12b
je 0x1400290b1
cmp byte [rsi + 0xff], r12b
jne 0x1400290b1
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov r15, rax
test rax, rax
jne 0x140028fd7
lea rax, str.FAILED:_event___nullptr
mov qword [rsp + 0x30], rax
lea rax, str.event___nullptr
mov qword [rsp + 0x28], rax
lea rax, str.OplockedFileForRead::Read
mov qword [rsp + 0x20], rax
mov r9d, pe_nt_image_headers64
lea r8, [0x140085ac0]
xor edx, edx
lea rcx, str.589365e1_0fa6_4e71_a0cd_ab6751a48ca9
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_OneDriveAssertWorker_wchar_t_const____ptr64__enum_OneDriveAssertType__wchar_t_const____ptr64__unsigned_int__wchar_t_const____ptr64__wchar_t_const____ptr64__wchar_t_const____ptr64_]
mov rax, r15
or rax, 1
mov qword [rbp - 0x28], rax
mov rax, qword [rbp + 0x68]
mov dword [rbp - 0x30], eax
sar rax, 0x20
mov dword [rbp - 0x2c], eax
mov dword [rbp - 0x20], r12d
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x20]
mov r12d, dword [rbp + 0x60]
mov r8d, r12d
mov rdx, rbx
mov rcx, qword [rsi + 0x60]
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x8004da75
test ebx, ebx
jne 0x14002906b
cmp eax, 0x3e5
jne 0x140029054
lea r9d, [rbx + 1]
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x40]
mov rcx, qword [rsi + 0x60]
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test ebx, ebx
jne 0x14002906b
mov ecx, 0x8004da75
cmp eax, 0x26
jne 0x14002905d
mov edi, ecx
jmp 0x14002906b
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
mov eax, dword [rbp - 0x20]
mov qword [r13], rax
mov ebx, 0x8004da75
test edi, edi
js 0x140029082
cmp dword [rbp - 0x20], r12d
cmovne edi, ebx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, r14
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov eax, 0x80000000
lea edx, [rdi + rax]
test eax, edx
jne 0x1400290ad
cmp edi, ebx
je 0x1400290ad
mov rcx, rsi
call fcn.140029100
mov eax, edi
jmp 0x1400290c1
mov ebx, 0x8004da0c
mov rcx, r14
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov eax, ebx
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140063300
mov rbx, qword [rsp + 0xd0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret