Function at 0x1400dd930
Capabilities:
Read file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1401f7280]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor r15d, r15d
mov rbx, rdx
mov qword [rbp - 0x58], rdx
mov dword [rdx], r15d
lea rdx, [0x140183378]
mov esi, r9d
mov r14, r8
mov dword [rbp - 0x60], r15d
mov r12d, r15d
mov dword [r8], r15d
call fcn.1400fafe4
mov rdi, rax
test rax, rax
je 0x1400ddc7c
mov edx, 1
lea rcx, [rbp - 0x50]
mov r9, rax
lea r8d, [rdx + 1]
mov qword [rsp + 0xd8], r13
call fcn.1400fabdc
movzx eax, byte [rbp - 0x50]
cmp al, 0x49
jne 0x1400ddab4
cmp byte [rbp - 0x4f], al
je 0x1400ddac5
mov rcx, rdi
call fcn.1400fa96c
test eax, eax
jne 0x1400ddbd8
mov r13d, dword [rbp + 0x60]
lea rbx, [0x140000000]
nop word [rax + rax]
mov edx, 1
lea rcx, [rbp - 0x50]
mov r9, rdi
lea r8d, [rdx + 1]
call fcn.1400fabdc
cmp rax, 2
jne 0x1400ddbd8
cmp byte [rbp - 0x50], 0xff
jne 0x1400dda0f
cmp byte [rbp - 0x4f], 0xd8
je 0x1400ddbc8
mov edx, 1
lea rcx, [rbp - 0x60]
mov r9, rdi
lea r8d, [rdx + 1]
call fcn.1400fabdc
cmp rax, 2
jne 0x1400ddbd8
mov ecx, dword [rbp - 0x60]
mov eax, ecx
sar eax, 8
movzx edx, al
movzx eax, cl
shl eax, 8
or edx, eax
cmp byte [rbp - 0x50], 0xff
mov dword [rbp - 0x60], edx
jne 0x1400ddcad
cmp edx, 2
jle 0x1400ddcad
movzx eax, byte [rbp - 0x4f]
mov ecx, eax
cmp eax, esi
jne 0x1400dda79
test r13d, r13d
je 0x1400ddaf6
test r12d, r12d
jne 0x1400ddaf6
mov r12d, 1
cmp esi, 0xc0
jne 0x1400ddb9b
add al, 0x40
cmp al, 0xf
ja 0x1400ddb9b
lea eax, [rcx - 0xc0]
cmp eax, 0x1e
ja case.0x1400ddab2.193
cdqe
movzx eax, byte [rbx + rax + 0xddcc4]
mov ecx, dword [rbx + rax*4 + 0xddcbc]
add rcx, rbx
jmp rcx
cmp al, 0x4d
jne 0x1400dd9ba
cmp byte [rbp - 0x4f], al
jne 0x1400dd9ba
cmp esi, 0xed
jne 0x1400ddaee
mov edx, 0x83bb
mov rcx, rdi
call fcn.1400dc910
mov dword [r14], eax
test eax, eax
je 0x1400ddaee
mov edx, 0x2800
mov dword [rbp - 0x60], edx
jmp 0x1400ddc23
mov edx, dword [rbp - 0x60]
jmp 0x1400ddc1e
cmp esi, 0xe1
jne 0x1400ddc9a
mov rcx, rdi
call fcn.1400fe108
mov edx, 1
lea rcx, [rbp - 0x50]
lea r8d, [rdx + 0x17]
mov r9, rdi
mov ebx, eax
call fcn.1400fabdc
xor r8d, r8d
mov edx, ebx
mov rcx, rdi
call fcn.1400fad50
cmp dword [rbp + 0x68], 1
jne 0x1400ddb4c
lea rdx, str.http:__ns.adobe.com_xap_
lea rcx, [rbp - 0x50]
mov byte [rbp - 0x38], r15b
call fcn.1400fecfc
test eax, eax
jmp 0x1400ddb62
cmp byte [rbp - 0x50], 0x45
jne 0x1400ddb68
cmp byte [rbp - 0x4f], 0x78
jne 0x1400ddb68
cmp byte [rbp - 0x4e], 0x69
jne 0x1400ddb68
cmp byte [rbp - 0x4d], 0x66
je 0x1400ddc9a
mov edx, dword [rbp - 0x60]
mov r8d, 1
mov rcx, rdi
add edx, 0xfffffffe
call fcn.1400fad50
lea rbx, [0x140000000]
jmp 0x1400ddbc8
mov rcx, rdi
call fcn.1400fe108
mov edx, dword [rbp - 0x60]
sub eax, 2
mov dword [r14], eax
cmp dword [r14], r15d
ja 0x1400ddbd8
add edx, 0xfffffffe
mov r8d, 1
mov rcx, rdi
call fcn.1400fad50
test eax, eax
jne 0x1400ddbd8
mov rcx, rdi
call fcn.1400fa96c
test eax, eax
jne 0x1400ddbd8
mov rcx, rdi
call fcn.1400fa994
test eax, eax
jne 0x1400ddbd8
mov rcx, rdi
call fcn.1400fa96c
test eax, eax
je 0x1400dd9e0
mov edx, dword [r14]
mov rcx, rdi
cmp edx, 2
jbe 0x1400ddcb0
xor r8d, r8d
call fcn.1400fad50
mov edx, 1
lea rcx, [rbp - 0x60]
lea r8d, [rdx + 1]
mov r9, rdi
call fcn.1400fabdc
mov ecx, dword [rbp - 0x60]
mov rbx, qword [rbp - 0x58]
mov eax, ecx
sar eax, 8
movzx edx, al
movzx eax, cl
shl eax, 8
or edx, eax
mov dword [rbp - 0x60], edx
cmp edx, 2
jle 0x1400ddc69
lea eax, [rdx + 0x100]
mov edx, 1
movsxd rcx, eax
call fcn.1400f97a4
mov rcx, rdi
mov r15, rax
test rax, rax
je 0x1400ddcb0
mov edx, dword [r14]
xor r8d, r8d
call fcn.1400fad50
movsxd r8, dword [rbp - 0x60]
mov r9, rdi
mov edx, 1
mov rcx, r15
call fcn.1400fabdc
mov eax, dword [rbp - 0x60]
mov dword [rbx], eax
add dword [r14], 0xfffffffe
mov rcx, rdi
call fcn.1400fa904
mov rax, r15
mov r13, qword [rsp + 0xd8]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400f9a80
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, rdi
call fcn.1400fe108
sub eax, 2
mov dword [r14], eax
jmp 0x1400ddbd8
mov rcx, rdi
call fcn.1400fa904
xor eax, eax
jmp 0x1400ddc74