Function at 0x600090bc
Capabilities:
Get file attributes

Disassembly:
push 0x1e8
mov eax, 0x6001ea6f
call fcn.6001adcc
mov dword [ebp - 0x1e0], ecx
mov eax, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x1e4], eax
xor eax, eax
mov dword [ebp - 0x1dc], edi
mov word [ebp - 0x1d4], ax
mov word [ebp - 0x1d8], ax
call fcn.60006fd6
mov ecx, eax
call fcn.6000710d
test al, al
je 0x60009139
call fcn.60006fd6
mov ecx, eax
call fcn.60006e0c
mov edi, eax
lea eax, [ebp - 0x1dc]
push 0
push eax
lea eax, [ebp - 0x1d4]
mov esi, dword [edi]
push eax
lea eax, [ebp - 0x1d8]
push eax
mov ecx, dword [esi + 0x24]
call dword [0x600204bc]
mov ecx, edi
call dword [esi + 0x24]
xor edi, edi
push edi
push str.AcrobatTimerWndAcrobatBroker
call dword [sym.imp.USER32.dll_FindWindowW]
mov ebx, eax
test ebx, ebx
je 0x600091d3
cmp dword [ebp - 0x1dc], 0
je 0x60009293
push dword [ebp - 0x1dc]
call dword [sym.imp.kernel32.dll_GetFileAttributesW]
test al, 0x10
jne 0x600091d3
push str.AcrobatScanImageObject
push 0x104
push edi
push 4
push edi
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
mov esi, eax
test esi, esi
je 0x600091d3
push edi
push edi
push edi
push 2
push esi
call dword [sym.imp.kernel32.dll_MapViewOfFile]
mov edi, eax
test edi, edi
je 0x600091ca
push 0x104
push dword [ebp - 0x1dc]
push edi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
mov eax, dword [ebp - 0x1e0]
add esp, 0xc
push 0
push 1
push dword [eax + 8]
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
push edi
call dword [sym.imp.kernel32.dll_UnmapViewOfFile]
push esi
call dword [sym.imp.kernel32.dll_CloseHandle]
xor edi, edi
mov eax, dword [ebp - 0x1dc]
test eax, eax
je 0x60009293
push eax
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
pop ecx
lea ecx, [ebp - 0x1ec]
lea eax, [eax*2 + 2]
push eax
call fcn.60013390
push eax
lea ecx, [ebp - 0xf0]
call fcn.60005ec9
movsx eax, word [ebp - 0x1d4]
lea ecx, [ebp - 0xb8]
push eax
mov dword [ebp - 4], edi
call fcn.60013390
movzx eax, word [ebp - 0x1d8]
lea ecx, [ebp - 0x80]
push eax
call fcn.60013390
push edi
lea ecx, [ebp - 0x48]
call fcn.60013390
mov ecx, dword [ebp - 0x1e0]
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x1e4]
lea ecx, [ecx + 4]
push 0x26c
call fcn.60013390
lea ecx, [ebp - 0x48]
mov esi, eax
call fcn.600061f7
lea ecx, [ebp - 0x80]
call fcn.600061f7
lea ecx, [ebp - 0xb8]
call fcn.600061f7
lea ecx, [ebp - 0xf0]
jmp 0x6000934c
push 0x60021474
push 1
lea ecx, [ebp - 0x1f4]
call fcn.60013390
push eax
lea ecx, [ebp - 0x1d0]
call fcn.60005ec9
movsx eax, word [ebp - 0x1d4]
lea ecx, [ebp - 0x198]
push eax
mov dword [ebp - 4], 4
call fcn.60013390
movzx eax, word [ebp - 0x1d8]
lea ecx, [ebp - 0x160]
push eax
call fcn.60013390
push edi
lea ecx, [ebp - 0x128]
call fcn.60013390
mov ecx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x128]
push eax
push dword [ebp - 0x1e4]
lea ecx, [ecx + 4]
push 0x26c
call fcn.60013390
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.600061f7
lea ecx, [ebp - 0x160]
call fcn.600061f7
lea ecx, [ebp - 0x198]
call fcn.600061f7
lea ecx, [ebp - 0x1d0]
call fcn.600061f7
mov eax, esi
call fcn.6001ad76
ret 8