Function at 0x6e009310
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x6e07047b], 0
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, 0x6e06ea68
jne 0x6e009333
cmp byte [0x6e07047a], 0
je 0x6e009362
push edi
push str._AcroAXDocShim__IPersistMonikerShimImpl_CAcroAXDocShim___x_::Load
push ebx
call fcn.6e03b104
add esp, 0xc
cmp byte [0x6e07047a], 0
je 0x6e009352
push ebx
call dword [sym.imp.kernel32.dll_OutputDebugStringA]
cmp byte [0x6e07047b], 0
je 0x6e009362
push ebx
call fcn.6e003fc0
pop ecx
mov esi, dword [ebp + 0x10]
lea eax, [edi - 0x9c]
neg edi
sbb edi, edi
xor ebx, ebx
and edi, eax
test esi, esi
je 0x6e009426
lea eax, [ebp - 8]
mov dword [ebp - 8], ebx
push eax
push 1
call dword [sym.imp.ole32.dll_CoGetMalloc]
mov esi, dword [esi]
lea eax, [ebp - 4]
push eax
push ebx
push dword [ebp + 0x14]
mov ecx, dword [esi + 0x50]
push dword [ebp + 0x10]
mov dword [ebp - 4], ebx
call dword [0x6e050848]
call dword [esi + 0x50]
test eax, eax
jne 0x6e009423
cmp dword [ebp - 4], ebx
je 0x6e009423
push dword [ebp - 4]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov esi, eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
pop ecx
test eax, eax
je 0x6e0093fa
test esi, esi
je 0x6e0093fa
cmp dword [edi + 0x16c], ebx
jne 0x6e0093fa
call fcn.6e03b104
test al, al
je 0x6e0093fa
call fcn.6e02f76d
push ebx
push esi
push dword [ebp - 0xc]
call fcn.6e02f6e6
movzx eax, ax
add esp, 0xc
test ax, ax
jne 0x6e0093fa
mov byte [edi + 0x2fc], bl
mov eax, dword [ebp - 8]
push dword [ebp - 4]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x14]
mov ecx, esi
call dword [0x6e050848]
call esi
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x6e050848]
call esi
mov esi, dword [ebp + 0x10]
cmp dword [edi + 0x16c], ebx
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.6e00894b
test eax, eax
jne 0x6e009527
test esi, esi
je 0x6e009527
push dword [ebp + 0x14]
mov ecx, edi
push esi
call fcn.6e03b104
mov dword [ebp - 8], eax
test eax, eax
jne 0x6e009462
inc eax
jmp 0x6e00952c
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x6e0094b3
mov eax, dword [edi + 0x16c]
push dword [eax + 0x10]
call fcn.6e03b104
cmp eax, 2
mov ecx, 0xfde9
cmovge ebx, ecx
push ebx
push dword [edi + 0x174]
call fcn.6e03b104
mov ebx, eax
push str.hcp:__
push ebx
call sub.VCRUNTIME140.dll_strstr
xor ecx, ecx
add esp, 0x14
test eax, eax
cmovne esi, ecx
test ebx, ebx
je 0x6e0094b0
push ebx
call fcn.6e03b104
pop ecx
mov eax, dword [ebp - 8]
mov dword [edi + 0x2d4], esi
test esi, esi
je 0x6e00951b
cmp byte [0x6e07047b], 0
jne 0x6e0094cf
cmp byte [0x6e07047a], 0
je 0x6e009501
push str._AcroAXDocShim__IPersistMonikerShimImpl_CAcroAXDocShim_::Load_file_completely_downloaded
mov esi, 0x6e06ea68
push esi
call fcn.6e03b104
cmp byte [0x6e07047a], 0
pop ecx
pop ecx
je 0x6e0094f1
push esi
call dword [sym.imp.kernel32.dll_OutputDebugStringA]
cmp byte [0x6e07047b], 0
je 0x6e009501
push esi
call fcn.6e003fc0
pop ecx
push 1
push dword [ebp - 8]
mov ecx, edi
mov byte [edi + 0x2ce], 1
call fcn.6e03b104
mov eax, 0x800c0101
jmp 0x6e00952c
push 1
push eax
mov ecx, edi
call fcn.6e03b104
jmp 0x6e00952c
mov eax, 0x80004005
pop edi
pop esi
pop ebx
leave
ret 0x14