Function at 0x4f7630
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x83c
push ebx
push esi
push edi
lea eax, [ebp - 0x220]
push eax
call fcn.00401d7a
push str.META_INF
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x838]
push eax
call fcn.00401f51
lea ecx, [ebp - 0x838]
call fcn.00537bf5
push str.manifest.xml
lea eax, [ebp - 0x838]
push eax
lea eax, [ebp - 0x428]
push eax
call fcn.00401f51
mov edi, 0x1388
push edi
push 2
push 0
mov esi, 0xc0000000
push esi
lea eax, [ebp - 0x428]
push eax
call fcn.005365d4
mov dword [ebp - 4], eax
mov ebx, str.__xml_version_1.0__encoding_UTF_8__standalone_yes___
push ebx
lea eax, [ebp - 4]
push eax
call fcn.004ac440
push 0x631a7e
lea eax, [ebp - 4]
push eax
call fcn.004cc212
push str._manifest:manifest_xmlns:manifest_urn:oasis:names:tc:opendocument:xmlns:manifest:1.0___n__manifest:file_entry_manifest:media_type_application_vnd.oasis.opendocument.text__manifest:version_1.2__manifest:full_path_______n__manifest:file_entry_manifest:media_type_application_vnd.sun.xml.ui.configuration__manifest:full_path_Configurations2______n__manifest:file_entry_manifest:media_type_text_xml__manifest:full_path_content.xml_____n__manifest:file_entry_manifest:media_type_text_xml__manifest:full_path_styles.xml____n__manifest:file_entry_manifest:media_type_text_xml__manifest:full_path_meta.xml____n
lea eax, [ebp - 4]
push eax
call fcn.004ac440
push str.content.xml
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x428]
push eax
call fcn.00401f51
push edi
push 2
push 0
push esi
lea eax, [ebp - 0x428]
push eax
call fcn.005365d4
mov dword [ebp - 8], eax
push ebx
lea eax, [ebp - 8]
push eax
call fcn.004ac440
mov ebx, 0x631a7e
push ebx
lea eax, [ebp - 8]
push eax
call fcn.004cc212
push str._office:document_content_xmlns:office_urn:oasis:names:tc:opendocument:xmlns:office:1.0__xmlns:style_urn:oasis:names:tc:opendocument:xmlns:style:1.0__xmlns:text_urn:oasis:names:tc:opendocument:xmlns:text:1.0__xmlns:table_urn:oasis:names:tc:opendocument:xmlns:table:1.0__xmlns:draw_urn:oasis:names:tc:opendocument:xmlns:drawing:1.0__xmlns:fo_urn:oasis:names:tc:opendocument:xmlns:xsl_fo_compatible:1.0__xmlns:xlink_http:__www.w3.org_1999_xlink__xmlns:dc_http:__purl.org_dc_elements_1.1___xmlns:meta_urn:oasis:names:tc:opendocument:xmlns:meta:1.0__xmlns:number_urn:oasis:names:tc:opendocument:xmlns:datastyle:1.0__xmlns:svg_urn:oasis:names:tc:opendocument:xmlns:svg_compatible:1.0__xmlns:chart_urn:oasis:names:tc:opendocument:xmlns:chart:1.0__xmlns:dr3d_urn:oasis:names:tc:opendocument:xmlns:dr3d:1.0__xmlns:math_http:__www.w3.org_1998_Math_MathML__xmlns:form_urn:oasis:names:tc:opendocument:xmlns:form:1.0__xmlns:script_urn:oasis:names:tc:opendocument:xmlns:script:1.0__xmlns:ooo_http:__openoffice.org_2004_office__xmlns:ooow_http:__openoffice.org_2004_writer__xmlns:oooc_http:__openoffice.org_2004_calc__xmlns:dom_http:__www.w3.org_2001_xml_events__xmlns:xforms_http:__www.w3.org_2002_xforms__xmlns:xsd_http:__www.w3.org_2001_XMLSchema__xmlns:xsi_http:__www.w3.org_2001_XMLSchema_instance__xmlns:rpt_http:__openoffice.org_2005_report__xmlns:of_urn:oasis:names:tc:opendocument:xmlns:of:1.2__xmlns:rdfa_http:__docs.oasis_open.org_opendocument_meta_rdfa__xmlns:field_urn:openoffice:names:experimental:ooo_ms_interop:xmlns:field:1.0__office:version_1.2__
lea eax, [ebp - 8]
push eax
call fcn.004cc212
push str.styles.xml
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x428]
push eax
call fcn.00401f51
push edi
push 2
push 0
push esi
lea eax, [ebp - 0x428]
push eax
call fcn.005365d4
mov dword [ebp - 0xc], eax
push str._office:document_styles_office:version_1.2__xmlns:rdfa_http:__docs.oasis_open.org_opendocument_meta_rdfa__xmlns:of_urn:oasis:names:tc:opendocument:xmlns:of:1.2__xmlns:rpt_http:__openoffice.org_2005_report__xmlns:dom_http:__www.w3.org_2001_xml_events__xmlns:oooc_http:__openoffice.org_2004_calc__xmlns:ooow_http:__openoffice.org_2004_writer__xmlns:ooo_http:__openoffice.org_2004_office__xmlns:script_urn:oasis:names:tc:opendocument:xmlns:script:1.0__xmlns:form_urn:oasis:names:tc:opendocument:xmlns:form:1.0__xmlns:math_http:__www.w3.org_1998_Math_MathML__xmlns:dr3d_urn:oasis:names:tc:opendocument:xmlns:dr3d:1.0__xmlns:chart_urn:oasis:names:tc:opendocument:xmlns:chart:1.0__xmlns:svg_urn:oasis:names:tc:opendocument:xmlns:svg_compatible:1.0__xmlns:number_urn:oasis:names:tc:opendocument:xmlns:datastyle:1.0__xmlns:meta_urn:oasis:names:tc:opendocument:xmlns:meta:1.0__xmlns:dc_http:__purl.org_dc_elements_1.1___xmlns:xlink_http:__www.w3.org_1999_xlink__xmlns:fo_urn:oasis:names:tc:opendocument:xmlns:xsl_fo_compatible:1.0__xmlns:draw_urn:oasis:names:tc:opendocument:xmlns:drawing:1.0__xmlns:table_urn:oasis:names:tc:opendocument:xmlns:table:1.0__xmlns:text_urn:oasis:names:tc:opendocument:xmlns:text:1.0__xmlns:style_urn:oasis:names:tc:opendocument:xmlns:style:1.0__xmlns:office_urn:oasis:names:tc:opendocument:xmlns:office:1.0__
lea eax, [ebp - 0xc]
push eax
call fcn.004ac440
push dword [ebp + 0xc]
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push dword [ebp + 0x14]
push dword [ebp + 8]
call fcn.004f7bed
push str.__office:document_styles_
lea eax, [ebp - 0xc]
push eax
call fcn.004ac440
cmp dword [ebp - 0xc], 0xffffffff
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x4f779c
push dword [ebp - 0xc]
call esi
or dword [ebp - 0xc], 0xffffffff
push str.__office:document_content__n
lea eax, [ebp - 8]
push eax
call fcn.00538038
cmp dword [ebp - 8], 0xffffffff
je 0x4f77b9
push dword [ebp - 8]
call esi
or dword [ebp - 8], 0xffffffff
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x220]
xor ecx, ecx
cmp eax, ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], ecx
jne 0x4f77d6
mov eax, 0x631a7c
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0054000b
cmp dword [ebp - 0x18], 0
je 0x4f77e9
mov ebx, dword [ebp - 0x18]
push ebx
lea eax, [ebp - 4]
push eax
call fcn.004ac440
push str.__manifest:manifest_
lea eax, [ebp - 4]
push eax
call fcn.004ac440
cmp dword [ebp - 4], 0xffffffff
je 0x4f7810
push dword [ebp - 4]
call esi
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x220]
add eax, 0x10
push ecx
call fcn.004f78bc
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebx]
mov ecx, ebx
mov byte [ebp + 0xb], 0
call dword [eax]
test al, al
jne 0x4f787d
push str..zip
lea eax, [ebp - 0x630]
push eax
call fcn.00401df5
lea eax, [ebp - 0x630]
push eax
lea eax, [ebp - 0x220]
push eax
push ebx
lea eax, [ebp + 0xc]
push eax
call fcn.004df1bf
cmp dword [eax], 0
lea eax, [ebp - 0x630]
jne 0x4f7876
push edi
push dword [ebp + 0x10]
push eax
call fcn.0053666e
mov byte [ebp + 0xb], al
jmp 0x4f787d
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x220]
call fcn.00537db1
push dword [ebp - 0x18]
call fcn.005f858a
cmp dword [ebp - 0xc], 0xffffffff
pop ecx
je 0x4f789c
push dword [ebp - 0xc]
call esi
cmp dword [ebp - 8], 0xffffffff
je 0x4f78a7
push dword [ebp - 8]
call esi
cmp dword [ebp - 4], 0xffffffff
je 0x4f78b2
push dword [ebp - 4]
call esi
mov al, byte [ebp + 0xb]
pop edi
pop esi
pop ebx
leave
ret 0x10