Function at 0x4e8431
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xcbc
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
lea esi, [edi + 0x6da]
push esi
mov dword [ebp - 0x1c], esi
call fcn.00401d7a
push esi
lea eax, [ebp - 0x8a8]
push eax
mov eax, str._Content_Types_.xml
call fcn.00537748
push str._Types_xmlns_http:__schemas.openxmlformats.org_package_2006_content_types___Default_ContentType_image_jpeg__Extension_jpeg____Default_ContentType_image_png__Extension_png____Default_ContentType_image_bmp__Extension_bmp____Default_ContentType_image_x_wmf__Extension_wmf____Default_Extension_rels__ContentType_application_vnd.openxmlformats_package.relationshipsxml____Default_Extension_xml__ContentType_application_xml____Override_PartName__word_document.xml__ContentType_application_vnd.openxmlformats_officedocument.wordprocessingml.document.mainxml____Override_PartName__word_numbering.xml__ContentType_application_vnd.openxmlformats_officedocument.wordprocessingml.numberingxml_____Override_PartName__word_styles.xml__ContentType_application_vnd.openxmlformats_officedocument.wordprocessingml.stylesxml____Override_PartName__docProps_app.xml__ContentType_application_vnd.openxmlformats_officedocument.extended_propertiesxml____Override_PartName__word_settings.xml__ContentType_application_vnd.openxmlformats_officedocument.wordprocessingml.settingsxml____Override_PartName__word_theme_theme1.xml__ContentType_application_vnd.openxmlformats_officedocument.themexml____Override_PartName__word_fontTable.xml__ContentType_application_vnd.openxmlformats_officedocument.wordprocessingml.fontTablexml____Override_PartName__word_webSettings.xml__ContentType_application_vnd.openxmlformats_officedocument.wordprocessingml.webSettingsxml____Override_PartName__docProps_core.xml__ContentType_application_vnd.openxmlformats_package.core_propertiesxml___
lea eax, [ebp - 0x8a8]
push eax
call fcn.004e8b46
push esi
lea eax, [ebp - 0x6a0]
push eax
mov eax, str.word
call fcn.00537748
lea ecx, [ebp - 0x6a0]
call fcn.00537bf5
push str.numbering.xml
lea eax, [ebp - 0x290]
push eax
mov eax, edi
call fcn.004df3b0
push str._w:numbering_xmlns:ve_http:__schemas.openxmlformats.org_markup_compatibility_2006__xmlns:o_urn:schemas_microsoft_com:office:office__xmlns:r_http:__schemas.openxmlformats.org_officeDocument_2006_relationships__xmlns:m_http:__schemas.openxmlformats.org_officeDocument_2006_math__xmlns:v_urn:schemas_microsoft_com:vml__xmlns:wp_http:__schemas.openxmlformats.org_drawingml_2006_wordprocessingDrawing__xmlns:w10_urn:schemas_microsoft_com:office:word__xmlns:w_http:__schemas.openxmlformats.org_wordprocessingml_2006_main__xmlns:wne_http:__schemas.microsoft.com_office_word_2006_wordml__
lea esi, [ebp - 0x88]
call fcn.00496a10
mov eax, esi
push eax
mov eax, dword [ebp + 0x10]
push edi
call fcn.004ea83b
push str.__w:numbering_
mov eax, esi
call fcn.00496bbb
mov eax, dword [ebp - 0x88]
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 0x18], eax
jne 0x4e84e0
mov dword [ebp - 0x18], 0x631a7c
or dword [ebp - 8], 0xffffffff
push 0x3e8
lea eax, [ebp - 0x290]
push eax
lea esi, [ebp - 8]
call fcn.004cc243
mov edi, str.__xml_version_1.0__encoding_UTF_8__standalone_yes___
push edi
mov eax, esi
push eax
call fcn.004cc212
push dword [ebp - 0x18]
mov eax, esi
push eax
call fcn.00538038
cmp dword [ebp - 8], 0xffffffff
je 0x4e8520
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp + 8]
push str.fontTable.xml
lea eax, [ebp - 0x290]
push eax
mov eax, esi
call fcn.004df3b0
push str._w:fonts_xmlns:r_http:__schemas.openxmlformats.org_officeDocument_2006_relationships__xmlns:w_http:__schemas.openxmlformats.org_wordprocessingml_2006_main___w:font_w:name_Times_New_Roman___w:panose1_w:val_02020603050405020304____w:charset_w:val_00____w:family_w:val_roman____w:pitch_w:val_variable____w:sig_w:usb0_20002A87__w:usb1_80000000__w:usb2_00000008__w:usb3_00000000__w:csb0_000001FF__w:csb1_00000000_____w:font__w:font_w:name_Arial___w:panose1_w:val_020B0604020202020204____w:charset_w:val_00____w:family_w:val_swiss____w:pitch_w:val_variable____w:sig_w:usb0_20002A87__w:usb1_80000000__w:usb2_00000008__w:usb3_00000000__w:csb0_000001FF__w:csb1_00000000_____w:font__w:font_w:name_Tahoma___w:panose1_w:val_020B0604030504040204____w:charset_w:val_00____w:family_w:val_swiss____w:pitch_w:val_variable____w:sig_w:usb0_61002A87__w:usb1_80000000__w:usb2_00000008__w:usb3_00000000__w:csb0_000101FF__w:csb1_00000000_____w:font__w:font_w:name_Arial_Black___w:panose1_w:val_020B0A04020102020204____w:charset_w:val_00____w:family_w:val_swiss____w:pitch_w:val_variable____w:sig_w:usb0_00000287__w:usb1_00000000__w:usb2_00000000__w:usb3_00000000__w:csb0_0000009F__w:csb1_00000000_____w:font__w:font_w:name_Verdana___w:panose1_w:val_020B0604030504040204____w:charset_w:val_00____w:family_w:val_swiss____w:pitch_w:val_variable____w:sig_w:usb0_20000287__w:usb1_00000000__w:usb2_00000000__w:usb3_00000000__w:csb0_0000019F__w:csb1_00000000_____w:font__w:font_w:name_Cambria___w:panose1_w:val_02040503050406030204____w:charset_w:val_00____w:family_w:val_roman____w:pitch_w:val_variable____w:sig_w:usb0_A00002EF__w:usb1_4000004B__w:usb2_00000000__w:usb3_00000000__w:csb0_0000009F__w:csb1_00000000_____w:font__w:font_w:name_Calibri___w:panose1_w:val_020F0502020204030204____w:charset_w:val_00____w:family_w:val_swiss____w:pitch_w:val_variable____w:sig_w:usb0_A00002EF__w:usb1_4000207B__w:usb2_00000000__w:usb3_00000000__w:csb0_0000009F__w:csb1_00000000_____w:font___w:fonts_
lea eax, [ebp - 0x290]
push eax
call fcn.004e8b46
push str.settings.xml
lea eax, [ebp - 0xcb8]
push eax
mov eax, esi
call fcn.004df3b0
push str._w:settings_xmlns:o_urn:schemas_microsoft_com:office:office__xmlns:r_http:__schemas.openxmlformats.org_officeDocument_2006_relationships__xmlns:m_http:__schemas.openxmlformats.org_officeDocument_2006_math__xmlns:v_urn:schemas_microsoft_com:vml__xmlns:w10_urn:schemas_microsoft_com:office:word__xmlns:w_http:__schemas.openxmlformats.org_wordprocessingml_2006_main__xmlns:sl_http:__schemas.openxmlformats.org_schemaLibrary_2006_main___w:view_w:val_normal____w:zoom_w:percent_100____w:displayBackgroundShape___w:doNotTrackMoves___w:defaultTabStop_w:val_709____w:drawingGridHorizontalSpacing_w:val_0____w:drawingGridVerticalSpacing_w:val_0____w:displayHorizontalDrawingGridEvery_w:val_0____w:displayVerticalDrawingGridEvery_w:val_0____w:doNotUseMarginsForDrawingGridOrigin___w:drawingGridHorizontalOrigin_w:val_0____w:drawingGridVerticalOrigin_w:val_0____w:noPunctuationKerning___w:characterSpacingControl_w:val_doNotCompress____w:strictFirstAndLastChars___w:footnotePr__w:pos_w:val_beneathText_____w:footnotePr__w:compat__w:spaceForUL___w:balanceSingleByteDoubleByteWidth___w:doNotLeaveBackslashAlone___w:ulTrailSpace___w:doNotExpandShiftReturn___w:adjustLineHeightInTable___w:doNotUseHTMLParagraphAutoSpacing___w:doNotBreakWrappedTables___w:doNotSnapToGridInCell___w:selectFldWithFirstOrLastChar___w:doNotWrapTextWithPunct___w:doNotUseEastAsianBreakRules___w:useWord2002TableStyleRules___w:growAutofit___w:useNormalStyleForList___w:doNotUseIndentAsNumberingTabStop___w:useAltKinsokuLineBreakRules___w:allowSpaceOfSameStyleInTable___w:doNotSuppressIndentation___w:doNotAutofitConstrainedTables___w:autofitToFirstFixedWidthCell___w:underlineTabInNumList___w:displayHangulFixedWidth___w:splitPgBreakAndParaMark___w:doNotVertAlignCellWithSp___w:doNotBreakConstrainedForcedTable___w:doNotVertAlignInTxbx___w:useAnsiKerningPairs___w:cachedColBalance____w:compat__w:rsids__w:rsidRoot_w:val_00F425B3____w:rsid_w:val_00F425B3_____w:rsids__m:mathPr__m:mathFont_m:val_Cambria_Math____m:brkBin_m:val_before____m:brkBinSub_m:val_______m:smallFrac_m:val_off____m:dispDef___m:lMargin_m:val_0____m:rMargin_m:val_0____m:defJc_m:val_centerGroup____m:wrapIndent_m:val_1440____m:intLim_m:val_subSup____m:naryLim_m:val_undOvr_____m:mathPr__w:uiCompat97To2003___w:themeFontLang_w:val_en_US____w:clrSchemeMapping_w:bg1_light1__w:t1_dark1__w:bg2_light2__w:t2_dark2__w:accent1_accent1__w:accent2_accent2__w:accent3_accent3__w:accent4_accent4__w:accent5_accent5__w:accent6_accent6__w:hyperlink_hyperlink__w:followedHyperlink_followedHyperlink____w:doNotIncludeSubdocsInStats___w:doNotAutoCompressPictures___w:decimalSymbol_w:val_.____w:listSeparator_w:val_____
lea eax, [ebp - 0xcb8]
push eax
call fcn.004e8b46
push str.styles.xml
lea eax, [ebp - 0x290]
push eax
mov eax, esi
call fcn.004df3b0
push str._w:styles_xmlns:r_http:__schemas.openxmlformats.org_officeDocument_2006_relationships__xmlns:w_http:__schemas.openxmlformats.org_wordprocessingml_2006_main___w:docDefaults__w:rPrDefault__w:rPr__w:rFonts_w:ascii_Times_New_Roman__w:eastAsia_Times_New_Roman__w:hAnsi_Times_New_Roman__w:cs_Times_New_Roman____w:lang_w:val_en_US__w:eastAsia_en_US__w:bidi_ar_SA_____w:rPr___w:rPrDefault__w:pPrDefault____w:docDefaults__w:latentStyles_w:defLockedState_0__w:defUIPriority_99__w:defSemiHidden_1__w:defUnhideWhenUsed_1__w:defQFormat_0__w:count_267___w:lsdException_w:name_Normal__w:semiHidden_0__w:uiPriority_0__w:unhideWhenUsed_0__w:qFormat_1____w:lsdException_w:name_heading_1__w:semiHidden_0__w:uiPriority_9__w:unhideWhenUsed_0__w:qFormat_1____w:lsdException_w:name_heading_2__w:uiPriority_9__w:qFormat_1____w:lsdException_w:name_heading_3__w:uiPriority_9__w:qFormat_1____w:lsdException_w:name_heading_4__w:uiPriority_9__w:qFormat_1____w:lsdException_w:name_heading_5__w:uiPriority_9__w:qFormat_1____w:lsdException_w:name_heading_6__w:uiPriority_9__w:qFormat_1____w:lsdException_w:name_heading_7__w:uiPriority_9__w:qFormat_1____w:lsdException_w:name_heading_8__w:uiPriority_9__w:qFormat_1____w:lsdException_w:name_heading_9__w:uiPriority_9__w:qFormat_1____w:lsdException_w:name_toc_1__w:uiPriority_39____w:lsdException_w:name_toc_2__w:uiPriority_39____w:lsdException_w:name_toc_3__w:uiPriority_39____w:lsdException_w:name_toc_4__w:uiPriority_39____w:lsdException_w:name_toc_5__w:uiPriority_39____w:lsdException_w:name_toc_6__w:uiPriority_39____w:lsdException_w:name_toc_7__w:uiPriority_39____w:lsdException_w:name_toc_8__w:uiPriority_39____w:lsdException_w:name_toc_9__w:uiPriority_39____w:lsdException_w:name_caption__w:semiHidden_0__w:uiPriority_35__w:unhideWhenUsed_0__w:qFormat_1____w:lsdException_w:name_Title__w:semiHidden_0__w:uiPriority_10__w:unhideWhenUsed_0__w:qFormat_1____w:lsdException_w:name_Default_Paragraph_Font__w:uiPriority_1____w:lsdException_w:name_Subtitle__w:semiHidden_0__w:uiPriority_11__w:unhideWhenUsed_0__w:qFormat_1____w:lsdException_w:name_Strong__w:semiHidden_0__w:uiPriority_22__w:unhideWhenUsed_0__w:qFormat_1____w:lsdException_w:name_Emphasis__w:semiHidden_0__w:uiPriority_20__w:unhideWhenUsed_0__w:qFormat_1____w:lsdException_w:name_Table_Grid__w:semiHidden_0__w:uiPriority_59__w:unhideWhenUsed_0____w:lsdException_w:name_Placeholder_Text__w:unhideWhenUsed_0____w:lsdException_w:name_No_Spacing__w:semiHidden_0__w:uiPriority_1__w:unhideWhenUsed_0__w:qFormat_1____w:lsdException_w:name_Light_Shading__w:semiHidden_0__w:uiPriority_60__w:unhideWhenUsed_0____w:lsdException_w:name_Light_List__w:semiHidden_0__w:uiPriority_61__w:unhideWhenUsed_0____w:lsdException_w:name_Light_Grid__w:semiHidden_0__w:uiPriority_62__w:unhideWhenUsed_0____w:lsdException_w:name_Medium_Shading_1__w:semiHidden_0__w:uiPriority_63__w:unhideWhenUsed_0____w:lsdException_w:name_Medium_Shading_2__w:semiHidden_0__w:uiPriority_64__w:unhideWhenUsed_0____w:lsdException_w:name_Medium_List_1__w:semiHidden_0__w:uiPriority_65__w:unhideWhenUsed_0____w:lsdException_w:name_Medium_List_2__w:semiHidden_0__w:uiPriority_66__w:unhideWhenUsed_0____w:lsdException_w:name_Medium_Grid_1__w:semiHidden_0__w:uiPriority_67__w:unhideWhenUsed_0____w:lsdException_w:name_Medium_Grid_2__w:semiHidden_0__w:uiPriority_68__w:unhideWhenUsed_0____w:lsdException_w:name_Medium_Grid_3__w:semiHidden_0__w:uiPriority_69__w:unhideWhenUsed_0____w:lsdException_w:name_Dark_List__w:semiHidden_0__w:uiPriority_70__w:unhideWhenUsed_0____w:lsdException_w:name_Colorful_Shading__w:semiHidden_0__w:uiPriority_71__w:unhideWhenUsed_0____w:lsdException_w:name_Colorful_List__w:semiHidden_0__w:uiPriority_72__w:unhideWhenUsed_0____w:lsdException_w:name_Colorful_Grid__w:semiHidden_0__w:uiPriority_73__w:unhideWhenUsed_0____w:lsdException_w:name_Light_Shading_Accent_1__w:semiHidden_0__w:uiPriority_60__w:unhideWhenUsed_0____w:lsdException_w:name_Light_List_Accent_1__w:semiHi
lea eax, [ebp - 0x290]
push eax
call fcn.004e8b46
push str.webSettings.xml
lea eax, [ebp - 0x290]
push eax
mov eax, esi
call fcn.004df3b0
push str._w:webSettings_xmlns:r_http:__schemas.openxmlformats.org_officeDocument_2006_relationships__xmlns:w_http:__schemas.openxmlformats.org_wordprocessingml_2006_main___w:optimizeForBrowser____w:webSettings_
lea eax, [ebp - 0x290]
push eax
call fcn.004e8b46
push dword [ebp - 0x1c]
lea eax, [ebp - 0x498]
push eax
mov eax, str._rels
call fcn.00537748
lea ecx, [ebp - 0x498]
call fcn.00537bf5
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x290]
push eax
mov eax, str..rels
call fcn.00537748
push str._Relationships_xmlns_http:__schemas.openxmlformats.org_package_2006_relationships___Relationship_Id_rId3__Type_http:__schemas.openxmlformats.org_officeDocument_2006_relationships_extended_properties__Target_docProps_app.xml____Relationship_Id_rId2__Type_http:__schemas.openxmlformats.org_package_2006_relationships_metadata_core_properties__Target_docProps_core.xml____Relationship_Id_rId1__Type_http:__schemas.openxmlformats.org_officeDocument_2006_relationships_officeDocument__Target_word_document.xml_____Relationships_
lea eax, [ebp - 0x290]
push eax
call fcn.004e8b46
push dword [ebp - 0x1c]
lea eax, [ebp - 0x498]
push eax
mov eax, str.docProps
call fcn.00537748
lea ecx, [ebp - 0x498]
call fcn.00537bf5
mov esi, dword [ebp + 0x10]
add esi, 0x10
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
push str.ENCODEDBY
lea ecx, [ebp - 0x40]
mov eax, esi
call fcn.004cf461
lea eax, [ebp - 0x40]
push eax
call fcn.004ea1ca
push str.AUTHOR
lea ecx, [ebp - 0x28]
mov eax, esi
call fcn.004cf461
lea eax, [ebp - 0x28]
push eax
call fcn.004ea1ca
push str.DESCRIPTION
lea ecx, [ebp - 0x34]
mov eax, esi
call fcn.004cf461
lea eax, [ebp - 0x34]
push eax
call fcn.004ea1ca
push str.KEYWORDS
lea ecx, [ebp - 0x58]
mov eax, esi
call fcn.004cf461
lea eax, [ebp - 0x58]
push eax
call fcn.004ea1ca
push str.CREATETIME
lea ecx, [ebp - 0x4c]
mov eax, esi
call fcn.004cf461
lea eax, [ebp - 0x4c]
push eax
call fcn.004ea1ca
mov edx, dword [ebp - 0x34]
cmp edx, ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov eax, 0x631a7c
jne 0x4e86dc
mov edx, eax
mov ecx, dword [ebp - 0x58]
cmp ecx, ebx
jne 0x4e86e5
mov ecx, eax
cmp dword [ebp - 0x28], ebx
je 0x4e86ed
mov eax, dword [ebp - 0x28]
push edx
push ecx
push eax
push str._dc:creator__s__dc:creator__dc:description__s__dc:description__cp:keywords__s__cp:keywords_
lea eax, [ebp - 0x7c]
call fcn.0058b34d
add esp, 0x10
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x290]
push eax
mov eax, str.core.xml
call fcn.00537748
or dword [ebp - 0xc], 0xffffffff
push 0x3e8
lea eax, [ebp - 0x290]
push eax
lea esi, [ebp - 0xc]
call fcn.004cc243
push edi
mov eax, esi
push eax
call fcn.004cc212
push str._cp:coreProperties_xmlns:cp_http:__schemas.openxmlformats.org_package_2006_metadata_core_properties__xmlns:dc_http:__purl.org_dc_elements_1.1___xmlns:dcterms_http:__purl.org_dc_terms___xmlns:dcmitype_http:__purl.org_dc_dcmitype___xmlns:xsi_http:__www.w3.org_2001_XMLSchema_instance___dc:title___dc:title__dc:subject___dc:subject_
mov eax, esi
push eax
call fcn.004cc212
mov eax, dword [ebp - 0x7c]
cmp eax, ebx
jne 0x4e8752
mov eax, 0x631a7c
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.00538038
mov esi, dword [ebp - 0x4c]
cmp esi, ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov eax, esi
jne 0x4e8773
mov eax, 0x631a7c
push eax
push str._dcterms:created_xsi:type_dcterms:W3CDTF___s__dcterms:created_
lea eax, [ebp - 0x70]
call fcn.0058b34d
cmp esi, ebx
pop ecx
pop ecx
je 0x4e87a2
cmp word [esi], bx
je 0x4e87a2
mov eax, dword [ebp - 0x70]
cmp eax, ebx
jne 0x4e8798
mov eax, 0x631a7c
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.00538038
push str._cp:lastModifiedBy___cp:lastModifiedBy__cp:revision_1__cp:revision___cp:coreProperties_
lea eax, [ebp - 0xc]
push eax
call fcn.00538038
cmp dword [ebp - 0xc], 0xffffffff
je 0x4e87c3
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [ebp - 0xc], 0xffffffff
mov eax, dword [ebp - 0x40]
cmp eax, ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
jne 0x4e87d8
mov eax, 0x631a7c
push eax
push str._Application__s__Application_
lea eax, [ebp - 0x64]
call fcn.0058b34d
pop ecx
pop ecx
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x290]
push eax
mov eax, str.app.xml
call fcn.00537748
or dword [ebp - 0x10], 0xffffffff
push 0x3e8
lea eax, [ebp - 0x290]
push eax
lea esi, [ebp - 0x10]
call fcn.004cc243
push edi
mov eax, esi
push eax
call fcn.004cc212
push str._Properties_xmlns_http:__schemas.openxmlformats.org_officeDocument_2006_extended_properties__xmlns:vt_http:__schemas.openxmlformats.org_officeDocument_2006_docPropsVTypes___Template_Normal_Wordconv.dotm__Template__TotalTime_0__TotalTime__DocSecurity_0__DocSecurity__ScaleCrop_false__ScaleCrop__Company___Company__LinksUpToDate_false__LinksUpToDate__SharedDoc_false__SharedDoc__HyperlinksChanged_false__HyperlinksChanged_
mov eax, esi
push eax
call fcn.004cc212
mov eax, dword [ebp - 0x64]
cmp eax, ebx
jne 0x4e883a
mov eax, 0x631a7c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00538038
push str.__Properties_
lea eax, [ebp - 0x10]
push eax
call fcn.004ac440
or esi, 0xffffffff
cmp dword [ebp - 0x10], esi
je 0x4e8866
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x10], esi
lea eax, [ebp - 0x6a0]
push eax
lea eax, [ebp - 0x498]
push eax
mov eax, str.theme
call fcn.00537748
lea ecx, [ebp - 0x498]
call fcn.00537bf5
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x290]
push eax
mov eax, str.theme1.xml
call fcn.00537748
push str._a:theme_xmlns:a_http:__schemas.openxmlformats.org_drawingml_2006_main__name_Office_Theme___a:themeElements__a:clrScheme_name_Office___a:dk1__a:sysClr_val_windowText__lastClr_000000_____a:dk1__a:lt1__a:sysClr_val_window__lastClr_FFFFFF_____a:lt1__a:dk2__a:srgbClr_val_1F497D_____a:dk2__a:lt2__a:srgbClr_val_EEECE1_____a:lt2__a:accent1__a:srgbClr_val_4F81BD_____a:accent1__a:accent2__a:srgbClr_val_C0504D_____a:accent2__a:accent3__a:srgbClr_val_9BBB59_____a:accent3__a:accent4__a:srgbClr_val_8064A2_____a:accent4__a:accent5__a:srgbClr_val_4BACC6_____a:accent5__a:accent6__a:srgbClr_val_F79646_____a:accent6__a:hlink__a:srgbClr_val_0000FF_____a:hlink__a:folHlink__a:srgbClr_val_800080_____a:folHlink___a:clrScheme__a:fontScheme_name_Office___a:majorFont__a:latin_typeface_Cambria____a:ea_typeface_____a:cs_typeface_____a:font_script_Arab__typeface_Times_New_Roman____a:font_script_Hebr__typeface_Times_New_Roman____a:font_script_Thai__typeface_Angsana_New____a:font_script_Ethi__typeface_Nyala____a:font_script_Beng__typeface_Vrinda____a:font_script_Gujr__typeface_Shruti____a:font_script_Khmr__typeface_MoolBoran____a:font_script_Knda__typeface_Tunga____a:font_script_Guru__typeface_Raavi____a:font_script_Cans__typeface_Euphemia____a:font_script_Cher__typeface_Plantagenet_Cherokee____a:font_script_Yiii__typeface_Microsoft_Yi_Baiti____a:font_script_Tibt__typeface_Microsoft_Himalaya____a:font_script_Thaa__typeface_MV_Boli____a:font_script_Deva__typeface_Mangal____a:font_script_Telu__typeface_Gautami____a:font_script_Taml__typeface_Latha____a:font_script_Syrc__typeface_Estrangelo_Edessa____a:font_script_Orya__typeface_Kalinga____a:font_script_Mlym__typeface_Kartika____a:font_script_Laoo__typeface_DokChampa____a:font_script_Sinh__typeface_Iskoola_Pota____a:font_script_Mong__typeface_Mongolian_Baiti____a:font_script_Viet__typeface_Times_New_Roman____a:font_script_Uigh__typeface_Microsoft_Uighur_____a:majorFont__a:minorFont__a:latin_typeface_Calibri____a:ea_typeface_____a:cs_typeface_____a:font_script_Arab__typeface_Arial____a:font_script_Hebr__typeface_Arial____a:font_script_Thai__typeface_Cordia_New____a:font_script_Ethi__typeface_Nyala____a:font_script_Beng__typeface_Vrinda____a:font_script_Gujr__typeface_Shruti____a:font_script_Khmr__typeface_DaunPenh____a:font_script_Knda__typeface_Tunga____a:font_script_Guru__typeface_Raavi____a:font_script_Cans__typeface_Euphemia____a:font_script_Cher__typeface_Plantagenet_Cherokee____a:font_script_Yiii__typeface_Microsoft_Yi_Baiti____a:font_script_Tibt__typeface_Microsoft_Himalaya____a:font_script_Thaa__typeface_MV_Boli____a:font_script_Deva__typeface_Mangal____a:font_script_Telu__typeface_Gautami____a:font_script_Taml__typeface_Latha____a:font_script_Syrc__typeface_Estrangelo_Edessa____a:font_script_Orya__typeface_Kalinga____a:font_script_Mlym__typeface_Kartika____a:font_script_Laoo__typeface_DokChampa____a:font_script_Sinh__typeface_Iskoola_Pota____a:font_script_Mong__typeface_Mongolian_Baiti____a:font_script_Viet__typeface_Arial____a:font_script_Uigh__typeface_Microsoft_Uighur_____a:minorFont___a:fontScheme__a:fmtScheme_name_Office___a:fillStyleLst__a:solidFill__a:schemeClr_val_phClr_____a:solidFill__a:gradFill_rotWithShape_1___a:gsLst__a:gs_pos_0___a:schemeClr_val_phClr___a:tint_val_50000____a:satMod_val_300000_____a:schemeClr___a:gs__a:gs_pos_35000___a:schemeClr_val_phClr___a:tint_val_37000____a:satMod_val_300000_____a:schemeClr___a:gs__a:gs_pos_100000___a:schemeClr_val_phClr___a:tint_val_15000____a:satMod_val_350000_____a:schemeClr___a:gs___a:gsLst__a:lin_ang_16200000__scaled_1_____a:gradFill__a:gradFill_rotWithShape_1___a:gsLst__a:gs_pos_0___a:schemeClr_val_phClr___a:shade_val_51000____a:satMod_val_130000_____a:schemeClr___a:gs__a:gs_pos_80000___a:schemeClr_val_phClr___a:shade_val_93000____a:satMod_val_130000_____a:schemeClr___a:gs__a:gs_pos_100000___a:schemeClr_val_phClr___a:shade_val_94000____a:satMod_val_135000_____a:schemeClr___a:gs___a:gsLst_
lea eax, [ebp - 0x290]
push eax
call fcn.004e8b46
lea eax, [ebp - 0x6a0]
push eax
lea eax, [ebp - 0x498]
push eax
mov eax, str._rels
call fcn.00537748
lea ecx, [ebp - 0x498]
call fcn.00537bf5
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0xab0]
push eax
mov eax, str.document.xml.rels
call fcn.00537748
push str._Relationships_xmlns_http:__schemas.openxmlformats.org_package_2006_relationships___Relationship_Id_rId3__Type_http:__schemas.openxmlformats.org_officeDocument_2006_relationships_webSettings__Target_webSettings.xml____Relationship_Id_rId2__Type_http:__schemas.openxmlformats.org_officeDocument_2006_relationships_settings__Target_settings.xml____Relationship_Id_rId1__Type_http:__schemas.openxmlformats.org_officeDocument_2006_relationships_styles__Target_styles.xml____Relationship_Id_rId5__Type_http:__schemas.openxmlformats.org_officeDocument_2006_relationships_theme__Target_theme_theme1.xml____Relationship_Id_rId4__Type_http:__schemas.openxmlformats.org_officeDocument_2006_relationships_fontTable__Target_fontTable.xml____Relationship_Id_rId6__Type_http:__schemas.openxmlformats.org_officeDocument_2006_relationships_numbering__Target_numbering.xml____
lea eax, [ebp - 0xab0]
push eax
call fcn.004e8b46
push str.document.xml
lea eax, [ebp - 0x290]
push eax
mov eax, dword [ebp + 8]
call fcn.004df3b0
push 0xbb8
push 2
push ebx
push 0xc0000000
lea eax, [ebp - 0x290]
push eax
call fcn.005365d4
mov dword [ebp - 0x14], eax
push edi
lea eax, [ebp - 0x14]
push eax
call fcn.004ac440
cmp al, bl
mov byte [ebp - 1], al
je 0x4e895f
push 0x631a7e
lea eax, [ebp - 0x14]
push eax
call fcn.004cc212
push dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x14]
push eax
push dword [ebp + 8]
call fcn.004e8b8b
cmp dword [ebp - 0x14], esi
je 0x4e8970
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x14], esi
mov ecx, dword [ebp + 0x14]
mov eax, dword [ecx]
call dword [eax]
test al, al
jne 0x4e8ab3
cmp byte [ebp - 1], bl
je 0x4e8ab3
lea eax, [ebp - 0xab0]
push eax
lea edi, [ebp - 8]
mov dword [ebp - 8], esi
call fcn.004cc276
push str.___Relationships_
mov eax, edi
push eax
call fcn.00538038
cmp dword [ebp - 8], 0xffffffff
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x4e89bc
push dword [ebp - 8]
call esi
or dword [ebp - 8], 0xffffffff
or dword [ebp + 0x10], 0xffffffff
lea eax, [ebp - 0x8a8]
push eax
lea edi, [ebp + 0x10]
call fcn.004cc276
push str.___Types_
mov eax, edi
push eax
call fcn.00538038
cmp dword [ebp + 0x10], 0xffffffff
je 0x4e89eb
push dword [ebp + 0x10]
call esi
or dword [ebp + 0x10], 0xffffffff
or dword [ebp - 0x18], 0xffffffff
lea eax, [ebp - 0xcb8]
push eax
lea edi, [ebp - 0x18]
call fcn.004cc276
mov eax, dword [ebp + 8]
cmp byte [eax + 0x6c5], bl
je 0x4e8a16
push str._w:evenAndOddHeaders___
mov eax, edi
push eax
call fcn.00538038
push str.___w:settings_
lea eax, [ebp - 0x18]
push eax
call fcn.00538038
mov edi, dword [ebp - 0x18]
cmp edi, 0xffffffff
je 0x4e8a32
push edi
call esi
or edi, 0xffffffff
lea eax, [ebp - 0x498]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push str..zip
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x498]
push eax
call fcn.00536833
lea eax, [ebp - 0x290]
push eax
push dword [ebp - 0x1c]
lea eax, [ebp + 8]
push dword [ebp + 0x14]
push eax
call fcn.004df1bf
cmp dword [eax], ebx
sete byte [ebp - 1]
cmp byte [ebp - 1], bl
je 0x4e8a91
push 0x9c4
push dword [ebp + 0xc]
lea eax, [ebp - 0x290]
push eax
call fcn.0053666e
cmp edi, 0xffffffff
je 0x4e8a99
push edi
call esi
cmp dword [ebp + 0x10], 0xffffffff
je 0x4e8aa4
push dword [ebp + 0x10]
call esi
cmp dword [ebp - 8], 0xffffffff
je 0x4e8ab3
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x1c]
call fcn.00537db1
cmp dword [ebp - 0x14], 0xffffffff
je 0x4e8aca
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x10], 0xffffffff
je 0x4e8ad9
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x64]
call fcn.005f858a
pop ecx
push dword [ebp - 0x70]
call fcn.005f858a
cmp dword [ebp - 0xc], 0xffffffff
pop ecx
je 0x4e8afa
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x7c]
call fcn.005f858a
pop ecx
push dword [ebp - 0x4c]
call fcn.005f858a
pop ecx
push dword [ebp - 0x58]
call fcn.005f858a
pop ecx
push dword [ebp - 0x34]
call fcn.005f858a
pop ecx
push dword [ebp - 0x28]
call fcn.005f858a
pop ecx
push dword [ebp - 0x40]
call fcn.005f858a
pop ecx
push dword [ebp - 0x88]
call fcn.005f858a
mov al, byte [ebp - 1]
pop ecx
pop edi
pop esi
pop ebx
leave
ret 0x10